In an increasingly interconnected global economy, more companies are looking to expand their business operations abroad in new markets, with many companies expanding into China over the last decade.

With geopolitical tensions rising and many companies considering how to de-risk their entities, internal controls are becoming more important and require very careful consideration.

Here we set out the key things you need to know about setting up internal controls for your China operations.

What are Internal Controls?

Internal controls are accounting and auditing processes, policies and procedures a company implements to ensure the accuracy and reliability of financial reporting, to safeguard assets, and increase operational efficiency. They are a key component of an internal audit strategy.

By implementing internal controls, a company creates a framework for risk management and mitigation of risks, in both an operational and financial sense. Here’s a breakdown of internal controls:

Component	What it Covers	Why It Matters for Foreign Businesses in China
Control Environment	Integrity, ethical values, leadership tone, culture	Sets the tone for compliance and oversight in China’s business culture
Risk Assessment	Identifying, analysing, evaluating business risks	Helps foreign HQs anticipate Chinese-entity specific risks (e.g., chops misuse)
Control Activities	Policies, procedures, approvals, segregation of duties	Ensures daily operations follow corporate standards despite distance or local practices
Information & Communication	Accounting systems, reporting, timely communication	Supports HQ visibility into Chinese operations and links to reliable data
Monitoring Activities	Ongoing reviews, corrective actions, audits	Detects issues early, especially in a different regulatory and cultural context

The Crucial Components of a System of Internal Controls

To have a good system in place to manage risk, it is crucial to think about:

Control Environment. In order for an audit to be conducted effectively, it requires the support of everyone in the organization. It encompasses the integrity, ethical values, and competence of the people in the organization, as well as management’s commitment to the control framework. For any company with an entity in China, it is crucial that the top management take internal controls seriously, as the importance needs to filter down to the employees. Culturally, the way an audit is approached is generally different than the way it is approached in many Western countries.

Risk Assessment Process. This involves identifying, analyzing, and evaluating the various risks that a company faces. Understanding the potential risks allows for the development of controls to mitigate or manage them better.
Internal Control Activities. The company needs to then manage the actual implementation of policies and procedures that are put in place to mitigate risks and achieve the organization’s objectives. Examples of this can include the segregation of duties, approval processes, physical security measures, and IT controls.
Information and Communication. Companies need an accounting system that produces quality financial information, as effective communication of information both internally and externally is crucial for ensuring an audit is carried out correctly. This component ensures that relevant information is identified, captured, and communicated in a timely and accurate manner.
Monitoring Activities. All companies must ensure ongoing assessment of the internal control system’s effectiveness. It ensures that controls are operating as intended and identifies any problems or deficiencies that need to be addressed.

What Are the Benefits of Effective Internal Controls in China?

Reduced risk of errors and fraud. If internal controls are implemented correctly, they can significantly reduce the likelihood of errors and fraudulent activities.
Enhanced financial accuracy. Internal controls enhance the accuracy and reliability of financial statements, which in turn provides stakeholders with confidence in the organization financial reporting. This is especially relevant where the headquarters are based abroad, and the subsidiary is based in China.
Increase in operational efficiency. Generally, an internal audit can lead to greater operational efficiency, which can, in turn, save the company time and costs.
Increase in confidence. Once internal controls are properly implemented, stakeholder trust and confidence in the organization’s financial integrity increase.

What is the Auditor’s Role with Respect to Internal Controls?

In China, it is usually the external auditor’s responsibility to assess the effectiveness of internal controls. The auditor assesses whether controls and processes are correctly implemented.

In a Chinese context, evaluating internal controls often includes looking int:

Management of chops. Looking at who ‘keeps’ the company chops, approval processes to be followed, how the record of chopping is kept etc.,
Bank payments. Investigating who retains control and who approves payment (ensuring a separation of duties).
Reimbursement processes. Examining the implementation of a policy related to classification, evaluation, approval flows, etc.

Why Should You Ensure Your Internal Controls are Properly Implemented in China?

It is often difficult for companies with their hq outside China to maintain complete oversight of the entity in China. Aside from cultural differences, there are differences in work environments and work processes, which may result in mismanagement or misuse of internal powers, of which the headquarters may not have a full understanding.

In some cases, there are misused company checks, unauthorized payments, and incorrect reimbursement processes. To prevent such instances in your Chinese entity, implementing or reviewing internal controls is essential.

Internal controls in China must comply with regulations issued by the Ministry of Finance, addressing operational, financial reporting, and compliance risks through segregation of duties, authorization hierarchies, and audit trails. Weak controls invite audit findings and increase fraud risk; strong controls require investment in systems and training. MSA Asia designs and implements accounting in China control frameworks. Drop us a line.