by JP Russell
When standards require control, both management and auditors need to know the elements that must exist for there to be control. It is management’s job to establish and implement controls and the auditor’s job to determine if there is conformance to requirements. In the absence of specific guidance in performance standards (required procedures, records, or schedules) it is essential that auditors and management know when controls are adequate.