scholarly journals Something Phish-y is Going On Here: A Teaching Case on Business Email Compromise

2019 ◽  
Vol 14 (1) ◽  
pp. A1-A9
Author(s):  
Kathleen M. Bakarich ◽  
Devon Baranek

SUMMARY This case utilizes a real-world example of a U.S. public company that fell victim to a Business Email Compromise (BEC) scheme in which an employee inadvertently wired millions of dollars to fraudulent accounts based upon email instructions purportedly sent by a company executive and external legal counsel. This is a timely issue to examine given its rising prevalence and magnitude in the corporate world. The case allows students to examine a topic (phishing techniques and email scams) that they are likely to be familiar with on a conceptual level, through the lens of internal controls and external auditing. Examining the case information, SEC filings, and auditing guidance, students will gain an understanding of internal control issues related to BEC and critically think of ways to remediate or implement controls to reduce cybersecurity risk, as well as consider the external auditor's growing responsibilities related to technology and its associated risks.

2019 ◽  
pp. 0000-0000 ◽  
Author(s):  
Kathleen M. Bakarich ◽  
Devon Baranek

This case utilizes a real-world example of a cyberfraud incident at a U.S. public company. The company was the victim of a Business Email Compromise (BEC) scheme in which an employee inadvertently wired millions of dollars to fraudulent accounts based upon email instructions purportedly sent by a company executive and external legal counsel. This is a timely and important issue to examine given its rising prevalence and magnitude in the corporate world. The case allows students to examine a topic (phishing techniques and email scams) which they are likely to be familiar with on a conceptual level, through the lens of internal controls and auditing. Examining the case information, SEC filings and articles from the business press, students will gain an understanding of internal control issues related to BEC and critically think of ways to remediate or implement controls to reduce cybersecurity risk. Students will research PCAOB, AICPA and SEC policies regarding cyberfraud disclosure and the auditor's role in cybersecurity. They will gain an understanding of the financial and nonfinancial impact of BEC on corporations. The case also requires students to consider the growing responsibilities of auditors related to technology and its associated risks.


2016 ◽  
Vol 36 (2) ◽  
pp. 45-62 ◽  
Author(s):  
Yangyang Chen ◽  
W. Robert Knechel ◽  
Vijaya Bhaskar Marisetty ◽  
Cameron Truong ◽  
Madhu Veeraraghavan

SUMMARY In this paper, we investigate whether board independence has an impact on the likelihood that a company reports weaknesses in internal controls. Using a sample of 11,226 firm-year observations spanning the period 2004–2012, we establish several findings. First, we document a negative relation between board independence and the disclosure of internal control weaknesses. We also document that the negative relation is stronger for firms with unitary leadership (combined positions of CEO and chairman) than for firms with dual leadership. Next, we show that board independence is associated with both fewer account-specific and company-level weaknesses. Finally, we show that board independence is associated with timely remediation of internal control weaknesses and that the implementation of Auditing Standard No. 5 in 2007 weakens the effect of board independence on the disclosure of ICW. JEL Classifications: G10; G18.


2018 ◽  
Vol 2 (1) ◽  
Author(s):  
Jesella Lourina Makaluas ◽  
Winston Pontoh

PT Lumbung Berkat Indonesia, as a company entity engaged in construction, of course, this company has various types of fixed assets. The Company's fixed assets should be secured by means of internal controls of fixed assets that will oversee, control costs incurred to acquire fixed assets, increase or extend the fixed asset's useful life and increase operational contribution and productive capacity of fixed assets in order to safeguard the company's property. Based on the research that has been done at PT Lumbung Berkat Indonesia and the existing discussion, the conclusion that can be taken is that the internal control of fixed assets will run efficiently if the points that exist in the elements of control environment, risk assessment, control activities, related information , and monitoring has been well executed amongst companies to perform physical matching of fixed assets, appropriate division of functions and responsibilities, separating expenditures of income and expenses, following insurance against fixed assets, creating audit committees and implementing the abolition and disposal of fixed assets. Suggestions for better companies to explore the knowledge and application of internal control of good fixed assets for corporate activities to run effectively and efficiently and the presentation of financial statements and information about the company's fixed assets is accurate and reliable.Keywords: Internal Control, Fixed Assets


2018 ◽  
Vol 94 (2) ◽  
pp. 53-81 ◽  
Author(s):  
Lori Shefchik Bhaskar ◽  
Joseph H. Schroeder ◽  
Marcy L. Shepardson

ABSTRACT The quality of financial statement (FS) audits integrated with audits of internal controls over financial reporting (ICFR) depends upon the quality of ICFR information used in, and its integration into, FS audits. Recent research and PCAOB inspections find auditors underreport existing ICFR weaknesses and perform insufficient testing to address identified risks, suggesting integrated audits—in which substantial ICFR testing is required—may result in lower FS audit quality than FS-only audits. We compare a 2007–2013 sample of small U.S. public company firm-years receiving integrated audits (accelerated filers) to firm-years receiving FS-only audits (non-accelerated filers) and find integrated audits are associated with higher likelihood of material misstatements and discretionary accruals, consistent with lower FS audit quality. We also find evidence of (1) auditor judgment-based integration issues, and (2) low-quality ICFR audits harming FS audit quality. Overall, results suggest an important potential consequence of integrated audits is lower FS audit quality. Data Availability: Data are publicly available from the sources identified in the text.


2018 ◽  
Vol 5 (1) ◽  
pp. 76
Author(s):  
Vicky Roh Idhofi ◽  
S. Sudarno ◽  
Agung Budi S.

