authorization controls of revenue cycle
auth transactions (document), so only valid transactions get processed
auth takes place when…
1. sale made on credit
2. cash refund requested
3. posing cash payment received to customers account (credit memo)
credit and sales duties…
must be separate bc then sales person will approve everyone to earn a higher commission
3 rules of segregation
sales order processing
cash receipts processing
supervision
cashiers and mail opening need an open area and people watching (cameras)
properly prepared docs
access to assets and info
should be limited, dont leave cash unattended
independent verification
check for accuracy and completeness
verification reconciliation
cash came in, recorded, deposited, reconcile drawer at end of day
shipping verifies what from warehouse
goods sent from warehouse are correct in type and quantity
warehouse reconciles what docs
stock release do (picking slip) and packing slip
billing reconciles what docs
shipping notice with sales invoice
general ledger reconciles what
journal vouchers from billing, inv control, cash receipts, and AR
input controls
output controls
reduce risk documents will be misdirected/ lost in transit
= email digital copies to secure mail boxes
- docs physically collected by auth personnel
processing controls
focus on logic of application
- error messages
- low stock flag
- file backup
- passwords
advanced tech rev cycle
network
- done in real time
- better info bc inventory management and optimize inventory measures
as processes evolve
controls need to evolve
automating
taking processes done before and computerizing or making them more efficient
reengineering
remaking or rethinking the whole process
CBAS
computer based accounting systems
- auth
- separation of duties
- supervision
- access controls
- conpensating control
compensating control
one control is nonexistent/ not working control, but something down the line makes up for it
–> supervision make up for any inefficiencies
** double check everything is accurate
quickbooks
meant for 1 nonaccounting person to do it all
- good for accounting concepts
- bad internal controls
–> no password
–> no separation of duties
** nonaccounting people always put things into RE