An internal auditor is reviewing purchases made through the organization's corporate credit card program. Which of the following statements best describes a root cause of a deficiency?
A.
A personal computer was purchased from a non-approved vendor.
B.
Company policy limits card use to $500 per transaction.
C.
A control to detect split purchases has not been activated in the credit card system.
D.
Sample testing found 10% non-compliance with the organization's business travel policy.
The question asks about the root cause of a deficency. We are looking at purchases made through the organization's corp credit card program.
A - there are no strict references to non-approved vendor list. So this would be not an answer you're looking for.
B. Also there are no references to policy limiting transactions equal 500 or more dollars.
C. IS THE ONLY RIGHT ONE. IA IS REVIEWING CONTROLS ENVIRONMENT OVER PURCHASES AND TO BE MORE ACCURATE PURCHASES LISTS MADE THROUGH CORP CREDIT CARD PROGRAM. THE ROOT CAUSE IS THE REASON WHY SOMETHING HAPPEND SO IT THERE IS NO ACTIVATED CONTROL TO SPLIT PURCHASES THEM SUCH SPLITS CAN BE MADE UNDETECTED.
D. Travel policy does not address corp credit card program.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
WendyLin
1 year, 5 months agoJohn1237
11 months, 4 weeks agoKonradK
1 year, 5 months ago