Test of Controls': School of Business Studies ACCA F8 - Audit & Assurance P2P Session by SK - Test of Controls (TOC) 1/2
Test of Controls': School of Business Studies ACCA F8 - Audit & Assurance P2P Session by SK - Test of Controls (TOC) 1/2
Test of Controls': School of Business Studies ACCA F8 - Audit & Assurance P2P Session by SK - Test of Controls (TOC) 1/2
‘Test of Controls’
4. Sales Cycle
5. Purchase Cycle
7. Payroll Cycle
Start
1) Sale order form must be Sales order to be given by the Must be approved by Responsible
documented Official And inserted in
2) Sale order must be sequentially company Customer master records
pre-numbered
3) Inventory must be checked at a time of issuing sales order
4) Sale order form must be pre-printed having 3-4 copies. Sale discount must not be
approved by junior clerks or
junior sale staff.
At the time of goods being loaded Vehicle dispatching the Goods Goods Dispatch
there should be a comparison between Note (G.D.N) is
the original P.O, S.O & Daily pick list made at the time of
dispatch of goods
from the factory /
Packing list must be installed
warehouse
or placed on the goods before dispatched
End
3. Sales staff should not have access to master records / master data files.
Risk
Risk of unauthorized amendments resulting in loss of sales revenue or over charging of customers
plus could increase the risk of fraud.
4. Inventory availability to be checked at the time of issuing sales order.
Risk
Risk of unfulfilled customer order + customer dissatisfaction + negative Goodwill of the company.
5. Invoice must be prepared either by the sales dept. OR finance dept as the case may be. (as per SOP
of the company)
Risk
Risk of Wrong invoices or mistakes in invoices can also lead to over or under charging to
customers.
6. Sale dept shouldn't be involved in the recovery of receivables OR chase receivables because it’s the
job of recovery dept./ credit dept.
Risk
7. Sales invoices to be approved and dispatched to customers on a timely basis.
8. Any communication within sales Department should be formal that is via internal memorandum
or other formal document.
9. Sales order must have multiple copies (Min 4 to 5 copies) one for customer, one for sales dept.
itself, one for warehouse & one for finance dept.
10. GDN's to be filed in the ware house as well as sent to finance dept on timely basis so that sales
invoice can be raised on timely basis.
Risk: Loss of sales revenue as sales invoices will not be raised and recorded on timely basis.
Start
End
4. There must be proper segregation of duties in the purchase cycle / purchase department.
6. When selecting new suppliers / vendors input to be taken from all department heads and not only
procurement department.
RISK
If input only taken from Procurement department or junior staff than there is a risk of biased
decisions or risk of fraud in purchases.
7. When selecting suppliers to procure good/services, all factors to be considered like rate, quality,
speed of delivery and other after sales service.
(Value for money to be ensured)
8. Liability to be recorded on the basis of GRN and not on the basis of supplier invoice.
RISK
If liability is not recorded on the basis of GRN, there is a risk that liability will not be recorded on a
timely basis and purchases and payables will not be recorded correctly.
RISK
Risk of payment being made to fictitious suppliers or incorrect payment made to suppliers.
10. In order to manage cashflows, there should not be delay in payment to suppliers.
RISK
Goods not being supplied by the supplier
Risk of law suit being filed by the supplier
Negative goodwill for the company
Loss of early bird discounts
2. Supplier & customer information held by the organization is highly confidential& must be taken
care of i.e. every employee in the organization must not have access to such confidential data
including operational managers, line managers, sales staff &junior staff/clerks.
RISK
In case any junior staff gets the access of supplier database than there is a risk of setting up
fictitious suppliers resulting in fraudulent payments
3. There must be authority slabs or limits for the approval of expenditures and all payments made for
such expenditures.
