Control Systems, Assurance and Internal Audit
Control objectives, design, operation, assurance mapping and the role of internal audit.
How to study CIMA Strategic Level
Secure E3, P3 and F3 knowledge before practising integrated long-term judgement and professional communication. Static study assets do not reproduce all objective-test interactions or the pre-seen, unseen information, locked written sections and human marking of the Strategic Case Study.
Core concepts
Concept 1
Design preventive, detective and corrective controls.
Exam cue: Link every control to a stated risk and control objective.
Concept 2
Evaluate control design and operating effectiveness.
Exam cue: Identify owner, frequency, evidence and escalation.
Concept 3
Explain assurance coordination and internal-audit independence.
Exam cue: Separate management's control ownership from independent assurance.
Risk pitfalls and guardrails
Naming a policy without an operating control.
Guardrail: Check the applicable blueprint, task verb, assumptions, units, evidence provenance, stakeholder effects, residual risk and whether the conclusion follows.
Assuming a well-designed control is operating effectively.
Guardrail: Check the applicable blueprint, task verb, assumptions, units, evidence provenance, stakeholder effects, residual risk and whether the conclusion follows.
Making internal audit responsible for the process it audits.
Guardrail: Check the applicable blueprint, task verb, assumptions, units, evidence provenance, stakeholder effects, residual risk and whether the conclusion follows.
Memory anchors
Control objective
The desired condition that a control is intended to achieve for a risk.
Operating effectiveness
Whether a control is performed consistently by capable people using reliable evidence.
Internal audit
Independent assurance and advice on governance, risk management and control.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
Which statement best describes what a sound internal-control system can provide to directors and management?
Senior leaders override procurement rules, high performers face no consequence for misconduct and staff fear reporting concerns. Which COSO component is most directly weak?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 247 UK exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”