11.8 As an internal auditor for the state auditor’s office, you are assigned to review the
implementation of a new computer system in the state welfare agency. The agency is installing
an online computer system to maintain the state’s database of welfare recipients. Under the
old system, applicants for welfare assistance completed a form giving their name, address,
and other personal data, plus details about their income, assets, dependents, and other data
needed to establish eligibility. The data are checked by welfare examiners to verify their
authenticity, certify the applicant’s eligibility for assistance, and determine the form and
amount of aid.
Under the new system, welfare applicants enter data on the agency’s Web site or give their
data to clerks, who enter it using online terminals. Each applicant record has a “pending”
status until a welfare examiner can verify the authenticity of the data used to determine
eligibility. When the verification is completed, the examiner changes the status code to
“approved,” and the system calculates the aid amount.
Periodically, recipient circumstances (income, assets, dependents, etc.) change, and the
database is updated. Examiners enter these changes as soon as their accuracy is verified, and
the system recalculates the recipient’s new welfare benefit. At the end of each month,
payments are electronically deposited in the recipient’s bank accounts.
Welfare assistance amounts to several hundred million dollars annually. You are concerned
about the possibilities of fraud and abuse.
a. Describe how to employ concurrent audit techniques to reduce the risks of fraud and
abuse.
Audits should be concerned about a dishonest welfare examiner or unauthorized person
submitting fictitious transactions into the system. Fictitious transactions could cause
excessive welfare benefits to be paid to a valid welfare recipient, or payments made to an
ineligible or fictitious recipient.