10.1 Internal Control Principles & Manual

Why HCS412305 Starts with the Manual

Unit HCS412305 Review internal control system covers the knowledge, skills, and attitudes needed to review and determine the extent of compliance with a firm’s internal control manual. Element 1 opens with Performance Criterion 1.1: the internal control manual is prepared/updated in accordance with industry practice. Before you can check whether people follow the rules (PC 1.2) or write compliance reports (Element 2), there must be a documented control system to compare against.

On assessment day, you may receive a simulated company packet: organization chart, sample forms, existing policy snippets, and a request to draft or revise an IC manual section. Treat that packet as the “firm.” Do not invent controls that contradict the given business model, and do not copy a textbook checklist that ignores Philippine MSME realities (owner involvement, limited staff, cash-heavy retail, BIR documentation habits).

Assessment framing: Critical evidence for this unit includes preparing an internal control manual and preparing compliance reports. PC 1.1 is the design step; later criteria test whether you can validate and report against that design.

Underpinning Knowledge: Internal Control Principles

The Evidence Guide lists internal control principles and management policies as underpinning knowledge. For Bookkeeping NC III, five principles appear again and again in written items and practical scenarios:

These principles are not optional theory. They are the design language of the IC manual. When you write a policy, ask: Which principle does this enforce? If the answer is “none,” the policy is probably fluff.

Segregation of duties (custody vs recording vs authorization)

Classic cash fraud happens when one person handles cash and also records cash. Segregation separates:

1. Custody — physical handling of cash, inventory, or blank checks
2. Recording — journalizing and posting
3. Authorization — approving credit sales, purchase orders, or disbursements
4. Reconciliation / independent review — comparing independent records (bank statement vs books)

In a three-person trading firm in Quezon City, a workable split might be: sales clerk (custody of collections), bookkeeper (recording), owner (check signing and weekly review). If the firm has only an owner and one bookkeeper, full segregation is impossible—so the manual must state compensating controls: daily cash count witnessed by the owner, mandatory bank deposits of undeposited collections, and owner-prepared or owner-reviewed bank reconciliations.

Authorization

Authorization means a competent person with defined authority approves an action before it binds the firm. Examples for Philippine SMEs:

• Credit sales beyond a customer’s limit require owner approval
• Check payments require dual signatories when practicable, or owner sole signature with pre-approved voucher support
• Overtime and payroll adjustments require HR/owner sign-off before disbursement
• Inventory write-offs require documented authorization, not a silent deletion from the stock card

Authorization without documentation is weak. The manual should name the approver and the form (for example, “Approved Purchase Requisition PR-001 series”).

Documentation

Documentation creates the audit trail assessors and managers use later. Strong documentation habits include:

• Pre-numbered source documents (SI, OR, CV, PR, PO)
• Immediate recording of transactions from source documents
• Cross-references (voucher number on check stub; OR number on CRJ)
• Retention rules consistent with BIR and company policy
• Voided documents retained and marked VOID—not shredded quietly

Weak documentation is a control failure even when no cash is missing yet, because fraud and error become untraceable.

Physical controls

Physical controls protect cash, inventory, blank forms, and computer access:

Independent checks

Independent checks catch both honest mistakes and intentional misstatements. Common independent checks for NC III contexts include bank reconciliation by someone other than the cashier, supervisory review of cash register Z-readings versus CRJ, surprise petty cash counts, and management review of exception reports (large discounts, voided ORs, unusual refunds).

Preparing or Updating the Internal Control Manual (Industry Practice)

An IC manual is a living document. PC 1.1 allows prepare (new firm / no usable manual) or update (existing manual incomplete or outdated). Industry practice for Philippine MSME bookkeeping typically produces a concise manual with these parts:

1. Purpose and scope — which locations, systems, and transaction cycles are covered
2. Organization and responsibilities — who authorizes, who records, who custodians assets
3. Policy statements by cycle — sales/collections, purchases/disbursements, payroll/HR, cash/bank, inventory, fixed assets
4. Procedures — step-by-step how work is done
5. Forms and records — list of controlled documents and numbering series
6. Monitoring — who reviews what, how often, and what evidence is filed
7. Revision history — date, version, approver (owner/manager)

Mini structure for a trading SME (illustrative)

Update triggers

Update the manual when the firm changes cashiers, adds online payments, opens a second branch, changes accounting software, revises discount policies, or after a control failure (cash shortage, missing OR booklet, unauthorized purchase). On assessment, if the packet says “update,” mark obsolete rules clearly and show the new version date.

Philippine SME Context: Practical Constraints

TESDA assessment scenarios often resemble MSMEs—not listed conglomerates with internal audit departments. Write controls that a five-person office can actually run:

• Prefer simple segregation over complex matrix charts
• Use owner review as a compensating control when staffing is thin
• Align forms with common Philippine documents (OR, SI, CV, BIR-related series awareness)
• State peso thresholds in ₱ amounts the packet uses
• Avoid copying COSO essay language that never names who locks the cash box

Scenario: Drafting PC 1.1 evidence

Scenario — Mira’s Sari-Sari Wholesale. Mira owns a small wholesale store with one cashier, one bookkeeper, and one warehouse aide. The assessment packet asks you to prepare an IC manual excerpt for cash collections. A competent response separates cashier custody from bookkeeper recording, requires daily deposit of collections, locks the OR booklet, and schedules an owner independent count of cash versus OR totals at closing. A weak response lists “honesty of employees” as the only control.

Manual Quality Checklist (Assessment Day)

• Title page / heading identifies the firm and “Internal Control Manual” (or section title)
• Version/date and preparer name appear
• At least the assigned cycles (sales, HR, cash, purchasing as given) are covered
• Each major policy maps to a principle (segregation, authorization, documentation, physical, independent check)
• Responsible persons match the organization chart in the packet
• Forms are named and, where relevant, pre-numbered
• Monitoring/review frequency is stated
• Language is procedural and testable (“shall,” “must,” “within 24 hours”), not vague slogans

Common Traps

Closing Link to PC 1.2 and Element 2

Once the manual exists, PC 1.2 asks whether actual practices comply with it. Element 2 asks you to report that compliance status to management. A clear manual makes both later tasks possible. A fuzzy manual makes compliance checking guesswork—and that is exactly what HCS412305 is designed to prevent.