## Manual vs Automated Controls: When Manual is More Suitable

While automated controls offer consistency and speed, manual elements are more appropriate in certain situations. Understanding this distinction is important for both designing internal controls and evaluating them during audit.

### When Manual Controls Are More Suitable

Circumstance	Why Manual is Better
Situations requiring judgment and discretion	Automated rules cannot exercise human reasoning (e.g., approving unusual credit terms for a key customer)
Large, unusual, or non-recurring transactions	These fall outside the parameters of automated rule-sets
Errors that are difficult to define, anticipate, or predict	Cannot program a system to catch what you cannot define
Changing circumstances requiring a control response outside the scope of an existing automated control	Automated controls are static until reprogrammed; humans can adapt in real time
Monitoring the effectiveness of automated controls	A human must assess whether automated controls are actually working as intended

### Key Principle

> Automation provides consistency and scale; humans provide judgment and adaptability. Effective internal control often uses both.

### Audit Implication

When an auditor finds that an entity relies heavily on automated controls, they should check:

Whether General IT Controls are strong (otherwise automated application controls may be unreliable).
Whether manual override processes exist for exceptional situations.
Whether someone is monitoring whether the automated controls continue to work correctly.

Worked example

### Example 1

A paint manufacturing company has highly automated internal controls. The auditor identifies the following scenarios and evaluates whether automated or manual controls are more suitable:

1. Monthly bank reconciliation reviewed by the CFO → Manual is appropriate because it requires judgment about unusual items and the CFO exercises discretion.

2. System validates that purchase orders must match pre-approved vendor list → Automated is fine — this is a well-defined rule.

3. A one-off government contract at a non-standard margin → Manual approval is more suitable — large, non-recurring, and unusual transaction outside automated parameters.

4. Monthly review by the IT manager of whether automated approval controls are working → Manual — this is monitoring the effectiveness of automated controls, which requires human assessment.

⚠️ Common exam mistakes

Stating that manual controls are always inferior to automated controls — both have their place, and manual controls are specifically superior in judgment-intensive situations.
Forgetting that monitoring automated controls is itself a manual activity — someone must verify that the automated system is working correctly.
Assuming automated controls can handle all 'large' transactions — size alone does not make a transaction suitable for automation; unusual or non-recurring nature matters too.
Missing the 'changing circumstances' point — automated controls cannot self-update; when conditions change, manual intervention is needed until the automated control is reprogrammed.

Reference:

Now that you've read this — what's next?

Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.

🔥 Drill 5 Qs on this → ✍️ Adaptive practice →

Manual vs Automated Elements in Internal Control

Worked example

⚠️ Common exam mistakes