What is the significance of project-level controls in construction auditing, and which controls should be tested?

• A. They ensure proper approval, recording, and monitoring of costs; test change-order approvals, cost allocations, vendor setup controls, and IT access controls.
• B. They focus only on payroll
• C. They replace entity-level controls
• D. They are primarily for long-term assets

Answer: (D)

Project-level controls are the checks and procedures applied to a specific construction project to ensure costs are properly approved, recorded, and monitored. They matter because a project generates many nuanced transactions—from change orders to vendor payments—that can drift from the budget if not tightly managed. When auditing, you look to see these project-specific processes are functioning as intended: change-order approvals to prevent unauthorized scope changes and unapproved cost additions, cost allocations that charge the right project and cost center, vendor setup controls to ensure only vetted suppliers are engaged, and IT access controls that restrict who can enter or modify project data and run project reports. These controls support the accuracy and reliability of project financials, and they complement, rather than replace, entity-level controls that apply across the organization. They are not focused solely on payroll, nor are they exclusively about long-term assets.