ASC 842 Internal Control Framework: Comprehensive Guide

Understanding the ASC 842 Internal Control Framework

ASC 842, the new lease accounting standard, changed how companies recognize and report lease information. After adoption, keeping up lease accounting compliance takes a strong internal control environment. So controllers, accounting managers and auditors alike need to know ASC 842 internal controls. They also need to put them in place.

The framework is the set of controls over how leases are identified, abstracted, measured, recorded and disclosed. It also covers how each of those steps is evidenced.

Weak controls can lead to material misstatements, audit qualifications and restatements. Those carry real financial and reputational risk. Managing that risk means you design, put in place and monitor controls over the whole lease lifecycle.

For a complete breakdown, see our lease accounting guide.

Q: What is the ASC 842 internal control framework?

A: The ASC 842 internal control framework refers to the comprehensive system of policies, procedures, and practices over lease transactions. That system is designed to ensure accurate and complete identification, measurement, and reporting of those transactions in accordance with ASC 842. This framework aims to mitigate risks associated with lease accounting, including improper classification, measurement errors, and inadequate disclosures, thereby safeguarding financial statement integrity.

How Auditors Evaluate Lease Accounting Controls

Auditors approach ASC 842 by focusing on what is complex and prone to misstatement. They want assurance that management has effective controls over the whole lease accounting process. That covers not just the initial adoption, but ongoing compliance as new leases are signed and existing ones are modified.

A top concern for auditors is the completeness assertion: are all the leases that belong on the books really there? That takes rigorous lease identification testing.

🚨 Critical: One major failure point is an incomplete population of leases. It hits the completeness assertion directly and can lead to material financial statement errors. Grant Thornton¹ calls ensuring a complete population “a heavy lift” for companies. It describes companies working to make sure the population “remains complete from a process and control standpoint,” not just at the effective date.

Auditors evaluate both the design effectiveness and the operating effectiveness of controls. They look hardest at ASC 842 controls over:

• Lease Identification: How does the company find new leases and embedded leases?
• Data Collection: Are all necessary lease components (payments, terms, options) captured correctly?
• Lease Classification: Are leases correctly classified as operating or finance leases under ASC 842 (ASC 842-10-25-2 and 842-10-25-3)?
• Measurement: Are initial recognition and subsequent measurement of Right-of-Use (ROU) assets and lease liabilities done correctly?
• Disclosures: Are all required quantitative and qualitative disclosures complete and accurate?
• Impairment Evaluation: For ROU assets, are impairment assessments performed when indicators arise (ASC 842-20-35-9, which applies ASC 360-10-35)?

Auditors' Key Focus Areas for ASC 842

Auditors expect to see documented lease controls procedures that show how the company prevents or detects material misstatements. That includes evidence of review, reconciliation and approval.

Public companies face the sharpest version of this. The PCAOB's AS 2201³ governs an audit of internal control over financial reporting that is integrated with the financial statement audit. It requires the auditor to obtain evidence sufficient for reasonable assurance about whether material weaknesses exist. AS 2201 applies to those integrated audits, not to a typical private-company audit, but a private company's auditor still looks for the same kind of documentation.

Control Failures That Lead to Audit Findings

ASC 842 compliance is never finished, and several key risks can lead to control failures and audit findings. Knowing them is the first step to building controls that head them off.

• Incomplete Lease Population Identification: This may be the biggest risk. Missing existing leases, above all those embedded in service or purchasing contracts, leaves lease liabilities and ROU assets understated. That directly hurts financial statement completeness and accuracy.
• Inaccurate Lease Data Extraction: Keying data by hand from complex lease contracts can introduce errors. Lease terms, payment schedules, residual value guarantees and discount rate inputs are all at risk. Even small data errors can lead to large errors in present values.
• Incorrect Application of Judgmental Areas: ASC 842 calls for a lot of judgment. That is most true when you determine the lease term under ASC 842-10-30-1 (e.g., whether the lessee is reasonably certain to exercise an option), discount rates and lease components. Judgments that are inconsistent or not backed by evidence can result in material misstatements.
• Lack of Controls over Lease Modifications: Life-cycle events need specific accounting treatment under ASC 842 (see ASC 842-10-25-8 and 842-10-25-11 on lease modifications). Examples are lease extensions negotiated outside the contract's existing options, terminations and changes in scope. Exercising a renewal option the contract already contains is a reassessment instead (ASC 842-20-35-5), and needs its own control. Without clear controls, these modifications can be accounted for incorrectly. The errors then carry forward.
• Insufficient ROU asset controls: After initial recognition, controls over subsequent measurement, impairment testing and disposition of ROU assets are often overlooked. The result can be assets that are overvalued or derecognized in error.
• Decentralized Contract Management: In large companies, contracts (some of which contain leases) may sit with many departments. There may be no central repository and no standard review process. That greatly raises the risk of missing leases.

Scenario: A manufacturer with sites in several states used to expense all "rent" payments. When it adopted ASC 842, it centralized its real estate leases. But its procurement department signs equipment rental agreements on its own, with terms exceeding 12 months. That is long enough that the short-term lease exception does not reach them.

Its IT department leases servers. No cross-department contract review was required. So the accounting team never found these equipment and IT leases, or the embedded lease components in them. The lease portfolio ended up badly understated.

⚠️ Risk Alert: A common audit finding: a company overlooked service contracts with embedded leases. Examples are transportation, warehousing or manufacturing agreements. These are often managed outside the real estate department.

Practical Checklist or Framework

Effective ASC 842 internal controls need a structured, repeatable approach. This checklist lists the key activities that keep controls effective and compliance current.

