Internal Auditing - Entity Level Controls

1621 Words7 Pages
Internal Auditing Case 1 Josh Pinto 1. Control activities are policies and procedures that are established to help ensure that company directives are carried out successfully. The key entity-level controls that should be in place if management is certain that the stated business risk is effectively minimized are: i. Personnel policies and procedure ii. The delegation of authority and responsibility iii. Communication and enforcement of integrity and ethical values iv. Hiring, training and promotion policies v. Policies and procedures to prevent or detect fraud vi. Conservative attitude in managing business vii. Organizational structure conducive to efficiency and effective communication viii. Compliance training ix. Employee handbook x. Code of ethics 2. Ethical behavior is characterized by honesty, fairness and equity in interpersonal, professional and academic relationships and in research and scholarly activities. Assuming that SHR has made a guidance for employee behavior in their policies and procedures , the audit procedures that I would use to determine whether this control exists would be: a.) xi. Start with a detailed foundation of information in order to compare the actual employee behavior against the company’s formal code of ethics, making sure that policies cover the full range of common issues in business. The more descriptive and specific ethics-related policies and procedures are, the easier it is to make comparisons. xii. Check company records to research any past problems with ethics, asking appropriate sources (management, board) about any prior legal issues that have occurred while inquiring about what steps have been taken since then to prevent another similar incident.

More about Internal Auditing - Entity Level Controls

Open Document