The deficiency in internal control exists when properly designed control is not implicated efficiently by the authority that is in charge ofthe organization’s control. Any deficiency in internal control is identified in the process of internal audit. To identify: The correct statement for the given situation.

Question

An IT auditor is conducting data analysis procedures on an employee expense report file and notices several expenses for $24.99 from the same individual. The company’s policy requires that any expenses that are under $25.00 do not require a receipt. The IT auditor should: [SELECT ALL THAT APPLY a) Maintain professional skepticism and investigate these transactions further b) Pass on investigating these items further, focusing on higher dollar amounts c) Evaluate the business process approval controls, and related procedures d) Discuss fraud awareness and detection programs with management to gain an understanding of management’s commitment to fraud prevention and related entity-level anti-fraud controls.

Answer 1

Question

Chapter 3, Problem 35CYBK

To determine

Introduction: The deficiency in internal control exists when properly designed control is not implicated efficiently by the authority that is in charge ofthe organization’s control. Any deficiency in internal control is identified in the process of internal audit.

To identify: The correct statement for the given situation.

Expert Solution & Answer

Trending nowThis is a popular solution!

See solution

Check out sample textbook solution

Students have asked these similar questions

An IT auditor is conducting data analysis procedures on an employee expense report file and notices several expenses for $24.99 from the same individual. The company’s policy requires that any expenses that are under $25.00 do not require a receipt. The IT auditor should: [SELECT ALL THAT APPLY a) Maintain professional skepticism and investigate these transactions further b) Pass on investigating these items further, focusing on higher dollar amounts c) Evaluate the business process approval controls, and related procedures d) Discuss fraud awareness and detection programs with management to gain an understanding of management’s commitment to fraud prevention and related entity-level anti-fraud controls.

If a client relies on information technology (IT) controls and the auditor plans to assess control risk as low for payroll assertions, the auditor will usually do all of the following, EXCEPT _______. --test the effectiveness of manual controls --use computer-assisted audit techniques (CAATs) to evaluate the effectiveness of IT application controls --test the effectiveness of manual procedures to follow up on exceptions --All of the answer choices are correct.

The following are typical questions that might appear on an internal control questionnaire for accounts payable. 1. Are monthly statements from vendors reconciled with the accounts payable listing? 2. Are vendors’ invoices matched with receiving reports before they are approved for payment? Assuming that the operating effectiveness of each of the above procedures is found to be inadequate, describe how the auditors might alter their substantive procedures to compensate for the increased level of the risk of material misstatement.