Friday Accounting Ethics Case - Trust but Verify
This weeks Friday Accounting Ethics Case centers around the concept of trust as an inadequate internal control.
You are discussing internal controls with your client. You noticed that they lack any sort of review over the receipt of incoming goods that have been purchased. During your engagement you pulled an invoice for the purchase of a laptop but when you inquired to the purchasing department regarding the receipt of the laptop, nobody could seem to recall who received it or where the laptop was now.
When you bring this to the controllers attention she dismisses it and states that she is sure that it is around somewhere and being used for business purposes. You point out that you are not trying to make any accusations but that there may be a control and fraud risk if there are no controls over receiving of goods purchased by the organization. You point out that without some sort of receiving process how can she be certain that the organization ever actually received the laptop that they paid for? The controller responds that she trusts all her staff so she doesn't have to worry about one of them picking up company assets and walking off with them. You try to explain that it is not only an issue of fraud risk but this could be an instance where the organization failed to receive the goods they paid for and so should go back to the vendor to verify that the goods were actually shipped. She responds that she has had enough with this line of questioning.
Subsequently the controller contacts the engagement partner and complains that you are attempting to find problems where none exist just to have audit findings to report. Although no reprimand comes down, the audit partner pulls you from the engagement. What would you do?
For tips on improving efficiency and reducing risk, signup for the Controlzkit newsletter here.