Organisational Control and Audit
Internal control, internal audit, control systems, assurance and organisational resilience.
How to study ACCA Strategic Professional
Build professional judgement around case evidence, complete EPSM early, practise ACCA's live CBE tools and focus your final Options work on the two exams you will actually enter.
Core concepts
Concept 1
Control systems align operations with objectives through policies, responsibilities, information and corrective action.
Exam cue: Link a control weakness to the specific objective and risk affected.
Concept 2
Internal audit provides independent assurance and advice when its mandate, objectivity, competence and access are protected.
Exam cue: Specify who performs the control, when, using what evidence and how exceptions escalate.
Concept 3
Control design must be tested against implementation, operating effectiveness and changing risk.
Exam cue: Separate management ownership of control from independent assurance.
Risk pitfalls and guardrails
Offering vague controls such as improve supervision.
Guardrail: Do not reproduce a model, calculation, tax rule, reporting treatment or audit phrase without checking version, date, evidence, professional skill and decision context.
Assuming documented procedures operate consistently.
Guardrail: Do not reproduce a model, calculation, tax rule, reporting treatment or audit phrase without checking version, date, evidence, professional skill and decision context.
Making internal audit responsible for the controls it later audits.
Guardrail: Do not reproduce a model, calculation, tax rule, reporting treatment or audit phrase without checking version, date, evidence, professional skill and decision context.
Memory anchors
Control purpose
A useful control prevents, detects or corrects a defined risk to an objective.
Control evidence
A control should leave evidence that a reviewer can inspect.
Three lines
Management owns risk, oversight functions support and monitor, and internal audit assures independently.
Internal audit
Protect mandate, independence, competence, access and reporting.
Resilience
Prepare to continue, respond, recover and learn after disruption.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
One employee creates suppliers and approves payments. Which control best addresses the risk?
Why is a preventive control generally preferable for an irreversible safety event?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 247 UK exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”