Tests of controls

Tests of control are those activities performed by the auditor during the control testing stage that gather evidence as to the operational effectiveness of internal control procedures upon which the auditor has planned reliance.

Management impliedly assert that internal control procedures are effective as to both their design and operation. If controls are effective, then the auditor can plan reliance on the controls and reduce the time spent in gathering audit evidence. This is because the objective of an audit is similar in many respects to the objectives of internal control procedures. One of the primary objectives of a financial statement audit is to gather evidence as to whether account balances and classes of transaction are materially complete, valid and accurate. This is very similar to the primary objective of internal control procedures - to provide management with assurance that account balances and classes of transaction are complete, valid and accurate. Thus, if controls are effective, the auditor can plan reliance on the controls and reduce the amount of evidence that s/he would otherwise gather as to the completeness, validity and accuracy of account balances and classes of transaction.

In the audit planning stage, the auditor gathers evidence as to the effectiveness of design of control procedures and decides which control procedure, if any, upon which s/he will plan reliance. In the control testing stage, the auditor gathers evidence as to the effectiveness of operation of those controls upon which the auditor has planned reliance. The activities that the auditor employs to gather this evidence are referred to collectively as tests of control (sometimes referred to as compliance tests or compliance procedures).

Tests of control include observation of an internal control procedure being performed, inspection of evidence that the control procedure was performed (and performed at the appropriate time), and inquiry about how and when the procedure was performed. Where the information system is computerized, evidence may also be gathered using CAATs such as a generalized audit software or an embedded audit module.

Back to glossary

Copyright, Australian Educational Research Pty Ltd. Any person accessing this site agrees to the Terms of Use.