📖 Kernbegrippe & Teorie
📖 Key Concepts & Theory
📜 Definisie
Interne Beheer verwys na die stelsel van beleide, prosedures en kontroles wat deur die eienaar en senior bestuur ingestel en gemoniteer word. Dit word ontwerp om te verseker dat die besigheid se doelwitte bereik word, bates beskerm word, en dat reëls streng nagekom word.
Dit word "interne" beheer genoem omdat dit van binne die onderneming deur eienaars en bestuur beheer word — nie deur 'n eksterne ouditeur nie. Sonder hierdie reëls sal daar chaos wees.
Net soos verkeersreëls orde op die pad verseker, beskerm interne beheer 'n besigheid se bates en geld teen chaos en diefstal. Elke prosedure is soos 'n verkeerslig wat die besigheid se geld in die regte rigting stuur.
🏢 Afdeling A: Interne Besigheidsbeheermaatreëls (Algemene Doelwitte)
- Beskerming van bates: Beveilig eiendom teen diefstal, bedrog, skade en foute.
- Ekonomiese doeltreffendheid: Verseker dat hulpbronne ekonomies aangewend word — geen vermorsing van tyd of geld nie.
- Beleidsnakoming: Alle werknemers hou streng by interne reëls, riglyne en regulasies.
- Waardes en Norme: Alle werknemers respekteer die onderneming se etiese waardes.
📊 Afdeling B: Interne Rekeningkundige Beheermaatreëls
- Akkuraatheid van rekords: Finansiële inligting en boekhourekords 100% akkuraat, betroubaar en betyds opgeteken.
- Inkomstebeheer: Alle inkomste wat verdien is, werklik ontvang en korrek geboekstaaf.
- Uitgawebestuur: Alle uitgawes en betalings wetlik geregverdig en behoorlik gemagtig.
- Laste-opvolging: Krediteure en ander skuld betyds betaal om rente te vermy.
- Fout- en misdaaddeteksie: Witboordjiemisdaad, bedrog, diefstal en foute vinnig opgespoor en reggestel.
| Tipe | Wat dit doen | Voorbeeld |
|---|---|---|
| 1. Voorkomend | Stop foute voordat dit plaasvind. Dien as afskrikmiddel. | Slegs gemagtigde personeel kry toegang tot bankrekeninge. Sekuriteitswagte of alarms. |
| 2. Opsporend | Identifiseer foute nadat dit gebeur het. | Versoening van die Kontantbetalingsjoernaal met die Bankstaat. Brandalarms of videokameras. |
| 3. Regstellend | Stel die nadelige gevolge onmiddellik reg. | Outomatiese sprinkelstelsel wat brand blus sodra dit ontdek word. |
Leerders verwar dikwels Voorkomend en Opsporend. Onthou: Voorkomend = VOOR die fout (stop dit); Opsporend = NA die fout (vind dit). 'n Kamera wat opneem is opsporend (nie voorkomend nie), maar 'n kamera se sigbare teenwoordigheid kan ook as voorkomend dien.
| # | Komponent | Verduideliking |
|---|---|---|
| 1 | Interne Beheerkultuur | Die ingesteldheid van die onderneming teenoor beheer. Die HUB/eienaar moet 'n kultuur skep waar almal die reëls as belangrik beskou. |
| 2 | Risikobepaling | Die eienaar identifiseer deurlopend scenario's wat die besigheid kan verhinder om doelwitte te bereik (bv. wisselkoerse, risikoareas). |
| 3 | Prestasiemeting | Die onderneming meet deurlopend hoe doeltreffend die beheermaatreëls werk en werk dit op. |
| 4 | Inligtingstelsels en Kommunikasie | Doeltreffende stelsels (soos rekeningkundige sagteware) stoor data korrek. Formele kommunikasie hou werknemers ingelig. |
| 5 | Beheeraktiwiteite | Die spesifieke daaglikse beleide en prosedures oor kontant, voorraad en bates. |
💡 Bedrog vs. Fout
Bedrog verskil van 'n gewone fout omdat daar by bedrog 'n duidelike bedoeling (opset) is om misdaad te pleeg en toe te smeer. Bedrog is krimineel strafbaar in 'n geregshof.
Vir bedrog om plaas te vind, moet al drie die volgende elemente teenwoordig wees:
⚠️ Die Bedrog-Driehoek
Ontstaan wanneer 'n werknemer alleen werk of wanneer daar swak of geen kontrole oor sy/haar werk is nie. Swak interne kontrole skep die geleentheid.
