Part 1 of the Final Project, due at the end of this unit, requires you to describe and draw a flowchart of the sales or purchasing process at your organization (or one of your choice). This documentation will provide the basis for Part 2 of the Final Project. Begin with an introduction to your organization. Identify the type of organization (i.e., manufacturing or service). Detail briefly the products or services offered by your organization and the market niche and/or general clientele targeted/serviced. Document the sales or purchasing process. Create a table of the processes, objectives, inputs, and outputs associated with processing the business transactions for the sales or purchasing process. As an appendix, develop a system flowchart of either the sales or purchasing process. Please follow the guidelines for drawing system flowcharts documented throughout your textbook. Conclude with a description of the business process in narrative form, explaining the objectives, events, inputs, and outputs. Make sure to reference key points in the system flowchart. Part 1 of the Final Project should be 67 double-spaced pages and will be evaluated for content and presentation.

Part 2 of the Final Project, due at the end of this unit, requires you to identify and describe internal controls in the business process that you documented for Part 1 of the Final Project. Start with the document turned in for Part 1. Review each stage of the process and identify where an internal control SHOULD exist. Then, determine if a control actually DOES exist. Extend your document by creating a new section at the end that explains the nature of the internal controls currently working and that identifies controls that should be put in place. As this exercise involves a single business process, include only manual (i.e., human) and application-level IT (i.e., system) controls. Use the guidelines below for your documentation and make sure to reference your system flowchart. Documentation Guidelines of Existing Controls: Identify the risk the control mitigates. Detail if the control is manual or an application-level If manual, identify the person(s) involved and explain what they do. If an application control, classify the control as an input, processing, or output control and explain how the control works or should work. Documentation Guidelines of Missing Controls: Identify the risk not covered by existing controls. Propose an internal control that would mitigate the risk. Make sure to include the same information from the guidelines for existing controls documentation. Documentation Guidelines of Existing General IT Controls: Identify and document five general IT controls important to (or should be important to) the organization: Identify the risk the control mitigates. Classify the control as one of the five types listed within your textbook: 1) personnel policies, 2) file security controls, 3) business continuity planning, 4) computer facility controls, or 5) access to computer file. Explain how the control works or should work. Add Part 2 of the Final Project to Part 1. The Final Project (Parts 1 and 2) should be 810 double-spaced pages and will be evaluated for content and professionalism