Exam IIA-CIA-Part1 topic 6 question 137 discussion

Actual exam question from IIA's IIA-CIA-Part1

Question #: 137
Topic #: 6

During the annual fraud risk assessment, an organization identified that an employee in the accounts payable department has the ability to both enter a new vendor into the system and process payments to the vendor. Which of the following is a preventative control that an auditor would propose to reduce the risk in this scenario?

A. New vendors may only be added into the vendor management system by employees in the procurement department.
B. Vendor payments may only be processed by employees in the accounts payable department.
C. An anonymous employee hotline is established for employees to report any suspicious activity they witness regarding payments to vendors.
D. The vendor management system activity log is reviewed by management on a weekly basis for suspicious transactions.

Show Suggested Answer

Suggested Answer: B 🗳️

by Carrie888 at Sept. 4, 2023, 11:31 p.m.

Comments

Submit Cancel

Carrie888

Highly Voted 1 year, 3 months ago

why not A????

upvoted 5 times

f30b972

3 months, 2 weeks ago

Because vendors shouldn’t be set up by procurement. That would allow procurement to place orders to potentially fake vendors whom may submit fake invoices that AP will process.

upvoted 1 times

umlaww1987

1 week, 5 days ago

But the option B seems to the scenario without any difference. The question already mentioned that the vendor payment is processed by an employee in account payable department.

upvoted 1 times

...