During an audit of Chien Products, you note that all new accounting employees are set up with a temporary password of "abc123". You also noted that employees are not required to change their passwords when they first set up their accounts, nor is there a requirement to change passwords regularly. Write a paragraph describing the implications of these IT risks.

During an audit of Chien Products, you note that all new accounting employees are set up with a temporary password of "abc123". You also noted that employees are not required to change their passwords when they first set up their accounts, nor is there a requirement to change passwords regularly. Write a paragraph describing the implications of these IT risks.

Auditing: A Risk Based-Approach (MindTap Course List)

11th Edition

ISBN:9781337619455

Author:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Publisher:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Chapter11: Auditing Inventory, Goods And Services, And Accounts Payable: The Acquisition And Payment Cycle

Section: Chapter Questions

Problem 25RQSC

See similar textbooks

Similar questions

As the manager of the external audit team, you realize that the embedded audit module only writes material invoices to the audit file for the accounts receivable confirmation process. You are immediately concerned that the accounts receivable account may be substantially overstated this year and for the prior years in which this EAM was used.RequiredExplain why you are concerned because all ‘‘material’’ invoices are candidates for confirmation by the customer. Outline a plan for determining if the accounts receivable are overstated.
An IT auditor is conducting data analysis procedures on an employee expense report file and notices several expenses for $24.99 from the same individual. The company’s policy requires that any expenses that are under $25.00 do not require a receipt. The IT auditor should: [SELECT ALL THAT APPLY a) Maintain professional skepticism and investigate these transactions further b) Pass on investigating these items further, focusing on higher dollar amounts c) Evaluate the business process approval controls, and related procedures d) Discuss fraud awareness and detection programs with management to gain an understanding of management’s commitment to fraud prevention and related entity-level anti-fraud controls.
The sales of $2,000 made to Shanaya has been posted to the Sara’s account by mistake. It happened because a customer account number was incorrectly entered into the system. Explain what internal control procedure(s) would provide protection against this threat in future?
Responsibilities to Clients’ Cases. Read the following cases. For each case, state whetherthe action or situation shows a violation or potential for violation of the AICPA Code ofProfessional Conduct, explain why, and cite the relevant rule.a. CPA Sal Colt has discovered a way to eliminate most of the boring work of processingroutine accounts receivable confirmations by contracting with the Cohen Mail Service.After the auditor has prepared the confirmations, Cohen stuffs them in envelopes, mailsthem, receives the return replies, opens the replies, and returns them to Colt.b. Cadentoe Corporation, without consulting Jora Cramer, its CPA, has changed itsaccounting so that it is not in conformity with GAAP. During the regular audit engagement, Cramer discovers that the statements based on the accounts are so grossly misleading that they might be considered fraudulent. Cramer resigns the engagement aftera heated argument. Cramer knows that the statements will be given to Sandy Panzer,…
Janice Dodds opens the mail for the Ajax Plumbing Company. She lists all customer checks on a spreadsheetthat includes the name of the customer and the check amount. The checks, along with the spreadsheet, are thensent to Jim Seymour in the accounting department who records the checks and deposits them daily in the company’s checking account. How could the company improve its internal control procedure for the handling of itscash receipts?
Responsibilities to Clients’ Cases. Read the following cases. For each case, state whether the action or situation shows a violation or potential for violation of the AICPA Code of Professional Conduct, explain why, and cite the relevant rule.a. CPA Sal Colt has discovered a way to eliminate most of the boring work of processing routine accounts receivable confirmations by contracting with the Cohen Mail Service.After the auditor has prepared the confirmations, Cohen stuffs them in envelopes, mails them, receives the return replies, opens the replies, and returns them to Colt.b. Cadentoe Corporation, without consulting Jora Cramer, its CPA, has changed its accounting so that it is not in conformity with GAAP. During the regular audit engagement, Cramer discovers that the statements based on the accounts are so grossly misleading that they might be considered fraudulent. Cramer resigns the engagement after a heated argument. Cramer knows that the statements will be given to Sandy…
Choose only one answer as well as state their reasons/rationale for the answer chosen. A customer entered the wrong account number on the memo line of the check mailed to the company. Consequently, another customer’s account was credited for that payment. The most effective way to prevent such problems would be to use:a. Turnaround documentsb. A validity check of customer account numbersc. Closed loop verificationd. Check digit verification of customer account numbers
c) When auditing the client's company, the external auditor should be familiar with the proper design and use of documents and records in order to access the internal control reliability. Assume you are an auditor and you are currently auditing Lappy Sdn. Bhd. You have identified several issues while performing the audit. Sarah the clerk who handles the client's files went for one-month unpaid leave while the Continued...
An auditor leaves an audit firm and takes the role of the CFO of an audit client two months after completing the audit. This would involve some of the following threats. Select which three options are correct. Select one or more: A. Familiarity B. Intimidation C. Self-interest D. Self-review
What internal control procedure ( s ) would provide protection against the following threats ? An employee makes a credit sale to a customer who is already four months behind in making payments on his account .
As one of the year-end audit procedures, the auditor instructed the client's personnel to prepare a confirmation request for a bank account that had been closed during the year. After the client's treasurer has signed the request, it was mailed by the assistant treasurer. What is the major flaw in this audit procedure? a. The confirmation request was signed by the treasurer. b. Sending the request was meaningless because the account was closed before the year end. c. The request was mailed by the assistant treasurer. d. The CPA did not sign the confirmation request before it was mailed.
During your annual audit of Walker Distributing Company, your assistant, Jane Williams, reports to you that, although a number of entries were made during the year in the general ledger account Notes Payable to Officers, she decided that it was not necessary to audit the account because it had a zero balance at year-end. Required: Do you agree with your assistant’s decision? Discuss.