Which of the following is true regarding the auditing of soft controls?

Question

Options

• ASoft controls should not be audited due to subjectivity issues.
• BThere are no effective tools to use for audits of soft controls.
• CTraditional testing is less suitable for soft controls assessment.
• DManagement input is the best source for assessment of soft controls.

• A
  12% (6)
• B
  8% (4)
• C
  76% (37)
• D
  4% (2)

Explanation

Soft controls - such as organizational culture, ethical tone, leadership behavior, and employee morale - are inherently qualitative and behavioral, which makes traditional audit techniques (document inspection, transaction testing, reconciliations) poorly suited for assessing them. Instead, auditors rely on surveys, interviews, focus groups, and behavioral observation, which is why C is correct: traditional testing methods simply don't map well to these intangible factors.

Why the distractors fail:

• A is wrong because soft controls can and should be audited - they are a recognized component of internal control frameworks (e.g., COSO's control environment).
• B is wrong because effective tools do exist: surveys, self-assessments, structured interviews, and culture assessments are all established methods.
• D is wrong because management input alone introduces bias and conflict of interest; assessments should draw from multiple stakeholder perspectives, including staff at all levels.

Memory tip: Think of soft controls as "people controls" - you can't test a feeling with a spreadsheet. When you see "soft controls," immediately associate them with qualitative methods (surveys, interviews) rather than traditional transactional testing.

No community discussion yet for this question.