Question 3 - Part a (i)
In this 14-minute walkthrough, you'll learn how to evaluate internal control deficiencies and decide which ones to report to those charged with governance—a critical skill for your Audit and Assurance paper.
This lesson is part of a paid course
Buy the course to unlock every video lesson and the AI Tutor, plus mock exams with feedback on CIMA courses.
Already bought? Sign in
Ask the AI tutor anything about this lesson
It knows every lesson in the course — explanations, clarifications, practice questions.
In this lesson
- 0:00 Internal control deficiencies reporting requirements
- 1:00 New payroll system data migration issue
- 2:31 Marketing director laptop and integrity concerns
- 4:00 Defining significant deficiencies in internal controls
- 6:03 New payroll system analysis and recommendations
- 10:05 Marketing director fraud risk and audit implications
- 12:58 Communicating management fraud to governance
About this lesson
You'll discover the key criterion: only significant deficiencies warrant formal communication, assessed by likelihood of occurrence and potential impact (both financial and operational). This distinction is essential for exam success and real-world audit practice. The lesson works through two practical scenarios. First, a new payroll system migration that experienced data corruption and duplication. You'll learn how to move beyond simply restating the facts: instead, you'll apply commercial acumen to identify what controls should have been in place (such as phased data transfers with management checks, or running old and new systems in parallel), then justify why this matters for governance reporting—not because of immediate financial misstatement, but because payroll errors could trigger tax penalties with significant business impact. Second, a marketing director who left the company with an unapproved laptop still in her possession. Here you'll develop the deeper judgement required: recognising that the real risk isn't the laptop's value, but the potential integrity issues this raises for both the director and the financial controller who approved it. You'll see how this type of management fraud indicator must be reported regardless of materiality, and why it signals a need to investigate broader risks this person may have created. Throughout, you'll see how to earn professional marks by combining technical knowledge with scepticism, commercial reasoning, and clear justification—transforming a straightforward compliance task into evidence of audit thinking.
Duration: 15m
Transcript
Every lesson comes with a full searchable transcript - included with the course.
Get the Advanced Audit and Assurance course
All 177 video lessons, an AI Tutor in every lesson and lifetime access.
Already bought? Sign in