Assessing Controls in Performance Audits Course

Module 1: Importance of Internal Controls

• Understand the definition, purpose, and types of internal controls.
• Explore the relationship between controls, processes, and performance outcomes.
• Analyze internal control components as defined in GAO’s Green Book.
• Distinguish between preventive, detective, and corrective controls.
• Identify inherent risks and control objectives in program operations.

Module 2: Government Standards for Implementing and Auditing Controls

• Apply GAGAS (Government Auditing Standards) for assessing controls.
• Determine when to evaluate internal controls during audits.
• Understand when controls are or are not significant to audit objectives.
• Review standards related to information system controls.

Module 3: Integrating Assessment of Controls in the Survey Phase

• Define the purposes of the survey phase in performance audits.
• Identify common survey information needs and how to obtain them.
• Use risk assessment to select controls for further audit.
• Evaluate both mission-specific and generic risks.

Module 4: Planning Audits to Assess Controls

• Distinguish between performance audit approaches (e.g., accomplishments vs. processes).
• Formulate audit objectives targeting internal controls.
• Select scope, methodology, and data collection strategies.
• Use audit design matrices to document audit plans effectively.

Module 5: Documenting Controls

• Explore two key documentation methods: narrative description and flowcharting.
• Create flowcharts and process maps to visualize control structures.
• Understand how documentation supports control evaluation.

Module 6: Reporting Control Findings

• Organize findings using the standard elements: condition, cause, effect, and recommendation.
• Link audit results directly to objectives and control assessments.
• Apply reporting standards and formats to communicate control deficiencies.
• Develop realistic, actionable recommendations based on audit findings.

Module 7: Case Exercise

• Apply all learned concepts in a comprehensive case scenario.
• Identify mission-specific and integrity risks in real-world audit situations.
• Evaluate internal control effectiveness and formulate audit findings.