University of Maryland Global Campus

ACCT 436: Internal Auditing

A study guide to UMGC's ACCT 436, which covers internal audit standards, risk-based audit work, control deficiencies and audit data analytics.

Updated October 2026 · 5 min read

ACCT 436 at the University of Maryland Global Campus explores the consultative, risk-management role of the internal auditor.

According to UMGC, the course aims to identify the standards that govern internal auditors, explain internal audit processes and procedures, and assess control deficiencies. Topics include auditing standards, scope and responsibilities, ethics, controls, audit techniques and reporting.

A distinctive feature is the data side. UMGC states that the course uses data analytics tools such as Excel, Power BI, Tableau, ACL and IDEA.

Students who are comfortable with accounting rules can still find this hard, because internal audit is about judgment: deciding what could go wrong, how to test for it, and how to tell management in a way that leads to action.

Course at a Glance

ItemDetails
UniversityUniversity of Maryland Global Campus (UMGC)
Course codeACCT 436
Credits3
PrerequisiteACCT 311
Tools named by UMGCExcel, Power BI, Tableau, ACL, IDEA
Credit noteCredit for only one of ACCT 436, ACCT 498E or BMGT 498E
Typical workRisk assessments, control evaluations, data analysis tasks, audit findings and reports

What ACCT 436 Covers

AreaIn plain language
Standards and ethicsThe professional framework internal auditors follow, including independence, objectivity and confidentiality
Scope and responsibilitiesWhat internal audit covers, who it reports to and how it differs from external audit
Internal controlsHow organizations prevent and detect errors, and how auditors judge whether controls work
Audit techniquesPlanning, sampling, testing, interviews and analytical procedures
Data analyticsUsing software to test whole populations and spot exceptions
ReportingWriting findings and recommendations management can act on

Key Concepts Explained

The Professional Framework

Internal auditing is governed by the Institute of Internal Auditors (IIA). Its Global Internal Audit Standards set out requirements for purpose, ethics, governance, managing the function and performing engagements.

You will also meet the IIA's Three Lines Model, which separates management's ownership of risk from the independent assurance that internal audit provides.

Internal Control and COSO

Most control questions draw on the COSO Internal Control Integrated Framework, with five components: control environment, risk assessment, control activities, information and communication, and monitoring activities. A control deficiency exists when a control is missing or does not operate as designed.

Example: In a purchasing case, the same employee can create a new supplier and approve payments to it. That is a segregation of duties weakness in control activities. The risk is payment to a fictitious supplier. A sound recommendation is to split supplier set-up and payment approval between roles, and meanwhile run a data test comparing supplier bank details and addresses with employee records.

Audit Findings

A well-built finding usually states the criteria (what should happen), the condition (what you found), the cause, the effect or risk, and a recommendation. Writing in that order keeps reports clear and makes it easy for a reader to agree on action.

Sampling Versus Full-Population Testing

Traditional audit work tests a sample and draws conclusions about the whole population. Analytics tools such as ACL and IDEA make it practical to test every record instead, for example every payment in a year against the supplier master file.

Full-population testing finds specific exceptions rather than estimated error rates, but it creates a new task: deciding which exceptions are genuine problems and which have innocent explanations. Expect assignments to ask you to justify the approach you chose and to explain what your exceptions mean for the control you were testing.

Typical Assignments and How to Approach Them

Assignment typeWhat it testsHow to approach it
Risk assessmentPrioritizing what to auditRate likelihood and impact, then justify the top risks
Control evaluationDesign and operation of controlsMap each risk to a control, then to a test
Data analytics taskUsing tools on a datasetState the test, the filter used and what the exceptions mean
Audit reportCommunicating findingsUse criteria, condition, cause, effect, recommendation

Where Students Get Stuck

Study Tips for ACCT 436

How We Help with ACCT 436

Send the case, any dataset, the rubric and feedback from earlier work. A writer with audit knowledge prepares a model risk assessment or report, explains the reasoning behind each control test, or reviews your draft for clarity and logic. If fraud risk is the focus of your case, our ACCT 438 guide covers detection in more depth.

GradeEssays is independent of the University of Maryland Global Campus. Our work is for study and reference only: use it to learn the approach, then write and submit your own work in line with UMGC's academic integrity policy.

Every order is written from scratch, includes free revisions within the scope of your original request, and is refunded in full if it is late.

Get on Top of ACCT 436

Share the case, data file and instructor feedback. An accounting writer prepares a model audit analysis you can study and check against.

Start My ACCT 436 Help

Free revisions · Full refund if late · Written from scratch for your order

Frequently Asked Questions

What is the prerequisite for ACCT 436?

UMGC lists ACCT 311 as the prerequisite.

Which software is used in ACCT 436?

UMGC names Excel, Power BI, Tableau, ACL and IDEA as data analytics tools used in the course. Your class will specify which ones you need.

Is ACCT 436 the same as external auditing?

No. It focuses on internal audit's role in risk management, controls and improvement inside an organization.

Can I get credit for ACCT 436 and BMGT 498E?

UMGC allows credit for only one of ACCT 436, ACCT 498E or BMGT 498E.

How should I structure an audit finding?

A common structure is criteria, condition, cause, effect and recommendation, written in that order.

Can you check my control evaluation?

Yes. Send the case and your work; we check the logic of each risk, control and test and explain any gaps.