Module 4 (Ch 9-13) Flashcards
Risk and Control: The company’s background check provider does not have an independent internal control report in place.
Risk: Violating employment or privacy laws may result in lawsuits, fines, legal penalties, or reputational damage.
Control: Require vendors with access to confidential information to have an internal control report or perform other vendor risk management procedures prior to engagement
Risk and Control: There is no formal process in place for internal/external job posting and recruitment.
Risk: Potential labor regulation compliance issues.
Control: Implement a formal process for internal/external job posting and recruitment
Control Owner #1 and #2: Complete payroll processing checklist.
Payroll manager and N/A
Control Owner #1 and #2: Review and approve the payroll journal before the distribution of payments.
HR manager and N/A
Control Owner #1 and #2: Mail annual tax report (W-2) to each employee for tax filing purposes.
Payroll manager and N/A
Control Owner #1 and #2: Conduct an independent review of employees receiving paychecks by comparing the list to other credible employee listings, such as an active company directory.
HR Manager and N/A
Control Owner #1 and #2: Provide a payroll calendar to employees.
Payroll manager and N/A
Control Owner #1 and #2: Review and sign payroll checks.
Payroll manager and Controller
Control Owner #1 and #2: Reconcile list of employees receiving W-2s to employee main table to account for all employees.
Controller and N/A
Control Owner #1 and #2: Distribute payroll expense reports to department managers for explanations of significant variances.
Payroll manager and Department manager
Control Owner #1 and #2: Perform changes to personal information directly via an online portal.
Employee and HR manager
Control Owner #1 and #2: Review and remit payments for payroll withholdings on a timely basis to government agencies.
Accounting manager and N/A
Risk: Reconcile the list of employees receiving W-2s to the employee main table to verify that the company accounts for all employees.
Noncompliance with statutory requirements may result in fines, interest payments, and other penalties.
Risk associated with the lack of this control: Periodically review physical assets.
Improper use of the asset.
Risk associated with the lack of this control: Perform fixed asset reconciliations.
Fixed asset being expensed instead of capitalized.
Risk associated with the lack of this control: Initially approve fixed asset purchase.
Fraudulent bidding or approval of non-budgeted items.
Risk associated with the lack of this control: Tag fixed assets.
Fixed asset being expensed instead of capitalized.
Risk associated with the lack of this control: Have employee review and sign code of conduct.
Fraudulent bidding.
Risk associated with the lack of this control: have management review acquisition agreements.
Fraudulent bidding or approval of non-budgeted items.
Control Owner #1 and #2: Obtain vendor tax forms.
Director and VP of operations
Control Owner #1 and #2: Allow only authorized personnel to access ordering programs.
IT manager and N/A
Control Owner #1 and #2: Set limits on the amounts of purchases.
Director and VP of operations
Control Owner #1 and #2: Create a receiving location at physical facilities.
Facility manager and N/A
Control Owner #1 and #2: Train purchasing employees.
HR manager and N/A
Control Owner #1 and #2: Prevent owner of vendor file from selecting vendors.
Purchasing manager and N/A
Control Owner #1 and #2: Prevent receiving employees from authorizing purchases.
Director and VP of operations
Control Owner #1 and #2: Install cameras in the receiving areas.
Facility manager and N/A
Control Owner #1 and #2: Train receiving employees
HR manager and N/A
Control Owner #1 and #2: Three-way match a purchase order, receiving report, and vendor invoice.
AP manager and N/A
Control owner and area: Annual review of employee performance is performed.
HR Director in all areas
Control owner and area: Access to the warehouse is limited to authorized employees only.
COO in Inventory management