## Manual vs Automated Elements of Internal Control

### Why It Matters for the Auditor

Understanding whether a control is manual or automated directly shapes the auditor's risk assessment and the nature of further audit procedures. Automated controls are consistent but rigid; manual controls are flexible but error-prone.

---

### Manual Controls — Characteristics

Include approvals, reviews, reconciliations, and follow-up of reconciling items.
Depend on human judgment and discretion.
More prone to bypass, override, simple errors, and mistakes than automated controls.

When manual controls are MORE suitable:

Situation	Reason
Large, unusual, or non-recurring transactions	Require judgment beyond programmed rules
Errors difficult to define or predict in advance	No automation can be designed without knowing the error pattern
Changing circumstances outside existing automated scope	Automated controls lack adaptability
Monitoring effectiveness of automated controls	Humans must review what machines produce

---

### Automated Controls — Characteristics

Embedded in computer programs; execute consistently every time.
Form part of a combination of automated + manual controls.
Manual controls may use IT-produced output (hybrid).

When manual controls are LESS suitable (automated preferred):

Situation	Reason
High-volume or recurring transactions	Manual review is impractical at scale
Anticipated/predictable errors	Can be caught by programmed parameters
Controls that can be fully designed and automated	Automation removes human error

---

### Key Takeaway

> Manual ↔ Judgment, flexibility, override risk

> Automated ↔ Consistency, efficiency, rigidity

Worked example

### Example 1

Example 1 — Choosing the right control type:

A company processes 50,000 purchase invoices monthly. The auditor notes that matching PO → GRN → Invoice is done manually by a clerk.

Analysis: High-volume, recurring transactions are exactly where automated controls are preferable. Manual matching at this scale is prone to errors and bypass. The auditor should flag this as a control weakness and assess the risk of misstatement in purchases/payables.

### Example 2

Example 2 — When manual is appropriate:

A company acquires a factory in a one-time deal worth ₹50 crore. The CFO personally reviews and approves the journal entry.

Analysis: Large, unusual, non-recurring transaction — this is a textbook case where manual control (senior review and approval) is more suitable than an automated parameter. The auditor should verify existence and adequacy of this manual approval.

⚠️ Common exam mistakes

Assuming automated controls are always superior — they can be overridden by IT administrators or fail to handle exceptions outside their programmed logic.
Forgetting that manual controls monitoring automated systems are themselves a necessary layer — removing them entirely creates blind spots.
Confusing 'manual control independent of IT' with 'manual control using IT output' — the latter still relies on IT integrity upstream.

Reference:

Now that you've read this — what's next?

Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.

🔥 Drill 5 Qs on this → ✍️ Adaptive practice →

Manual vs Automated Control Elements

Worked example

⚠️ Common exam mistakes