Features of Sound Internal Control System

The Turnbull code employs the term ‘sound’ to indicate that it is insufficient to simply ‘have’ an internal control system. They can be :

**effective and serve the aim of corporate governance or
**ineffective and fail to support them.

In order to reinforce ‘soundness’ or effectiveness, systems need to possess a number of features. The Turnbull guidance described three features of a ‘sound’ internal control system.


1. Firstly, the principles of internal control should be embedded within the organisation’s structures, procedures and culture. Internal control should not be seen as a stand-alone set of activities and by embedding it into the fabric of the organisation’s infrastructure, awareness of internal control issues becomes everybody’s business and this contributes to effectiveness.


2. Secondly, internal control systems should be capable of responding quickly to evolving risks to the business arising from factors within the company and to changes in the business environment. The speed of reaction is an important feature of almost all control systems (for example a servo system for vehicle brakes or the thermostat on a heating system). Any change in the risk profile or environment of the organisation will necessitate a change in the system and a failure or slowness to respond may increase the vulnerability to internal or external trauma.


3. Thirdly, sound internal control systems include procedures for reporting immediately to appropriate levels of management any significant control failings or weaknesses that are identified, together with details of corrective action being undertaken. Information flows to relevant levels of management capable and empowered to act on the information are essential in internal control systems. Any failure, frustration, distortion or obfuscation of information flows can compromise the system. For this reason, formal and relatively rigorous information channels are often instituted in organisations seeking to maximise the effectiveness of their internal control systems.



****************