Businesses rely on internal controls to help ensure the accuracy and integrity of their financial statements, as well as prevent fraud, waste and abuse. Given their importance, internal controls are a key area of focus for internal and external auditors.
Many auditors use detailed internal control questionnaires to help evaluate the internal control environment — and ensure a comprehensive assessment. Although some audit teams still use paper-based questionnaires, many now prefer an electronic format. Here’s an overview of the types of questions that may be included and how the questionnaire may be used during an audit.
The contents of internal control questionnaires vary from one audit firm to the next. They also may be customized for a particular industry or business. Most include general questions pertaining to the company’s mission, control environment and compliance situation. There also may be sections dedicated to mission-critical or fraud-prone elements of the company’s operations, such as:
Property, plant and equipment,
Intellectual property (such as patents, copyrights and customer lists),
Related party transactions, and
Questionnaires usually don’t take long to complete, because most questions are closed-ended, requiring only yes-or-no answers. For example, a question might ask: Is a physical inventory count conducted annually? However, there also may be space for open-ended responses. For instance, a question might ask for a list of controls that limit physical access to the company’s inventory.