All questions
Question 1
A large corporation is transitioning from issuing paper checks to making the majority of its vendor payments via Electronic Funds Transfer (EFT). Which of the following describes the most significant shift in internal control focus required by this change?
- The need for pre-numbered payment instruments is eliminated, reducing the importance of documentation procedures.
- Controls must shift from safeguarding physical assets like blank checks to securing electronic payment authorization and data integrity. (correct answer)
- The bank reconciliation process becomes less critical as bank records of electronic transfers are inherently more reliable.
- Segregation of duties is less important because automated systems reduce the opportunity for human intervention.
Explanation: When moving from physical checks to EFTs, the primary risk shifts from physical theft or forgery of checks to unauthorized electronic access and fraudulent transfers. Therefore, the internal control focus must also shift to safeguarding the systems and processes for initiating and authorizing electronic payments, including controls over passwords, user access rights, and data encryption.
Question 2
To prevent duplicate payments to vendors, a company's internal control policy requires the treasurer's department to stamp invoices "PAID" immediately upon issuing a check. This procedure is an application of which principle of internal control?
- Segregation of duties, by separating payment authorization from record-keeping.
- Human resource controls, by ensuring employees are well-trained in their roles.
- Physical controls, by restricting access to company assets and records.
- Documentation procedures, by defacing supporting documents to prevent their reuse. (correct answer)
Explanation: The act of stamping an invoice "PAID" is a documentation procedure. It physically alters the supporting document (the invoice) to ensure that it cannot be processed and paid a second time. This control is specifically designed to prevent the reuse of documentation to support a fraudulent or erroneous disbursement.
Question 3
A company maintains a $300 imprest petty cash fund. The fund was replenished on Monday. During a surprise count on Wednesday, the custodian had reimbursement receipts totaling $185 and $105 in currency in the cash box. The receipts were for valid business expenses.
What does the result of the surprise count most likely indicate about the petty cash controls?
- The petty cash fund is being used for unauthorized purchases, requiring stricter policies.
- The vouchers are not being cancelled after payment, allowing for potential resubmission.
- A breakdown in control has occurred, resulting in a $10 cash shortage. (correct answer)
- The petty cash fund is too small for the company's needs and should be increased.
Explanation: The fund should have a total of $300 in cash and/or receipts. The count revealed $185 in receipts and $105 in cash, for a total of $290. This means there is a 10shortage(300 - $290). This shortage, regardless of the cause, represents a failure or breakdown in the control over the fund. The other options are possibilities but are not directly and certainly proven by the information given. Question 4
A retail company uses a point-of-sale (POS) system where cashiers must log in to a specific cash drawer at the start of their shift. The system records all sales under that cashier's login. At the end of the shift, the drawer's cash is counted and reconciled to the system's sales report for that cashier. This system primarily strengthens which principle of internal control?
- Independent internal verification.
- Establishment of responsibility. (correct answer)
- Human resource controls.
- Segregation of duties.
Explanation: The core feature described is assigning a specific cash drawer to a specific cashier for their shift. This directly links the cash and sales transactions to one individual. This is the definition of establishing responsibility. It allows the company to hold that specific cashier accountable for the funds in their drawer, making it much easier to trace any cash shortages or overages.
Question 5
A company's cashier receives cash from customers, prepares a daily cash summary from the register tape, makes the daily bank deposit, and also has authorization to post customer payments to the accounts receivable subsidiary ledger.
An analysis of the company's cash account reveals frequent and unexplained shortages. Which of the following control enhancements would most directly address the likely cause of these shortages?
- Requiring the cashier to be bonded to protect the company from potential losses.
- Implementing a mandatory vacation policy for all employees in the cash-handling department.
- Separating the function of cash handling from the function of recording entries in the accounts receivable ledger. (correct answer)
- Having a supervisor independently verify the daily bank deposit by agreeing it to the cash summary.
Explanation: The most significant control weakness is the lack of segregation of duties. The cashier has custody of assets (cash), maintains records (posts to A/R), and has a role in authorization. This combination allows the cashier to potentially misappropriate cash and conceal it by manipulating customer accounts (a scheme known as lapping). Separating cash handling from record-keeping is the most direct and effective control to prevent this.
Question 6
During a review of the monthly bank reconciliation, an auditor notices that a check listed as outstanding for over six months is payable to an unknown company and has a non-sequential check number. Which of the following is the most likely implication of this finding?
- The company's bank has made an error in processing its transactions.
- The check was likely lost in the mail and should be voided and reissued.
- A breakdown in physical controls over blank check stock may have occurred. (correct answer)
- The staff accountant made a simple clerical error when preparing the reconciliation.