How do I set up internal controls for ASC 842?

To set up internal controls for ASC 842, start with a cross-functional team and a full lease accounting policy. Put in one central lease management system. Define clear roles and duties for collecting and reviewing lease data.

Then set formal review steps for lease identification, classification, measurement and disclosure. Regular training and monitoring are key parts as well.

✅ Best Practice: Companies that execute well hold quarterly lease reviews. They use them to find new leases, re-assess lease terms and update assumptions. Specialized lease accounting software often helps.

A specific focus on embedded lease discovery should be a core part of contract review. That means training staff outside accounting (e.g., procurement, operations) to flag contracts that may contain leased assets.

Testing Whether Your Controls Actually Operate

Validation is more than just "doing" the controls. It means showing that the controls operate effectively and do what they were built to do. It also matters because an auditor communicates internal control related matters identified in an audit. The AICPA standard on that is AU-C Section 265, Communicating Internal Control Related Matters Identified in an Audit⁴.

1. Perform Self-Assessments: Regular internal reviews of the control framework surface weaknesses before the external audit does. Include walkthroughs of key processes. Getting ahead of them strengthens the whole control environment.
2. Conduct Data Integrity Checks: Routinely compare source data (e.g., lease contracts) with the data keyed into the lease accounting software. Focus on key fields such as payment amounts, lease commencement dates and termination options.
3. Reconcile and Analyze: Reconcile the lease sub-ledger balances (ROU assets, lease liabilities) to the general ledger each month or quarter. Look into any variances and clear them promptly.
4. Review System-Generated Reports: Make sure reports from the lease accounting system are accurate. Each one should trace back to the underlying data and calculations. That is evidence for lease identification testing.
5. Document Judgments and Assumptions: Each significant judgment (e.g., lease term, discount rates, whether an option is reasonably certain to be exercised) must be fully documented. It must be backed by evidence and formally approved. That is what supports the accounting treatment.
6. Periodic Training: Make sure everyone who touches the lease lifecycle gets recurring training. That includes procurement, legal and operations staff. Cover ASC 842 requirements and the internal control framework.

Calculation Example: Lease Liability Reconciliation

Scenario: An accounting team is validating the month-end lease liability balance for a lease with monthly payments made at the end of each month (in arrears). Interest therefore accretes on the full beginning balance before the payment reduces it. If a lease pays in advance, accrete interest on the balance after the payment instead. The liability rolls forward the same way whether the lease is a finance lease (ASC 842-20-35-1) or an operating lease (ASC 842-20-35-3(a)).

Key Takeaway: This calculation shows the expected change in the lease liability. An auditor would compare this ending balance to the lease sub-ledger and the general ledger. A variance would point to a possible control breakdown or calculation error.

What documentation is required for the ASC 842 internal control framework? You need a full lease accounting policy and detailed process narratives for lease identification and accounting. Add contract review checklists, discount rate methodology papers, journal entry support, lease schedules and financial statement disclosure checklists.

Contract Intake Gaps That Break the Framework

Even with a defined framework, companies often fall into the same traps as they keep up ASC 842 compliance. These mistakes can lead to serious audit findings.

💡 Key Takeaway: ASC 842 internal controls only work if they are reviewed and updated regularly. They also have to be shared with each department that plays a part.

What are common ASC 842 internal control framework audit findings? One is an incomplete lease population from missed embedded leases. Others are wrongly applied discount rates, errors in lease modification accounting, weak reconciliation procedures and too little documentation of key judgments.

What a Mature ASC 842 Control Environment Looks Like

For an accounting team, running ASC 842 internal controls well pays off twice. It means more confidence in the financial reporting and a smoother audit. It means going past bare compliance with the standard to actively managing the lease portfolio.

A company that executes well shows these traits:

• Proactive Lease Identification: Cross-functional processes are in place. Procurement, legal and operations teams are trained to spot potential leases (embedded leases too) while the contract is still being negotiated.
• Centralized Data Management: All lease contracts and related data live in one auditable lease accounting system. It automates the math and keeps it consistent. That system integrates well with the general ledger.
• Documented Policies and Procedures: Each step of the lease accounting process, from identification to disclosure, is clearly documented. It is kept up to date and shared with the staff who need it.
• Robust Review and Approval: Key calculations, judgments (e.g., discount rates, lease terms) and journal entries go through multi-level review and approval. The evidence of those reviews is kept.
• Timely Reconciliations: Lease sub-ledgers are reconciled to the general ledger correctly and on time each reporting period. Each variance is run down.
• Audit-Ready Documentation: All supporting documents are organized and ready for the auditors. That includes lease agreements, present value calculations and journal entry support.

Example Scenario (hypothetical): Consider a global technology company that is preparing for its second annual ASC 842 audit. Its control environment rests on a mandatory contract review process. Each new contract over a set threshold goes to legal.

Then it goes to the lease accounting team for an embedded lease discovery assessment. The company uses a specialized lease accounting platform that automates the math and stores all lease data.

A quarterly steering committee reviews changes in the lease portfolio, discount rate policies and any significant judgments. The accounting team hands the auditors audit-ready files with full support for each journal entry and disclosure.

In this illustration, the controls are designed to produce few audit adjustments and a smooth attestation. The approach is aimed at lease accounting compliance and operational excellence.

Maintaining the Framework After Implementation

Building and keeping an effective ASC 842 internal control framework is an ongoing job. Constant monitoring, process refinement and the right technology are what make compliance last. For more insight and practical guidance, see these resources:

• Preparing for ASC 842 Audits
• ASC 842 Audit Readiness Checklist
• Guides to Successfully Complete an ASC 842 Lease Accounting Audit