AU-C § 315AICPA / FASB / IRScpaVerified 2026-11-12

AU-C § 315: Internal Control: Evaluating Design, Implementation, and Operating Effectiveness

Authoritative Rule Summary (AU-C § 315)

Under AU-C § 315 (AICPA / FASB / IRS), internal Control: Evaluating Design, Implementation, and Operating Effectiveness establishes the authoritative rules tested on the CPA Exam. Master the critical audit skill of evaluating internal control. VoraPrep verifies every threshold, worked table, and practice question below against the current CPA Exam blueprint.

Procedures to Understand Controls: The Auditor's Toolkit

ProcedureDescriptionExample
InquiryAsking questions of relevant personnel."Can you explain the process for approving a new vendor?"
ObservationWatching the control process being performed by client personnel.Watching an employee perform a bank reconciliation.
InspectionExamining documents, records, and reports for evidence of control performance.Reviewing a completed, signed purchase order for evidence of authorization.
WalkthroughTracing a single transaction from initiation to reporting.Following a sales transaction from the customer order to its inclusion in the general ledger. A walkthrough combines inquiry, observation, and inspection.
Test Yourself on AU-C § 315 in 30 Seconds (No Login)CPA Exam · hard

An entity's purchasing department places orders, receives goods, and approves invoices for payment—all performed by the same two employees. The auditor identifies this as a control deficiency. What additional factor is most critical in determining whether this deficiency escalates to a significant deficiency or a material weakness?

Worked Practitioner Scenario

The Walkthrough: A Powerful Combination Procedure

Walkthrough procedures are the single most effective way to confirm an auditor's understanding of a process and verify that controls have been implemented. By tracing one transaction through the entire system, the auditor can:

  1. 1. Confirm the understanding of the process flow. 2. Verify that controls identified are actually in place (implemented). 3. Assess the competence of the individuals performing the controls. 4. Evaluate the design effectiveness of controls in the context of the process.
  2. A walkthrough is not a test of operating effectiveness because it is typically limited to a single transaction. It confirms the control exists at a point in time.
A walkthrough is not a test of operating effectiveness because it is typically limited to a single transaction. It confirms the control exists at a point in time.
Exam Watchouts & Statutory Boundaries

Common CPA Exam Distractors on AU-C § 315

  • 1Use the mnemonic CRIME to remember the five components of internal control:
  • 2C - Control Environment: The "tone at the top." This is the foundation for all other components, providing discipline and structure. It encompasses management's integrity, ethical values, commitment to competence, and philosophy.
  • 3R - Risk Assessment: The entity's own process for identifying and analyzing business risks relevant to achieving its financial reporting objectives. The auditor assesses how management identifies, analyzes, and manages these risks.
  • 4I - Information and Communication: The systems, including the accounting system, used to capture, process, and report financial information. Communication involves providing an understanding of individual roles and responsibilities related to internal control.
  • 5M - Monitoring Activities: Management's ongoing or separate evaluations to ascertain whether the other four components of internal control are present and functioning effectively over time.

Frequently Asked Questions: AU-C § 315

What is the core rule under AU-C § 315 (Internal Control: Evaluating Design, Implementation, and Operating Effectiveness)?

Under AU-C § 315 (AICPA / FASB / IRS), internal Control: Evaluating Design, Implementation, and Operating Effectiveness establishes the authoritative rules tested on the CPA Exam. Master the critical audit skill of evaluating internal control. VoraPrep verifies every threshold, worked table, and practice question below against the current CPA Exam blueprint.

How is AU-C § 315 tested on the CPA Exam?

Use the mnemonic CRIME to remember the five components of internal control: C - Control Environment: The "tone at the top." This is the foundation for all other components, providing discipline and structure. It encompasses management's integrity, ethical values, commitment to competence, and philosophy.

Where can I practice CPA Exam questions on Internal Control: Evaluating Design, Implementation, and Operating Effectiveness?

Test yourself instantly with the free playable CPA Exam question on this page, or launch VoraPrep's full CPA Exam adaptive question bank, interactive lessons, and 1:1 exam simulator at voraprep.com/cpa.

Master AU-C § 315 Across the VoraPrep Platform

Related Statutory & Regulatory Rules

All Rules →