Control activities

Control activities are policies and procedures that help ensure management directives are carried out, including authorisation, reconciliation, verification and relevant information-processing controls. They operate within the wider system of internal control. Examples include approval of payments, independent reconciliations and controls over changes to relevant applications. The auditor identifies controls relevant to assessed risks and evaluates design and implementation, testing operating effectiveness when reliance is planned or otherwise required.