What is internal control over plant and equipment?

Internal control is the process designed to ensure reliable financial reporting, effective and efficient operations, and compliance with applicable laws and regulations. Safeguarding assets against theft and unauthorized use, acquisition, or disposal is also part of internal control.

Control environment. The management style and the expectations of upper‐level managers, particularly their control policies, determine the control environment. An effective control environment helps ensure that established policies and procedures are followed. The control environment includes independent oversight provided by a board of directors and, in publicly held companies, by an audit committee; management's integrity, ethical values, and philosophy; a defined organizational structure with competent and trustworthy employees; and the assignment of authority and responsibility.

Control activities. Control activities are the specific policies and procedures management uses to achieve its objectives. The most important control activities involve segregation of duties, proper authorization of transactions and activities, adequate documents and records, physical control over assets and records, and independent checks on performance. A short description of each of these control activities appears below. 

  • Segregation of duties requires that different individuals be assigned responsibility for different elements of related activities, particularly those involving authorization, custody, or recordkeeping. For example, the same person who is responsible for an asset's recordkeeping should not be respon sible for physical control of that asset Having different indi viduals perform these functions creates a system of checks and balances. 
  • Proper authorization of transactions and activities helps ensure that all company activities adhere to established guide lines unless responsible managers authorize another course of action. For example, a fixed price list may serve as an official authorization of price for a large sales staff. In addition, there may be a control to allow a sales manager to authorize reason able deviations from the price list. 
  • Adequate documents and records provide evidence that financial statements are accurate. Controls designed to ensure adequate recordkeeping include the creation of invoices and other documents that are easy to use and sufficiently informa tive; the use of prenumbered, consecutive documents; and the timely preparation of documents. 
  • Physical control over assets and records helps protect the company's assets. These control activities may include elec tronic or mechanical controls (such as a safe, employee ID cards, fences, cash registers, fireproof files, and locks) or computer-related controls dealing with access privileges or established backup and recovery procedures. 
  • Independent checks on performance, which are carried out by employees who did not do the work being checked, help ensure the reliability of accounting information and the efficiency of operations. For example, a supervisor verifies the accuracy of a retail clerk's cash drawer at the end of the day. Internal auditors may also verity that the supervisor performed the check of the cash drawer. 

In order to identify and establish effective controls, management must continually assess the risk, monitor control implementation, and modify controls as needed. Top managers of publicly held companies must sign a statement of responsibility for internal controls and include this statement in their annual report to stockholders.

In general, the objective of an internal audit is to assess the risk of material misstatement in financial reporting. Material misstatements can arise from inadequacies in internal controls and from inaccurate management assertions. As such, testing the validity of various implicit managerial assertions is a key objective of an internal auditor.

While this applies to all financial cycles, this article is the next in a series focusing on Fixed Assets. The most important general control areas for Fixed Assets include:

  • Initiating Fixed Asset Investment
  • Initiating Fixed Asset Investment – Property, Plant, and Equipment Acquisition
  • Monitoring Investments
  • Recording Fixed Assets
  • Capital vs. Operating Expenses
  • Depreciation
  • Managing Fixed Assets – Maintenance
  • Managing Fixed Assets – Existence
  • Managing Fixed Assets – Disposing of Fixed Assets
  • Managing Fixed Assets – Maintaining Fixed Assets Master File

In this post, we’ll focus on the General Control Activities for Initiating Fixed Asset Investment – Property, Plant, and Equipment (PP&E) Acquisition of the Fixed Asset cycle.

Feasibility Analysis

All capital expenditures over a defined value should have a feasibility analysis completed. It is important that feasibility analysis is accurate and as realistic as possible to support the capex acquisition decision. The following should be included in any audit:

  • Verify that there are standard procedures/methods for the analysis.
  • Make sure the analysis is performed by qualified staff.
  • Validate that the analysis is reviewed by management for decision making.

Capex Voucher Preparation and Approval

It is important to ensure that capex projects/expenditures requested are adequately authorized and that all relevant management is aware of the capex projects. The following should be included in any audit:

  • Verify that capex vouchers are well documented and supported with sufficient supporting information.
  • Confirm that capex vouchers are filed and sequentially numbered.
  • Validate that authorizations are evidenced.

Capex, Maintenance Budgeting and Forecasting

Capex and Maintenance budgeting and forecasting must be accurate, support financial planning/budgeting, and meet business needs. Proper controls will provide realistic forecasting and prevent significant variances of capex expenditures against budget. The following should be included in any audit:

  • Verify that standard procedures/methods for forecasting exist.
  • Validate that Capex and Maintenance budgeting and forecasting are linked to historic figures.
  • Confirm that information is gathered from individual departments and there is a realistic assessment on expenditures.

In conclusion, auditing standards require that auditors test basic underlying management assertions implicit in the financial statements. Key objectives to these assertions are; Existence and Completeness, Rights and Obligations, Valuation or Allocation, and Presentation and Disclosure.


While this article provides a brief overview, we have a library of audit checklists, RCMs, and other useful audit tools, so please feel free to contact us should you have questions or like additional information. We would be happy to provide you what you need.

What are the major elements of internal control over property, plant and equipment?

The methods should be tailored to the specific needs of the chapter. There are five interrelated components of an internal control framework: control environment, risk assessment, control activities, information and communication, and monitoring.

What is meant by internal control?

Internal control is a process, effected by an entity's board of directors, management and other personnel, designed to provide reasonable assurance: That information is reliable, accurate and timely. Of compliance with applicable laws, regulations, contracts, policies and procedures.

What are the 3 types of internal controls?

Internal Control Types and Activities.
Preventive controls are proactive in that they attempt to deter or prevent undesirable events from occurring..
Corrective controls are put in place when errors or irregularities have been detected..
Detective controls provide evidence that an error or irregularity has occurred..

What are the 4 types of internal controls?

Pre-approval of actions and transactions (such as a Travel Authorization) Access controls (such as passwords and Gatorlink authentication) Physical control over assets (i.e. locks on doors or a safe for cash/checks) Employee screening and training (such as the PRO3 Series to increase employee knowledge)