Finansiële of persoonlike druk wat 'n persoon dwing om misdaad te oorweeg. Bv. hoë skuld, lae inkomste, onrealistiese besigheidsdoelwitte om bonus te kry.
Die innerlike regverdiging wat die persoon uitdink. Bv. "Ek word te min betaal, so ek help maar myself" of "Ek leen net die geld vir 'n kort rukkie."
| # | Bousteenn | Verduideliking | Voorbeeld |
|---|---|---|---|
| 1 | Verdeling van Pligte | Die stappe van 'n taak word tussen verskillende werknemers verdeel sodat een persoon se werk 'n ander kontroleer. | Jake koop goedere op krediet; Maria betaal daarvoor. Verminder diefstal behalwe as samespanning. |
| 2 | Verantwoordelikheid en Aanspreeklikheid | Een spesifieke persoon is verantwoordelik vir 'n spesifieke bate of stap. As iets wegraak, is daardie persoon aanspreeklik. | Andile is die enigste een met die sleutel vir die kleinkas. |
| 3 | Behoorlike Dokumentering | Alle transaksies op vooraf-nommerde dokumente vasgelê om 'n duidelike spoor (audit trail) te laat. | Vooraf-genommerde kwitansies, fakture en bestellings. |
| 4 | Behoorlike Magtiging | Ten minste een gemagtigde/senior persoon moet toestemming gee voordat 'n transaksie plaasvind. | Bestuurder teken salarislys voordat dit uitbetaal word. |
| 5 | Fisiese Veilige Bewaring | Bates en dokumente fisies beveilig in kluise, vuurvaste brandkluise of geslote kaste. | Kontant in 'n geslote kluis; toegangskaarte beperk. |
| 6 | Onafhanklike Kontrole | Gereelde, onverwagte toetse deur bestuur of opsiener om prosedures te toets. | Bestuurder oudit willekeurig 'n kassier se daaglikse rekords. |
| 7 | Rekenaarsertifikate en Rugsteun | Rekenaarwerk gereeld gerugsteun en op 'n ander plek bewaar. Gekwalifiseerde personeel aangestel. | Daaglikse rugsteun op 'n wolkstelsel buite die perseel. |
| 8 | Personeelrotasie en Verpligte Verlof | Werknemers se take wissel (bv. elke 6 maande) en hulle neem jaarlikse verlof. Plaasvervanger ontdek dikwels weggesteekte bedrog. | Kassier neem verlof; plaasvervanger ontdek kontanttekort. |
💵 Kontantbeheer — Die Goue Reëls
- Ontvangste: Alle kontant dadelik in die KOJ aangeteken; geld van vandag word die volgende dag gebank.
- Betalings: EFO-betalings deur topbestuur goedgekeur (nooit boekhouer alleen nie); blanko magtigs verbied; groot bedrae vereis twee handtekeninge; fakture word as "Betaal" gestempel met datum en EFO-nommer.
- Kleinkas: In geslote kluis; slegs kleinkassier het toegang; kleinkasbewys vir elke betaling; werk op die voorskotstelsel (imprest system) — presiese bedrag spandeer word aangevul.
- Bankversoening: Kontantbetalingsjoernaal maandeliks met bankstaat versoen.
📦 Voorraadbeheer
- Bestellings: Gedrukte, opeenvolgende bestelnommers; elke bestelling deur departementshoof geteken.
- Ontvangs: Goedere fisies getel en teen afleweringsbriewe nagegaan voor ondertekening; goedere-ontvang-nota ingevul.
- Sekuriteit: Alle personeel deur dieselfde uitgang; sakke deursoek; kameras, alarms en plastiekskyfies (tags) op voorraad.
👤 Lone en Salarisse
- Elke werknemer het 'n fisiese personeellêer met goedgekeurde salaris en aftrekkings.
- Klokkaarte vir daaglikse in- en uitklok; tydskedules deur direkte hoof geteken.
