Use the toggle arrows to explore each section at your pace, enabling effective, focused study sessions.
‣
🔹 What is an Internal Control System?
📌 An internal control system comprises the policies, procedures, and technologies that organizations implement to ensure the integrity of financial and accounting information, promote accountability, and prevent fraud. It includes safeguards to ensure that business operations are effective and efficient, that laws and regulations are being followed, and that financial reporting is accurate and timely.
‣
- The Sarbanes-Oxley Act of 2002 (SOX) represents a landmark in augmenting internal control requirements for U.S. public companies. Mandating rigorous financial reporting and operational protocols, SOX requires companies to establish, report, and evaluate effective internal controls over financial reporting. Section 404, in particular, necessitates that management assess the effectiveness of these controls and that independent auditors attest to this assessment. The intent is to bolster the accuracy and reliability of corporate disclosures, thus providing protection against fraud and ensuring that financial statements are free from material misstatements.
‣
- COSO is a joint initiative of five private-sector organizations that provides thought leadership through the development of frameworks and guidance on enterprise risk management, internal control, and fraud deterrence. COSO's internal control framework is widely recognized as the leading guidance for designing, implementing, and conducting internal control and assessing its effectiveness.
‣
- Blockchain technology offers a decentralized ledger of all transactions across a network. This technology can be used as an internal control, providing transparency, traceability, and security that can help prevent fraud, enhance the reliability of financial reporting, and reduce the complexity of compliance.
‣
The Fraud Triangle is a model for explaining the factors that cause someone to commit occupational fraud. It consists of three components which, together, lead to fraudulent behavior:
- Opportunity: The ability of an individual to commit fraud with a low perceived risk of getting caught.
- Motivation/Pressure: A financial need or other incentive that the individual is looking to satisfy through fraud.
- Rationalization: Justification or reasoning that an individual uses to make the fraud acceptable or rational in their mind.
‣
- This principle acknowledges that the cost of implementing an internal control should not exceed the benefit that the control provides. Essentially, while an organization might be able to implement extremely comprehensive controls to prevent or detect fraud, the costs associated with such controls might not be justifiable in comparison to the risk or size of the potential fraud. Controls must therefore be both effective and efficient.
‣
🔹 Internal Control Principles (7 total)
📌 To excel in your exams, you will need to become proficient at evaluating hypothetical scenarios concerning seven internal control principles. Here’s how to approach them:
- Identify the Principle: Determine which internal control principle applies to the given situation.
- Assess Effectiveness: Evaluate whether the scenario demonstrates a strong or weak application of the principle.
- Predict Consequences: Think about the potential negative outcomes if the principle is not properly followed. What could happen?
- Understand Prevention: Consider how adhering to the principle can prevent the identified issues.
Mastering these steps is essential for analyzing hypothetical situations on your exams and answering questions correctly. Dig in further below!
‣
- Explanation: Assign specific tasks to specific individuals to establish clear lines of accountability.
- Purpose/Reasoning: Assigning clear responsibilities helps prevent task overlap and confusion, thereby reducing the risk of errors or misconduct.
- Internal Control Strength Example: Designating a single employee with the sole authority to issue refunds ensures clarity in tracing transactions.
- Internal Control Weakness Example: Sharing the duty of cash handling among several staff without clear individual transaction logs can lead to ambiguity in pinpointing responsibility.
- Internal Control Failure Example: Multiple employees using a common login for a financial system makes it impossible to trace discrepancies back to an individual, leading to potential fraud.
- Prevention through Proper Adherence: Individual logins and access controls would ensure a clear audit trail, deterring fraudulent activities by enabling traceability to an individual.
‣
- Explanation: Ensure complete and precise recording of financial transactions and asset tracking.
- Purpose/Reasoning: Adequate record-keeping is critical for verifying the integrity of financial information and supporting audit activities.
- Internal Control Strength Example: Utilizing digital time-stamped entries for all transactions ensures a verifiable audit trail.
- Internal Control Weakness Example: Manual entries in logs without immediate digital backup can be susceptible to loss or manipulation
- Internal Control Failure Example: Failing to reconcile bank statements promptly leads to undetected discrepancies caused by fraudulent activities.
- Prevention through Proper Adherence: Timely reconciliation and review of bank statements could quickly highlight discrepancies for investigation and action, minimizing the window for fraudulent activities to go unnoticed.
