Essay Audit Engagement

First and foremost, the accounting system used should be updated. The case stated that the system was 30 years old and that prior accounting period transactions could not be locked down, which enabled internal control processes to be bypassed. Enhancing internal

An “audit failure” is a situation in which a professional auditor fails to detect a material error in the financial statements of the company they are auditing. The audit failure in the situation of Rita Crundwell the failure was exacerbated by the fact that the auditors continually signed off on the misstated statements for years. Crundwell is responsible for many of the deficiencies mentioned, such as the missing funds and the incorrect invoices. However, she is not the sole person responsible for this fraud. The lack of internal control is to blame, and this cannot be placed on a single person. The government should have separated duties and used

Appendix A.2 also lists several factors that could provide opportunities for management/employees to commit fraud. One factor that could lead to fraud is if, “There is ineffective monitoring of management as a result of: domination of management by a single person or small group without compensating controls.” The auditors should have taken notice of the lack of controls and segregation of duties with respect to Phar-Mor’s

“The control environment sets the tone of an organization, influencing the control consciousness of its people. It is the foundation for all other components of internal control, providing discipline and structure.” The Committee of Sponsoring Organizations of the Treadway Commission (COSO) published the Internal Control–Integrated Framework in 1992. As summarized above one can see the importance of the implementation of an effective control environment, as it sets the foundation for the other 4 components of internal control. The control environment is made up fundamental smaller components. The ones that were particularly relevant to BMIS are the use of board of directors and audit committee, management philosophy and operating style, and human resource policies and practices. If management doesn’t prioritize control, then the rest of the organization will not put precedence on following policies and procedures either. This was clearly evident at Bernard L. Madoff Investment Securities LLC (BMIS), and ultimately led to their downfall.

With different industry definitions and viewpoints, fraud can be a tough issue for audit committee members to grasp for oversight purposes. The legal obligations of audit committee members have intensified because their standard duty of care and loyalty to the entity has increased in light of management fraud activities.

The design and implementation and objectives of company controls are not adequate to meet the control objectives. The control environment control objective is ineffective. This control objective lacks a written policy on ethical conduct, is lacking oversight from the board of directors and audit committee, lacks a consistent style and philosophy from management, and lacks a strong commitment to competence. The risk assessment control objective is effective but lacks any antifraud program and controls. The information and communication control is ineffective. A virus has been detected and is affecting the files of the company. This control is lacking a strong IT department. The general controls financial reporting control objective is effective but is weak in detecting or preventing material misstatement. The monitoring control objective is ineffective; this control has need of an internal auditor.

The chances of failures can be decreased by executing the checks on the systems. These keep an eye on the systems preventing risks from occurring, and these checks are avoided as the interior controls. The motivation behind the inner controls is to keep the organization safe from risks associated with the modernized accounting-system risks. Organizations change their manual accounting systems to computerized accounting systems for different reasons, this incorporates the points of interest, and the explanation behind utilizing electronic accounting information is instinct. The organizations embrace the policies of their

2 Managing fraud risk: The audit committee perspective Fraud in a fi nancial statement audit

ASC 410-20-25-8 indicates that an asset retirement obligation is estimable if all of the following exist:

With every internal control weakness a company needs to identify either a control policy or control procedure that will help prevent error or fraud from occuring in the future. Based on my suggestions as to what weaknesses existed at Goodner Brothers, Inc. I have suggested the policies or procedures that could be implemented to help prevent future issues. The internal control I would implement to hinder employee access to the accounting system would be to secure all computer programs with individual usernames and passwords to prevent access from others. The bookkeeper should be the only employee with access to the accounting system and to test this procedure the company would need to try and access the software without a username and password. To monitor the storage warehouse situation, the company should install computer scanning systems and video cameras at each location to supervize whether tires are being scanned in and out upon delivery and pick-up and to determine who and when these transactions are taking place. Semi-annual reviews should be conducted by sales managers to evaluate their sales representative. In addition, strengthening the tone at the top mentality should lie in the hands of each owner by personally reviewing all sales managers to create a top down effect.

To conduct the audit, the firm must acquire sufficient understanding of the internal control processes to help determine the nature and timing of the audit. However, the audit is not designed to identify deficiencies in internal control or provide assurance. The firm will make the audit committee aware of any significant deficiencies that come to Anderson, Olds, and Watershed’s attention during the audit.

Inherent limitations and potential fraud are a couple of internal control risks that are common among large, high-volume retail stores. Even if a well-designed internal control system is in place, the employees using it are ultimately the deciding factors in its effectiveness. The audit planning decisions should carefully plan to test internal controls for weaknesses concerning these areas.

Internal controls represent an organization’s processes and procedures used to meet its goals and objectives and serve as a defense in safeguarding assets and preventing and detecting errors, fraud, and abuse. Effective internal controls provide reasonable assurance that an organization’s objectives are achieved through (1) reliable financial reporting, (2) compliance with laws and regulations, and (3) effective and efficient operations. The passing of the Sarbanes-Oxley Act of 2002, as well as the numerous corporate frauds and bankruptcies over the past decade—including some

“Audit committee members or their agents may proactively examine areas, functions, and personnel where collusive fraud risk is reasonably likely to be perpetrated,” (Zmags). The search for fraud, even if performed in the same location multiple times, may continue until the audit committee feels confident that they have ruled out the probability that fraud is prevalent. One of the biggest risks of fraud is management override of controls, requiring the extensive search for risk in, “journal entries and other adjustments and reviewing accounting estimates for possible biases that could result in material misstatements,” (Nysscpa).

The control environment is what sets the tone for an organization and is the foundation for all other components of internal control. It provides discipline and structure and reflects the ethical values, integrity and competencies of the organization. The control environment is very important to effective internal control over financial reporting to an audit client like WorldCom, because good designs can prevent and detect frauds and errors. But because WorldCom had such a poor control environment, the company would require more testing for an audit. This shows that the board did not exercise oversight responsibilities over financial reporting or internal controls.