ICR

Internal Control Review

Assessment of control design and operating effectiveness across selected processes.

The service

What it is

An internal control review looks at whether the controls in selected processes are well designed and work in practice, and recommends improvements to strengthen accountability and reduce exposure. It suits situations where management wants a control-focused assessment, for example before or after a system change, a reorganization, or a change of ownership.

Business problems

When this helps

  • A new system, structure or owner has changed how processes run
  • Management is unsure whether key controls are actually performed
  • A parent company or funder requires an independent control assessment

Activities

Selected according to your needs

  • Process walkthroughs and control identification
  • Assessment of control design
  • Testing of operating effectiveness
  • Segregation of duties and access review
  • Recommendations and action planning with process owners

Possible outputs

Depending on the agreed scope

  • Control assessment report
  • Observations rated by significance
  • Recommendations and agreed action plan

Who it suits

Typical situations

  • Indonesian subsidiaries of regional or global groups
  • Programs and organizations reporting to funders
  • Companies after a system implementation or restructuring

Team experience

Our team has performed internal control reviews for the Indonesian subsidiaries of a global life sciences group and for a major United Nations program in Indonesia.

Internal AuditIf you also need root-cause analysis and follow-up on remediation, consider a project-based internal audit.

Discuss a control review

Tell us about your organization and what you want to achieve. We will propose a scope and approach.