4. Refrain from stealing your cash, supplies, inventory, or property, plant, and equipment?
In theory, you should be able to expect these things. In practice, however, you must establish an internal
control framework to make sure your business objectives are achieved, assets are protected from theft and
misuse, and financial data are recorded accurately.
TMs 8-2 through 8-4 include information to use in reviewing the elements of internal control.
Possible solution to TM 8-3: 1) Salespersons on commission also approved to grant credit represent a
conflict of interest. Denial of credit to a potential sale would take money out of the pocket of the
salesperson, creating an opportunity to grant credit to customers not worthy of credit in order to make a
sale. Separation of duties to have a non-commissioned individual to approve credit would be the preferred
method. 2) Having a single individual responsible for all of these duties creates an opportunity to easily
order goods, check them in, approve payment, and allow that individual to carry the inventory away.
Again, separation of duties will not eliminate this possibility of theft; however, it will make the process
more difficult to perform. 3) Although the size of the possible theft is greatly diminished in this scenario
and many donut shops would follow this model, a better model would be to separate the responsibilities
here, having one employee take the order, a second fill the order, and a third accept the payment. In all
three instances, separation of duties is the ultimate model whenever possible.
Possible response to TM 8-4: Allowing the clerk to accept cash and update customer account records
gives a single individual an opportunity to accept the cash, pocket it, and provide the customer record
with the credit. Requiring a second individual to balance the bank deposit against the customer account
credits could make this model workable, but separation of duties would be a preferred model. 2) Allowing
a single individual to approve invoices, prepare checks, mail them, and update hospital records provides
an opportunity to create fictitious vendors and to prepare checks to these fictitious vendors that can then
be cashed by the employee for personal use. In both scenarios, separation of duties would have made the
potential fraud more difficult to execute.
When reviewing the control environment, give an illustration of a poor control environment and a good
control environment. For example, in a poor control environment, you have a dominating management
staff that pressures employees to meet budgets and projections at all costs, regardless of circumstances. A
good control environment is established by a management that encourages employees to adhere to control
policies and procedures and an employee code of conduct.
Under proof and security measures, you may want to emphasize that businesses should protect their
accounting records by using off-site backup computer files and fireproof file cabinets. Companies have
gone out of business because fire or theft destroyed their accounting records. For example, the destruction
of accounts receivable files could result in significant losses to a business.
Exhibit 4 in the text presents a good list of the fired flags” that may indicate employee fraud or
embezzlement. Refer your students to this list for helpful tips in monitoring internal controls.