‣
- Explanation: Purchase insurance for company assets and fidelity bonds for employees in trust positions to mitigate risks of loss.
- Purpose/Reasoning: This coverage protects the organization’s financial interests and adds a layer of security against theft, fraud, etc.
- Internal Control Strength Example: Key personnel handling large transactions are bonded via insurance policies, providing protection against potential theft.
- Internal Control Weakness Example: Partial coverage of assets and unbonded personnel may leave the organization exposed to risk.
- Internal Control Failure Example: An employee with a history of dishonesty is not bonded, later commits fraud, and the company bears the financial loss.
- Prevention through Proper Adherence: Conducting thorough background checks and insuring key employees would limit the risk of fraud by providing financial security and deterring fraud among staff.
‣
- Explanation: Delineate the roles between managing assets and maintaining records to avoid conflicts of interest or potential for fraud.
- Purpose/Reasoning: Separation of duties serves as a fundamental check against embezzlement and ensures the integrity of financial data.
- Internal Control Strength Example: A separate accounts team handles ledger entries, while the cashier is responsible for cash transactions.
- Internal Control Weakness Example: A lack of division between handling and recording can give rise to misuse without detection.
- Internal Control Failure Example: An employee embezzles funds by altering the financial records they also maintain, due to a lack of oversight.
- Prevention through Proper Adherence: Enforcing segregation of duties would make it more difficult for an employee to commit and conceal fraudulent activities, as alterations would require collusion and be subject to detection by independent checks.
‣
- Explanation: Distribute related financial tasks among different individuals or teams.
- Purpose/Reasoning: Division of transactional duties helps prevent fraud by creating a system of mutual oversight and checks.
- Internal Control Strength Example: Different staff members handle order placement, receiving goods, and making payments to suppliers.
- Internal Control Weakness Example: Concentrating transaction authority in one person increases the potential for unchecked errors or abuse.
- Internal Control Failure Example: Unauthorized bonuses are issued to management because a single employee controls payroll processing without sufficient review.
- Prevention through Proper Adherence: Implementation of a multi-person review system for payroll processing would create a system of checks that could detect and prevent unauthorized transactions.
‣
- Explanation: Leverage advanced software and hardware solutions to secure assets and sensitive data.
- Purpose/Reasoning: Technology, when used effectively, can automate controls and reduce the human error factor.
- Internal Control Strength Example: The use of encryption and two-factor authentication protects sensitive financial information.
- Internal Control Weakness Example: Relying on legacy systems without regular updates can lead to security breaches.
- Internal Control Failure Example: A cyber attack results in data theft because the company neglected to implement recommended security updates and patches.
- Prevention through Proper Adherence: Regular updating and patching of security systems, as well as adherence to technological best practices, would greatly reduce the vulnerability to cyber attacks.
‣
- Explanation: Carry out periodic and impartial assessments of the internal control system from unbiased third parties.
- Purpose/Reasoning: Regular audits are essential for verifying the operational effectiveness of internal controls and identifying areas for improvement.
- Internal Control Strength Example: Engaging a third-party auditor to perform unannounced financial reviews enhances transparency.
- Internal Control Weakness Example: Predictable or infrequent assessments can result in oversight gaps, complacency, and an environment for potential fraud.
- Internal Control Failure Example: Consistent overstatement of inventory levels goes unnoticed due to a lack of independent review, making it easy for employees to steal inventory unnoticed.
- Prevention through Proper Adherence: Regular, unannounced audits by an independent third party would likely uncover any overstatements of inventory, discouraging theft and identifying discrepancies promptly.
‣
🔹 Cash Controls
📌 Ensuring financial integrity through effective cash management practices is crucial for any business. Below, we’ll dive into the multiple facets of cash controls that safeguard company assets and streamline operations.
‣
- Explanation: Instituting policies and procedures to ensure that cash is handled safely, used properly, and recorded accurately.
- Importance: Strong cash controls help prevent theft, fraud, and accounting errors.
‣
- This term refers to not only the physical currency held by a company but also to those assets that can be quickly converted to cash with minimal impact on their value. Cash equivalents include money market holdings, short-term government bonds, and treasury bills. These are considered the most liquid assets on a company’s balance sheet and are critical for meeting short-term obligations.
‣
- Explanation: Liquidity measures a company's ability to pay off its current liabilities with its current assets.
