a. What is the risk involved with the combined access?
- Open previously closed accounting periods and inappropriately post entries after month end.
b. Would you rate this risk as ‘High’ or ‘Medium’ priority? Please motivate! (Tip: think about the potential additional control to be implemented to mitigate the SOD risk)
- There is no direct risk of money or assets lost for the company – the risk is only in misstatement of monthly management reporting and can easily be mitigated. We would rate this risk as ‘Medium’