Internal control system in a company is one form of action used to safeguard property owned by the company. The existence of an internal control system is expected to prevent the risk of errors occurring either intentional or without the element of intent. The risk of such errors can be derived from the various parties concerned. This is one reason that good procurement control system in an accounting system in this case is in the system of cash receipts. From the observation while at Kimia Farma 307 Banyuwangi seen that in a system of cash receipts from cash income services namely health checks and cash sales are still very modest. The accounting system of the cash receipts of the business activity is only using the document pickup. When viewed from the frequency of sales and service checks every day, the system that has been used is deemed to be less effective in terms of internal controls. This study aims to determine in real terms how the internal control system of cash receipts and evaluation of internal control systems at these pharmacies. This research uses qualitative method to analyze the data. The data obtained from three data collection methods are interview, observation and documentation. Keywords: system of internal control, cash receipts in cash, accounting system, system evaluation


2011 ◽  
pp. 318-383
Author(s):  
Ashutosh Deshmukh

Internal controls have existed since the dawn of business activities. Internal controls are basically systems of checks and balances. The purpose is to keep the organization moving along desired lines as per the wishes of the owners and to protect assets of the business. Internal controls have received attention from auditors, managers, accountants, fraud examiners and legislatures. Sarbanes Oxley Act 2002 now requires the annual report of a public company to contain a statement of management’s responsibility for establishing and maintaining an adequate internal control structure and procedures for financial reporting; and management’s assessment of the effectiveness of the company’s internal control structure and procedures for financial reporting. Section 404 of the Act also requires the auditor to attest to and report on management’s assessment of effectiveness of the internal controls in accordance with standards established by the Public Company Accounting Oversight Board (PCAOB).


Author(s):  
Vini Mariani ◽  
Yonarsie Bindari

Internal control is essential for the operational activities of a company. The author conducted research for internal control of accounting systems and inventory purchases of raw materials. Internal controls for purchasing and inventory of raw materials is essential if companies want to produce a superior product. In this study researchers prepare the field research method by observation and literature study by studying the theories associated with the purchase and supply of raw materials. The results obtained show the important things that can be controlled by the company for operating companies to run well and the management can give a decision based on the reports of evaluation results, it can be suggested that companies should do in the internal control system purchase accounting and inventory of raw materials. 


2021 ◽  
Vol 1 (1) ◽  
pp. 76-81
Author(s):  
Khairani Khairani ◽  
Zuliana Zulkarnaen

Navigation District is a company engaged in the transportation sector. Everycompany has an internal control system. The purpose of designing an internalcontrol system from a recent perspective that includes a broader scope is essentiallyto protect company property, encourage accuracy and reliability of accountingdata and reporting, increase business effectiveness and efficiency, and encouragecompliance with management policies that have been outlined and regulations. -the rules are there. The type of data used in this research is primary data, namelyqualitative data. The data obtained were collected, interpreted and analyzed thendescribed in detail to find out the problem and seek an explanation. Researchconducted by researchers is primary data obtained directly from the company inthe form of interviews and observations. The purpose of this study was to analyzeand explain the system and procedures for payroll and wages of the Belawan Class1 Navigation District employees and to analyze and explain internal controls in thepayroll and wage systems of employees in the Class 1 Navigation District ofBelawan. The results showed that the payroll procedure that is usually carried outin Belawan Class 1 Navigation District, namely the treasurer makes payroll detailsthen tested by the Commitment Making Officer (PPK) by issuing a paymentapproval letter, after which it is validated by the SPM Signing Officer (PaymentOrder) by issuing a letter. Pay Order (SPM). The SPM main salary is converted bythe State Treasury Service Office (KPPN). After being converted by KPPN, themain salary will be paid to each employee's account. The internal control systemcarried out by the Ministry of Transportation, Directorate General of SeaTransportation, Class 1 Navigation District, Belawan, is controlled by the KPA(Proxy of Budget Users) which is authorized to prepare DPA (BudgetImplementation Documents) , a budget implementation document used as areference for budget users in carrying out government activities as theimplementation of the APBD (State Budget), establishing a PPK (CommitmentMaking Officer), issuing a decree on the appointment of an expenditure treasurer,article 22 (1), (2), (3), KPA may concurrently act as PPK, formulate a system ofsupervision and control so that the process of settling bills at the expense of theAPBD is carried out in accordance with statutory regulations.


2016 ◽  
Vol 11 (3) ◽  
Author(s):  
Maria Marisa Marau ◽  
Grace B. Nangoi ◽  
Hendrik Manossoh

A company is considered successful if it can manage their payroll cycles. This is because the payroll can directly affect the performance of the employee. Companies must ensure the welfare of workers by giving them rights that salary in return for services rendered to the company's employees. Each activity requires a control of our lives to what is being and has been done. It is therefore necessary internal controls over payroll cycle at a company in terms of oversight of payroll. This study was conducted to determine and evaluate the Internal Control of Payroll Cyele in PT.Anekaloka Indotuna. The object of this research is PT.Anekaloka Indotuna Bitung, the company is engaged in the field of shipping and fisheries. The research method is qualitative method. The results showed that the internal control PT.Anekaloka payroll cycle has not completely efficient. Head of the company should increase the discipline monitor activity of employees. Keywords : evaluation, payroll, internal control


2018 ◽  
Vol 2 (02) ◽  
Author(s):  
Saskya Clarisa ◽  
Steven J. Tangkuman

PT. FIFGROUP as a company engaged in financing services is a company whose main source of profit comes from interest on community loans. Therefore the main problem that is often faced for a finance company is bad credit, which is where consumers do not smoothly make installment payments that cause losses, so that the company must think hard to reduce the credit risk so that the company's operational activities can run well. Therefore the internal control system at the company is very important, especially in terms of internal control of credit. The purpose of this study is to find out the internal controls that are applied in the company through the process of credit submission by consumers to billing to minimize credit risk.Keyword : internal control, credit risk


Sign in / Sign up

Export Citation Format

Share Document