It is generally perceived that the effective implementation of an adequate internal control system prevents and controls an entity’s risks and improves its procedures and performance. This study empirically investigates the relationship between the internal control system and firms’ performance, with particular emphasis on the moderation role of an integrated information system. For this purpose, a survey was developed and sent to 215 Saudi firms that had implemented an integrated information system. A hundred and two valid responses were received. Partial least squares structural equation modeling was utilized for the data analysis and hypothesis testing. The findings confirmed that organizational structure, prospectors’ strategy, information system quality, and management support significantly influence the internal control system for the study sample. The finding also supports the role of an information system as a moderator variable in the relationship between internal control and organizational performance. Additionally, the study elucidates the importance of information system maturity for information system quality.