- Salarisse direk via EFO inbetaal. Die werknemersregister gereeld nagegaan om spookwerkers (fiktiewe werknemers) uit te skakel.
| Kenmerk | Interne Oudit | Eksterne Oudit |
|---|---|---|
| Diensverhouding | Werknemer van die maatskappy | Onafhanklik — NIE 'n werknemer nie |
| Hoofdoel | Nagaan van interne beheer, risikobestuur en wetlike nakoming. Aanbevelings maak. | Formele, onafhanklike mening gee oor of Finansiële State billik en betroubaar is. |
| Rapporteer aan | Bestuur / HUB | Aandeelhouers, publiek, bank, regulatoriese liggame |
| Sleutelwoord | Aanbevelings | Onafhanklikheid & Mening |
🤝 Vier Etiese Doelwitte vir Volhoubaarheid
- Personeel regverdig behandel sodat hulle lojaal is en hard werk.
- Lojale kliëntebasis opbou deur die beste diens te lewer.
- Die gemeenskap ondersteun en opbou.
- Na die omgewing omsien — geen lug- of waterbesoedeling nie.
Die eienaar verskaf aan elke werknemer 'n skriftelike etiese kode wat duidelike riglyne oor aanvaarbare gedrag gee en bedrog uitskakel.
⭐ Onthou vir die Eksamen
- Bedrog = Bedoeling + Geleentheid + Druk + Rasionalisasie — al drie elemente van die driehoek moet teenwoordig wees.
- Verdeling van Pligte is die kragtigste wapen teen bedrog — een persoon kan nie 'n transaksie alleenhandig beheer nie.
- Die Algemene Joernaal is hoë-risiko: elke inskrywing moet deur die eienaar of rekenmeester geteken word.
- Spookwerkers word uitgeskakel deur die werknemersregister gereeld teen fisiese personeellêers na te gaan.
- Verpligte verlof is 'n opsporingsmeganisme — plaasvervanger ontdek dikwels weggesteekte bedrog.
- Interne ouditeur = werknemer wat aanbeveel; Eksterne ouditeur = onafhanklik wat 'n formele mening gee.
📜 Definition
Internal Control refers to the entire system of policies, procedures, and checks established and monitored by the owner and senior management. It is designed to ensure that business goals are met, assets are protected, and rules are adhered to.
It is called "internal" control because it is managed from within the business by its own leadership — not by an independent external auditor. Without these systems, activities occur randomly with no guarantee of success.
Just as traffic laws ensure order on the road, internal control protects a business's assets and money from chaos and theft. Every procedure is like a traffic light guiding the business's money in the right direction.
🏢 Section A: Internal Business Controls (General Objectives)
- Protection of Assets: Safeguard business property against theft, fraud, damage, and errors.
- Economic Efficiency: Ensure resources are used economically — no waste of time or money.
- Policy Adherence: All employees comply strictly with internal rules, guidelines, and regulations.
- Values and Norms: All employees respect the business's ethical values.
📊 Section B: Internal Accounting Controls
- Accuracy of Records: Financial information and bookkeeping records are 100% accurate, reliable, and captured on time.
- Income Control: All earned income is actually received and correctly recorded.
- Expense Management: All expenses and payments are legitimate and properly authorized.
- Liability Management: Creditors and other obligations are paid on time to avoid interest charges.
- Error and Crime Detection: White-collar crimes, fraud, theft, and errors are detected and corrected quickly.
| Type | What it does | Example |
|---|---|---|
| 1. Preventive | Stops errors before they occur. Acts as a deterrent. | Only authorized staff access bank accounts. Security guards or alarms. |
| 2. Detective | Identifies errors after they have occurred. | Reconciling Cash Payments Journal with Bank Statement. Smoke alarms or CCTV cameras. |
| 3. Corrective | Immediately corrects the negative consequences of an event. | Automatic fire sprinkler system that activates when a fire is detected. |
Learners often confuse Preventive and Detective. Remember: Preventive = BEFORE the error (stops it); Detective = AFTER the error (finds it). A recording camera is detective (not preventive), but its visible presence can also serve as a deterrent (preventive).
| # | Component | Explanation |
|---|---|---|
| 1 | Internal Control Culture | The mindset of the organization towards control. The CEO/owner must create a culture where everyone treats rules as important. |
| 2 | Risk Assessment | The owner continuously identifies scenarios that could prevent the business from reaching its goals (e.g. exchange rates, high-risk areas). |
| 3 | Performance Measurement | The business continuously measures how effectively the control measures are working and updates them. |
| 4 | Information Systems and Communication | Effective systems (like accounting software) store data correctly. Formal communication keeps employees informed. |
| 5 | Control Activities | The specific daily policies and procedures covering cash, inventory, and assets. |
💡 Fraud vs. Error
Fraud differs from an accidental error because fraud involves a deliberate intent to deceive and cover up a crime. Fraud is a criminal offence punishable in a court of law.