4. There must be a combination of both technical & finance personnel when approving purchase of
capital expenditures. (Relevant to CAPEX cycle)
Student Notings
Bank Reconciliation
1. Bank reconciliation should be prepared on timely basis (weekly or monthly)
2. Bank reconciliation must be approved by authorized personal.
3. Bank reconciliation should be reviewed by responsible official irrespective of reconciling amounts/
items or closing balance.
Cash Sales
1. There must be proper recording of cash sales in cash register / journal.
2. There must be adequate physical controls over cash.
3. At the close of business all cash recorded in point of sale terminal should be reconciled with
Physical cash.
4. All employees in the shop/dept. should not have the access to cash till/ cash flow & the point of
sale terminal.
5. Any shortage/excess of cash to be accounted for as per company policy.
6. There must be segregation of duties in complete handling of cash transactions.
7. In case of cash & credit sales from various shops & branches daily records must be transferred to
the head office.
8. Cash that is banked daily should be verified from bank statement along with sales made on credit
via credit cards.
9. Junior staff or unauthorized staff should not have access to cash / cash float or cash till.
10. For staff / employees handling cash till or large amount of cash, controls to be in place to avoid
cash handling of relatives and friends.
11. In the case, company has internal audit dept. then its staff / employees to visit all branches to
verify cash controls and company procedures (SOP)
12. In case of more than one outlet, cash to be reconciled in every outlet rather than in aggregate.
13. There must be proper segregation of duties at the time of cash/cheque receipt. (I.e. one person to
receive the cash and second person to observe its recording).
14. Both petty cashbook and cashbook are 02 separate books and must be maintained independently
and separately.
Payroll Cycle
2- Training of 8- Disbursement of
employees monthly Salary
(B.O.C)
Via Cash (lower management
staff)
3- Daily Attendance& Via Bank
recording of daily (Admin & Senior Mgmt.) Staff
hours
9- Annual Appraisals
(increments, bonus &
promotions)
4- Recording &
approval of Overtime
hours
10- Notifications of
joiners & leavers
5- Calculation of
during the year
Monthly Salary
6- Approval of
Monthly Salary / General Payroll Points for
Payroll Sheets scenario-based questions
i. Basic orientation / training will be undertaken for new employees about company and its
various department and functions.
i. Process of time in /clock in or clock out / time out to record daily hours worked on the basis
of which monthly remuneration will computed by the payroll department, these hours are
recorded by Time Management System (TMS) (employees swipe cards).
Control in this area: This clock in & out process should be supervised either by CCTV
cameras or by responsible official i.e. Physical control.
i. Overtime hours worked on daily monthly basis should be recorded separately by the TMS.
ii. Lunch breaks/dine out breaks to be recorded and must be supervised by the department or
the HR dept.
iii. Attendance system should mark attendance of one person at a time i.e. One person should
not be able to mark attendance more than on time.
(This attendance could be marked either by swapping cards or via Biometrics i.e.
Thumb impression etc.)
Control in this area: CCTV cameras, physical supervision or built in control in the TMS.
RISK:
There is a risk that company would be paying for hours not worked or hours not
approved resulting in excessive payroll cost for the company.
8. Disbursement of salaries
Via Cash
i. Cash salaries are the most risky and therefore must be taken care of.
ii. Cash disbursement must be supervised and there must be strong physical control over cash.
Such disbursement must not be made on weekends or late evenings.
iii. Undistributed / unclaimed wages must be kept in a secured location e.g. safe deposit box or
vault room.
Via Bank Transfer – (E Transfer)
i. Bank transfer listing should be authorized by authorized personnel
ii. Salaries paid via bank transfer should be reviewed in detail and agreed to the payroll records
prior to being authorized for bank payments
9. Annual Increments/ Bonus and promotions
i. Annual increments/bonus and promotions must be approved by department head, HR dept
and Board of Directors.
ii. These must be communicated to payroll dept on timely basis and formally
(_________________________________) so that increase in salaries are plus BOD.
10. Notification of joiner and leavers.
i. The detail of joiners and leavers must be documented by H.R and must be timely
communicated to payroll department to ensure correct and accurate calculation of salaries.
