Steps in the Role-playing Game (Level 1) 1. The AIS-INV department sends out a purchase requisition to the AIS-PUR department asking for inventory items. 2. The AJS-PUR department selects a suitable vendor and send out four copies of purchase orders to the following departments. a. AIS-INV: This is the control of the confirm purchase orders with the requesting departments (ensures input completeness). b. Vendor: Inform the vendor to ship the goods. c AIS-ACC. The purchase order is the first document for the three-way-match control plan (ensures loput accuracy and input validity). d. AIS-WRIL: This is a blind copy of a purchase order after deleting the quantities field. This control is to force the receiving department to count the inventory items (ensures input accuracy). 3. Vendor receives the purchase order and sends goods to the receivAg department (assumes a packing slip indicating the Loventory items is within the package of the goods). 4. The receiving department (AIS-WRH) compares the goods with what's on the blind copy of the purchase order and sends three copies of goods receipt documents to the following departments: 2. AIS-INV: Receives both a copy of the goods receipt document and the goods. The AIS-INV should also check if the stock status is up- D. AIS-PUR: It should update the purchase order history indicating an update of the open purchase order. This is the purchase order tickler file control (ensures input completeness) CAIS-ACC: The goods receipt document is the second document for the three-way-match control. 5. The AIS-ACC department receives an invoice from the vendor and performs the three-way-match control to process the invoice. This step should close the open purchase order history. This step also generates an accounts payable open item (.e., vendor line Item - FBLIN). 6. After processing the invoice, the AIS-ACC department sends a verified invoice document to the AIS-CTL department. 7. The AIS-CTL department sends the payment to the vendor. In the meantime, the accounts payable open item is closed. to-date Risk Analyses for the Role-playing Game (Level 2) Risk(s) if Missing the SOD Decision Points Creating purchase requisition Segregation of Duties (SOD) & CARE C: Inventory (INV) A: Purchasing (PUR) If the purchasing department creates a purchase requisition, then the purchasing department may order an excessive amount of inventory that exceeds the capacity of the warehouse. How does the SOD Mitigate the Risk(9)? The inventory clerk safeguards the inventory and creates a purchase requisition by specifying inventory items and quantities. The purchasing department then interacts with the vendor and creates a purchase order. Creating purchase order Receiving goods Processing invoice Processing payment Instructions about finishing the risk-analyses table: 1. The first row is a template for you to follow, 2 The "Segregation of Duties (SOD) R CARE"column might include more than two departments (eg, the three-way match control has three parties) 3. The "Risks if Missing the SOD" may contain either fraud risks or non-fraud risks. 4. The "How does the SOD Mitigate the Risks(s)?" column has a limited scope that students can only discuss the SOD controls, Controls other than SODs (es. password control for employees or data input controls) are beyond the scope