Limitations of internal controls
In this lesson, you'll learn why internal control systems can never completely eliminate risk, and how to identify and report control deficiencies as an auditor.
This lesson is part of a paid course
Buy the course to unlock every video lesson and the AI Tutor, plus mock exams with feedback on CIMA courses.
Already bought? Sign in
Ask the AI tutor anything about this lesson
It knows every lesson in the course — explanations, clarifications, practice questions.
In this lesson
- 0:00 Limitations of internal controls
- 0:44 Inherent limitations and human factors
- 1:42 Management override and collusion risks
- 2:33 Reporting deficiencies to governance
- 3:43 Management letter format and scope
- 4:40 Explaining implications and recommendations
- 6:00 Three-column deficiency reporting structure
About this lesson
You'll explore the inherent limitations of controls—including cost-benefit trade-offs, human error, employee collusion, and management override—and understand why reasonable assurance, rather than absolute certainty, is the realistic goal. You'll also master the three-column format for reporting deficiencies to management: identifying the weakness, explaining its financial or operational impact, and recommending practical improvements. This is essential knowledge for AA papers and control-focused exam questions, where you'll be expected to analyse control systems critically and provide structured recommendations using this exact framework.
Duration: 8m
Transcript
Every lesson comes with a full searchable transcript - included with the course.
Get the Audit and Assurance course
All 74 video lessons, an AI Tutor in every lesson and lifetime access.
Already bought? Sign in