This is the AuditNet Standard Risk Control Audit Matix which incorporates formats

used by many audit organizations in their documentation working papers. There are
format templates for risk control, audit procedures, questionnaires and checklists.
There is a blank workpaper and a report summary that can in used by audit
organizations. AuditNet has prepared a monograph for guidance on preparing and
developing audit work programs, checklists, questionnaires and matrices. The
monograph is available to AuditNet subscribers. For more information go to
www.auditnet.org
Control Matrix Area: Treasury

Control Reporting Unit Process Subprocess Subprocess

# Owner
TR-1 Domestic Treasury Cash Management Treasury Analyst

TR-2 Domestic Treasury Corporate Fund Treasury

Management Manager

TR-3 Domestic Treasury Corporate Fund Treasury

Management Manager
TR-4 Domestic Treasury Corporate Fund Treasury
Management Manager

TR-5 Domestic Treasury Cash Reconciliation Financial

Analyst

TR-6 Domestic Treasury Cash Reconciliation Financial

Analyst

GAP - TR- Domestic Treasury Cash Reconciliation Financial

1 Analyst

TR-7 Domestic Treasury Cash Reconciliation Financial

Analyst

GAP-TR-2 Domestic Treasury Cash Reconciliation Financial

Analyst
Financial Statement Control Objective Process Risk
Assertion
Existence & Valuation Only company issued checks and check Funds are misappropriated from
amounts are paid from company's bank company's cash accounts.
account.

Existence All wire transfers are properly authorized. Misstated Financials.

Existence All wire transfers are properly authorized. Misappropriation of Funds

Completeness & All wire transfers are recorded in proper Misstated Financials.
Accuracy accounts by both company and the Banks.

Completeness & Any reconciling adjustments that need to Misstated Financials.

Accuracy be made to the general ledger are
properly recorded.
Completeness & All cash activity is properly recorded. Misstated Financials.
Accuracy

Completeness & All cash activity is properly recorded. Misstated Financials.

Accuracy

Completeness & All cash, investment and debt accounts Misstated Financials.
Accuracy are accurately reflected in the general
ledger.
Completeness & All cash, investment and debt accounts Misstated Financials.
Accuracy are accurately reflected in the general
ledger.
Gap Control
Description
The Analyst researches and documents the resolution and the documentation is
filed. The Analyst must individually process each check exception online by
selecting “pay” and “release” or “return” within the same day. This instructs the
bank on how to process the check.

The Treasury Manager reviews the Daily Cash Sheet for reasonableness and
approves the wire transfers recommended by the Treasury Analyst by initialing
and dating the Daily Cash Sheet.
Wire transfers are restricted to known accounts any new bank accounts need
approval before processing (Dual Control)
The Treasury Analyst performs a daily cash reconciliation to sources of
independent outside confirmation.

The Financial Analyst submits journal entries to be posted when the Senior
Manager Financial Reporting uploads the transactions to Oracle.

On a monthly basis, the Treasury Analyst reconciles the loan activity posted to the
General Ledger (from the previous step) to the monthly loan statement provided
by BA
There is no formal (documented) review of the reconciliation of the loan activity
posted to the General Ledger (from the previous step) to the monthly loan
statement provided by BA
The Financial Analyst performs monthly reconciliation of the cash accounts
between the general ledger and bank statements.

There is no formal (documented) review of the monthly reconciliation of the cash

accounts between the general ledger and bank statements.
Manual COSO Control Significant Control
or Type Yes/No Comment
System
Manual Control Activity Yes Is there segregation
of duties for being
able to prepare and
send a wire transfer.

Also - who has

access to that
system.

Manual Control Activity Yes

System Control Activity Yes

Manual Control Activity Yes

System Control Activity No This is a process -

Need a control to
mitigate this risk.
Manual Control Activity Yes

Manual Control Activity Yes

Manual Control Activity Yes

Manual Monitoring Yes

Test Sample W/P Ref.
Size
D-1

D-1

D-5

D-1

D-5

Obtain reconciliation and review for evidence of 3 D-3

performance.

D-4

C
 Client Name
Internal Control Framework

Date Completed:
Completed By:
Reviewed By:

Question Yes No* Comments /Description

To the best of my knowledge, the answers and comments noted above are accu
internal controls within this department:

* For a “No” answer, cross-reference to either a compensating control or to audit work which has been performed
Questionnaire
or is to be performed.
 Name and Title of Person Completing Form (please print) Name and Title of Department Dir

Signature of Person Completing Form Signature of Departmen

3/16/2021
Date Form Completed Date of Department Directo

* For a “No” answer, cross-reference to either a compensating control or to audit work which has been performed
Questionnaire
or is to be performed.
 Employee Responsible for Task

s noted above are accurate and reflect the current

this department:

* For a “No” answer, cross-reference to either a compensating control or to audit work which has been performed
Questionnaire
or is to be performed.
Name and Title of Department Director (please print)

Signature of Department Director

Date of Department Director's Signature

* For a “No” answer, cross-reference to either a compensating control or to audit work which has been performed
Questionnaire
or is to be performed.
Finding Ref # Control Testing Finding
Management Response & Treatment