Student Notings
1. Material requisition (M.R)/ purchase requisition (P.R) to be made for ALL purchases
2. M.R / P.R must be sequentially pre-numbered and approved by responsible person / authorized
personnel.
3. Quotations to be obtained from approved vendors only.
4. Vendor / supplier list should be updated on timely basis (say annually)
5. When updating vendor list, input to be taken from all department heads including head of
procurement / purchase.
6. When selecting vendors, various factors must be considered other than cost i.e. Quality, delivery
time and after sales service (i.e. Value for money must be achieved)
7. Purchase orders must be made for all purchases irrespective of the amount.
8. Purchase orders must be approved as per the expenditure limits / authority slabs
9. Purchase orders must be sequentially pre-numbered.
10. There must be minimum 4 copies of P.Os
11. Good must be inspected on arrival for quality and quantity.
12. GRNs must be made for all goods received.
13. GRNs must be sequentially pre-numbered and must be approved by authorized person /
responsible official.
14. GRNs must be reconciled with purchase order and delivery challan (document of transportation).
15. Minimum 4 copies of GRNs must be maintained and copy to finance department must be send
on a timely basis.
16. Supplier invoice must be reconciled with P.O, GRN and delivery challan
17. Liability to be recorded on the basis of GRN and not on the basis of supplier invoice.
18. Junior clerks / junior staff / operational staff must not have access of supplier / vendor master
data / confidential information of supplier.
19. There must be timely reconciliation of supplier balance (our company balance) via supplier
statements and these statements must be reviewed by responsible official.
20. There must be a combination of operational, technical & finance staff /personnel (as per the
authority slab) when approving purchase order for capital expenditure items. (Relevant to
CAPEX cycle)
12. On monthly basis exception reports are Select a sample of exception reports and review for
produced in case of any changes to standing evidence of review done by authorized personnel.
data / master records and such reports are (by looking at his signatures)
reviewed by the payroll director.
13. Salary pay packets are prepared by 02 Observe the preparation of the pay packets ensuring
members of the staff – one prepares the packet that 02 members of the staff are involved and also
and the other checks the pay packets. are checked for accuracy.
14. Segregation of Duties in any given process Review the job descriptions (J.D) and
Discuss with members of the Dept to inquire about
their responsibilities or J.D
15. Documents are made e.g. Pre numbered Select a sample of documents OR
invoice or purchase Order or Gate pass or pre- Review/ verify / inspect the documents on sample
printed forms or Overtime sheets or goods basis and verify approval by authorized person and
received note that the document is sequentially pre-numbered.
17. Document is authorized by responsible official Select a sample of documents and review the
/ authorized person. evidence for authorization e.g. Signature of
authorized person on the doc.
18. In case of an automated system Insert Test data / Dummy data and verify the
i.e Time clock card or attendance system or results with predetermined results.
Bar code reader
19. In case of any instructions given Inspect the document or review the document to
verify the instructions given
20. In case of any calculations being done e.g. Recalculate OR verify a sample of calculations for
Sales discount or Wages calculation OR evidence that they are correctly calculated
Totaling of sales invoices
21. In case the control is reflected by an email Review a sample of emails done or received to
from one dept to another or an email from one verify responses
person to another within department
22. In case systems are integrated e.g Online Insert test data / dummy data to review the
ordering system with inventory system response of the system with pre-determined results
and corrective actions to be communicated.
23. In case any reconciliations are performed e.g. Review / verify / inspect reconciliations on a
stock reconciliation, bank reconciliation and sample basis to ensure they are properly made and
are approved by responsible person. also obtain evidence of approval by review of
signatures of authorized personnel / responsible
official.
(ii) State ONE test of control and ONE substantive procedure in relation to sales invoicing.
