Ch. 16: General Ledger and Reporting System
16.5 Use Table 16-1 to create a questionnaire checklist that can be used to evaluate
controls in the general ledger and reporting cycle.
a. For each control issue, write a Yes/No question such that a “No” answer
represents a control weakness. For example, one question might be “Is access to
the general ledger restricted?”
A wide variety of questions is possible. Below is a sample list:
1. Is access to the general ledger restricted?
2. Is the general ledger regularly reviewed and all changes investigated?
3. Is sensitive data encrypted while stored in the database?
4. Does a backup and disaster recovery plan exist?
5. Have backup procedures been tested within the past year?
6. Are appropriate data entry edit controls used for journal entries?
7. Is an audit trail maintained and regularly reviewed?
b. For each Yes/No question, write a brief explanation of why a “No” answer
represents a control weakness.
Reason a “No” answer represents a weakness
Unrestricted access to the general ledger could facilitate fraud or the
unauthorized disclosure of sensitive data
Failure to investigate all changes to the general ledger may allow fraud to occur
because unauthorized master records (e.g., fake suppliers, non-existent
employees, etc.) may not be detected. Also, unauthorized changes to account
balances may not be detected.
If a backup and disaster recovery plan does not exist, the organization may
suffer the loss of important data.
If the backup plan is not regularly tested, it may not work.
Without proper data entry edit controls, errors in journal entries used to update
the general ledger may occur