10-31

(Components of internal control) The chapter identified five components of internal control. Listed below are specific control policies and procedures prescribed by Suntron Company.

Management gives careful consideration to the requisite knowledge and skills personnel need at all levels of the organization.

General controls and application controls are established in the electronic data processing department.

Management acts to reduce or eliminate incentives and temptations that might lead individuals to engage in dishonest or illegal acts.

Management is alert to complaints received from customers about billing errors.

Management gives special consideration to the risks that can arise from the use of information technology in the accounting system.

Employees' responsibilities are assigned so as to avoid any individual's being in a position to both commit an error or irregularity and then conceal it.

IT management has designed controls to prevent unauthorized use of IT equipment, data files, and computer programs.

The processing of payroll includes a check on the total number of hours submitted. If more than 65 hours are reported in a weekly pay period, the transaction is printed on an exception report and put in a suspense file for additional review or additional authorization.

Suntron's internal audit staff periodically assesses the effectiveness of various ICS components.

Policy manuals, accounting and financial reporting manuals, and a chart of accounts have been developed and implemented.

Required

Identify the components of internal control to which each policy or procedure relates.

For each item, identify one other policy or procedure for that internal control component that is not on the preceding list.