Internal controls can never be regarded as completely effective. Even if company personnel could design an ideal system, its effectiveness depends on the
◦ adequacy of the computer system.
◦ proper implementation by management.
◦ ability of the internal audit staff to maintain it.
◦ competency and dependability of the people using it.