Accounting Information Systems and Controls
Core concepts
This domain covers how accounting data is captured, processed, and protected. Understand the accounting information system cycle: source documents, journals, ledgers, trial balance, and financial statements. Know the difference between general journals and special journals, and the role of subsidiary ledgers and control accounts for receivables and payables. Learn internal control: segregation of duties, authorisation, physical safeguards, reconciliation, and documentation. Understand the control environment, risk assessment, control activities, information and communication, and monitoring. Know the IT general controls (access, change management, backup, disaster recovery) and application controls (input, processing, output). Be familiar with the audit trail, batch controls, and the risks of spreadsheets and cloud systems.
Traps questions set
Questions often ask which control prevents a specific error or fraud; match the control to the risk, not just to a category. Segregation of duties means no one person controls a transaction from start to finish, so combining custody of cash with record keeping is a red flag. A control account reconciliation is a detective control; a locked cash box is preventive. Do not confuse general IT controls with application controls. Watch for questions on the limitations of internal control: collusion, management override, and cost-benefit constraints mean absolute assurance is impossible.
Worked example
A clerk receives customer cash, records the receipt, and updates the receivables ledger. This breaches segregation of duties because custody and record keeping are combined. The fix is to separate cash handling from ledger posting and add an independent bank reconciliation. Rule of thumb: identify the risk first, then name the control that addresses it.