Skip to content

ACCA Strategic Professional · Strategic Business Leader · Internal control and management reporting

Brightwell Energy's board reviews risk annually and concludes that, for a major new project, the cost of adding a further control would exceed the expected loss it prevents. Which internal control principle does this reflect?

The principle is that controls should be cost-effective. A control is justified only when the risk reduction it delivers exceeds its cost, so the board rightly declines a control costing more than the loss it prevents. Internal control gives reasonable, not absolute, assurance.

  1. AControls should be cost-effective, so benefits should exceed costsCorrect
  2. BControls must eliminate all risk before any project proceeds
  3. CControls should be designed only by external auditors
  4. DControls are only needed for financial reporting risks

Explanation

Internal control design should be proportionate: a control is worthwhile only if its benefit in reducing risk exceeds its cost. Eliminating all risk is impossible and uneconomic. Controls also cover operational and compliance objectives, not just financial reporting.

Did you get it right without looking?

One question tells you little. A timed set on Internal control and management reporting shows your real accuracy, how long you take and where you lose marks.

More Internal control and management reporting questions