Payment controls: timing, incompatible duties and evidence requests
Accounting & audit · L2 · en
- Suitable for
- Readers who meet the stated knowledge prerequisites and want to explain the selected concepts.
- Learning goals
- Classify proposed controls by the timing of the unintended payment event.
- Identify incompatible authority/custody/recording roles in four self-written fictional payment records.
- Specify population, time period, evidence request and residual risk for each flagged row.
- Knowledge prerequisites
- Distinguish transaction records from evidence that a control was performed.
- Pathline suggested preparation
- Read the selected report paragraphs before creating your own original fictional payment-control example.
- Duration
- 50 minutes (Pathline estimate)
- Source practice
Source exercises: Not applicable
Source feedback: Not applicable
Executable practice: Not applicable
- Source answers
- Not applicable
This status applies only to this unit; check its limitations for task coverage. Feedback is listed separately.
- Access for this unit
- Public and free. Selected source text was readable without registration in this observation; other services and region availability were not evaluated.
- Environment
- Platform requirements not confirmed. Read in a browser or PDF viewer; original examples can be explored with paper, a calculator or a locally available tool. No internal files, supplied code or hosted runtime is offered.
Next action: Read Principle 10, printed pages 70–73 (PDF viewer pages 77–80), especially sections 10.10–10.13 and 10.21–10.23; then sketch your own fictional payment-control matrix.
Open this source unit ↗Pathline practice suggestions
These are suggested actions; they do not imply a source exercise, automatic feedback or completion record.
- Pathline reading idea: create four invented supplier-payment records and specify the requester, approver, payment releaser, recorder, payment date and available approval evidence. Identify incompatible duties and questions the records cannot answer.
- Pathline reading idea: write a risk/control/evidence matrix naming the owner, preventive or detective timing, population and period, evidence request and residual risk. Explain why a clean role check does not prove a control operated effectively.
Limitations to check
- The 2025 Revision, GAO-25-107721, is a U.S. federal internal-control framework applying from federal fiscal year 2026. This guide does not establish Hong Kong law, HKSA/ISA compliance, audit assurance, materiality or sampling adequacy.
- An absent approval record is not proof approval never occurred. Calendar dates alone cannot order approval and release within the same day; request actual timestamps and evidence before judging performance.
- Fictional role checks do not detect collusion, override, forged evidence or unrecorded transactions. Source paragraphs do not provide exercises, answers, feedback or executable practice.
- Goals, prerequisites, preparation, task level and original practice ideas are Pathline research analysis, not automatically source-declared requirements. The duration is an unmeasured researcher estimate.
- Original examples are self-check ideas, not provider grading or evidence of learner mastery. Human professional review, student outcomes and wider environment tests have not been performed.
Learning source and review reference
Source version: 2025 Revision, GAO-25-107721 · Unit ER-20261013-02-WP03-0001-GAO25-107721-P10-UNIT-01, version 1 · Review ER-MINIMUM-A0-WP03-final-ER-20261013-02-WP03-0001-V1-001