Sort Controls by Purpose
Classify controls by whether they prevent, detect, or correct risk events.
Sort each control by its primary purpose. Preventive control Detective control Corrective control System blocks purchase orders above authority limits without approval Monthly analytics flag duplicate supplier payments after close Root-cause review changes the workflow after repeated exceptions Segregation of duties prevents the same user from creating and paying a vendor Internal audit tests a sample of expense approvals each quarter Recovered overpayments are tracked and process owners must close remediation actions Mandatory fields stop contract submission when pricing terms are missing Exception dashboard highlights unusual rebate activity for review Policy and training are updated after an investigation identifies a…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in