Skip to main content
Lesson 175 D1cD2aE4bD2d

Question 3 - Part a (i)

In this 14-minute walkthrough, you'll learn how to evaluate internal control deficiencies and decide which ones to report to those charged with governance—a critical skill for your Audit and Assurance paper.

This lesson is part of a paid course

Buy the course to unlock every video lesson and the AI Tutor, plus mock exams with feedback on CIMA courses.

Already bought? Sign in

Ask the AI tutor anything about this lesson

It knows every lesson in the course — explanations, clarifications, practice questions.

Summarise lesson Key concepts Practice questions

In this lesson

  1. 0:00 Internal control deficiencies reporting requirements
  2. 1:00 New payroll system data migration issue
  3. 2:31 Marketing director laptop and integrity concerns
  4. 4:00 Defining significant deficiencies in internal controls
  5. 6:03 New payroll system analysis and recommendations
  6. 10:05 Marketing director fraud risk and audit implications
  7. 12:58 Communicating management fraud to governance

About this lesson

You'll discover the key criterion: only significant deficiencies warrant formal communication, assessed by likelihood of occurrence and potential impact (both financial and operational). This distinction is essential for exam success and real-world audit practice. The lesson works through two practical scenarios. First, a new payroll system migration that experienced data corruption and duplication. You'll learn how to move beyond simply restating the facts: instead, you'll apply commercial acumen to identify what controls should have been in place (such as phased data transfers with management checks, or running old and new systems in parallel), then justify why this matters for governance reporting—not because of immediate financial misstatement, but because payroll errors could trigger tax penalties with significant business impact. Second, a marketing director who left the company with an unapproved laptop still in her possession. Here you'll develop the deeper judgement required: recognising that the real risk isn't the laptop's value, but the potential integrity issues this raises for both the director and the financial controller who approved it. You'll see how this type of management fraud indicator must be reported regardless of materiality, and why it signals a need to investigate broader risks this person may have created. Throughout, you'll see how to earn professional marks by combining technical knowledge with scepticism, commercial reasoning, and clear justification—transforming a straightforward compliance task into evidence of audit thinking.

Duration: 15m

Transcript

Every lesson comes with a full searchable transcript - included with the course.

Get the Advanced Audit and Assurance course

All 177 video lessons, an AI Tutor in every lesson and lifetime access.

Already bought? Sign in