申論題

六、Assume that, when conducting procedures to obtaining an understanding of Max Company’s
internal controls, you checked “No” to the following 3 internal control questionnaire items:
1. Does access to online files required specific passwords to be entered to identify and validate the terminal
user?
2. Does the user establish control totals prior to submitting data for processing? (Order entry application
subsystem.)
Required:
Describe the errors and frauds that could occur because of the weaknesses indicated by the lack of IT
controls.