Question

General questions without using the lab as it is not working being an auditor what would your responses be to these?

*1. What concerns would you have about vendor addresses? What types of addresses would be the most suspicious? This I have addresses being similiar to employee addresses, or addresses left blank.

*2. How could a vendor be added to an enterprise system with a suspicious address?

*3. After reviewing the PO Box addresses, what concerns do you have? Should you follow-up on PO Box addresses? Explain.

*4. Are there any limitations in your evaluation process? Are there other data values that may indicate fictitious supplies in the system?

Answer 1

As per the Chegg policy, since there are many questions, I am answering the first two questions:

1. Vendor Addresses would be more suspicious are: - Vendor Address that are blank - Vendor Addresses that matches the employee addresses. Suspicious addresses would be those with similar or exact street numbers and street names. Depending on the location, one could ignore those with same city but would depend on the business and size of geographic location for vendors and users.

2. A vendor could be added easily if the person in the organization has other permissions such as programming and data entry.

Please up vote. Thanks!