11.1 Purchasing, Accounts Payable & Search for Unrecorded Liabilities

11.1 Purchasing, Accounts Payable & Search for Unrecorded Liabilities

Core Audit Principle: In the revenue and receivables cycle, the primary audit risk is overstatement (violating the Occurrence and Existence assertions) driven by incentives to inflate revenue. In stark contrast, within the purchasing and accounts payable cycle, the primary audit risk is understatement (violating the Completeness assertion). Management faces pressure to suppress operating expenses and conceal current liabilities to improve reported working capital, EBITDA, and debt-to-equity ratios. Consequently, the auditor's directional substantive testing focuses on identifying what is missing from the accounting records rather than verifying what is already recorded.

---

1. Cycle Overview & The Directional Testing Paradigm

The expenditure and accounts payable cycle encompasses all business processes required to acquire goods, raw materials, physical assets, and operating services, and to disburse cash in settlement of the resulting obligations.

                                THE EXPENDITURE CYCLE PIPELINE

   [ Requisitioning ] ──> [ Purchasing ] ──> [ Receiving ] ──> [ Accounts Payable ] ──> [ Cash Disbursements ]
     (Operating Dept)       (Purchasing Agt)   (Receiving Dock)   (Voucher Processing)        (Treasury Dept)
            │                     │                  │                    │                         │
      Needs identifed       Vendor vetted      Blind PO counted    Three-Way Match            Check signed / EFT
      Purchase Requisition  Purchase Order     Receiving Report    Voucher Package approved   Voucher defaced/paid

Directional Testing: Tracing vs. Vouching in Accounts Payable

Because the dominant risk in accounts payable is understatement, standard vouching (sampling recorded accounts payable balances backward to vendor invoices) is generally ineffective for detecting unrecorded liabilities. If management omitted a liability entirely, sampling from the accounts payable subledger will never detect the omission.

• Testing for Understatement (Completeness): The auditor must select source documents generated outside the accounts payable ledger—such as receiving reports created before year-end or cash disbursements made after year-end—and trace forward into the accounts payable ledger to ensure the obligation was recognized.
• Testing for Overstatement (Existence): When the auditor tests whether recorded payables represent valid legal obligations, the auditor vouches from the accounts payable ledger backward to the voucher package (vendor invoice, receiving report, purchase order). This is secondary in audit importance compared to completeness.

---

2. Segregation of Duties Across Functional Departments

Effective internal control over purchasing requires the strict segregation of five critical functions: Requisitioning, Purchasing, Receiving, Invoice Processing (Accounts Payable), and Cash Disbursements (Treasury). Allowing any single department or individual to execute multiple functions creates severe vulnerabilities to embezzlement, unauthorized purchases, kickbacks, and financial reporting fraud.

                    MANDATORY SEGREGATION OF EXPENDITURE FUNCTIONS

  ┌───────────────────────┐         ┌───────────────────────┐         ┌───────────────────────┐
  │    REQUISITIONING     │         │      PURCHASING       │         │       RECEIVING       │
  │  Operating / Storage  │         │  Purchasing Agent     │         │    Receiving Dock     │
  │───────────────────────│         │───────────────────────│         │───────────────────────│
  │ • Originates need     │ ──────> │ • Vets vendors        │ ──────> │ • Inspects goods      │
  │ • Approved by manager │         │ • Issues prenumbered  │         │ • Uses BLIND PO       │
  │ • Cannot place orders │         │   Purchase Orders     │         │ • Prepares Receiving  │
  │ • Cannot receive goods│         │ • Negotiates pricing  │         │   Reports (counted)   │
  └───────────────────────┘         └───────────────────────┘         └───────────────────────┘
                                                                                  │
                                                                                  ▼
  ┌───────────────────────┐         ┌───────────────────────┐         ┌───────────────────────┐
  │   GENERAL LEDGER      │         │   CASH DISBURSEMENTS  │         │   ACCOUNTS PAYABLE    │
  │  Financial Accounting │         │      Treasury         │         │  Voucher Processing   │
  │───────────────────────│         │───────────────────────│         │───────────────────────│
  │ • Posts AP totals     │ <────── │ • Signs checks / EFT  │ <────── │ • Performs 3-way match│
  │ • Reconciles subledger│         │ • Defaces vouchers    │         │ • Prepares voucher    │
  │   to control account  │         │   (stamps "PAID")     │         │ • Records payable in  │
  │ • Independent of cash │         │ • Mails to vendors    │         │   voucher register    │
  └───────────────────────┘         └───────────────────────┘         └───────────────────────┘

Detailed Breakdown of Functional Responsibilities

1. Requisitioning (User / Department Level):

   • Identifies the operational need for raw materials, inventory, or services.
   • Prepares a formally approved, pre-numbered Purchase Requisition.
   • Control Restriction: Department personnel authorized to requisition goods must not have authority to issue purchase orders, receive goods, or approve vendor invoices.

