The Role of Internal Control, Internal Audit, and External Audit in Building Sustainable Corporate Governance

The article examines the evolving roles of internal control, internal audit, and external audit within contemporary corporate governance systems, with a particular focus on their coordinated contribution to sustainability, accountability, and trust. The study aims to provide a theoretical and analytical foundation for understanding how these mechanisms function not as isolated assurance tools, but as interdependent components of an integrated governance architecture. The research is grounded in key corporate governance theories, including information asymmetry theory, agency theory, institutional theory, and stakeholder theory. These frameworks are used to explain the functional differentiation and evolution of control and audit mechanisms in response to increasing regulatory complexity, expanding stakeholder expectations, and the growing importance of non-financial and ESG-related disclosures. The analysis demonstrates that each theoretical perspective highlights distinct governance challenges—such as information risk, managerial opportunism, legitimacy pressures, and multi-stakeholder accountability—which collectively necessitate a system-based approach to assurance. The article further explores modern approaches to internal control, emphasizing its transformation from a compliance-oriented set of procedures into a strategic mechanism supporting risk management, operational resilience, digital risk oversight, and the reliability of both financial and non-financial information. Internal audit is analyzed as an independent evaluation and advisory function whose maturity, risk-based orientation, and alignment with global professional standards significantly influence the effectiveness of boards and audit committees. Particular attention is given to the expanding scope of internal audit in the areas of ESG risks, corporate culture, ethics, and fraud prevention. External audit is conceptualized as an institutional mechanism of trust that has evolved beyond traditional financial statement verification toward broader assurance over governance quality, management judgments, digital risks, and sustainability reporting. The study highlights the increasing importance of coordinated interaction between internal control, internal audit, and external audit within the logic of the Three Lines model, while preserving their functional independence. The article concludes that the systematic interaction of these mechanisms enhances organizational resilience, reduces information asymmetry, improves the quality of decision-making, and strengthens confidence in corporate reporting among both internal and external stakeholders.