Making It Happen
The approach to follow:
-
Adopt and understand a recognized internal control framework.
-
Engage the board, management, and other personnel in the ownership of internal control.
-
Identify the mission critical business processes.
-
Consider standardizing processes across the business.
-
Document those processes, highlighting the key controls.
-
Consider the effectiveness of the key controls and improve where necessary.
-
Design tests to confirm satisfactory compliance with key controls, and take remedial action as required.
-
In addition to control activities, consider whether the other essential components of an effective system of internal control are sound—for example, the control environment, information and communication, risk assessment and monitoring.
-
Draw overall conclusions.
-
Use the results from this process as a continuous improvement tool to improve the internal control system.
Notes
1 Other recognized internal control frameworks are the Canadian “CoCo” framework, and the United Kingdom’s Turnbull framework.
2 King Report on Corporate Governance for South Africa (March 2002), “King II,” Institute of Directors in Southern Africa. “King III” is to be published in 2009.
3 For instance, incoming cash should be controlled at the point and time of entry into the business.
- Page 6 of 6
- Previous section Case Study 1


