Internal Controller Course

Lesson 1 • History and Evolution of Control Frameworks

Traces how internal control frameworks developed in response to organisational failures. Provides context for why modern frameworks are structured as they are.

Lesson 2 • Core Control Framework Components

Introduces the five integrated components common to leading control frameworks. Students map each component to real organisational activities.

Lesson 3 • Organisational Context for Controls

Examines how organisational structure, culture, and size shape control design. Connects framework theory to practical implementation constraints.

Lesson 1 • Maintaining a Risk Register

Introduces the risk register as the central tool for tracking identified risks and control responses. Students design and populate a functional register.

Lesson 2 • Risk Identification Methods

Covers structured techniques for surfacing risks across business processes. Students apply multiple methods to produce comprehensive risk inventories.

Lesson 3 • Linking Objectives to Risks

Establishes the relationship between organisational objectives and the risks that threaten them. Students practice decomposing objectives into risk statements.

Lesson 4 • Risk Analysis and Scoring

Teaches likelihood and impact assessment to prioritise risks for control attention. Students build and interpret risk heat maps.

Lesson 1 • Types of Control Activities

Classifies controls by nature, timing, and function to guide selection decisions. Students match control types to specific risk scenarios.

Lesson 2 • Authorisation and Approval Controls

Covers the design of authorisation hierarchies and approval workflows. Students map approval thresholds to organisational risk levels.

Lesson 3 • Control Design Principles

Presents criteria for well-designed controls: precision, coverage, and cost-effectiveness. Students evaluate existing controls against these criteria.

Lesson 4 • Segregation of Duties

Explains segregation of duties as a foundational fraud-prevention control. Students identify incompatible duties and design compensating controls where full segregation is impractical.

Lesson 1 • Payroll and Human Resources Controls

Examines controls over employee data, payroll processing, and benefit administration. Students identify fraud schemes and corresponding preventive controls.

Lesson 2 • Financial Close and Reporting Controls

Addresses controls that ensure accurate and timely financial reporting. Students evaluate journal entry, reconciliation, and disclosure controls.

Lesson 3 • Controls in Order-to-Cash Processes

Covers controls across customer order, fulfilment, billing, and collections. Students design a control matrix for the full revenue cycle.

Lesson 4 • Mapping Business Processes for Control

Teaches process mapping as the foundation for identifying control insertion points. Students create annotated process flowcharts highlighting risk and control nodes.

Lesson 1 • Access Management Controls

Covers logical access provisioning, review, and termination processes. Students evaluate access control designs for segregation of duties violations.

Lesson 2 • IT Control Framework Overview

Introduces IT governance frameworks and their relationship to internal control objectives. Students distinguish IT general controls from application controls.

Lesson 3 • Application Controls and Automated Testing

Examines input, processing, and output controls embedded in business applications. Students design test procedures for automated controls.

Lesson 4 • Change Management Controls

Teaches controls over system and application changes to prevent unauthorised modifications. Students assess change management processes for control gaps.

Lesson 1 • Monitoring vs. Testing Distinctions

Clarifies the difference between continuous monitoring and periodic control testing. Students select appropriate evaluation approaches based on control type and risk level.

Lesson 2 • Evaluating and Documenting Test Results

Teaches how to assess exceptions, determine deficiency severity, and document findings. Students classify deficiencies and draft finding narratives.

Lesson 3 • Designing Control Test Plans

Teaches how to build test plans that define scope, sample sizes, and test procedures. Students produce a complete test plan for a defined control population.

Lesson 4 • Executing Control Tests

Covers evidence gathering, inquiry, observation, inspection, and reperformance techniques. Students practice applying each technique to realistic control scenarios.

Lesson 1 • Designing Remediation Plans

Covers how to design remediation actions that address root causes rather than symptoms. Students build remediation plans with owners, milestones, and success criteria.

Lesson 2 • Writing Effective Deficiency Reports

Teaches the structure and language of deficiency reports that drive management action. Students draft reports using condition-criteria-cause-effect format.

Lesson 3 • Classifying Control Deficiencies

Defines the spectrum from control deficiency to significant deficiency to material weakness. Students apply classification criteria to case-based scenarios.

Lesson 4 • Tracking and Validating Remediation

Teaches how to monitor remediation progress and validate that corrective actions are effective. Students design a remediation tracking dashboard.

Lesson 1 • Control Governance Structures

Designs the roles, committees, and reporting lines that govern the internal control programme. Students draft a control governance charter.

Lesson 2 • Integrating Control with Enterprise Risk Management

Connects internal control to the broader enterprise risk management framework. Students map control activities to enterprise risk responses.

Lesson 3 • Sustaining and Evolving the Control Programme

Addresses how to keep the control programme current as the organisation and its risks change. Students design a programme review cycle and change-trigger protocol.

Lesson 4 • Reporting to Senior Leadership and Boards

Teaches how to synthesise control assessment results into executive-level communications. Students build a board-ready control dashboard.