What are the 4 types of controls?

The four types of control systems

What are the 4 types of controls?

How do you lead your organisation when today’s work environment is so competitive and complex? When you become responsible for leading an organisation, your most important leadership challenge will be enabling your organisation to deliver on its strategy while ensuring it remains sufficiently agile. This course will prepare you to tackle this challenge. You will examine what organisational culture is, the primary organisational structures, and what we mean by ‘systems’, before building on your foundational knowledge and taking a more strategic perspective. The structured learning activities that complement this course (video lectures, quizzes, discussion prompts and written assessments) will not only prepare you to take your organisation forward in a more strategic direction, but to make better decisions along the way.

View Syllabus

Value Chain, Organisational leadership, Organisational alignment, Change planning

From the lesson

Organisational control systems

What are systems for exactly? This can be quite a tricky question because it obviously depends on the particular system we are talking about. Yet, from a management perspective there is a straightforward general answer to this question: systems are there to control performance and risk. This week you will learn what this means exactly, and what the most important implications are for how you design your systems around your business strategy. You will learn to understand systems more broadly than just IT systems, and how to deploy them effectively to manage and control performance and risk. An important part of this involves deciding on the key indicators that you want to track, and how you want to report information that is strategically relevant. Too many business leaders drown in numbers to the point where they can't see the wood from the trees. This week is focused on helping you design systems that can keep you focused on seeing the wood instead of the trees.

Select a languageArabicEnglishFrenchGermanItalianRussianSpanishVietnameseptPt

There are two basic categories of internal controls – preventive and detective.  An effective internal control system will have both types, as each serves a different purpose.  As you perform routine processes, or when you are thinking of implementing a new procedure or process, it is important to ask the following questions to help determine the appropriate control:

  • What could go wrong?
  • What steps have been taken to ensure that something does not go wrong?
  • How can you verify that nothing went wrong?

The answers to these questions will enable you to better target the type of control that is needed.

Preventive Controls

Preventive controls aim to decrease the chance of errors and fraud before they occur, and often revolve around the concept of separation of duties. From a quality standpoint, preventive controls are essential because they are proactive and focused on quality.

Examples of preventive controls include:

  • Separation of duties
  • Pre-approval of actions and transactions (such as a Travel Authorization)
  • Access controls (such as passwords and Gatorlink authentication)
  • Physical control over assets (i.e. locks on doors or a safe for cash/checks)
  • Employee screening and training (such as the PRO3 Series to increase employee knowledge)

Detective Controls

Detective controls are designed to find errors or problems after the transaction has occurred.  Detective controls are essential because they provide evidence that preventive controls are operating as intended, as well as offer an after-the-fact chance to detect irregularities.

Examples of detective controls include:

  • Monthly reconciliations of departmental transactions
  • Review organizational performance (such as a budget-to-actual comparison to look for any unexpected differences)
  • Physical inventories (such as a cash or inventory count)

Last Reviewed

04/30/2022: reviewed content

Training

PRO303: Internal Controls at UF

University Controller’s Office: (352) 392-1321

After designing a strategy for your small business, you will need to track whether your desired results occurred as expected. Strategic controls help you do this by analyzing your company and its ability to maximize its strengths and opportunities. The four types of strategic control are premise control, implementation control, special alert control and strategic surveillance. Each one provides a different perspective and method of analysis to maximize the effectiveness of your business strategy.

Your business strategy is based on an assumed premise of how things will occur in the future. Premise controls allow you to examine whether this assumption still holds true once you actually put your ideas into action. Premises may be affected by environmental factors such as inflation, interest rates and social changes or by industry factors such as competitors, suppliers and barriers to entry. These controls will help you recognize changes in the premise so you can adapt your strategy accordingly.

Once you design a strategy for your business, you will need to implement it. As you take the steps necessary to put your plan into action, use implementation controls to ensure no adjustments to your strategy are necessary. Two basic types of implementation controls are monitoring strategic thrusts and doing milestone reviews. The former means you analyze the tactics you're using to gain market share. The latter allows you to conduct a full-scale assessment of your business at designated points in your strategy.

You will need mechanisms in place to assess the position of your business in the case of sudden events, such as natural disasters, product recalls or market spikes. Special alert controls allow you to reconsider the relevancy of your strategy in light of these new events. Prepare how you will handle these special alerts with procedures to be followed, priorities to keep and tools to be used.