(2 marks)
b. Shiny Happy Windows Co (SHW) is a window cleaning company. Customers' windows are cleaned
monthly, the window cleaner then posts a stamped addressed envelope for payment through the
customer's front door. SHW has a large number of receivable balances and these customers pay by
cheque or cash, which is received in the stamped addressed envelopes in the post. The following
procedures are applied to the cash received cycle:
1. A junior clerk from the accounts department opens the post and if any cheques or cash have been
sent, she records the receipts in the cash received log and then places all the monies into the
locked small cash box.
2. The contents of the cash box are counted each day and every few days these sums are banked by
whichever member of the finance team is available.
3. The cashier records the details of the cash received log into the cash receipts day book and also
updates the sales ledger.
4. Usually on a monthly basis the cashier performs a bank reconciliation, which he then files, if he
misses a month then he catches this up in the following month's reconciliation.
Required:
For the cash cycle of SHW:
(i) Identify and explain THREE deficiencies in the system; (3 marks)
(ii) Suggest controls to address each of these deficiencies; and (3 marks)
(iii) List tests of controls the auditor of SHW would perform to assess if the controls are operating
effectively. (3 marks)
c. Describe substantive procedures an auditor would perform in verifying a company's bank balance.
(7 marks)
(20 marks)
Substantive procedures are aimed at detecting material misstatements at the assertion level. They
include tests of detail of transactions, balances, disclosures and substantive analytical procedures.
Matalas Co
Matalas Co sells cars, car parts and petrol from 25 different locations in one country. Each branch has
up to 20 staff working there, although most of the accounting systems are designed and implemented
from the company’s head office. All accounting systems, apart from petty cash, are computerised, with
the internal audit department frequently advising and implementing controls within those systems.
You are an audit manager in the internal audit department of Matalas. You are currently auditing the
petty cash systems at the different branches. Your initial systems notes on petty cash contain the
following information:
Required:
b) Explain the internal control weaknesses in the petty cash system at Matalas Co. For each
weakness, recommend a control to overcome that weakness. (12 marks)
The amount of cash held in the petty cash The amount of the petty cash balance at each
box is high ($5,000) in comparison to the branch should be reviewed. Based on an average
average monthly expenditure of ($1,538). monthly expense of $1,538, a balance of 52,000
This increases the risk that the cash will be would seem reasonable.
stolen or that errors will be made in counting.
The petty cash box is not physically secure as The petty cash box should be kept In the branch
it Is kept on a bookcase in the accounts office. safe or in a locked drawer in the accountants
This increases the risk of theft. desk.
Reimbursement for petty cash expenditure All petty cash claims should be supported by a
takes place without evidence of the receipt.
expenditure being incurred eg receipt. This
may result in false claims being made.
The petty cash vouchers are not authorised — All petty cash vouchers should be authorised by
they are only signed by the individual the accounts clerk.
claiming reimbursement.
In some instances significant items are Expenditure over a certain limit (eg $50) should
purchased through petty cash (up to $500). be authorised in advance.
These are not authorised prior to the
purchase being made. This could result in
unnecessary expense being incurred by the
business.
There is no indication that the vouchers are Petty cash vouchers should be pre-numbered.
pre- numbered, meaning that the branch On entry into the petty cash book the sequential
cannot confirm completeness of the vouchers. numbering should be checked to ensure that all
Unauthorised claims could be made and then expenditure has been completely recorded
blamed on missing vouchers.
There is a lack of segregation of duties. The The accountant should check the petty cash
petty cash is counted by the accounts clerk count to confirm the accuracy of the balance and
who is also responsible for the cash balance. ensure that the asset is safeguarded.
There is no additional independent check on
the petty cash balance.
Whilst the accountant confirms that the The petty cash vouchers should be reviewed by
cheque to reimburse petty cash agrees to the the accountant to confirm that the monthly petty
journal entry to the general ledger, the petty cash expenditure agrees to the reimbursement
cash vouchers are not cheque
--------------------------------------------------------------------------------------------------
SouthLea Co
SouthLea Co is a construction company (building houses, offices and hotels) employing a large
number of workers on various construction sites. The internal audit department of SouthLea Co is
currently reviewing cash wages systems within the company.