2. Purchasing (Dedicated Purchasing Department):

   • Receives approved purchase requisitions and verifies authorization levels against management policy.
   • Selects approved vendors from an authorized vendor master list, obtains competitive bids for large expenditures, and negotiates terms.
   • Generates an official, pre-numbered Purchase Order (PO). Copies are distributed to: (a) Vendor, (b) Accounts Payable, (c) Receiving Department, and (d) Purchasing files.
   • Control Restriction: Purchasing agents must never have access to incoming physical goods or the cash disbursement process, preventing collusive kickback arrangements and unauthorized personal purchases.

3. Receiving (Warehouse / Receiving Dock):

   • Accepts physical deliveries from common carriers and vendors.
   • Inspects goods for physical damage and verifies that delivery corresponds to an authorized purchase order.
   • The Blind Purchase Order Control: The receiving dock receives a copy of the purchase order that has the quantities blacked out (or blanked). This forces warehouse personnel to physically uncrate, inspect, and count the incoming goods accurately, rather than simply glancing at the PO and signing off on the expected quantity.
   • Prepares an independent, pre-numbered Receiving Report detailing the exact count, description, date received, and carrier bill of lading number.
   • Transfers counted goods to the warehouse or storage department, obtaining a signed transfer receipt.
   • Control Restriction: Receiving personnel must never have access to vendor invoices or the authority to approve payables.

4. Accounts Payable / Voucher Processing (Accounting Department):

   • Receives the vendor invoice directly from the vendor (via mail or secure Electronic Data Interchange - EDI).
   • Assembles the Voucher Package and executes the Three-Way Match.
   • Verifies mathematical accuracy, unit price extensions, freight terms, and discounts.
   • Records the approved liability in the Voucher Register (purchases journal) and credits the accounts payable subsidiary ledger.
   • Schedules payment based on vendor credit terms (e.g., 2/10, n/30) to optimize cash discounts.
   • Control Restriction: Accounts payable staff must never have custody of checks, check-signing software tokens, or access to cash disbursements.

5. Cash Disbursements (Treasury Department):

   • Receives the complete, approved voucher package from accounts payable on the scheduled payment date.
   • Reviews the package for authorized approvals and documentation completeness.
   • Signs checks (or releases encrypted batch EFT/wire payments). Check signers must be authorized corporate officers (Treasurer, CFO).
   • Defacing / Canceling the Voucher Package: Immediately upon signing the check or transmitting the electronic payment, treasury personnel must cancel the voucher package by stamping or perforating "PAID" along with the check number and date. This physical or electronic cancellation prevents the voucher package from being recycled and submitted a second time for duplicate payment.
   • Mails checks directly to vendors without returning them to accounts payable or the requisitioning department.
   • Control Restriction: Treasury staff must not maintain accounts payable records, enter invoices, or reconcile the accounts payable subledger to the general ledger.

---

3. Control Activities & The Three-Way Match

The central preventative and detective internal control in the expenditure cycle is the Three-Way Match. Before any liability is recorded and scheduled for cash disbursement, an independent accounts payable clerk must verify that three separate documents match in all operational respects:

                                   THE THREE-WAY MATCH ARCHITECTURE

   ┌──────────────────────────────┐
   │        PURCHASE ORDER        │ ──┐
   │  • Authorized Item & Vendor  │   │
   │  • Agreed Unit Price         │   │
   │  • Delivery Terms (FOB)      │   │
   └──────────────────────────────┘   │
                                      ├──────> [ ACCOUNTS PAYABLE CLERK ] ──────> [ APPROVED VOUCHER ]
   ┌──────────────────────────────┐   │        • Quantities Billed = Received        • Entered into AP
   │       RECEIVING REPORT       │   │        • Unit Prices = Agreed PO Prices      • Scheduled for Pay
   │  • Actual Quantity Counted   │ ──┤        • Mathematical Extensions Verified
   │  • Condition of Goods        │   │        • Account Coding Reviewed
   │  • Date Received at Dock     │   │
   └──────────────────────────────┘   │
                                      │
   ┌──────────────────────────────┐   │
   │        VENDOR INVOICE        │ ──┘
   │  • Quantity Billed           │
   │  • Unit Prices & Total Due   │
   │  • Payment Terms & Remittance│
   └──────────────────────────────┘

