...Internal Control and Risk Evaluation – Kudler Fine Foods Lisa Cook University of Phoenix ACC/542 August 15, 2011 Internal Control and Risk Evaluation Internal controls and risk assessments are an integral part for a company to be successful. Management at Kudler Fine Foods has reviewed the flowcharts prepared and is requesting information on controls that will be required. Risks are none to be a negative event occurring in a company’s productivity. Internal controls are the policies and procedures put in place to reduce unforeseen occurrences associated with the risks. This brief will discuss the risks of Kudler Fine Food’s current Accounting Information System (AIS) evaluated by Team B and incorporate the controls into the flowcharts, design internal controls to mitigate risks to the systems, evaluate the application of internal controls to the systems, and discuss other controls, outside the system, that Kudler Fine Foods may need. Risks in the Systems According to Hunton, Bryant, & Bagranoff (2004), “business enterprises face a variety of risks, including business, audit, security, and continuity risks” (pg. 48). When analyzing Kudler Fine Foods current information system the team found that Kudler lacked internal controls and risk evaluations required to run their information system. Several concerns were brought up as major potential risks. The three risks focused on are those of business, security, and continuity. Several of Kudler’s risks within the...
Words: 923 - Pages: 4
...Running head: Internal Control and Risk Evaluation Internal Control and Risk Evaluation The purpose of this brief is to identify and analyze possible risks, internal control points, design internal controls, evaluate the application of internal controls and discuss other outside controls, that Kudler Fine Foods may need to upgrade the computer systems. Analysis of Risks of Computer Systems After reviewing the previous flowcharts it is recommended that Kudler Fine Foods automate more of its accounts payable, accounts receivable, inventory, and payroll processes and standardize these processes across all Kudler locations. Therefore, increased computer controls will be needed to ensure the security of data. Computer data could be compromised if proper computer controls are not in place. Risks include theft of confidential and sensitive information stored on computer servers such as company bank account information or personnel records of Kudler clientele and staff. If proper internal controls are not implemented breaches of sensitive data stored in folders that are accessible through the Internet will be exposed through file sharing software with the other Kudler locations. Identify risks and internal control points Identifying risks and internal controls are imperative when information systems are used extensively throughout the fundamental business processes. Information systems general controls are the policies and procedures that apply to all...
Words: 1267 - Pages: 6
...Kudler Internal Control and Risk Evaluation Internal controls are essential for a company to maintain the security of its property as well as the integrity of sensitive and confidential information. Should Kudler decide to implement and utilize industry-specific software, it would need to evaluate the internal controls and risks associated with these four systems: payroll, accounts payable, accounts receivable, and inventory. Currently, Kudler does not have effective controls in place to minimize security risks and protect its data. The following brief will evaluate the application of internal controls to new accounting system by first analyzing Kudler’s current internal controls, and then recommending steps the company can take in order to strengthen those controls. Risks in the System In order to successfully manage risks, Kudler should first assess the following types of risks: business risks, audit risks, security risks, and continuity risks. Assessing business risks would require Kudler to evaluate its current goals, the actions needed in order to achieve them, and any foreseeable obstacles that would hinder progress. Analyzing audit risks would involve Kudler ensuring the accuracy of its financial statement. Identifying threats to the security of the company’s information system makes up the security risk assessment. Finally, Kudler outline its disaster recovery and business continuity plan to complete its continuity risk assessment. Upon completing the evaluations...
Words: 1087 - Pages: 5
...Kudler Internal Control & Risk Evaluation In order for a company to be successful and maintain its integrity, internal controls are necessary. If Kudler should decide to utilize industry-specific software, then the company would need to evaluate the internal controls and risks associated with the four systems (payroll, accounts payable, accounts receivable, and inventory). Currently the company does not have any real controls in place to reduce risks. The following information will discuss Kudler’s current internal control risks, ways in which to mitigate those risks to the systems, and evaluate the application of internal controls to the new accounting system. Risks in the System Managing risks is an ongoing process. When considering information technology, and Kudler’s new information system, there are four types of risks to evaluate: business risks, audit risks, security risks, and continuity risks. Kudler’s business risk would be whether the company achieved the goals set for the business. The audit risks would be if the auditor provided accurate a correct opinion that Kudler’s financial statements were accurate and reliable. Security risks involve the integrity of the company. Continuity risks would be if the accounting system had backup and recovery available. In the new payroll system each employee’s time should continue to be entered into the system and be approved by management. It may be a good idea to have the HR manager review each employee’s time against...
