Preventive and Detective Controls Homework Problem 1 Table 12.1 identifies several threats in the revenue cycle and matches each one to specific controls that try to reduce the threat from occurring. For each threat-control situation given in the table below, identity whether the control is trying to prevent the matched threat from occurring or trying to detect the occurrence of the matched threat. Do not just read the control and then answer - read the control with the threat and then answer whether the control is trying to prevent or trying to detect in that situation For example, consider Threat Control Number 1.3 (the threat of inaccurate or invalid master data" is reduced by "review of all changes to master data"). One has made changes to records and is then reviewing these changes to make sure those changes are accurate and/or valid. This is a detective control because it is trying to discover errors that have been recorded in the system and then must be corrected. As another example, consider Threat-Control Number 3.1 (loss or destruction of data is reduced by "backup and disaster recovery procedures"). One has made a backup of data. If the original data has been lost or destroyed, a backup of the data exists. This is a preventive control, because you have deterred/hindered the loss of data by making a copy Follow this process to answer the following threat-control situations Threat Control Number from Table 12-1 Tries to Prevent or Tries to Detect Matched Threat 4.1 6.1 7.2 8.3 112 11.4 12.2 14.1 15.3 16.1 17.2 17.4 18.1 Preventive and Detective Controls Homework Problem #1 Table 12-1 identifies several threats in the revenue cycle and matches each one to specific controls that try to reduce the threat from occurring. For each threat-control situation given in the table below, identify whether the control is trying to prevent the matched threat from occurring or trying to detect the occurrence of the matched threat. Do not just read the control and then answer-read the control with the threat and then answer whether the control is trying to prevent or trying to detect in that situation For example, consider Threat Control Number 1.3 (the threat of "inaccurate or invalid master data is reduced by review of all changes to master data"). One has made changes to records and is then reviewing those changes to make sure those changes are accurate and/or valid. This is a detective control because it is trying to discover errors that have been recorded in the system and then must be corrected. As another example, consider Threat-Control Number 3.1 ("loss or destruction of data" is reduced by "backup and disaster recovery procedures"). One has made a backup of data. If the original data has been lost or destroyed, a backup of the data exists. This is a preventive control, because you have deterred/hindered the loss of data by making a copy Follow this process to answer the following threat-control situations, Threat-Control Number from Table 12-1 Tries to Prevent or Tries to Detect Matched Threat 4.1 6.1 7.2 8.3 11.2 11.4 12.2 14.1 15.3 16.1 17.2 17.4 18.1 Preventive and Detective Controls Homework Problem 1 Table 12.1 identifies several threats in the revenue cycle and matches each one to specific controls that try to reduce the threat from occurring. For each threat-control situation given in the table below, identity whether the control is trying to prevent the matched threat from occurring or trying to detect the occurrence of the matched threat. Do not just read the control and then answer - read the control with the threat and then answer whether the control is trying to prevent or trying to detect in that situation For example, consider Threat Control Number 1.3 (the threat of inaccurate or invalid master data" is reduced by "review of all changes to master data"). One has made changes to records and is then reviewing these changes to make sure those changes are accurate and/or valid. This is a detective control because it is trying to discover errors that have been recorded in the system and then must be corrected. As another example, consider Threat-Control Number 3.1 (loss or destruction of data is reduced by "backup and disaster recovery procedures"). One has made a backup of data. If the original data has been lost or destroyed, a backup of the data exists. This is a preventive control, because you have deterred/hindered the loss of data by making a copy Follow this process to answer the following threat-control situations Threat Control Number from Table 12-1 Tries to Prevent or Tries to Detect Matched Threat 4.1 6.1 7.2 8.3 112 11.4 12.2 14.1 15.3 16.1 17.2 17.4 18.1 Preventive and Detective Controls Homework Problem #1 Table 12-1 identifies several threats in the revenue cycle and matches each one to specific controls that try to reduce the threat from occurring. For each threat-control situation given in the table below, identify whether the control is trying to prevent the matched threat from occurring or trying to detect the occurrence of the matched threat. Do not just read the control and then answer-read the control with the threat and then answer whether the control is trying to prevent or trying to detect in that situation For example, consider Threat Control Number 1.3 (the threat of "inaccurate or invalid master data is reduced by review of all changes to master data"). One has made changes to records and is then reviewing those changes to make sure those changes are accurate and/or valid. This is a detective control because it is trying to discover errors that have been recorded in the system and then must be corrected. As another example, consider Threat-Control Number 3.1 ("loss or destruction of data" is reduced by "backup and disaster recovery procedures"). One has made a backup of data. If the original data has been lost or destroyed, a backup of the data exists. This is a preventive control, because you have deterred/hindered the loss of data by making a copy Follow this process to answer the following threat-control situations, Threat-Control Number from Table 12-1 Tries to Prevent or Tries to Detect Matched Threat 4.1 6.1 7.2 8.3 11.2 11.4 12.2 14.1 15.3 16.1 17.2 17.4 18.1