As a small-business owner, you need to protect your business from external threats that may hinder the success of your strategy. Strategic surveillance controls allow you to monitor multiple sources for these threats. Continually safeguard your strategy by following trade journals, attending conferences and keeping awareness of industry trends to meet these risks as they arise.

  1. Know the difference between strategic and operational controls.
  2. Understand the different types of controls.
  3. Be able to differentiate between financial and nonfinancial controls.

Figure 15.4

What are the 4 types of controls?

Controls allow you to align the pieces with the big picture.

Recognizing that organizational controls can be categorized in many ways, it is helpful at this point to distinguish between two sets of controls: (1) strategic controls and (2) management controls, sometimes called operating controls (Harrison & St. John, 2002).

Imagine that you are the captain of a ship. The strategic controls make sure that your ship is going in the right direction; management and operating controls make sure that the ship is in good condition before, during, and after the voyage. With that analogy in mind, strategic control is concerned with tracking the strategy as it is being implemented, detecting any problem areas or potential problem areas suggesting that the strategy is incorrect, and making any necessary adjustments (Venkataraman & Saravathy, 2001). Strategic controls allow you to step back and look at the big picture and make sure all the pieces of the picture are correctly aligned.

Ordinarily, a significant time span occurs between initial implementation of a strategy and achievement of its intended results. For instance, if you wanted to captain your ship from San Diego to Seattle you might need a crew, supplies, fuel, and so on. You might also need to wait until the weather lets you make the trip safely! Similarly, in larger organizations, during the time you are putting the strategy into place, numerous projects are undertaken, investments are made, and actions are undertaken to implement the new strategy. Meanwhile, the environmental situation and the firm’s internal situation are developing and evolving. The economy could be booming or perhaps falling into recession. Strategic controls are necessary to steer the firm through these events. They must provide some means of correcting direction on the basis of intermediate performance and new information.

Operational control, in contrast to strategic control, is concerned with executing the strategy. Where operational controls are imposed, they function within the framework established by the strategy. Normally these goals, objectives, and standards are established for major subsystems within the organization, such as business units, projects, products, functions, and responsibility centers (Mattews, 1999). Typical operational control measures include return on investment, net profit, cost, and product quality. These control measures are essentially summations of finer-grained control measures. Corrective action based on operating controls may have implications for strategic controls when they involve changes in the strategy.

It is also valuable to understand that, within the strategic and operational levels of control, there are several types of control. The first two types can be mapped across two dimensions: level of proactivity and outcome versus behavioral. The following table summarizes these along with examples of what such controls might look like.

Proactivity can be defined as the monitoring of problems in a way that provides their timely prevention, rather than after the fact reaction. In management, this is known as feedforward control; it addresses what can we do ahead of time to help our plan succeed. The essence of feedforward control is to see the problems coming in time to do something about them. For instance, feedforward controls include preventive maintenance on machinery and equipment and due diligence on investments.

Table 15.1 Types and Examples of Control

Control Proactivity Behavioral control Outcome control
Feedforward control Organizational culture Market demand or economic forecasts
Concurrent control Hands-on management supervision during a project The real-time speed of a production line
Feedback control Qualitative measures of customer satisfaction Financial measures such as profitability, sales growth

The process of monitoring and adjusting ongoing activities and processes is known as concurrent control. Such controls are not necessarily proactive, but they can prevent problems from becoming worse. For this reason, we often describe concurrent control as real-time control because it deals with the present. An example of concurrent control might be adjusting the water temperature of the water while taking a shower.

Finally, feedback controls involve gathering information about a completed activity, evaluating that information, and taking steps to improve the similar activities in the future. This is the least proactive of controls and is generally a basis for reactions. Feedback controls permit managers to use information on past performance to bring future performance in line with planned objectives.

In this latter sense, all these types of control function as a feedback mechanism to help leaders and managers make adjustments in the strategy, as perhaps is reflected by changes in the planning, organizing, and leading components. This feedback loop is characterized in the following figure.

Figure 15.5 Controls as Part of a Feedback Loop

What are the 4 types of controls?

