Based on inquiry we noted that the Group signature
guideline is not known at the company.
We received an authorization matrix dated from
2005 named “Signing Authorities”, which is not updated
and contains authorizers that don`t work anymore
for MSFT. The company staff did not know
about this authorization matrix, so this document
was not applied. Also we noted that authorization
levels for approvals and corresponding values are
not defined in a written form.
A deputy regulation is not in place. We selected 10
samples for credit notes and 10 customer contract
test and observed that these were not authorized
according to the global Approval & Signature
Guideline, as they were signed by one person only.
During the sample testing of purchase requisitions
we noticed that a signature was missing due to an
overseas trip of the responsible person.