1. Hours worked are recorded using a clocking in/out system. On arriving for work and at the end of
each days work, each worker enters their unique employee number on a keypad.
2. Workers on each site are controlled by a foreman. The foreman has a record of all employee
numbers and can issue temporary numbers for new employees.
3. Any overtime is calculated by the computerised wages system and added to the standard pay.
4. The two staff in the wages department make amendments to the computerised wages system in
respect of employee holidays, illness, as well as setting up and maintaining all employee records.
5. The computerised wages system calculates deductions from gross pay, such as employee taxes,
and net pay. Finally a list of net cash payments for each employee is produced.
6. Cash is delivered to the wages office by secure courier.
7. The two staff place cash into wages packets for each employee along with a handwritten note of
gross pay, deductions and net pay. The packets are given to the foreman for distribution to the
individual employees.
Required:
(i) Identify and explain weaknesses in SouthLea Co’s system of internal control over the wages system
that could lead to mis-statements in the financial statements.
(ii) For each weakness, suggest an internal control to overcome that weakness. (8 marks)
__________________________________________________________________________________
The finance director is responsible for the preparation of a detailed non-current assets budget annually,
which is based on a five-year budget approved by the whole board of directors after consultation with
the audit committee. This annual budget, which is also approved by the full board, is held on
computer file and is the authority for the issue of a purchase order.
When the item of plant and equipment is delivered to the company, a pre-numbered goods received
note (GRN) is prepared, a copy of which is sent to the accounting department, and used to update the
non-current assets budget to reflect the movement. The equipment is carefully inspected by production
personnel and tested for proper operation.
An operational certificate is prepared by the production department and this is used by the accounting
department, together with the GRN, to check against the purchase invoice when it is received.
At the same time as the purchase invoice enters the purchasing system, a computerised non-current
assets register is updated. Access to the non-current assets register is restricted to personnel in the
accounting department. On a rolling basis throughout the year the non-current assets register is
compared to plant and equipment on site by accounting department personnel, using identification
numbers in the register and permanently marked onto each item in the factory.
The internal audit department also tests on a sample basis the operation of the system from budget
preparation to entry in the non-current assets register. Internal audit staff also compare a sample of
entries in the non-current assets register with equipment on the shop floor.
Required:
SIX STRENGTHS in Letham’s control environment in respect of non-current assets and explain why
they may reduce control risk. (12 marks)
As part of your work as external auditor you are reviewing the non-current assets audit programme of
the internal auditors and notice that the basis of their testing is a representative sample of purchase
invoices. They use this to test entries hi the non-current assets register and the updating movements on
the annual budget.
Required:
Explain why this is not a good test for completeness;
State a more appropriate test to prove completeness of the non-current assets records, including the
non-current assets register. (4 marks)
ii. A more appropriate test would be to make the selection from goods received notes (GRNs), as the issue
of a GRN is normally the point at which liability is accepted and is in any event the document used to
update the non-current assets budget. In other words, it is important to identify your audit objective and
then to decide on what sample will be the most appropriate to aid you in meeting that objective. The
GRNs would be traced to the recorded purchase invoices to ensure that the latter were complete and
then to the entries in the non-current assets register and to the updating entries in the budget to ensure
that these too were complete.
An additional appropriate test would be to select a sample of plant and equipment visible on the shop
floor and trace them to the non-current assets register to identify whether they have been:
included in the register
noted against the budget as purchased
paid (or by tracing purchase invoice through to payment.
(Tutorial note: The auditor would of course wish to prove that the GRNs are complete and might select
a sample of purchase orders and trace them to the GRNs to ensure GRNs have been prepared in each
case or the order rejected for good reason. Another appropriate test on the GRNs would be to prove that
the numbering sequence was complete. This list is not exhaustive and other completeness procedures
may be appropriate.)