Explanation: A non-sequential check number is a significant red flag. It suggests that someone used a check from outside the normal, controlled sequence of check numbers. This points to a failure in the physical control over blank check stock, indicating that an unauthorized person may have gained access to the checks and created a fraudulent disbursement. The fact that it's payable to an unknown company and has been outstanding for a long time further supports the possibility of fraud.
Question 7
A company's cash disbursements clerk is responsible for preparing checks based on approved voucher packages. The company's treasurer signs the checks. After signing, the treasurer's administrative assistant mails the checks to the payees and forwards the supporting voucher packages to the accounting department for recording.
Which of the following represents the most significant weakness in this cash disbursement process?
- The clerk who prepares the checks should also be responsible for recording the disbursements.
- The signed checks should be returned to the cash disbursements clerk for mailing.
- The treasurer should not be responsible for signing checks for disbursements.
- The supporting voucher packages should be canceled or stamped 'PAID' by the treasurer after signing. (correct answer)
Explanation: A critical control in the disbursement cycle is to prevent the reuse of supporting documentation. After the treasurer reviews the voucher package and signs the check, they should immediately cancel the documents (e.g., with a 'PAID' stamp). In the described process, the uncanceled documents are sent to another department, creating the risk that they could be intercepted and resubmitted to generate a duplicate, fraudulent payment.
Question 8
A company performs monthly bank reconciliations. The reconciliation is prepared by a staff accountant who does not handle cash, and then the controller reviews and approves the completed reconciliation. Which internal control objective is primarily achieved through the controller's review and approval of the bank reconciliation?
- Ensuring all cash receipts for the month were deposited in the bank in a timely manner.
- Verifying the mathematical accuracy of the staff accountant's calculations and adjustments.
- Establishing primary responsibility for the accuracy of the cash account to the staff accountant.
- Providing independent internal verification of the cash records and transactions. (correct answer)
Explanation: The primary purpose of having a senior employee (the controller) review the work of another employee (the staff accountant) is independent internal verification. This principle involves reviewing data prepared by other employees to ensure it is accurate and that controls are working. While mathematical accuracy is checked and responsibility is involved, the overarching principle demonstrated by the review is independent verification.
Question 9
A voucher system is used to enhance control over cash disbursements. A complete voucher package typically includes a purchase order, receiving report, and vendor invoice. Which internal control principle is best exemplified by requiring an accounts payable clerk to match these three documents before approving a payment?
- Establishment of responsibility.
- Segregation of duties.
- Documentation procedures.
- Independent internal verification. (correct answer)
Explanation: While a voucher system involves documentation (C) and establishing responsibility (A), the specific act of an employee comparing documents prepared by different departments (purchasing, receiving, and the external vendor) before authorizing payment is a prime example of independent internal verification. It verifies that the company is paying only for goods that were properly ordered and actually received.
Question 10
A company is experiencing a significant increase in "lapping" of its accounts receivable. Lapping involves an employee stealing a payment from Customer A and then applying a later payment from Customer B to Customer A's account to hide the theft. Which of the following internal controls is most effective at detecting this type of fraud?
- Requiring daily deposit of all cash receipts in the bank.
- Comparing the details on the bank deposit slip to the details on the remittance advices. (correct answer)
- Reconciling the accounts receivable subsidiary ledger to the general ledger control account.
- Performing surprise counts of the petty cash fund on a regular basis.
Explanation: Lapping involves manipulating the crediting of customer accounts. A control that compares the specifics of the deposit (who paid and how much, from the deposit slip) with the specifics of the payments recorded (from remittance advices) would detect a discrepancy. For example, the deposit slip would show a check from Customer B, but the records would show a credit to Customer A's account. This comparison provides direct evidence of lapping. Daily deposits (A) and G/L reconciliation (C) are good controls but are less specific for detecting lapping. Petty cash (D) is irrelevant.
Question 11
A small business owner is concerned about the theft of cash receipts from mail-in payments. Due to limited staff, one employee opens the mail, lists the receipts, prepares the deposit slip, and makes the bank deposit. Which of the following would be the most effective and feasible compensating control for this lack of segregation of duties?
- Requiring the employee to be bonded for an amount exceeding average daily receipts.
- Having the business owner periodically conduct surprise cash counts of the employee's work area.
- Instructing customers to make all payments via credit card online instead of by mail.
- Having the business owner obtain the bank statement directly from the bank and promptly prepare the bank reconciliation. (correct answer)
Explanation: In a small business where segregation of duties is not possible, a strong compensating control is critical. Having the owner (an independent party) receive the bank statement directly and perform the reconciliation provides a powerful independent check on the employee's work. The owner can compare the recorded receipts to the actual deposits shown on the bank statement, which would likely detect any misappropriation of mailed-in receipts. Bonding (A) is protective, not preventative/detective. Surprise counts (B) are ineffective for mail receipts already deposited or stolen. Changing customer behavior (C) is a business model change, not an internal control for the current process.
