Internal Control is a process, effected by an entity’s board of directors, management, and other personnel, designed to provide reasonable assurance regarding the achievement of objectives relating to operations, reporting, and compliance
Internal control is a process. It is a means to an end, not an end in itself. The goal is reliable financial reporting, effective and efficient operations, and compliance with laws and regulations.
Internal control is affected by people. It is not merely policy manuals and forms, but people's actions at every level of the organization.
1 Committee of Sponsoring Organizations of the Treadway Commission (COSO), Internal Control – Integrated Framework (Executive Summary, May 2013), pg. 3.