Proper separation of duties reduces the opportunities to allow persons to be in positions to both

Separation of duties is the means by which no one person has sole control over the lifespan of a transaction.  Ideally, no one person should:

• Initiate the transaction
• Approve the transaction
• Record the transaction
• Reconcile the transaction
• Handle the related asset
• Review reports

There should be at least two sets of eyes on each transaction.

Why is it Important?

Separation of duties is critical to effective internal control because it reduces the risk of both erroneous and inappropriate actions.

All units should attempt to separate functional responsibilities to ensure that errors, intentional or unintentional, cannot be made without being discovered by another person.  In addition, separation of duties is a deterrent to fraud because it requires collusion – working with another person – to perpetrate a fraudulent act.

What About Small Departments?

When separation of duties is not possible due to a small department size, compensating controls must be put in place.  Detailed Tier 2 and/or Tier 3 review of activities is required to compensate for the lack of separation of duties.

ABCs of Separation of Duties

In general, no one employee should have job functions in more than one of the following three categories of duties:

1. Asset handling and disposition: Having physical access to University assets or being in a position to control where an asset is directed
   • Assets include cash, tickets and passes, PCards, supplies, equipment, books, vendor and payroll checks, and purchase orders
   • Directing an asset includes initiating a vendor or payroll payment in myUFL, setting up a new employee in the Human Resources Management System (HRMS), making an adjustment to a student account transaction, placing an order for supplies, distributing payroll checks, and specifying where supply orders are to be delivered
2. Booking or recording transactions to the myUFL general ledger or subledger: Recording or posting a financial transaction to the myUFL general ledger
   • The recording of financial transactions in myUFL occurs when a vendor invoice, direct payment, or journal is approved
3. Comparison or review of transactions or balances: Reconciling and reviewing transactions appearing in the myUFL general ledger for validity and reasonableness
   • Monthly reconciliation is required as a key internal control to ensure the accuracy of data in myUFL – the official accounting record of the university of Florida

 How Does it Look?

Consider the following in assigning duties to people involved in handling a financial transaction process:

1. The preferred number of people that should be involved in handing a financial process is three of more – at this staffing level, satisfactory separation of duties can be attained fairly easily
2. The minimum number of people who can successfully operate a financial process is two – at this staffing level, satisfactory separation of duties can be attained, but not without careful planning
   • For some processes, certain duties might have to be performed jointly by both staff members
3. A person involved in more than one financial process should be assigned duties within the same duty category, such as asset handling, across the different processes. For example, people with asset handling duties in the cash handling process should be assigned only asset handling duties in other financial processes.

Note: An employee serving in a “back-up” role must be competent and have the same authority as the person normally performing the duty.

Example – Cash Handling

Approval:

Employee 2

*Closing of cash drawer is performed jointly with both coworkers witnessing the count and certifying the deposit amount appearing on the department records/logs.  Employee 2 retains and secures the copy of the record/log for ledger review purposes.

Answer (A) is correct.
Internal control has five components: (1) the control environment, (2) risk assessment process, (3) control activities, (4) information systems, and (5) monitoring of controls. The control environment sets the tone of an organization, influences control consciousness, and provides a foundation for the other components. The risk assessment process is the identification, analysis, and management of risks relevant to achievement of objectives. Control activities help ensure that management directives are executed. The information system, including the related business processes relevant to financial reporting and communication, consists of (1) physical and hardware components, (2) software, (3) people, (4) procedures, and (5) data. Monitoring assesses the performance of internal control over time (AU 315).

When there is proper segregation of duties in an entity it reduces the opportunities to allow persons to be in positions to both?

What does separation of duties prevent?

What is separation of duties and why is it important?

What is a consequence of separation of duties?