Translations:Kontrolldefinitionen/18/en

Priority:

• There is no official definition of a key control. However, a distinction can save time in documenting and testing controls that are not key.
  The following characteristics can help guide decisions:
  
  • It is required to provide reasonable assurance that material misstatements are prevented or detected on a timely basis.
  • It is the only control that covers the risk of material misstatement.
  • If it fails, it is highly unlikely that another control could detect the absence of the control.
  • It is a control that covers more than one risk or supports an entire process execution.
  .

Note: If no threshold has been defined for a key control, any failure of the control escalates to the management system owner!