Matt has created a situation that leaves many opportunities for undetected
theft. Here is a list of some of the deficiencies in internal control. You may
find others.
1. Documentation procedures. The tickets were unnumbered. By numbering
the tickets, the students could have been held more accountable for the
tickets. See number 3 below.
2. Physical controls and establishment of responsibility. The tickets were left
in an unlocked box on his desk. Instead, Matt should have assigned
control of the tickets to one individual, in a locked box which that student
alone had control over.
4. Documentation procedures. There was no control over unsold tickets.
This deficiency made it possible for students to sell the tickets, keep
the cash, and tell Matt that they had disposed of the unsold tickets.
Instead, students should have been required to return the unsold
tickets to the student maintaining control over tickets, and the cash to
Matt. In each case, the students should have been issued a receipt for
the cash they turned in and the tickets they returned.