Internal Controls
Control Testing Results
Outcomes of the control testing cycle: passed, exceptions noted and failed controls by quarter.
Why the testing cycle outcomes matter
Demonstrating that key controls operate effectively over the period is central to both internal audit assurance and the AGSA's reliance decisions under the ISSAIs. A quarter-by-quarter breakdown of passed, exception and failed controls is the evidence base that converts a control framework on paper into tested operating effectiveness. AuditPro Core consolidates each testing cycle's outcomes so trends in control reliability are visible and failures are not buried in working papers.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Controls tested
312
Pass rate
78%
▲ 3 pts YoY
Exceptions
47
15% of tested
Failed
22
7% of tested
Test outcomes by quarter
Outcomes by control family
| Control family | Tested | Passed | Failed |
|---|---|---|---|
| Access management | 64 | 49 | 6 |
| Procurement | 58 | 41 | 8 |
| Financial close | 71 | 60 | 3 |
| Payroll | 49 | 40 | 2 |
| Asset management | 70 | 53 | 3 |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Pass, exception, fail
A pass confirms the control operated as designed; an exception is a deviation that may or may not be material; a failure means the control did not operate. The distinction drives both remediation urgency and audit reliance.
Operating effectiveness
Testing over a period, not a single point, establishes whether a control operated consistently. A control that passes once but fails intermittently still presents a real risk of misstatement.
Exception evaluation
Not every exception is a deficiency, but every exception requires evaluation to determine whether it indicates a control weakness or an isolated event. Unevaluated exceptions are an audit risk in themselves.
Quarterly trend
Comparing results across quarters reveals whether control reliability is improving, stable or degrading. A rising failure rate is an early-warning signal worth acting on before year-end.
How AuditPro Core Bridges the Gap
- Outcome capture: every test records a pass, exception or fail with supporting evidence attached at point of testing.
- Exception workflow: noted exceptions route for evaluation and disposition so none are left unresolved.
- Trend monitoring: results aggregate by quarter to expose deteriorating control reliability before it compounds.
- Audit-ready working papers: outcomes export with linked evidence, ready for internal audit files and AGSA reliance assessment.
Key Takeaways
- Distinguish passes, exceptions and failures; each drives different action.
- Test over the period to evidence consistent operating effectiveness.
- Evaluate every exception; unevaluated deviations are themselves a risk.
- Watch the quarterly trend to catch degrading reliability early.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.