Question 12
An internal auditor is reviewing a company's cash disbursement process. They note that the accounts payable department authorizes payments, the treasurer signs and mails the checks, and the accounting department records the payments. The auditor finds this arrangement acceptable. Which control principle is most critical to making this segregation of duties effective?
- The treasurer should have no access to the accounting records.
- The accounts payable department should not have access to blank checks. (correct answer)
- The accounting department should also be responsible for preparing the bank reconciliation.
- The treasurer should compare the check amount to the supporting voucher package before signing.
Explanation: The scenario describes the classic segregation of duties for disbursements: Authorization (A/P), Custody (Treasurer), and Record-keeping (Accounting). For this to be effective, the separation must be complete. The most critical aspect is that the department authorizing payments (Accounts Payable) must not have access to the asset they are authorizing payment for (the blank checks). If A/P had blank checks, they could authorize and create a fraudulent payment, bypassing the entire control structure.
Question 13
A retail company implements a new cash handling procedure where the person who prepares daily bank deposits also reconciles the bank statements and maintains the cash receipts journal. The company's auditor identifies this as a significant internal control deficiency. Which principle of internal control is primarily violated, and what is the most likely consequence?
- Segregation of duties is violated; the employee could manipulate bank reconciliations to conceal theft from daily deposits (correct answer)
- Physical controls are violated; cash receipts could be stolen before being recorded in the journal
- Documentation procedures are violated; bank deposits might not be properly supported by source documents
- Independent verification is violated; mathematical errors in deposit calculations could go undetected
Explanation: The primary violation is segregation of duties - the same person handles custody of cash (preparing deposits), recording (maintaining cash receipts journal), and reconciliation functions. This allows the employee to steal cash and then manipulate the bank reconciliation to hide the theft. Choice B is incorrect because physical controls relate to safes, locks, etc. Choice C is wrong because documentation isn't the main issue here. Choice D is incorrect because while verification is compromised, the root problem is lack of segregation of duties.
Question 14
A nonprofit organization receives donations through multiple channels: online payments, mailed checks, and cash collected at events. The organization's treasurer handles all donation processing and maintains the donor database. Recent internal audit findings indicate that some donations may not have been properly recorded. Which control enhancement would provide the strongest detective control over donation completeness?
- Require pre-numbered receipt forms for all donations and account for the sequence monthly
- Have board members independently verify large donations by contacting donors directly
- Implement segregation of duties by having different people handle cash and update donor records
- Send annual donation summaries to all donors and investigate any discrepancies they report (correct answer)
Explanation: Annual donor summaries provide the strongest detective control because donors will report if their donations aren't reflected, catching both intentional omissions and recording errors. This creates external verification of completeness. Choice A is preventive rather than detective and only works for donations that generate receipts. Choice B is good but only covers large donations, not the completeness of all donations. Choice C is preventive (segregation of duties) rather than detective, and while important, doesn't directly detect missing donations.
Question 15
Metro Services Inc. processes customer payments through both mail receipts and online transactions. The company has experienced several instances where customer payments were received but not properly recorded, leading to collection notices being sent to customers who had already paid.
Based on the scenario above, which internal control implementation would most effectively address the root cause of Metro Services' customer payment recording problems?
- Require daily preparation of a prelisting of mail receipts by mailroom staff independent of accounts receivable personnel (correct answer)
- Implement monthly confirmations with customers to verify account balances and payment histories
- Establish a lockbox system where the bank processes all customer payments and transmits payment data electronically
- Require supervisory approval for all collection notices before they are sent to customers
Explanation: A prelisting of mail receipts creates an independent record of all payments received before they reach accounts receivable staff, ensuring payments can't 'disappear' without being recorded. This addresses the root cause - payments being received but not recorded. Choice B is detective rather than preventive and wouldn't stop the initial recording failures. Choice C is expensive and may not be practical for all companies. Choice D only prevents the embarrassment of incorrect collection notices but doesn't fix the underlying recording problem.
Question 16
A company's petty cash fund of $500 is replenished monthly. During the monthly count, the custodian presents $75 in currency and coins plus expense receipts totaling $430. The receipts include: office supplies $180, postage $95, taxi fare $85, and a restaurant meal $70. What internal control deficiency is most apparent, and what action should be taken?
