Citigroup’s Audit Committee Concerning the Firm’s Internal Controls

A Report for the Citigroup’s Audit Committee Concerning the Firm’s Internal Controls
Student Name
University
Course
Professor Name
Date
A Report for the Citigroup’s Audit Committee Concerning the Firm’s Internal Controls
Citigroup’s weak internal control system and careless supervision permitted dealers to mismark positions for a long period, leading to the company losing many of its stockholders’ money and assets to the scams. According to the U.S. Securities and Exchange Commission (2018), in 2018, Citigroup agreed to pay penalties in settling the enforcement actions involving inaccurate bookkeeping, failure to supervise traders properly, and a weak internal control system. In short, the company lost money due to its subsidiary fraudulently loaning cash to Oceanografia and some dealers engaging in unauthorized trading.
A Critique on Citigroup’s Internal Controls and the Purpose they Serve
Citigroup devised and maintained inadequate internal controls that could not verify the invoices from Oceanografia before giving them loans. Due to this weakness, the company should have noticed many red flags which could have helped it discover the fraudulent activities. Although Citigroup had a control system, it was improperly designed; probably, the tasks in the accounting function were not segregated. The company needed to break down duties which an individual could complete, hence having numerous tasks that many people could complete. This action could ensure that no single person could control the whole process, thus lessening the possibility of errors and fraud.
Difference between Operation and Design Control Deficiency
Internal control deficiencies in a business occur because of errors arising from operations or due to design. Buslepp et al. (2019) state that design deficiencies happen when organizational controls fail to detect and prevent material misstatements reliably. On the other hand, operation deficiencies occur when institutions’ control systems are well-designed but cause material misstatements. Maybe the individuals who perform the controls are inadequately trained, or they fail to execute and document the steps that the law requires to operate the controls efficiently. The auditors should identify the deficiency’s origin, whether people are improperly trained or do not p...