Words: 963 - Pages: 4
...internal control Internal Control BUAC 782 Brendan Conway Shalini Sharma Yi Li Jiayu Shan Xiaoran Wang Introduction As a result of the recent scandals of companies such as Enron and WorldCom, the Sarbanes-Oxley Act (SOX) was enacted to preemptively curb fraudulent financial reporting. Since its enactment, SOX has strengthened requirements of both internal controls and procedures for financial reporting. Internal control is a process where a common goal is achieved by management and personnel to ensure safe guarding assets, as well as the attainment of realistic objectives such as operation, reporting and compliance. (COSO, May, 2013) Strong internal controls assist CEOs and CFOs in meeting their new SOX requirement of personally validating their company’s financial statements for reliability and transparency (Sweeny, 2012) The following presents an overview of internal controls, a real-world example of internal controls in action, and a synopsis of monitoring, which is perhaps the most critical part of a strong internal control system. Five components of internal control The Committee of Sponsoring Organizations (COSO) provides a framework in which to analyze a firm’s internal controls. Below are the five interrelated components of this framework: 1. Control environment - The top management is responsible for setting standards, processes, structure and accountability of the organization, resulting in the establishment of the control environment...
Words: 2385 - Pages: 10
...Checklist for Evaluating Internal Controls Lisa Cook ACC 544 October 31, 2011 Bret Mann Checklist for Evaluating Internal Controls Internal Control is to assist companies with reviewing and assessing its accountability within the organization. Internal controls are best practices for an organization that sets the tone and its main purpose is reducing business risk by controlling loss because of the misuse of the company’s assets. Fraud is sure to be detected through internal controls as well as help with the accuracy of its financial reporting. This analysis will provide a comprehensive checklist for evaluating internal controls and show how to apply the checklist to outline phases of the control evaluation. Evaluating Internal Controls Checklists The Committee of Sponsoring Organization (COSO) defines controls as the “process, effected by an entity’s board of directors, management and other personnel, designed to provide reasonable assurance regarding the achievement of objectives in the following three categories: * Reliability of financial reporting. * Effectiveness and efficiency of operations. * Compliance with applicable laws and regulations. Internal control is designed to achieve objectives in various categories” (Louwers, et al, 2007, p. 149). The purpose for an internal control checklist is to analyze the efficiency of the organization’s controls in place, document the controls, and make recommendations and necessary improvements. Management...
Words: 785 - Pages: 4
...Checklist for Evaluating Internal Controls Darius Perrin ACC/544 Checklist for Evaluating Internal Controls According to Investopedia (2013), internal controls are methods implemented by a company to ensure the organization is meeting their profitability targets efficiently while also keeping the integrity of the company. The following discussion will outline the three phases of the control evaluation which is understanding the documenting the internal control, assessing the control risks, and performing tests of the controls and reassessing control risks. Phase 1: Understand and Document Internal Control Phase 1 allows the auditors to work efficiently by getting a basic understanding of the organizations internal control. There are five components to internal control: control environment, risk assessment, control activities, monitoring, and information and communications. The following checklist will allow the audit team to gather evidence and focus their efforts in reviewing what aspect is at more risk and requires more review (Louwers, 2007). Yes/No Comments Control Environment Evaluation 1. Is there a written code of conduct displayed for employees to view? Yes 2. Are all employees aware for their goals as an individual? Yes 3. Is there a written document describing each employee’s job description? Yes 4. Would you consider your financial reporting attitude to be conservative? Yes 5. Are actions taken when an employee is found acting...