For fraud to occur, all three of the following elements must be present:
⚠️ The Fraud Triangle
Arises when an employee works unsupervised or when controls are weak or absent. Weak internal control creates the opportunity.
Financial or personal pressure driving a person to consider crime. E.g. high debt, low income, unrealistic targets to earn a bonus.
The internal justification the person invents. E.g. "I am underpaid so I deserve this" or "I am just borrowing it for a short time."
| # | Building Block | Explanation | Example |
|---|---|---|---|
| 1 | Division of Duties | Steps of a task are divided among different employees so one person's work checks another's. | Jake orders goods on credit; Maria processes the payment. Reduces fraud unless collusion occurs. |
| 2 | Responsibility and Accountability | One specific person is responsible for a specific asset or step. If something disappears, that person is accountable. | Andile is the only one with the key to the petty cash box. |
| 3 | Proper Documentation | All transactions recorded on pre-numbered documents to leave a clear audit trail. | Pre-numbered receipts, invoices, and purchase orders. |
| 4 | Proper Authorization | At least one senior/authorized person must approve a transaction before it occurs. | Manager signs payroll before salaries are released. |
| 5 | Physical Safekeeping | Assets and documents physically secured in safes, fireproof vaults, or locked cabinets. | Cash in a locked safe; restricted access cards. |
| 6 | Independent Checks | Regular, unannounced tests by management or a supervisor to verify procedures. | Manager randomly audits a cashier's daily records. |
| 7 | Computer Backups and Qualifications | Computer work backed up regularly and stored off-site. Qualified staff appointed. | Daily backup to a cloud system off-site. |
| 8 | Staff Rotation and Mandatory Leave | Employees rotate tasks (e.g. every 6 months) and take annual leave. Replacement often discovers hidden fraud. | Cashier takes leave; replacement discovers cash shortage. |
💵 Cash Controls — The Golden Rules
- Receipts: All cash recorded immediately in the CRJ; cash collected today is banked the very next day.
- Payments: EFTs authorized by top management (never the bookkeeper alone); signed blank authorizations are strictly illegal; large amounts require two signatures; invoices stamped "Paid" with date and EFT number.
- Petty Cash: Kept in a locked safe; only the petty cashier has access; petty cash voucher for every payment; operates on the advance system (imprest system) — exact amount spent is replenished.
- Bank Reconciliation: Cash Payments Journal reconciled monthly against bank statement.
📦 Inventory Controls
- Ordering: Pre-numbered, sequential order books; every order signed by department head.
- Receiving: Goods physically counted and verified against delivery notes before signing; goods received note completed.
- Security: All staff exit through one door; bags searched; cameras, alarms, and security tags on stock.
👤 Wages and Salaries
- Every employee has a physical personnel file with approved salary and deductions.
- Clock cards for daily clocking-in and out; timesheets signed by direct manager.
- Salaries paid directly via EFT. Employee register regularly checked to eliminate ghost workers (fictitious employees).
| Feature | Internal Audit | External Audit |
|---|---|---|
| Employment | Employee of the company | Independent — NOT an employee |
| Main purpose | Review internal controls, risk management, and legal compliance. Make recommendations. | Give a formal, independent opinion on whether Financial Statements are fair and reliable. |
| Reports to | Management / CEO | Shareholders, public, bank, regulatory bodies |
| Key word | Recommendations | Independence & Opinion |
🤝 Four Ethical Objectives for Sustainability
- Treat employees fairly so that they are loyal and work hard.
- Build a loyal customer base by delivering the best service.
- Support and build the community.
- Take care of the environment — no air or water pollution.
The owner provides every employee with a written Code of Ethics that gives clear guidelines on acceptable behavior and eliminates loopholes for fraud.
⭐ Remember for the Exam
- Fraud = Intent + Opportunity + Pressure + Rationalization — all three elements of the triangle must be present.
- Division of Duties is the strongest weapon against fraud — one person cannot single-handedly control a transaction.
- The General Journal is high-risk: every entry must be signed by the owner or accountant.
- Ghost workers are eliminated by regularly checking the employee register against physical personnel files.
- Mandatory leave is a detection mechanism — replacements often discover hidden fraud.
- Internal auditor = employee who recommends; External auditor = independent and gives a formal opinion.
🖼️ Infografiek
🖼️ Infographic