During your audit of Sonic Sports Sdn Bhd, a retail chain of stores, you learn that a programmer made an unauthorized change to the sales application program even though no work on that application had been approved by IT management. In order for the sales application program to work, the programmer had to make modifications to the operating software security features. The unauthorized change forced the sales program to calculate an automatic discount for a customer who happens to be the cousin of the programmer. The customer and programmer split the savings from the unauthorized discount. The programmer modified the program and returned it to the librarian, who placed it into the files for live production use. No other information was forwarded to the librarian.

Required: i. Explain THREE (3) advices as auditor of Sonic Sport Sdn Bhd to prevent this misappropriate action from recurring?

ii. Explain THREE (3) the suggested internal control improvements will prevent problems in the future.

iii. Explain TWO (2) aspects of internal control must the auditor assess when performing procedures to obtain an understanding of internal control.