Internal Audit: A Case Study

First and foremost, the accounting system used should be updated. The case stated that the system was 30 years old and that prior accounting period transactions could not be locked down, which enabled internal control processes to be bypassed. Enhancing internal

Describe how you would conduct the audit process, incorporating the analytical procedures you would use to investigate selected business transactions?

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate (Louwers & Reynolds, 2007). We believe that the audit evidence obtained is sufficient and appropriate to provide a reasonable basis for our opinions.

study guide. To download free internal audit effectiveness: an ethiopian public sector case you need

Quality Objectives - The quality objectives define measurable goals relative to the company's quality management system. Requirements on the quality objectives are in ISO 9001:2008 section 5.4.1.

An effective system of internal control must be built on the basis of the analysis of enterprise-wide risks. Therefore, to create value for its customers and other stakeholders, an organization must have in place the ability to systematically assess and analyze all material risks that affect the entity’s planned objectives. (Integrated Framework, Volume II Guidance, June 2008). Internal control of the accounting process is designed to detect unintentional data errors rather than intentional errors. Garbage in, garbage out! Even good accounting systems can not catch

There are many rules companies must follow whenever documenting financial information or any other data which is gather during any business transactions. In order for said companies to report financial information internal controls have to be put in place as companies have to adhere to certain laws and regulations. Internal controls can be defined as a process which companies follow in order to ensure all financial reporting is done in a reliable and lawful manner. Some think of it as a system which works within a system as it plays a major role on the success of a company’s accounting system. At the organizational level, internal control objectives relate to the reliability of financial

Potential for misstatement & fraud: Compliance with the established procedures and controls were found to be ineffective. The fraud reporting process, technically put in place does not serve its intended purpose. The ineffective control environment has created an attitude and tone across the company where errors and inappropriate behavior may be seen as acceptable, thus creating opportunity for concealing fraud and potential misstatements.

During the performance of this integrated audit, require numerous judgments about the internal control and overall financial reporting and how well it addresses risks of material misstatements within the financial statements (AICPA, 2014). After re-evaluating the previous errors found from the previous audit, the audit team found the corrective actions to be appropriate and justified in elimination of human error by implementing additional checks and balances within the manual process. No additional misstatements have been found and all internal controls off the financial reporting seem appropriate and just.

You are the internal audit senior responsible for conducting an assurance engagement of the XYZ Company payroll process. This process has not been audited for three years and, as such, is due in the normal audit cycle. There have been no significant changes since the previous audit, that is, there were no system changes, no reorganization of personnel, and no substantive procedural changes. However, during the last assurance engagement, the internal audit function identified several observations, some of which were considered significant. The significant observations related to:

Company’s new CAE can explain to the non-audit employees that IAD’s objective is to add values and help improve the business processes as well as company performance, which will affect each employee significantly. It is important to let all employees understand that the answers or thoughts they provide to the internal auditors will not be used against them. Moreover, establishing good relationship and providing ongoing communication with the non-audit employees can make them feel more comfortable to share their feedback and thoughts, and can reduce the “us vs. them” relationship between company’s non-audit employees and the staff of internal auditors.

The final responsibility for the integrity of an SEC registrant’s internal controls lies on the management team. U.S. companies need to refer to a comprehensive framework of internal control when assessing the quality of financial reporting to determine that financial statements are being presented under General Accepted Accounting Principles, GAAP. The widely used framework is referred as COSO, Committee of Sponsoring Organizations of the Treadway Commission, sponsored by the following organizations American Accounting Association, the American Institute of CPA’s, Financial Executives International, the Institute of Internal Auditors, and the Institute of Management Accountants. COSO’s defines internal control as:

Following the risk assessment procedures, substantive procedures are designed and conducted to detect material misstatements of relevant assertions. Substantive procedures include analytical procedures and tests of details. Analytical procedures involve evaluations of financial statement information by a study of relationships among financial and nonfinancial data. Tests of details may be divided into three types. One test is the test of account balances to address whether there are misstatements in the ending balance of an account. In the case of Crazy Eddie, auditors should have put greater attention to inventory and accounts payable accounts. The second test is a test of classes of transactions to determine whether particular types of transactions have been properly accounted for during the period. Crazy Eddies fraudulently classified these transshipping transactions as retail sales to inflate its sales revenue and continue growth at existing stores. A key ratio for retailers is to compare growth in existing stores to growth from new stores. The third and final test is a test of disclosures to evaluate whether financial statement disclosures are properly presented. Crazy Eddie prepared bogus debit memos of over $20 million to understate accounts payable.

A business can not work out without an account system, which includes internal. Internal controls are used by companies to make sure financial information is accurate and valid. Strong internal controls are signs of a financially healthy company and protect the company’s integrity. Strong internal controls can also increase a company’s profitability. There are several types of internal controls that companies used to protect themselves such as: Segregation of duties, asset purchases, supervisor review, internal audits and adequate documents and records. This paper will discuss several topics from a case study about And the Fraud

According to the Institute of Internal Auditors (IIA), (2011), the internal auditing is a team of consultants, a department and a division or other practitioner which independent, have objective assurance and conduct a consulting activity which is designed to add value and improve the organization operations. The internal auditor can help an organization in achieving its objectives by bringing a discipline and systematic approach in order to improve and evaluate the effectiveness of risk management, control and governance process.