Control Matrix

1
Control Matrix

• Control Plans

2
Generic Business Even Processes

• Input (Individually or Batched)
• Edit inputs
• Resolve errors
• Correct errors/inputs
• Record input

3
Input Controls

• Well Designed Documents
• Easier to Input (effective, efficient, accurate)
• Segregates resource from recording event
• Written Approval
• Validates event
• Preformatted Screens
• Easier to Input (effective, efficient, accurate)
• Online Prompts
• Easier to Input (effective, efficient, accurate)
• Enter Close to Source
• More timely data processing (effective,
  efficient)
• Data entry person more knowledgeable of event
  (accuracy)
• Less likelihood of loss (completeness)
• Authenticate Input
• Digital signatures / Encryption (security,
  validity, accuracy)
• Populate Input with Master Data
• Less needs to be input (effective, efficient,
  accurate)
• Comparisons between input and master can be made
  (validity, accuracy)
• Automatic Scanning / Input

4
Edit Input

• Automated Checks (effective, efficient, accurate)
• Reasonableness
• Hash Totals
• Accuracy (of calculations)
• Check Digits
• Input / Master Checks (effective, efficient,
  valid, accurate)
• Data Dependency
• Data Validity
• Data Accuracy
• Sequence

5
Resolve Errors

• Process in Place
• Complete
• Reconcile Batch totals (manually)
• Valid, Complete and Accurate
• Reconcile Batch totals (automated)
• Effective, Efficient, Valid, Complete and
  Accurate
• Reconcile Input Output Batch Totals
  (run-to-run)
• (Secure, Valid, Input Update Complete, Input
  and Update Accurate)
• One-to-one Checking
• (Secure, Valid, Input Update Complete, Input
  and Update Accurate)

6
Correct Errors

• Key-in Corrections
• Accuracy

7
Record Input

• Provide Feedback
• Completeness
• Automatic Record Input
• Effective and Efficient
• Automatic Updating
• Effective, Efficient, Valid, Input Update
  Accurate

8
Process Input

• Customer Credit Check
• Effectiveness, Security, IV
• Independent Authorization
• Security, IV

9
Data Maintenance

• Independent Maintenance
• Security, IV (assuming prior authorization)
• Tickler File
• Effectiveness, IC, UC
• Confirm Accounts (Customer, etc) Regularly
• Effectiveness, IC, IA, UA