Chapter 3.6 · Control design, testing and audit¶
Two Lessons. The first separates two things that are constantly confused: whether a control is well designed, and whether it actually operates. The second covers internal audit, the independent assurance that the baseline holds, and the close of the framework-to-control-to-audit thread.
Objectives¶
- Distinguish design effectiveness from operating effectiveness, and choose a test method for each.
- Plan and run an internal audit that is independent, risk-based and evidence-driven.
Lessons¶
| Lesson | Title | Time |
|---|---|---|
| 3.6.A | Control design and testing (design vs operating effectiveness) | ~50 min |
| 3.6.B | Internal audit practice | ~45 min |
The Chapter quiz is at the end of Lesson 3.6.B.