You are engaged as auditor of Company ABC for the period ending December 31, 2020. Your team is currently at the TOC phase and is scheduled to perform TOCs for Company ABC's IT Governance Controls. Your senior has assigned you the expenditure cycle (Accounts payable and Cash) to audit.

As part of your TOC procedures, you are required to perform the following:

a. Review relevant client documentation and records - The client has provided the organization chart that you can use for review. (see 2021-02-04.png)

b. Verify access controls - The client has provided a list of the access roles in SAP Production box and profiles for each of the IT personnel. ((see 2021-02-04(1) to (8).png)

Required: Identify the three control exceptions using the information gathered and using concepts learned during Session 4 of our lecture.

Optional (Bonus): Identify the amount of possible cash that was stolen by our culprit during the month of December. (see 2021-02-04(9).png)

Other case facts:

a. The company uses SAP Business One as their transaction processing software.

b. Company ABC operates in a centralized data processing structure

A B C D Company ABC 2 List of SAP Roles in Production 3 Role Description 5 ZXETR121 Treasury - Ext. Bank Reconcilation 6 ZXETR122 Treasury - Int. Bank Reconciliation 7 ZXETR126 Treasury - General Processing 8 ZXETR128 Treasury - Bank Fee Processing g ZXETR131 Treasury - Payment Run 10 ZXETR134 Treasury - Reversals 11 ZXETR140 Treasury - Petty Cash 12 ZXETR141 Treasury - Check Receipts 13 ZXXAP30 AP - Image-Scan Operator 14 ZXXAP33 AP - Invoice Posting 15 ZXXAP38 AP - Document Edit Role 16 ZXXAP43 AP - Manual Invoice Posting 17 ZXXAP44 AP - Payment Analyst Report 18 GLFBL3 View General Ledger 19 GLFBL1 View Vendor Subsidiary Ledgers 20 GLFD08 View GL Account Balances 21 GLFXK01 Vendor Maintenance 22 GLFD01 View Trial Balance 23 24F3 III X A B C D E F G H K ABC Company 2 Access Role Card 3 4 Employee Name Celina Capalad 5 SAP User Name PM1987 6 7 Roles Granted: O 9 Role Description 10 Z-DS-DESIGN-ABAP Program SAP ABAP Functionalities 11 Z-DS-DESIGN-BAPI Program SAP BAPI Functionalities 12 ZXETR131 Treasury-Payment Run 13 ZXETR128 Bank Fee Processing 14 IJB12 X f A B C D E F G H I J K ABC Company 2 Access Role Card 3 4 Employee Name Jerome Alvarez 5 SAP User Name PM2078 6 7 Roles Granted: Role Description 10 Z-DS-DESIGN-ABAP Program SAP ABAP Functionalities 11 Z-DS-DESIGN-BAPI Program SAP BAPI Functionalities 12 13 14 IJB10 X V f No roles found A B C D E F G H L K ABC Company 2 Access Role Card 3 4 Employee Name Chino Clavecilla 5 SAP User Name PM1021 6 7 Roles Granted: O 10 No roles found 11 12 13 14 IJC6 X A B C D E F G H K ABC Company 2 Access Role Card 3 4 Employee Name Oona Tan 5 SAP User Name DP1645 6 7 Roles Granted: 9 Role Description 10 ZXXAP30 AP - Image-Scan Operator 11 12 13 14 IJPROTECTED VIEW Be careful-files from the Internet can contain viruses. Unless you need to edit, it's safer to stay in Protected F6 X A B C D E F G H K ABC Company 2 Access Role Card 3 A Employee Name Tim Howan 15 SAP User Name DP1452 6 7 Roles Granted: 9 Role Description 10 ZXXAP33 AP - Invoice Posting 11 ZXXAP38 AP - Document Edit Role 12 ZXXAP43 AP - Manual Invoice Posting 13 ZXXAP44 AP - Payment Analyst Report 14 IJB15 X ZXETR134 A B C D E F G H J K ABC Company Access Role Card Employee Name Ces Valdez SAP User Name DP8097 Roles Granted: Role Description 10 ZXETR121 Treasury - Ext. Bank Reconcilation 11 ZXETR122 Treasury - Int. Bank Reconciliation 12 ZXETR126 Treasury - General Processing 13 ZXETR128 Treasury - Bank Fee Processing 14 ZXETR131 Treasury - Payment Run 15 ZXETR134 Treasury - Reversals 16 ZXETR140 Treasury - Petty Cash 17 ZXETR141 Treasury - Check Receipts 18 19 20A B C D E F G H K ABC Company 2 Access Role Card 3 A Employee Name Tim Howan 5 SAP User Name DB2007 6 7 Roles Granted: Role Description 10 GLFBL3 View General Ledger 11 GLFBL1 View Vendor Subsidiary Ledgers 12 GLFD08 View GL Account Balances 13 GLFXKO1 Vendor Maintenance 14 ZXETR126 Treasury - General Processing 15 ZXXAP43 AP - Manual Invoice Posting 16 GLFDO1 View Trial Balance 17 19 20B D E G H User name | Posting Date Document Number |Document Type | G/L Account | G/L Account Description Amount in local currency | Local Currency | Text DP8097 December 1, 2020 890000019 02 3569500 Cash in Bank - BDC -0.02 PHP Minor Adjustment DP8097 December 5, 2020 710004728 SL 15080003 Cash in Bank - BPI 397262.24 PHP Customer Collection DP8097 December 5, 2020 710005041 SL 15080003 Cash in Bank - BPI 307410.39 PHP Payment for salaries 5 DP8097 December 5, 2020 710005145 SL 15080003 Cash in Bank - BPI 231923.92 PHP Payment for goods 6 DP8097 December 5, 2020 710004875 SL 15080003 Cash in Bank - BPI -397262.24 PHP Payment for goods DP8097 December 5, 2020 10005012 SL 15080003 Cash in Bank - BPI 307410.39 PHP Customer Collection 8 DP8097 ecember 10, 2020 710005102 SL 15080003 Cash in Bank - BPI -223199.33 PHP Payment for goods 9 DP8097 ecember 10, 2020 710005102 SL 15080003 Cash in Bank - BPI 445267.76 PHP Customer Collection )DP8097 ecember 10, 2020 710005109 SL 15080003 Cash in Bank - BPI 222068.43 PHP Payment for goods DP8097 ecember 10, 2020 710005122 SL 5080003 Cash in Bank - BPI 231923.92 PHP Customer Collection 12 DP8097 ecember 10, 2020 630000359 SA 17390026 Cash in Bank - UCPE 2500000 PHP Capital Infusion 13 DP8097 ecember 10, 2020 630000359 SA 17390026 Cash in Bank - UCPB 21273024 PHP Capital Infusion DP8097 ecember 10, 2020 30000377 SA 17390026 Cash in Bank - UCPB 5000000 PHP Capital Infusion 15 DP8097 ecember 10, 2020 30000392 SA 17390026 Cash in Bank - UCPE 5606976 PHP Capital Infusion 5 PM1987 ecember 10, 2020 30000400 SA 7390026 Cash in Bank - UCPB 13440000 PHP Payment to External audit service DP8097 ecember 10, 2020 3040002493 KN 17390026 Cash in Bank - UCPB 3900000 PHP Cash Advance from Customer 18 DP8097 ecember 15, 2020 3040002262 KN 17390026 Cash in Bank - UCPB 3360000 PHP Cash Advance from Customer DP8097 ecember 15, 2020 3040002446 KN 17390026 Cash in Bank - UCPB 1680000 PHP Cash Advance from Customer DP8097 ecember 15, 2020 3040002020 KN 17390026 Cash in Bank - UCPB 2400000 PHP Cash Advance from Customer 21 DP8097 ecember 15, 2020 710005650 SL 7390026 Cash in Bank - UCPB -986111.12 PHP Payment for salaries DP8097 ecember 15, 2020 710005655 SL 17390026 Cash in Bank - UCPB 867824440.9 PHP Payment for salaries 23 DP8097 ecember 15, 2020 710005656 SL 17390026 Cash in Bank - UCPB 748810552 PHP Customer Collection 24 DP8097 ecember 15, 2020 710005680 SL 20000093 Cash in Bank - Chinabank -1818 PHP Petty Cash Disbusrsement 25 DP8097 ecember 15, 2020 710005667 SL 20160047 Cash in Bank - Metrobank -39873.9 PHP Payment for goods DP8097 ecember 15, 2020 630000122 SA 20710025 Cash in Bank - PNE 670000 PHP Payment for goods DP8097 ecember 15, 2020 530000122 SA 20710025 Cash in Bank - PNB -85000 PHP Payment for goods 28 DP8097 ecember 15, 2020 $30000139 SA 20710025 Cash in Bank - PNB 980000 PHP Payment for goods 29 DP8097 ecember 15, 2020 30000180 SA 20710025 Cash in Bank - PNB 71000 PHP Customer Collection 30 DP8097 ecember 15, 2020 630000207 SA 20710025 Cash in Bank - PNB 1935000 PHP Customer Collection DP8097 ecember 27, 2020 630000342 SA 20710025 Cash in Bank - PNB 271000 PHP Customer Collection 32 DP8097 ecember 27, 2020 9530000300 59 20710025 Cash in Bank - PNB 200000 PHP Customer Collection 33 DP8097 ecember 27, 2020 9530000302 59 20710025 Cash in Bank - PNB 600000 PHP Customer Collection DP8097 ecember 27, 2020 9530000303 59 20710025 Cash in Bank - PNB 1000000 PHP Proceeds from Sale of PPE DP8097 ecember 27, 2020 9530000304 59 20710025 Cash in Bank - PNB 500000 PHP Proceeds from Sale of PPE DP8097 ecember 31, 2020 9530000306 59 20710025 Cash in Bank - PNB 300000 PHP Proceeds from Sale of PPE DP8097 ecember 31, 2020 9530000311 59 20710025 Cash in Bank - PNB 1978 PHP Interest Earned 38 PM1987 ecember 31, 2020 9530000314 59 20710025 Cash in Bank - PNB 1500000 P Payment for goods 39 DP8097 ecember 31, 2020 9530000381 59 20710025 Cash in Bank - PNB 271000 PHP Payment for goods DP8097 ecember 31, 2020 2400120045 VJ 20710025 Cash in Bank - PNB -2772978 PHP Payment for goods 43 44Company ABC Chief Information Officer Daniel Tolentino Office of the CIO Systems Development Database Administrator Data Processing Manager Manager Lewy Ong Dennis Palabay, Raian Mondelo Project Manager Systems Maintenance Data Input Assistant Expenditure Cycle Operations Lead Anthony Ybanez Jerome Alvarez Oona Tan Rajan Mondelo (Interim) Accounts Payable Systems Analyst Processing Chino Clavecilla Tim Howan Front-end Developer Bank Processing Jerome Alvarez Ces Valdez Back-end Developer Celina Capalad