Internal controls
Understand the role of internal controls, identify fraud risks and evaluate how controls mitigate those risks.
AAT Level 4 PAT · ATIC
Audit and Internal Controls
Evaluate internal controls and follow the audit process from governance, planning and risk assessment through evidence gathering and reporting.
Unit overview
Apply the knowledge in a professional context.
New Level 4 PAT qualificationThis page supports the AAT Level 4 Diploma for Professional Accounting Technicians, operational from 1 September 2026. Check that this is the qualification route shown in MyAAT or by your training provider.
ATIC combines the control environment within an organisation with the external audit and assurance process. Learners identify risks, evaluate controls, understand how those controls affect the audit approach and select procedures that provide sufficient appropriate evidence.
Use this page as a starting point for revision. Work through the topic areas, identify where confidence is lowest and combine independent practice with the downloads and events added for this unit.
Key topics
What to focus on in ATIC.
These summaries provide a revision map rather than a replacement for the current AAT qualification specification and your training-provider materials.
Audit and assurance framework
Understand assurance, regulation, professional ethics, corporate governance and the responsibilities of those involved.
Planning and risk assessment
Assess the entity, identify material risks and plan an audit response that addresses those risks.
Control evaluation and testing
Evaluate accounting systems and internal controls, then determine how control findings influence audit work.
Audit evidence and procedures
Apply assertions, sampling and substantive procedures to obtain sufficient and appropriate audit evidence.
Completion and reporting
Review findings, consider their implications and communicate conclusions through appropriate audit reporting.
How to revise this unit
- 1Use a risk-control-test-conclusion table when analysing a scenario.
- 2Link every proposed audit procedure to a specific assertion and source of evidence.
- 3Distinguish clearly between tests of controls and substantive procedures.
- 4Practise concise reporting that states the issue, evidence, implication and recommended action.
Common pitfalls
- !Naming a generic audit procedure without explaining how it addresses the identified risk.
- !Confusing management's responsibility for controls with the auditor's responsibility for the opinion.
- !Treating evidence as sufficient because there is a lot of it, without considering relevance and reliability.
Free revision posters
Revision posters for ATIC.
Posters published for this unit appear here automatically. Open a poster to view it online or download the PDF for personal study.
Learn live
Upcoming sessions for ATIC.
Published events matching this unit appear automatically. When no direct match exists, the page may show another Level 4 session.
ExamReady
ATIC practice questions and a timed mock, from 27 October.
This is independent revision support and is not produced, endorsed or approved by AAT. Always check the current AAT qualification specification, assessment information and your training-provider guidance.