Components of internal control - part 1

In this lesson

1. 0:00 Components of internal control overview
2. 1:00 Control environment foundation explained
3. 1:58 Risk assessment process essentials
4. 2:41 Information system requirements
5. 3:23 Control activities and examples
6. 4:38 Monitoring activities and oversight
7. 5:19 Test your knowledge question

About this lesson

This video breaks down each component and explains why they work together—understanding this framework is essential for audit and assurance papers like AA and AAA, where you need to evaluate whether a company's controls are designed and operating effectively. By the end, you'll be able to identify what constitutes a genuine component of internal control and explain why each element matters to reducing organisational risk. The control environment sets the tone for everything else. It reflects management's attitudes, awareness, and actions towards controls—if leaders treat controls as pointless, staff won't take them seriously, and the whole system fails. The risk assessment process is equally critical: if a company doesn't properly identify its risks, the controls it puts in place won't address the real threats. You'll see why weak risk assessment leads to ineffective controls, no matter how well they're documented. The information system and control activities form the practical backbone. The information system determines how financial data is created, recorded, and maintained—without proper records and systems, you can't monitor anything reliably. Control activities are the tangible actions: passwords, authorisation procedures, security measures, and segregation of duties. These are what most people think of as "controls," but they only work if management actively monitors them over time. Monitoring activities complete the cycle, ensuring controls remain effective and relevant as the business changes.

Duration: 6m