ABSTRACT
The combination of questions revealed that recommendations of intelligent internal controls were as likely to be recognized as good recommendations as traditional favourites like sign-offs, documentation, segregation of duties, and reconciliations, but were much less likely to be in place already. The results of this research strongly suggested that auditors, risk managers, and others who make recommendations for improving internal control and risk management can benefit from giving more attention to recommendations beyond the usual repertoire of sign-offs, documentation, segregation of duties, and reconciliations. Once there is agreement in principle that an intervention at particular points could be effective, finally, you can present your solutions and demonstrate as far as possible that they would work. It is from this research that some astonishing facts have emerged with major practical implications. However, their second attempt will have half as many errors in it, their third will have half as many errors again, and so on.
