During its assessment of the accounts payable department, the internal audit function identified the following observations, which have been agreed to by management

Observations:

Inadequate segregation of duties over certain information system access controls. Potential loss exposure of $45 million.

Several instances of transactions that were not properly recorded in subsidiary ledgers. Transactions were not material, either individually or in the aggregate. Potential loss exposure of $60 million.

A lack of timely reconciliations of the account balances affected by the improperly recorded transactions. Potential loss exposure of $25 million.

Management and the independent auditors have determined that an amount less than $20 million is inconsequential in impact and that an amount greater than $80 million is material in impact.

Questions:

Based only on these facts, determine the COSO objective category affected by each observation.

Classify each observation in terms of its design adequacy and operating effectiveness

Determine the impact and likelihood for each observation

And assess whether each observation is insignificant, significant, or material

After that has been done, outline the next steps an internal audit function should take and the ramifications of the overall conclusion, including how and to whom communication should be made.