Question

Difficulty: HardInternal Controls in Computerized Accounting

An electronics retailing firm upgraded to an automated inventory and billing accounting system. During an annual audit, the internal auditor discovered that several posted sales records were deleted directly from the system database without leaving any transaction history or log of user actions. Which internal control deficiency directly allowed this unrecorded deletion of financial data to occur?

  1. Absence of an immutable audit trail and user access privilege restrictions on the databaseAnswer
  2. B
    Complete reliance on computerized software under the assumption that automation inherently eliminates fraud
  3. C
    Utilization of batch data processing rather than real-time online transaction processing
  4. D
    Failure of the system's edit check to perform range validation during data entry

Answer

Absence of an immutable audit trail and user access privilege restrictions on the database
An audit trail in a computerized accounting system records all transaction processing history, updates, and deletions along with timestamps and user identification. Combined with access controls restricting direct database manipulation, these controls ensure data integrity and accountability.

Step-by-Step Solution

1
Analyze the control breakdown described in the accounting scenario
Posted sales transactions were erased from the database with no record of who executed the action or when it happened.
Identifying the specific failure helps determine which internal control component was missing.
2
Evaluate internal control mechanisms in computerized accounting environments
An audit trail maintains an automatic chronological record of system events, while access controls restrict raw database access to authorized database administrators.
Without an audit trail and proper access restrictions, direct database alterations leave no trace and bypass traditional accounting logs.

Key Concept

Audit Trail and Access Control in Computerized Accounting
Rate this question