- Importance: High liquidity implies that a company can easily meet its short-term debts, which is a positive sign for creditors and investors
‣
- Explanation: The process of collecting, managing, and investing cash. It encompasses a range of practices including cash flow forecasting, investment management, and strategies for optimizing the use of cash.
- Importance: Effective cash management ensures that a company has enough cash to meet its obligations, while also minimizing idle cash through effective investments.
‣
- Explanation: Refers to cash payments made by customers for goods or services at the point of sale.
- Importance: These receipts must be recorded and deposited promptly to prevent misappropriation of funds and to maintain accurate records.
‣
- Explanation: An account used to report any discrepancies between recorded cash amounts and actual cash amounts when reconciling cash receipts and disbursements.
- Importance: It provides a record of errors or theft in cash transactions, and a consistently high balance may indicate larger issues with cash handling.
‣
- Explanation: A voucher system is a control mechanism to ensure that only authorized payments are made by a company for legitimate transactions.
- Importance: It involves authorization, documentation, and recordkeeping processes to provide evidence that goods and services are received and payments are made properly.
‣
- Explanation: This refers to the sequential process and paper trail created by a voucher system, documenting the initiation, authorization, and completion of transactions.
- Importance: Proper document flow allows for verification and auditing of transactions, thereby enforcing accountability.
‣
- Voucher: Central to the system is the voucher itself, an internal document used to support the payment of a liability and ensure the transaction is properly recorded. It contains details of the transaction, including the amount owed, the date, the nature of the transaction, and the parties involved.
- Purchase Requisition: The process begins when a department identifies a need for goods or services and fills out a purchase requisition form. This form is a request to the purchasing department to procure an item or service.
- Purchase Order: In response to the purchase requisition, a purchase order is generated, which is a formal offer to buy products or services from a vendor, with specified terms regarding price, quantity, and other conditions.
- Receiving Report: Upon receipt of the ordered goods or services, the receiving department generates a receiving report that confirms what has been received, noting the condition and quantity of the goods.
- Supplier Invoice: The vendor sends an invoice, which is the bill for the goods or services provided. It specifies the amount due, payment terms, and detailed list of the goods or services.
- Invoice Approval: Before proceeding with payment, the invoice must be matched with the purchase order and receiving report to ensure that what was ordered was received and should be paid for. This process is known as three-way matching and serves as a key internal control.
- Check or Payment Authorization: Once the voucher is complete, a check or another form of payment is prepared and authorized to settle the liability. The completed voucher packet (including the purchase order, receiving report, supplier invoice, and any other necessary documentation) serves as evidence to authorize the disbursement.
- Record Keeping: Each voucher and its supporting documents are recorded in the company's accounting system, which will eventually be posted to the appropriate general ledger accounts, such as Accounts Payable, Inventory, or Expenses.
Importance of the Voucher System:
- Internal Control: It provides a clear audit trail from the initiation of a purchase to the final payment, which can be followed during internal or external audits.
- Prevention of Fraud: By segregating duties and requiring documentation and authorizations at each step, the voucher system prevents unauthorized transactions and fraud.
- Efficient Record Keeping: It centralizes documentation related to procurements and payments, making record keeping and retrieval efficient and standardized.
‣
- Explanation: A small amount of cash kept on hand for minor, unexpected expenses.
- Importance: A petty cash system includes controls such as a custodian, limited access, and periodic reconciliations to monitor and control small expenditures.
‣
- Explanation: EFT is a system that allows the electronic movement of money between accounts without the physical exchange of cash or checks.
- Importance: It speeds up transactions, reduces the use of paper, and can enhance security and tracking of payments.
‣
🔹 Bank Reconciliations
📌 Bank reconciliation is the process of matching the balances in an entity's accounting records for a cash account to the corresponding information on a bank statement. The goal is to identify any discrepancies between the two records to ensure the figures are accurate and consistent.
‣
- Explanation: The purpose of performing a bank reconciliation is to find and understand the differences between the cash balance in the company's cash account and the bank statement balance at a specific point in time. It's a critical process for verifying the integrity of transaction records and ensuring that the cash records are accurate and complete.
‣
- Explanation: The bank statement balance is the amount shown in the bank's records for the company's account. It reflects all the transactions processed by the bank up to the statement date, which includes deposits, withdrawals, bank fees, and other charges or credits made by the bank.
‣
- Explanation: The book balance, or ledger balance, is the amount shown in the company's records for the cash account. It includes all cash transactions recorded by the company, such as receipts, disbursements, and adjustments that may not yet be reflected in the bank statement.
