## Manual vs Automated Controls
Modern entities use a combination of manual and automated controls. Most systems are hybrid. The auditor must evaluate both the design and operating effectiveness of whichever type is in place.
---
## Advantages of Automated Controls
- Consistent — applied uniformly every time
- Scalable — can handle high volumes
- Faster — no human bottleneck
- Reduces human error in routine transactions
---
## When Are Manual Controls More Suitable?
Despite automation's benefits, manual controls are more appropriate in these five circumstances:
| # | Circumstance | Reason |
|---|---|---|
| 1 | Judgment and discretion are required | Automated systems cannot exercise professional judgment |
| 2 | Large, unusual, or non-recurring transactions | Pre-programmed rules may not capture one-off scenarios |
| 3 | Errors difficult to define, anticipate, or predict | Systems can only catch errors they are programmed for |
| 4 | Changing circumstances outside existing automated control scope | A human response is needed before the system can be updated |
| 5 | Monitoring the effectiveness of automated controls | Human oversight is needed to verify automated controls are functioning correctly |
---
## Audit Implication
When manual controls are relied upon, the auditor considers:
- Competence and authority of the individual performing the control
- Consistency of performance
- Risk of human error or management override
When automated controls are relied upon, the auditor focuses on:
- IT General Controls (access security, program change)
- Whether the automated logic was properly designed and has not been altered