An internal auditor is reviewing purchases made through the organization's corporate credit card program. Which of the following statements best describes a root cause of a deficiency?
An internal auditor is reviewing purchases made through the organization's corporate credit card program. Which of the following statements best describes a root cause of a deficiency?
A control to detect split purchases has not been activated in the credit card system. This describes a root cause because it highlights a deficiency in the system that allows improper transactions (split purchases) to go undetected. Without the activation of this control, the system cannot effectively prevent or identify inappropriate use of the corporate credit card, thereby addressing the underlying issue that enables the deficiency.
Why C ?
The question asks about the root cause of a deficency. We are looking at purchases made through the organization's corp credit card program. A - there are no strict references to non-approved vendor list. So this would be not an answer you're looking for. B. Also there are no references to policy limiting transactions equal 500 or more dollars. C. IS THE ONLY RIGHT ONE. IA IS REVIEWING CONTROLS ENVIRONMENT OVER PURCHASES AND TO BE MORE ACCURATE PURCHASES LISTS MADE THROUGH CORP CREDIT CARD PROGRAM. THE ROOT CAUSE IS THE REASON WHY SOMETHING HAPPEND SO IT THERE IS NO ACTIVATED CONTROL TO SPLIT PURCHASES THEM SUCH SPLITS CAN BE MADE UNDETECTED. D. Travel policy does not address corp credit card program.
Only B and C deal with the use of card. Option B is not an exception.