- The fund is over the $500 limit by $5; the excess cash should be deposited and the fund balance adjusted
- Personal meal expenses are included; the $70 receipt should be rejected and the custodian should reimburse the fund (correct answer)
- Documentation is incomplete; additional supporting documents should be obtained before replenishment
- The fund balance is correct, but monthly replenishment is too infrequent for proper control
Explanation: The restaurant meal likely represents a personal expense inappropriately paid from petty cash. Personal expenses violate petty cash policies. The custodian should reimburse the fund 70forthisinappropriateexpense.Whilethetotalofcashplusreceipts(75 + $430 = $505) exceeds the $500 fund limit by $5, this overage resulted from the improper meal expense. Choice A identifies the mathematical discrepancy but not the underlying policy violation. Choice C assumes documentation problems without evidence. Choice D addresses procedural frequency rather than the immediate control violation. Question 17
A manufacturing company requires that all cash disbursements over $500 be supported by approved purchase orders, receiving reports, and vendor invoices before payment authorization. However, the accounts payable clerk has been creating fictitious vendor invoices and processing payments without corresponding purchase orders or receiving reports. Which combination of internal control weaknesses most likely enabled this fraud?
- Inadequate segregation between invoice processing and check signing, combined with lack of vendor master file controls
- Poor physical safeguarding of blank checks, combined with insufficient documentation of payment approvals
- Absence of independent verification of three-way matching, combined with weak vendor establishment procedures (correct answer)
- Inadequate supervision of accounts payable function, combined with lack of monthly bank reconciliation procedures
Explanation: The fraud succeeded because: (1) no independent person verified that all three documents (PO, receiving report, invoice) actually existed and matched, and (2) the clerk could add fictitious vendors without proper authorization controls. Choice A is partially correct about segregation but focuses on check signing rather than the three-way matching failure. Choice B misidentifies the core issues - the problem isn't physical check security. Choice D is incorrect because supervision and bank reconciliation, while important, wouldn't necessarily catch fictitious invoices if the three-way matching appeared complete.
Question 18
A company's cash account shows a balance of $45,000, but the bank statement shows $42,800. Investigation reveals: outstanding checks of $8,200, deposits in transit of $6,000, a bank service charge of $150, and an NSF check from a customer for $1,050. After preparing the bank reconciliation, the company discovers that the reconciled balance differs from both the book and bank balances. What internal control procedure would most likely have prevented this discrepancy?
- Requiring dual signatures on all checks over $1,000 to prevent unauthorized payments
- Performing monthly bank reconciliations by someone independent of cash handling functions (correct answer)
- Implementing prenumbered deposit slips and matching them to bank statements
- Establishing a petty cash fund with proper documentation requirements
Explanation: The reconciled balance should be 39,600(42,800 + $6,000 - $8,200 - $150 - $1,050), but the books show $45,000, indicating recording errors that regular independent bank reconciliations would catch. Choice A addresses check authorization, not reconciliation accuracy. Choice C relates to deposit documentation but wouldn't catch all the errors present. Choice D addresses petty cash controls, which is irrelevant to this bank reconciliation issue. Question 19
A company implements electronic funds transfer (EFT) for all payments over $1,000. The system requires two-person authorization: one person initiates the transfer and a second person approves it. However, the same individual who approves EFT payments also performs the monthly bank reconciliation. From an internal control perspective, what is the primary risk created by this arrangement?
- Unauthorized EFT payments could be made without proper supporting documentation
- The two-person authorization requirement could be circumvented through supervisor override capabilities
- Improper EFT payments could be concealed through manipulation of the bank reconciliation process (correct answer)
- Electronic payment records could be altered after the transactions are processed
Explanation: The person who approves EFT payments should not also reconcile bank statements because they could approve inappropriate payments and then manipulate the bank reconciliation to hide them. This violates segregation of duties between authorization and reconciliation functions. Choice A is incorrect because the two-person system should prevent unauthorized payments. Choice B addresses system overrides, which isn't the main issue described. Choice D concerns record alteration, but the primary risk is reconciliation manipulation, not record tampering.
Question 20
A retail store's daily cash reconciliation shows consistent shortages of $10-20 per day across multiple cashiers and shifts. Management reviews security cameras and finds no evidence of theft. The store uses an electronic register system that tracks all transactions. Which internal control analysis would be most appropriate for this situation?
- Review the adequacy of physical safeguards for cash storage during and after business hours
- Examine whether cashiers are properly trained on handling complex transactions like returns and discounts (correct answer)
- Investigate the accuracy and calibration of the electronic register system's transaction recording
- Assess whether the current cash reconciliation procedures are being performed correctly and completely
Explanation: Consistent small shortages across multiple cashiers suggest systematic operational errors rather than theft or system problems. Complex transactions like returns, voids, and discounts are common sources of cash handling errors when cashiers aren't properly trained. Choice A is less likely since camera surveillance showed no theft evidence. Choice C is possible but less probable since the pattern suggests human error rather than systematic register malfunction. Choice D assumes the reconciliation process is wrong, but the consistency across multiple people suggests the shortages are real.