Designing an internal control system

Build internal controls proportionate to the risks, documented clearly and owned by the managers who run the processes.

A navy document box with brass corners, a ring of brass keys and a magnifying glass resting on a file with a gold spine

What you will be able to do

  • Explain the components of internal control in practical terms
  • Map a process and place key controls where risks arise
  • Document controls so that they are performed and evidenced
  • Monitor controls through self-assessment and review

Who it is for

  • Internal control and compliance officers
  • Finance and administration managers
  • Process owners

Prerequisites

  • Basic knowledge of the institution’s main processes

Program

What internal control is for

  • The components of internal control in practice
  • The three lines and who does what
  • Proportionality: control is not paperwork

Processes and controls

  • Mapping a process on one page
  • Key controls: preventive and detective
  • Segregation of duties, delegations and approvals

Documentation

  • Procedures people actually read
  • Control matrices
  • Evidence that a control was performed

Monitoring

  • Control self-assessment
  • Testing a control
  • Following deficiencies until they are fixed

How we work

  • Mapping one of the participants’ processes
  • Building a control matrix in small groups
  • Testing controls on a training case