(a). ISA 315 Identifying and Assessing the Risks of Material Misstatement through Understanding the Entity and Its Environment requires auditors to obtain an understanding of control activities relevant to the audit. Control activities are the policies and procedures which help ensure that management directives are carried out.

Required: 

Describe FOUR different types of control activities and, for each type, provide an example of control a company may implement. (7 marks)

(b) Diamond Medical Company manufactures nose mask and hand sanitizer. Its main customers are retailers who then sell to the general public. The company’s manufacturing is spread across five sites and goods are stored in its nine warehouses located across the country. You are an audit supervisor of Reynolds & Associate and in preparation for the forthcoming audit for the year ending 30 June 2019, you are reviewing the following notes your audit manager has provided you with in relation to the company’s internal controls. Diamond Medical Company has a small internal audit (IA) department. During the year, IA started a program of physically verifying the company’s assets and comparing the results to the non-current assets register, as this type of reconciliation had not occurred for some time. To date only 15% of assets have had their existence confirmed as IA has experienced significant staff shortages and several members of the current IA team are new to Diamond Medical Company.

During the year Diamond Medical Company conducted an extensive re-organization of its manufacturing process to improve efficiency. Due to the significant number of employee changes required, the human resources department (HR) has been very busy and to ease their workload during this period, the payroll department has assisted by setting up any new employees who have joined the company. In January 2019, the wage rate paid to employees was increased by the HR director and he notified payroll by emailing the payroll supervisor. A new sales ledger system was introduced in May 2018 and will continue to be run in parallel with the old system until IA has completed its checks between the two systems. New customers obtained by the sales team are required to undergo a full credit check; on the basis of this, a credit limit is proposed by sales staff and approved by the sales director and these credit limits remain static in the sales system. Monthly perpetual inventory counts are undertaken at each of the nine warehouses, as a full year-end inventory count is too disruptive for the company. High value items are stored in a secure area in each warehouse. Access is via a four-digit code, which for convenience is the same across all sites. Due to the company’s reorganization program, some of the monthly inventory counts were not performed.
Bank reconciliations are undertaken monthly by an accounts clerk and details of all reconciling items are included. Where the sum of the reconciling items is significant, the reconciliation is sent to the financial controller for review. In order to maximize cash balances, the finance director approves all purchase invoices for payment 75 days after receipt of the invoice.

Required:
(b) Identify and explain SIX deficiencies in Diamond Medical Company’s internal controls and provide a recommendation to address each of these deficiencies. (8 marks)