Document Comparison Parameters

1. Purchase Order vs. Receiving Report: Confirms that the goods delivered are the exact items ordered and that the receiving dock did not accept an unauthorized shipment or excess quantity.
2. Receiving Report vs. Vendor Invoice: Confirms that the vendor is billing only for the specific quantities physically received and accepted by the client. If the vendor billed for 1,000 units but the receiving report shows 800 units received (with 200 units back-ordered), accounts payable modifies the voucher to approve payment for 800 units only.
3. Purchase Order vs. Vendor Invoice: Confirms that the prices, payment terms, and freight charges billed by the vendor match the contractual terms agreed to by the purchasing agent.

Automated Matching Controls & ERP Systems

In automated ERP environments (e.g., SAP, Oracle, NetSuite), the three-way match is executed electronically. The software system matches the electronic PO, the electronic receiving transaction, and the digital vendor invoice. If discrepancies exceed established tolerance thresholds (e.g., price variance > $10 or quantity variance > 0.5%), the system automatically places an exception hold on the invoice, preventing payment until the purchasing department or authorized supervisor investigates and resolves the discrepancy.

---

4. Substantive Testing: The Search for Unrecorded Liabilities

The Search for Unrecorded Liabilities is the foundational substantive audit procedure for the purchasing and accounts payable cycle. Its express objective is to obtain sufficient appropriate evidence that accounts payable and accrued expenses are not materially understated at the balance sheet date.

Operational Timing and Population

The search is performed during the subsequent period—the window between the balance sheet date and the date of the auditor's report (e.g., during January and February for an audit of a December 31 calendar year-end entity). As time elapses after year-end, vendors issue invoices for goods delivered in December, and the client issues checks to settle year-end obligations.

                 SEARCH FOR UNRECORDED LIABILITIES TIMELINE (DEC 31 YEAR-END)

    CURRENT AUDIT PERIOD (20X1)             │      SUBSEQUENT AUDIT TESTING PERIOD (20X2)
 ───┼───────────────────────────────────────┼───────────────────────────────────────────────────────────►
   Dec 15                                 Dec 31                                                      Feb 15
                                            │                                                            │
                                     BALANCE SHEET DATE                                          AUDIT REPORT DATE
                                            │                                                            │
                                            └─────── [ SUBSEQUENT PERIOD DISBURSEMENT TESTING ] ─────────┘
                                                     1. Sample all cash disbursements in Jan/Feb.
                                                     2. Inspect underlying receiving reports.
                                                     3. IF goods received ≤ Dec 31, verify liability
                                                        was accrued in accounts payable at Dec 31!

Step-by-Step Execution of the Search

Step 1: Examine Subsequent Cash Disbursements

The auditor selects a sample of cash disbursements (checks, ACH payments, and wire transfers) recorded in the subsequent period (January 1 through the end of fieldwork) from the cash disbursements journal or check register.

• For each selected post-year-end disbursement, the auditor examines the supporting voucher package, specifically looking at the vendor invoice and receiving report.
• The Critical Audit Decision Rule:
  • If the receiving report indicates that goods were physically received on or before December 31 (or shipped FOB shipping point on or before December 31), an obligation existed at year-end.
  • The auditor traces to the December 31 accounts payable listing to verify that the liability was included.
  • If the liability was omitted from the December 31 accounts payable listing, the auditor records an audit misstatement (unrecorded liability).

Step 2: Examine Unpaid Vendor Invoices and Open Voucher Files

Not all year-end liabilities are settled by cash disbursements during fieldwork. Management may dispute an invoice or intentionally delay payment. The auditor inspects:

• Unentered vendor invoices on the accounts payable clerk's desk.
• Invoices entered into the voucher register in January or February.
• Open voucher files and purchase commitments.
• If the supporting documentation indicates services were rendered or goods were received on or before December 31, the auditor verifies that an accrual was recorded at December 31.

