Internal Control System

Internal Control System refers to the totality of organisational measures, rules, and controls within a company that ensure the proper, safe, and traceable execution of business processes.

Basics

Ein IKS unterstützt die Proper bookkeeping and the quality of Financial accounting. It lays down responsibilities, control mechanisms and processes to ensure that business transactions are recorded and processed correctly.

Controls can be organisational (e.g. the four-eyes principle), procedural (e.g. approval steps) or system-supported (e.g. role and authorisation concepts).

Legal framework

Legal regulations require a comprehensible organisation of bookkeeping. In connection with the GoBD is an IKS particularly relevant when invoices, bookings, and storage are carried out electronically.

Systematic classification in the compliance cluster

An internal control system effectively prevents errors, makes changes traceable, and clearly defines responsibilities.

Typical control areas

  • Voucher validation and approval processes
  • Account assignment and booking approvals
  • Voting and plausibility checks
  • Role and rights management in systems
  • Controls for process and system changes

Practical An internal control system is effective when controls are clearly described, responsibilities are defined, and implementation in daily operations is traceable.

Typical structure

  1. Process recording and definition of responsibilities
  2. Definition of suitable controls (preventive and/or detective)
  3. Documentation in processes and in the Process documentation
  4. Regular review and adjustment upon changes

Practical relevance

A functioning internal control system supports the quality of bookkeeping and facilitates structured preparation for a Company audit. In combination with a current Process documentation A coherent overall picture emerges from processes, systems, and controls.

Typical sources of error

  • Unclear responsibilities and missing approval rules
  • Controls are defined, but not documented or not implemented.
  • Excessively broad system rights without regular review
  • Process or system changes without traceable documentation

FAQ

Is a security clearing certificate mandatory?

A comprehensible organisation and control of bookkeeping processes are assumed. The scope and design should match the company's size and process complexity.

Does this also apply to smaller companies?

Yes. Even small businesses require appropriate organisational controls, such as clear responsibilities and authorisation rules.

How does IKS relate to GoBD?

GoBD-relevant processes (document processing, booking, archiving) should be designed to ensure that controls support traceability and auditability.

Conclusion

The internal control system is a central element of compliance in accounting. It creates structured processes, clear responsibilities, and traceable controls, particularly with digital bookkeeping.

Author the BAS editorial team Services pursuant to § 6 No. 3 and 4 StBerG, no tax or legal advice.

Brasser Accounting Solutions GmbH is a specialised accounting service provider and part of a corporate group with Quint GmbH (tax consultancy/auditing) and Service Place Årjäng AB (Swedish tax office). BAS exclusively performs services according to § 6 No. 3 and 4 StBerG and does not provide tax or legal advice.