An internal auditor has been asked to conduct an investigation involving allegations of independent contractor fraud. Which of the following controls would be least effective in detecting any potential fraudulent activity?
A) Exception report identifying payment anomalies.
B) Documented policy and procedures.
C) Periodic account reconciliation of contractor charges.
D) Monthly management review of all contractor activity.

Question

Quizplus · Accepted Answer

Documented policy and procedures are preventive controls rather than detective controls, making them less effective in detecting ongoing fraudulent activity compared to the other options.

An Internal Auditor Has Been Asked to Conduct an Investigation