Step 3: Inspect Open / Unmatched Receiving Reports at Year-End

The auditor inspects receiving reports generated by the receiving dock prior to year-end that have not been matched to vendor invoices. If raw materials or inventory arrived on December 30, the goods were included in year-end inventory (or used in production), but the vendor invoice may not arrive until mid-January. The client must record an accrued liability (often called "Inventory Received Not Invoiced" or IRNI) at December 31.

Step 4: Review Monthly Vendor Statements

Vendors routinely mail monthly statements showing billing activity, payments credited, and ending unpaid balances. The auditor inspects vendor statements received by the client in January and compares the ending balances shown on the vendor statements to the client's accounts payable subsidiary ledger balances at December 31. Any reconciling differences represent potential unrecorded liabilities or disputes.

Comprehensive Audit Scenario: Evaluating Subsequent Transactions

An auditor is performing the search for unrecorded liabilities on February 10, 20X2, for Apex Manufacturing Co. (calendar year-end December 31, 20X1). The auditor examines the following sample of January 20X2 cash disbursements:

---

5. Cash Disbursements Cutoff & Accounts Payable Confirmations

Cash Disbursements Cutoff Testing

Cash disbursements cutoff testing ensures that cash payments and liability reductions are recorded in the proper accounting period. A common management window-dressing technique involves holding checks:

• The Held Check Trap: Management prepares and records checks on December 31 (debiting Accounts Payable, crediting Cash) to show a lower accounts payable balance, but holds the physical checks in a desk drawer and does not mail them to vendors until mid-January. Because the checks have not been delivered, no legal payment has occurred, and the client still controls the cash.
• Auditor's Procedure: The auditor inspects the last checks issued before year-end and the first checks issued after year-end. By comparing the check dates, mailing logs, and clearing dates on the subsequent bank statement, the auditor identifies checks held past year-end. If checks were held, the auditor requires an adjusting entry: Debit Cash, Credit Accounts Payable to reverse the premature reduction.

Accounts Payable Confirmations: AP vs. AR Compared

While Accounts Receivable confirmations are a GAAS required procedure under AU-C 505 (with narrow exceptions), Accounts Payable confirmations are NOT required by GAAS.

                   CONFIRMATION STRATEGY: RECEIVABLES VS. PAYABLES

            ACCOUNTS RECEIVABLE                           ACCOUNTS PAYABLE
       (Primary Risk: OVERSTATEMENT)                (Primary Risk: UNDERSTATEMENT)
                     │                                            │
   • GAAS Mandate: Presumptively Required       • GAAS Mandate: Optional / Discretionary
   • Primary Assertion: EXISTENCE               • Primary Assertion: COMPLETENESS
   • Sampling Target: Large dollar balances     • Sampling Target: Regular vendors with zero
   • Form: States recorded balance              • Form: BLANK confirmation (vendor fills in)
   • External Evidence: No external invoices    • External Evidence: Monthly vendor statements
     exist; confirmation is primary               already available at client

Why AP Confirmations Are Optional

1. Availability of External Corroborating Evidence: For accounts payable, the auditor already has access to reliable, externally generated documentation held by the client—namely, monthly vendor statements, vendor invoices, and bills of lading. For receivables, the auditor only has internal sales invoices and shipping orders generated by the client.
2. The Search for Unrecorded Liabilities Provides Direct Evidence: The post-year-end search for unrecorded liabilities provides direct, highly persuasive evidence of completeness.

When and How to Perform AP Confirmations

Auditors use accounts payable confirmations when control risk over payables is high, internal records are chaotic, or the entity engages in complex transactions with related suppliers.

• Selecting the Sample: The auditor does not simply sample the largest recorded ending accounts payable balances. Selecting large recorded balances tests existence, not completeness! To test for unrecorded liabilities, the auditor selects:
  • Major suppliers with zero or low recorded ending balances.
  • Vendors with significant purchase volume during the year regardless of year-end balance.
  • Unusual or related-party vendors.
• Confirmation Format: AP confirmations frequently utilize a blank confirmation (or open request). Rather than stating a dollar amount and asking the vendor to agree, the auditor asks the vendor to state the exact amount owed by the client at December 31, attach an itemized statement of unpaid invoices, and disclose any consigned inventory or collateral arrangements.