All 18 Internal Controls Evaluation questions
More in Internal Controls Evaluation
What is a walkthrough test? What is the difference between preventive and detective controls? How does the auditor obtain an understanding of internal control? What is the difference between design effectiveness and operating effectiveness? What is the difference between manual and automated controls? When does the auditor decide to test controls versus take a fully substantive approach? How do you document the understanding of internal controls? What are compensating controls and how do they affect the audit? What is the difference between a deficiency, a significant deficiency, and a material weakness? What are IT general controls (ITGCs) and why do they matter?
Advertisement
Back to results for “Audit Evidence & Procedures”
Auditing & Assurance › Internal Controls Evaluation

What are entity-level controls versus process-level (transaction) controls?

Intermediate

Answer

Entity-level controls operate broadly across the organization—tone at the top, governance, policies, monitoring, IT general controls—and influence many processes. Process/transaction-level controls operate within specific processes (e.g., matching, approvals) over particular assertions. Strong entity-level controls can affect the extent of testing of process controls; weak ones increase risk pervasively.
Real-world example A strong control environment and effective monitoring (entity-level) support reliance on the day-to-day process controls.

Common follow-ups: How do entity-level controls affect the audit? | Give an example of each level.

Audit Risk & Materiality Audit Evidence & Procedures Internal Controls Evaluation
All 18 Internal Controls Evaluation questions