Internal Controls Testing: Control Matrices, Sample Sizes & Deficiency Evaluation
Test a company’s controls like an internal auditor: score a risk and control matrix, size samples by frequency, evaluate attribute tests with the upper deviation limit, summarise design and operating results, find segregation-of-duties conflicts, classify deficiencies and track remediation on a dashboard, every cell checked as you go.
The first lesson is free — no account needed.
About this course
An internal controls testing course that works through one fictional instruments company's control testing year in a spreadsheet, for internal auditors, SOX testers and accounting students. You score the risk and control matrix by likelihood × impact and count the key controls, look up sample sizes from control frequency and risk, evaluate attribute tests with the sample deviation rate and the upper deviation limit against the tolerable rate, summarise design and operating effectiveness by process with COUNTIFS, find segregation-of-duties conflicts in a user × role matrix with SUMPRODUCT, classify deficiencies as deficiency, significant deficiency or material weakness, track remediation and overdue findings and build a controls dashboard with pass rates and a chart. SOX and COSO are referred to in general terms, no affiliation. The first lab is free.
Lessons
- The Risk & Control Matrix: Likelihood × Impact and Key ControlsFree
- Control Frequency → Sample Size: a Lookup Table Pro
- Attribute Sampling: Deviations, Upper Deviation Limit & Tolerable Rate Pro
- Test of Design vs Operating Effectiveness: the Results Summary Pro
- Segregation of Duties: a User × Role Conflict Matrix Pro
- Deficiency Evaluation: Deficiency, Significant Deficiency or Material Weakness? Pro
- The Remediation Tracker: Due Dates, Days Overdue & Highlighting Pro
- The Controls Dashboard: Coverage, Pass Rates & a Stacked Column Chart Pro