What are the basic principles of internal control?

• A. Appropriate division of duties, qualified personnel, and sound written procedures
• B. Centralized authority with no checks
• C. No written procedures
• D. Outsourcing all controls to external firms

Answer: (A)

The basic idea is to prevent errors and fraud by building controls into how work is done. The strongest approach combines separating key responsibilities, using qualified personnel, and having solid written procedures that document how transactions should be handled.

Separating duties means no one person handles all steps of a process—authorization, recording, and custody of assets—so mistakes or fraud are more likely to be caught by others. Having qualified personnel ensures the people carrying out controls have the necessary skills and integrity to do so reliably. Written procedures provide clear, standardized instructions for every step, making controls consistently applied and easier to train, monitor, and audit.

Without checks, a single authority can make or conceal errors and unauthorized actions. Without written procedures, practices can vary or drift, reducing reliability. Relying entirely on external firms to handle controls removes the ongoing, day-to-day safeguards that internal controls provide and leaves the organization without a stable, internal framework to prevent problems.