When considering internal control, an auditor should be aware of the concept of reasonable assurance, which recognizes that
- Internal control may be ineffective due to mistakes in judgment and personal carelessness.
- Adequate safeguards over access to assets and records should permit an entity to maintain proper accountability.
- Establishing and maintaining internal control is an important responsibility of management.
- The cost of an entity’s internal control should not exceed the benefits expected to be derived.