‣
- Explanation: A typical bank reconciliation starts with the bank statement balance, adjustments are made for items such as deposits in transit and outstanding checks, leading to the adjusted bank balance. Similarly, the book balance is adjusted for items like interest earned or bank fees, resulting in the adjusted book balance. The end goal is for the adjusted bank balance to equal the adjusted book balance.
‣
- Explanation: Adjustments on the bank side are noted to align the bank statement balance with the company's cash records. These adjustments reflect transactions such as deposits in transit and outstanding checks that the company has recorded but the bank has not yet processed.
- No journal entry is required for these adjustments because they are simply reconciling items to account for the timing differences between the company’s records and the bank’s records. Also, the company does not control the bank's accounting records; therefore, it cannot make actual entries on the bank side.
‣
- Explanation: We adjust the book side when transactions are recognized by the bank but have not been entered in the company's books. This includes bank fees, interest income, or NSF (Non-Sufficient Funds) fees. Adjustments are made by recording journal entries in the company's books to reflect these transactions.
‣
- Explanation: Adjustments on the book side require a journal entry in the company's accounting records. These entries are necessary because they reflect the company's acknowledgment of certain transactions that the bank has already processed and reported on the bank statement. Since the company maintains its own financial records, it must update its cash account to match the confirmed bank activity.
- In contrast, no journal entries are needed for the bank side adjustments because these represent the bank's actions that have not yet been captured in the company's books due to timing differences.
‣
- Deposit in Transit: Refers to cash or checks received and recorded by the company's cash account near the end of the accounting period, but which have not yet appeared on the bank statement by the statement cut-off date.
- Example: If a company receives a check from a customer and records it in their books on the last day of the month, but the bank does not record the deposit until the next day, this deposit would be in transit at the time the bank statement is issued.
- Outstanding Checks: Checks issued by the company and recorded as a decrease in the company's cash account, but the recipient has not yet deposited or cashed them, and therefore the bank has not cleared them from the account.
- Example: The company writes a check to a supplier on the 29th of the month, deducts the amount from their cash account, but the supplier doesn't deposit the check until the 3rd of the following month. That check is considered outstanding at the month-end.
- Bank Errors: Errors made by the bank in recording transactions in the company's bank account can include incorrect amounts credited or debited, or transactions that were incorrectly recorded or omitted.
- Examples and Bank Reconciliation Adjustments:
- Situation: Suppose the bank erroneously debits a company's account for $1,200 instead of the correct amount of $120 for a utility bill payment.
- Reconciliation Action: The company discovers this error during the bank reconciliation process. They would then record this discrepancy as an adjusting item, adding back $1,080 on the bank statement side of the reconciliation to reflect the correct amount.
- Bank Correction: Upon notification, the bank would investigate the error. After confirming the mistake, they would issue a correction by crediting the company's account with the $1,080 difference to correct the bank statement balance.
- Situation: If the bank accidentally credits a company's account for $2,500 instead of the actual deposit of $250, the company would uncover this during reconciliation.
- Reconciliation Action: The company should list a deduction of $2,250 on the bank statement side of the reconciliation to adjust the bank's balance to what it should be based on the company's records.
- Bank Correction: The company informs the bank of the error, prompting a bank investigation. After verifying the mistake, the bank would debit the company's account by the $2,250 excess to resolve the error and reconcile the bank statement with the company's deposit record.
‣
‣
In each case, the adjustments on the bank reconciliation are temporary placeholders to match the company's records with the corrected bank statement once the bank has resolved the errors. The bank reconciliation serves as a tool to identify such discrepancies, ensuring that once corrected by the bank, both sets of records—the company's book balance and the bank statement balance—will align.
‣
- Interest “Credited” by the Bank: Additional funds deposited to the company's account for interest which the company must record.
- Interest “Debited” by the Bank: Interest charges or loan payments withdrawn by the bank that need to be recorded by the company.
- Note Receivable Collection: When the bank collects payments on a note receivable on behalf of the company, this must be recorded in the company's books.
- Bank Service Charges: Monthly fees, penalty charges, or service charges deducted by the bank which the company needs to record.
- NSF Fees: Fees charged when a customer's payment bounces due to insufficient funds, which must be accounted for in the company's books.
- Book Errors: Mistakes made in the company's records that need to be corrected through a journal entry.
