< Inspection - authorization >
For the appropriate sample size, select items which ought to have been authorized.
For each item selected inspect relevant documentation, and make inquiries of the authorizer as appropriate, to determine whether:
• there is evidence of review and authorization
• the authorizer had the necessary authority, competence and objectivity to perform the control effectively.
• the relevant review and authorization criteria were applied consistently and in accordance with the design of the control.
• the amount authorized was within the limits set by the design of the control.
• any queries, outliers or exceptions raised [prior to authorization] were appropriately addressed.
• all outliers or exceptions that should have been identified were, in fact, identified by the reviewer.
• the authorization was made within the timeframe set by the design of the control [before or after the item was processed].
• any adjustments were identified. If so, select adjustments for further testing and:
- make inquiries of the reviewer to obtain an understanding of how the adjustment was addressed and recorded.
- inspect relevant documentation for the adjustment.
- trace the adjustment to the general ledger/ relevant system.
- assess whether the actions taken were appropriate.
For each item selected:
• evaluate the completeness and accuracy of the data used, including:
- whether (the documentation for) the item authorized agrees with the relevant general ledger entry/ other system record, as applicable.
[refer to the 'C&A of information produced by the entity' process where relevant]
• determine whether appropriate segregation of duties occurred in accordance with the design of this control, including whether authorization was given by someone other than the person initiating, processing and recording the underlying transaction(s).