Words: 851 - Pages: 4
...Internal Control Evaluation An auditor uses a checklist template when conducting an audit of internal control. The auditor will assess the financial condition and internal procedures. Internal control process must comply with industry standards and regulatory requirements. Corporations must prepare responses to auditors and should have an internal control system in place. “Five components of internal control are considered to be criteria for evaluating a company’s financial reporting controls and the bases for auditor’s assessment of control risk as it relates to financial statements” (T. Louwers, R Ramsay, D Sinanson, J. Strawser, 2007 p. 163) The internal control evaluation has three phases in which an auditor uses to form assess the corporation and form an opinion. Phase 1 Understand and Document the Client’s Internal Control The primary objective of Phase 1 is to become familiar with the work and control environment. The auditor must learn the control environment by setting up interviews with staff. Auditor should ask specific questions about the flow of transactions in the accounting system. The corporation should provide the auditor with the design of the control procedures. To examine the control environment and complete an evaluation, the auditor will contact the Human Resource Department for a copy of the code of employee conduct and performance methods. The organizational chart will help the auditor identify management team and area of responsibility. To measure...
Words: 436 - Pages: 2
...Checklist for Evaluating Internal Controls ACC/544: Internal Control Systems Comprehensive Checklist for Evaluating Internal Controls As defined by the COSO framework, there are five elements that are used to explain an internal control system applied in an organization. These elements include: 1. Control Environment – The control environment is the foundation for the other four components of internal control. It outlines discipline and structure for the internal control method and consists of philosophy, ethical values, operating style, risk appetite, functioning of the board, and organizational structure (Louwers, Ramsay, Sinason, & Strawser, 2007). 2. Risk Assessment - This component evaluates the way in which an organization decides to handle the number of always-evolving external and internal risks. 3. Control Activities - This component seeks to ensure that the directives of management are carried out. These are computerized and manual and serve the purpose of preventing, detecting, and correcting errors (Louwers, Ramsay, Sinason, & Strawser, 2007). 4. Information and Communication – The information and communication component provide managers with the critical information necessary for achieving objectives. This component seeks to provide information that is timely, reliable, and relevant. 5. Monitoring – Assessing the quality of the established controls is essential to motivate continuous progress of the internal control method. ...
Words: 866 - Pages: 4
...Internal Control and Risk Evaluation Lola Knaff ACC 542 April 22, 2013 Anita Rodriguez Internal Control and Risk Evaluation The internal control and risk evaluation aspect of accounting is crucial to protect the business’ assets and resources. In addition, for publically traded companies it is mandatory for there to be internal control procedures. “Internal control describes the policies, plans, and procedures implemented by a firm to protect its assets” (Bagranoff, 2008, p. 240). The necessary procedures are in place to ensure the validity and efficiency of the data that the users input into the Accounting Information Software (AIS). The flowcharts reveal the pattern for the accounts receivable, accounts payable, inventory process, and payroll processes. Each process will generate many levels of risk factors that can be reduced by several internal control procedures. According to Hunton, Bryant, and Bagranoff (2004), the assessment of IT risks are by the managers and auditors to determine how to apply resources (p. 51). The cost-benefit analysis is crucial to ensure that the cost of the internal control to reduce the risk does not increase the monetary value of the control. The purpose of the internal control application is to create a smooth operating procedure that does not deter effectiveness and efficiency of the data. Along with the AIS internal controls, there are other controls that will assist in creating a trustworthy working environment...
Words: 1131 - Pages: 5
...METHODS AND TECHNIQUES USED TO ENSURE THE INTERNAL AUDIT PERFORMANCE Marian SFETCU Phd. Student, Faculty of Economics Sciences and Business Administration of „Babeș - Bolyai” University of Cluj Napoca.E-mail: marian_sfetcu@yahoo.com. Tel: 0720 760 220 Abstract: This approach shows a research on the usage of managemental methods on the internal audit activity through qualitative and quantitative indicators of performance assurance. Balanced Scorecard, the management method and tool, referred to the Dashboard, contributes to the internal audit performance through resource planning, setting objectives and scope of the audit, communication and approval, following the recommendations, deferring to the code of ethics and how to achieve the objectives. The listed indicators, are components of the proposed management methods and tools, and they define efficency, effectiveness, economy and quality, all elements of the internal audit performance. Keywords: methods and techniques, audit, corporate governance, internal control system, performance indicators, Balanced Scorecard, Dashboard. JEL: M 42 1. INTRODUCTION The importance of using the management methods and techniques concerning the internal audit, is given by providing a new approach to this problem, which highlights the need to ensure the performance by applying new methods and techniques, based on scientific management. This approach was born from the need to adapt the internal audit to the new demands of the economical...
