Internal controls testing is a critical part of any audit. By understanding and testing the internal controls in place, auditors can provide assurance that the controls are operating effectively and that the financial statements are free from material misstatement. But with so many different types of internal controls to test, how do you know which ones to focus on? Here are three of the most important types of internal control testing that every auditor should be doing:
Walkthroughs
A walkthrough is a type of test where the auditor walks through the process being tested with someone who is knowledgeable about that process. This could be the person who designed the control, the person who performs the control on a daily basis, or both. The goal of a walkthrough is to gain an understanding of how the control works and to identify any potential weaknesses in the design or execution of the control.
Substantive Testing
Substantive testing is similar to walkthroughs in that it involves testing whether the control is working as designed. However, substantive testing goes one step further by actually executing the control to see if it achieves its desired outcome. For example, if you’re testing a control that is designed to prevent unauthorized wire transfers, you would execute a series of unauthorized wire transfers to see if the control prevents them from being processed. If it does, then the control is effective. If not, then there is a weakness that needs to be addressed.
Analytical Procedures
Analytical procedures are tests that are performed using data analytics. This could involve things like ratio analysis, trend analysis, or comparisons to budgets or forecasts. The goal of analytical procedures is to assess whether the data being reported is reasonable in light of other information that is available. For example, if sales have increased by 30% but inventory levels have only increased by 10%, that could be an indication that there are issues with inventory reporting. Analytical procedures can be used to test all types of financial statement assertions, including existence, completeness, accuracy, valuation, and rights and obligations.
Internal controls testing is a critical part of any audit. By understanding and testing the internal controls in place, auditors can provide assurance that the controls are operating effectively and that the financial statements are free from material misstatement. There are many different types of internal controls testing, but some are more important than others. Walkthroughs, substantive testing, and analytical procedures should all be key components of your internal controls testing program.
Working to audit your internal controls? Use AutoAudit to save time and increase your efficiency as an internal auditor.
