What is the difference between a control objective and a control activity?

What is the difference between a control objective and a control activity?

• A. A control objective states what the control should achieve; a control activity is the action performed to achieve it.
• B. A control objective is the action taken; a control activity defines the target outcome.
• C. A control objective is only for governance; a control activity is for operations.
• D. A control objective is the ongoing monitoring; a control activity is the reporting.

Answer: (A)

In internal controls, the target you want to achieve is the control objective, while the concrete steps you take to achieve that target are the control activities. The idea is to separate the aim from the actions used to meet it. For a control objective, you specify the outcome the control is intended to deliver—such as ensuring purchases are properly authorized and recorded, so spending is controlled and accurate. The control activities are the actual actions that enforce that objective—like requiring supervisor approval for high-value purchases, using a approved vendor list, performing three-way matching of orders, invoices, and receipts, and timely reconciliation. The correct statement captures this distinction: the objective states what the control should achieve, and the activity is the action performed to achieve it. The other options mix up the roles (action versus outcome) or inappropriately separate governance from operations or monitoring from reporting, which isn’t how controls are defined.

In internal controls, the target you want to achieve is the control objective, while the concrete steps you take to achieve that target are the control activities. The idea is to separate the aim from the actions used to meet it.

For a control objective, you specify the outcome the control is intended to deliver—such as ensuring purchases are properly authorized and recorded, so spending is controlled and accurate. The control activities are the actual actions that enforce that objective—like requiring supervisor approval for high-value purchases, using a approved vendor list, performing three-way matching of orders, invoices, and receipts, and timely reconciliation.

The correct statement captures this distinction: the objective states what the control should achieve, and the activity is the action performed to achieve it. The other options mix up the roles (action versus outcome) or inappropriately separate governance from operations or monitoring from reporting, which isn’t how controls are defined.