US · guidance
CMS Pub. 100-06, ch. 7, § 10.2.1
Definition and Objectives
Internal controls are the checks and balances that ensure that operational objectives are carried out as
planned in the most effective and efficient manner possible. We should not look upon these controls as
separate specialized systems, but as integral parts of each system that management uses to accomplish the
objectives of the Medicare program. In this regard internal controls are not just financial tools that safeguard
assets, but are tools that are of vital importance to day-to-day programmatic and administrative operations as
well. Internal control should be the first thought in CMS' oversight process. That is, can we be sure that
there are adequate internal controls in place and operating effectively for the process we are evaluating?
Internal controls are an integral part of an organization's management to provide reasonable assurance that
the following objectives are being achieved:
• Effectiveness and efficiency of operations;
• Reliability of reporting; and
• Compliance with applicable laws and regulations
Internal control also serves as the first line of defense in safeguarding assets and preventing and detecting
errors and fraud. In short, internal control, which is synonymous with management control, helps program
managers achieve desired results through effective stewardship of resources.
End Section 10.2.1 – Definition and Objectives: Back to Table of Contents
History
(Rev. 308, Issued: 10-26-18 Effective: 09- 01- 18, Implementation: 11-27-18)
Provenance
- Source
- cms.gov
- Retrieved
- 2026-08-25
- Edition
- iom-2026-08-25
- Content hash
3265bdaa0494fd9e8d8fa2907d96a3d4766f89589013edb9614dc4f15765fc78
The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.
Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.