Control 7:

If a companys control risk is initially assessed as low, the auditor needs to gather evidence on the operating effectiveness of the controls. For the following control activity listed, do the following two tasks:

a. Describe the test of control that the auditor would use to determine the operating effectiveness of the control.

b. Briefly describe how substantive tests of account balances should be modified if the auditor finds that the control is not working as planned. In doing so, indicate (a) what misstatement could occur because of the control deficiency, and (b) how the auditors substantive tests should be expanded to test for the potential misstatement.

Control Activity:

7. The only individuals who have access to the payroll master file are the payroll department head and the payroll clerk responsible for maintaining the payroll file. Access to the file is controlled by computer passwords.

Task A)

Task B)