Words: 5439 - Pages: 22
...Title: Internal Control and Other Risk Internal Control and Other Risk University of Phoenix Internal Control and Other Risk Kudler Fine Food is very concern with the company internal control and risk evaluation. The company has put much time and money into ensuring Kudler is well protected. The company has hired an accountant firm to ensure the company has covered all their bases in dealing with risk an internal control. The company is fully concerns with making the most of what technology has to offer them as a company. Management needs an analysis on the risks in the system, which also identify of the risks and internal control points, which should be incorporate through the controls and risks into the flowcharts. The flowchart has been design to include and mitigate the risks associate with internal controls. An evaluation relate to the application concerning the system internal controls will be review and a full discussion of the other controls that may be need which are outside the system. Analyze Risk in the System The first risks in the system that was identified as directly related to software that would provide much more control over Kudler...
Words: 1154 - Pages: 5
...[pic] |Course Syllabus School of Business ACC/544 Internal Control Systems | |Copyright © 2010, 2009, 2008 by University of Phoenix. All rights reserved. Course Description In this course, students gain a broad perspective of accounting and control that considers attainment of all goals of the organization, including those concerned with financial objectives. Topics include an overview of control, risk management, internal control systems, controls for current asset functions, controls for other accounting classifications, controls for information technology systems, and reporting on controls. Policies Students will be held responsible for understanding and adhering to all policies contained within the following two documents: • University policies: You must be logged into the student website to view this document. • Instructor policies: This document is posted in the Course Materials forum. University policies are subject to change. Be sure to read the policies at the beginning of each class. Policies may be slightly different depending on the modality in which you attend class. If you have recently changed modalities, read the policies governing your current class modality. Course Materials Louwers, T. J., Ramsay, R., Sinason, D., & Strawser, J. (2007). Auditing and assurance services: A look beneath the surface (2nd ed.). New York, NY: McGraw-Hill. McCarthy, M. P. & Flynn, T. P. (2004). Risk from the CEO and board perspective: What all managers...
Words: 1676 - Pages: 7
...LJB Company Internal Controls Evaluation and Assessment CONTENTS: 1. Introduction and Scope ……………………….Page 1 2. Results and Findings……………………………Page 2 3. Recommendations………………………………Page 3 4. Reference Citations………………………….…Page 4 LJB COMPANY - Internal Controls Evaluation and Assessment Introduction and Scope: This evaluation looks at the current internal control system at LBJ Company, assesses for compliance with requirements for Initial Public Offering (IPO) and provides recommendations for strengthening the primary components of an effective Internal Control System. Internal Control System Primary Components 1. A control environment: It is the responsibility of top management to make it clear that the organization values integrity and that unethical activity will not be tolerated. 2. Risk assessment: Companies must identify and analyze the various factors that create risk for the business and must determine how to manage these risks. 3. Control activities: To reduce the occurrence of fraud, management must design policies and procedures to address the specific risks faced by the company. 4. Information and communication: The internal control system must capture and communicate all pertinent information both down and up the organization, as well as communicate information to appropriate external parties. 5. Monitoring: Internal control systems must be monitored periodically for their adequacy. Significant deficiencies need to be reported...
Words: 1191 - Pages: 5
...A1a. Horizontal Analysis - The candidate provides a logical evaluation, with sufficient support, of the company’s strengths and weaknesses based on the horizontal analysis results. Some things to consider are: 1. Identify what horizontal analysis is. 2. What does a horizontal analysis tell you about a company’s performance? 3. What does it tell you about the performance of Competition Bikes? Do not just restate the figures given, provide in-depth analysis. 4. Discuss key components of the financial statements that tell you about the overall performance of the company. Do not need to discuss every line item, just key components of the income statement and balance sheet. A1b. Vertical Analysis - The candidate provides a logical evaluation, with sufficient support, of the company’s strengths and weaknesses based on the vertical analysis results. Some things to consider are: 1. Consider the same items above in the horizontal analysis for the vertical analysis. A1c. Trend Analysis - The candidate provides a logical evaluation, with sufficient support, of the company’s strengths and weaknesses based on the trend analysis results. Some things to consider are: 1. What is trend analysis? 2. What information does a trend analysis provide, what does trend analysis tell you about Competition Bikes? Think about the company’s past performance and compare it to the forecasted performance. 3. What is the data telling you? Are there any concerns...
Words: 841 - Pages: 4
