Assume you are the management accountant for the Foleo Group and Tracey Chen has asked you to assist her in assessing the organisations internal control environment before her meeting with Peter Singh next week. Specifically, she asks you to look at the Finance Department that you manage. Tracey provides you with her detailed observations of the Departments current control environment below, and asks for your input.

Finance Department:

The staff within the Finance Department collect data generated by the various departments and business units within the organisation, analyse it and then generate reports that are disseminated across the organisation. Most, if not all of this data is transmitted electronically, and it currently appears that all operational staff within this Department have access to the complete suite of information passing through their accounting system. The only exception to this, are the existing, but inadequate access controls over the payroll data, however it seems that these can be easily overridden, as demonstrated to me by one of the Finance staff members upon request. This unrestricted access to sensitive data has led to some serious motivational issues and at this point, it is unclear whether disgruntled employees have been able to take advantage of the Finance Departments poor control over Foleos data.

Another area of concern identified by the management accountant is the poorly restricted access to the reports generated by the Department. These reports are distributed via email (and occasionally in printed form for specific meetings) to authorised recipients, however, there is a common practice across the organisation, it seems, of sharing passwords to access other individuals email accounts and information. Whilst I am informed that this practice is in the interests of timely resolution to problems, rather than fraud, my concern is that it invites dysfunctional behaviour and represents a significant risk to Foleos information and assets.

The operational staff of this department who process all transactional data are subject to a number of controls that I implemented on my arrival at the organisation some 20 years ago, in order to minimise the risk of errors and omissions in the reports they generate. As they enter data, the accounting system has a number of inbuilt safeguards to ensure that the right type of information is being entered in the right place, in addition to requests for confirmation for entered information that is abnormally high or low for specific data types. Unfortunately, these controls along with the procedures I put in place to ensure the authenticity of transactions are routinely overridden by both operational and management staff, which is somewhat concerning, considering that James and Leon appear to be the worst offenders. As the management accountant discovered decades ago, James and Leon regularly authorise the payment of private expenses through the company bank account and access funds as and when they need cash without following the proper procedures. This has resulted in their salaries being seriously understated and the existence of improper expenses in the company financial statements. I believe this sends a poor message to the employees.

As already identified in my last report, this Department struggles to deliver the required reports at year-end and other peak times, despite utilising a range of techniques to minimise the processing time of the data. These techniques have led to errors and shortcuts that have compromised the integrity of the resulting reports, upon which Managers have based important decisions.

Required:

(a) Based on Traceys observations as well as the weeks readings and lecture materials, identify 4 lapses in the Finance Departments control environment.

(b) Explain the risk that each lapse in control presents.

(c) Suggest a specific control that you might introduce to address each lapse identified in part (a).

(d) Classify each control suggested in part (c) as either preventive or detective in nature.

ANSWER;

ONE:

(a) Lapse:

(b) Risk:

(c) Control:

(d) Classification:

(e) Classification:

TWO:

(a) Lapse:

(b) Risk:

(c) Control:

(d) Classification:

(e) Classification:

THREE:

(a) Lapse:

(b) Risk:

(c) Control:

(d) Classification:

(e) Classification:

FOUR:

(a) Lapse:

(b) Risk:

(c) Control:

(d) Classification:

(e) Classification: