## Relevance of Internal Controls in Audit
### Key Principle
Auditors use professional judgment to determine which internal controls are relevant to the audit. Not all of an entity's controls need to be assessed.
### Why Not All Controls Are Relevant
An entity implements controls for three broad objectives:
1. Financial reporting
2. Operational efficiency
3. Compliance
The auditor is primarily concerned with controls relevant to preventing or detecting material misstatement in the financial statements.
### Factors Influencing the Auditor's Relevance Judgment
| Factor | How It Affects Relevance |
|---|---|
| Materiality | Higher materiality areas make controls more relevant |
| Significance of the related risk | High-risk areas require assessment of associated controls |
| Size of the entity | Larger entities have more complex control environments |
| Nature of business (incl. organisation and ownership) | Industry-specific controls may carry different relevance |
| Diversity and complexity of operations | More complex operations expand the scope of relevant controls |
| Applicable legal and regulatory requirements | Compliance controls may or may not address financial reporting risk |
| Nature and complexity of IT systems (incl. service organisations) | Automated controls carry high relevance in IT-dependent environments |
| Whether the control prevents, detects, or corrects material misstatement | The most direct test of relevance |
### Conclusion
Auditors assess only those controls relevant to the risk of material misstatement — a complete assessment of all entity controls is neither required nor practical.