Why might it be helpful for you to think of controls as part of a feedback loop in the P-O-L-C process? Well, if you are the entrepreneur who is writing the business plan for a completely new business, then you would likely start with the planning component and work your way to controlling—that is, spell out how you are going to tell whether the new venture is on track. However, more often, you will be stepping into an organization that is already operating, and this means that a plan is already in place. With the plan in place, it may be then up to you to figure out the organizing, leading, or control challenges facing the organization.

Controls also differ depending on what is monitored, outcomes or behaviors. Outcome controls are generally preferable when just one or two performance measures (say, return on investment or return on assets) are good gauges of a business’s health. Outcome controls are effective when there’s little external interference between managerial decision making on the one hand and business performance on the other. It also helps if little or no coordination with other business units exists.

Behavioral controls involve the direct evaluation of managerial and employee decision making, not of the results of managerial decisions. Behavioral controls tie rewards to a broader range of criteria, such as those identified in the Balanced Scorecard. Behavioral controls and commensurate rewards are typically more appropriate when there are many external and internal factors that can affect the relationship between a manager’s decisions and organizational performance. They’re also appropriate when managers must coordinate resources and capabilities across different business units.

Finally, across the different types of controls in terms of level of proactivity and outcome versus behavioral, it is important to recognize that controls can take on one of two predominant forms: financial and nonfinancial controls. Financial control involves the management of a firm’s costs and expenses to control them in relation to budgeted amounts. Thus, management determines which aspects of its financial condition, such as assets, sales, or profitability, are most important, tries to forecast them through budgets, and then compares actual performance to budgeted performance. At a strategic level, total sales and indicators of profitability would be relevant strategic controls.

Without effective financial controls, the firm’s performance can deteriorate. PSINet, for example, grew rapidly into a global network providing Internet services to 100,000 business accounts in 27 countries. However, expensive debt instruments such as junk bonds were used to fuel the firm’s rapid expansion. According to a member of the firm’s board of directors, PSINet spent most of its borrowed money “without the financial controls that should have been in place (Woolley, 2001).” With a capital structure unable to support its rapidly growing and financially uncontrolled operations, PSINet and 24 of its U.S. subsidiaries eventually filed for bankruptcy (PSINet, 2001). While we often think of financial controls as a form of outcome control, they can also be used as a behavioral control. For instance, if managers must request approval for expenditures over a budgeted amount, then the financial control also provides a behavioral control mechanism as well.

Increasing numbers of organizations have been measuring customer loyalty, referrals, employee satisfaction, and other such performance areas that are not financial. In contrast to financial controls, nonfinancial controls track aspects of the organization that aren’t immediately financial in nature but are expected to lead to positive performance outcomes. The theory behind such nonfinancial controls is that they should provide managers with a glimpse of the organization’s progress well before financial outcomes can be measured (Ittner & Larcker, 2003). And this theory does have some practical support. For instance, GE has found that highly satisfied customers are the best predictor of future sales in many of its businesses, so it regularly tracks customer satisfaction.

Organizational controls can take many forms. Strategic controls help managers know whether a chosen strategy is working, while operating controls contribute to successful execution of the current strategy. Within these types of strategy, controls can vary in terms of proactivity, where feedback controls were the least proactive. Outcome controls are judged by the result of the organization’s activities, while behavioral controls involve monitoring how the organization’s members behave on a daily basis. Financial controls are executed by monitoring costs and expenditure in relation to the organization’s budget, and nonfinancial controls complement financial controls by monitoring intangibles like customer satisfaction and employee morale.

References

Harrison, J. S., & St. John, C. H. (2002). Foundations in Strategic Management (2nd ed., 118–129). Cincinnati, OH: South-Western College.

Ittner, C., & Larcker, D. F. (2003, November). Coming up short on nonfinancial performance measurement. Harvard Business Review, 2–8.

Matthews, J. (1999). Strategic moves. Supply Management, 4(4), 36–37.

PSINet, retrieved January 30, 2009, from PSINet announces NASDAQ delisting. (2001, June 1). http://www.psinet.com.

Venkataraman, S., & Sarasvathy, S. D. (2001). Strategy and entrepreneurship: Outlines of an untold story. In M. A. Hitt, R. E. Freeman, & J. S. Harrison (Eds.), Handbook of strategic management (650–668). Oxford: Blackwell.

Woolley, S. (2001, May). Digital hubris. Forbes, 66–70.