## Control Environment
The control environment is the foundation for all other components of internal control. It sets the tone for the organisation.
### What the Auditor Evaluates
The auditor evaluates whether:
1. Management has created and maintained a culture of honesty and ethical behaviour
2. The strengths in the control environment elements collectively provide an appropriate foundation for the other components of internal control
### What the Control Environment Includes
#### 1. Governance and Management Functions
The formal structures and processes by which an entity is directed and controlled.
#### 2. Attitudes, Awareness, and Actions
Of those charged with governance (e.g., Board of Directors, Audit Committee) and management.
> It is not enough to have written policies — the actual attitudes and behaviours of leadership define the control environment in practice.
### Elements of Control Environment (Key Points)
| Element | What It Covers |
|---|---|
| Integrity and ethical values | Tone at the top — management's commitment to ethics |
| Commitment to competence | Hiring and retaining skilled, capable staff |
| Participation of TCWG | Board/Audit Committee oversight effectiveness |
| Management's philosophy and operating style | Risk appetite, approach to financial reporting |
| Organisational structure | Assignment of authority and responsibility |
| Assignment of authority and responsibility | Delegation policies, accountability |
| HR policies and practices | Recruitment, training, performance evaluation |
### Why It Matters to the Auditor
A weak control environment — where management overrides controls or ethical standards are poor — increases the risk of material misstatement, especially fraud risk.