9.7. You are auditing a company engaged in the development and sale of games software over the internet. Software is high quality and therefore we point our attention to controls over the sales of their products. The companies systems are fully integrated and sales automatically update the corresponding bank and trade receivable records (depending on payment type) and quantity inventory records. Your firm asks audit staff to classify control risk as low, medium or high. Initial discussions with management have satisifed you that the control environment is good and you have classified control risk as medium.

Required:

a) Explain what the three control risk classifications probably mean in practice.

b) What basic controls would you expect to see to ensure that sales are genuine, accurate and complete, that risk of bad debts is low and that inventory movements resulting from sles are genuine, accurate and complete? Suggest suitable tests of control.