To ensure that internal controls are operating effectively, auditors conduct tests of controls to verify whether controls are properly designed and functioning as intended. These tests help determine if control risk can be assessed at a lower level, reducing the need for extensive substantive testing.
Auditors use five key procedures to evaluate internal controls:
Inquiry – Asking management and employees about control procedures.
Observation – Watching employees perform control activities.
Inspection – Reviewing documents for evidence of control performance.
Reperformance – Re-executing a control activity to verify its effectiveness.
Walkthroughs – Tracing transactions from initiation to recording.
Auditors focus on the following significant accounts and assertions when designing tests of controls: