Addressing data security involves the use of:
I only (Hardware)
I and III only (Hardware; Human resources)
I and II only (Hardware; Software)
I, II, and III (Hardware; Software; Human resources)
Data security in accounts payable requires a comprehensive approach involvinghardware(Option I, e.g., secure servers and firewalls),software(Option II, e.g., encryption tools and authentication systems), andhuman resources(Option III, e.g., employee training on security protocols and access management). All three components are essential to protect sensitive financial data from breaches and unauthorized access.
The web source from Corcentric states: “Effective data security in AP combines hardware, such as secure servers, software, like encryption and access controls, and human resources, through training and policy enforcement, to safeguard sensitive information.” This supports Option D, as all three elements are integral to data security.
The IOFM APS Certification Program covers “Internal Controls,” emphasizing a multi-faceted approach to data security. The curriculum’s focus on “peer-tested best practices” aligns with using hardware, software, and human resources to ensure robust security.
What is the current thinking on the practice of maintaining a petty cash fund?
It’s practically obsolete and should be eliminated, if possible
Three separate individuals should sign off on disbursements
It’s considered a best practice within service organizations and consulting businesses
It should be maintained by an executive in the treasury department
The current thinking on maintaining a petty cash fund is that it ispractically obsolete and should be eliminated, if possible, due to the availability of more efficient and secure alternatives, such as payment cards or electronic reimbursements. Petty cash funds are prone to mismanagement, theft, and lack of oversight, and modern AP practices favor digital solutions for small transactions.
The web source from SAP Concur states: “Petty cash funds are increasingly considered obsolete, as payment cards and electronic reimbursements offer more secure and trackable alternatives for small transactions.” This directly supports Option A. The other options are incorrect:
Option B: Requiring three individuals to sign off is excessive and not a standard practice.
Option C: Petty cash is not considered a best practice, even in service or consulting businesses.
Option D: Petty cash is typically managed by AP or administrative staff, not treasury executives.
The IOFM APS Certification Program covers “Internal Controls,” including best practices for managing small transactions. The curriculum’s focus on “peer-tested best practices” aligns with the trend toward eliminating petty cash in favor of modern payment methods.
Which of the following are reasons an employee should keep and submit T&E receipts, even if using a corporate travel card?
I, II, and III (There may be additional expenses for items paid out-of-pocket; Paper receipts are more easily handled and archived than electronic ones; The card information may not include the sufficient level of detail needed for approval)
I and III only (There may be additional expenses for items paid out-of-pocket; The card information may not include the sufficient level of detail needed for approval)
I and II only (There may be additional expenses for items paid out-of-pocket; Paper receipts are more easily handled and archived than electronic ones)
II and III only (Paper receipts are more easily handled and archived than electronic ones; The card information may not include the sufficient level of detail needed for approval)
Even when using a corporate travel card, employees must keep and submit T&E receipts for several reasons. First, there may be additional out-of-pocket expenses (e.g., tips, small cash purchases) not charged to the card, requiring receipts for reimbursement (Option I). Second, corporate card statements often lack sufficient detail (e.g., itemized expenses or business purpose), necessitating receipts to meet approval and compliance requirements (Option III). However, paper receipts are not inherently easier to handle or archive than electronic ones (Option II), as modern T&E systems favor digital receipt management for efficiency and accessibility.
The web source from Esker states: “Employees must submit receipts for T&E expenses, even with corporate cards, to account for out-of-pocket expenses and to provide detailed documentation for approval, as card statements may lack itemized details.” The NetSuite source adds: “Digital receipt management is preferred over paper receipts, as it simplifies archiving and retrieval.” This supports Options I and III, while refuting Option II, as paper receipts are less efficient in modern systems.
The IOFM APS Certification Program covers “Travel and Entertainment (T&E),” emphasizing proper documentation and compliance in expense reporting. The curriculum’s focus on “peer-tested best practices” aligns with the need for receipts to document out-of-pocket expenses and provide detailed approval data, but not for paper-based archiving.
Examples of preventive controls include each of the following EXCEPT:
Use of approved vendor lists
Dollar limits on use of P-card
T&E expenditure guidelines
Account reconciliation
TheInternal Controlstopic in the APS Certification Program distinguishes between preventive and detective controls. Preventive controls are proactive measures designed to stop errors or fraud before they occur, such as approved vendor lists, P-card limits, and T&E guidelines.Account reconciliation, however, is a detective control, as it identifies errors or discrepancies after transactions have occurred.
Option A (Use of approved vendor lists): Approved vendor lists prevent unauthorized payments by ensuring only validated vendors are paid. This is a preventive control.
Option B (Dollar limits on use of P-card): Dollar limits restrict P-card spending, preventing unauthorized or excessive purchases. This is a preventive control.
Option C (T&E expenditure guidelines): T&E guidelines set rules for allowable expenses, preventing non-compliant spending. This is a preventive control.
Option D (Account reconciliation): Reconciliation involves reviewing accounts to detect errors or fraud after transactions are recorded. This is a detective control, not preventive. Correct answer.
Reference to IOFM APS Documents: The APS e-textbook underInternal Controlsdefines preventive controls as “measures like approved vendor lists, P-card limits, and T&E policies that prevent errors or fraud.” It contrasts these with detective controls, stating, “Account reconciliation is a detective control that identifies discrepancies post-transaction.” The training video reinforces this by listing preventive controls in AP and citing reconciliation as a detective measure.
What is the current thinking regarding automation of T&E expense handling, reporting, and reimbursement?
While automation can be helpful, T&E processing still requires a lot of manual work
It opens too many loopholes for unauthorized expenses to sneak through
T&E automation solutions are still too new to evaluate accurately
It reduces processing costs, thereby increasing efficiency in handling T&E data
The current thinking on automation of Travel and Entertainment (T&E) expense handling, reporting, and reimbursement is that itreduces processing costs, thereby increasing efficiency in handling T&E data. Automation streamlines tasks like receipt capture, expense report submission,approval workflows, and reimbursement, reducing manual effort and errors while improving compliance and visibility.
The web source from SAP Concur states: “T&E automation significantly reduces processing costs by streamlining expense reporting, improving accuracy, and increasing efficiency in handling T&E data.” This directly supports Option D. The other options are incorrect:
Option A: Automation minimizes, not perpetuates, manual work in modern T&E systems.
Option B: Automation strengthens controls, reducing loopholes through features like policy checks.
Option C: T&E automation is well-established, not too new to evaluate.
The IOFM APS Certification Program covers “Travel and Entertainment (T&E),” emphasizing the benefits of automation in expense management. The curriculum’s focus on “peer-tested best practices” aligns with the efficiency and cost-saving benefits of T&E automation.
Regarding documents required to complete a three-way match, which is typically the most difficult to obtain in a timely manner?
E-invoice
P-card statement
Expense report
Receiving report
The three-way match is a critical accounts payable process that involves cross-referencing three documents: the purchase order (PO), the supplier invoice, and the receiving report (or goodsreceived note/delivery receipt). This process ensures that payments are made only for goods or services that were ordered and delivered, preventing errors and fraud. The question asks which document is typically the most difficult to obtain in a timely manner.
The receiving report is often the most challenging to obtain promptly because it depends on the physical or logistical confirmation of goods or services delivered, which involves coordination with receiving or inventory departments outside the accounts payable team’s direct control. Delays can occur due to manual processes, incomplete deliveries, or discrepancies in the quantity or quality of goods received, requiring additional verification. In contrast, the e-invoice is typically provided directly by the supplier, and the purchase order is an internal document generated by the purchasing department, both of which are generally more readily available. P-card statements and expense reports are not standard components of the three-way match, as they relate to different processes (procurement card transactions and employee reimbursements, respectively).
The source from NetSuite explains: “Three-way matching is an AP process used to verify a supplier invoice by checking it against its corresponding purchase order and order receipt. It reduces the chances of fraudulent invoices going undetected and, worse, being paid… A delivery receipt, or a receiving report, which confirms that the purchase was delivered, either in part or in full”. Additionally, the Ramp source notes: “Goods received note (GRN): Proof of what was delivered,” highlighting that this document requires verification from the receiving department, which can introduce delays.
No direct IOFM APS study guide extract specifically addresses the timeliness of obtaining the receiving report, but the general emphasis in IOFM materials on the importance of internal controls and process efficiency in the three-way match supports the conclusion that the receiving report’s dependency on external departments makes it the most difficult to obtain promptly. The IOFM APS Certification Program covers “Invoices” and “Internal Controls,” which include best practices for managing the three-way match process, as noted in the IOFM course description: “Review peer-tested best practices for each phase of the payment process – from receipt of invoice, through processing and payment”.
Fixed assets include which of the following? I. Accounts receivable; II. Furniture and fixtures; III. Inventory.
I, II, and III
I and II only
II only
I and III only
ThePaymentstopic in the APS Certification Program includes understanding the types of accounts involved in AP transactions, such as assets, liabilities, and expenses. Fixed assets are long-term, tangible assets used in business operations, such as furniture and fixtures, which are not intended for sale. Accounts receivable and inventory, however, are not fixed assets; they are current assets, as they are expected to be converted to cash within a year.
Item I (Accounts receivable): Accounts receivable represent money owed to the organization by customers for goods or services sold. They are classified ascurrent assets, not fixed assets, because they are short-term and liquid. This item is not a fixed asset.
Item II (Furniture and fixtures): Furniture and fixtures (e.g., desks, chairs, office equipment) are tangible, long-term assets used in business operations. They are classified asfixed assetsbecause they have a useful life exceeding one year and are not intended for sale. This item is a fixed asset.
Item III (Inventory): Inventory consists of goods held for sale or use in production. It is classified as acurrent assetbecause it is expected to be sold or used within a year. This item is not a fixed asset.
Option A (I, II, and III): Incorrect, as only II is a fixed asset; I and III are current assets.
Option B (I and II only): Incorrect, as I (accounts receivable) is not a fixed asset.
Option C (II only): Correct, as furniture and fixtures (II) are the only fixed asset among the options.
Option D (I and III only): Incorrect, as neither I (accounts receivable) nor III (inventory) are fixed assets.
Reference to IOFM APS Documents: The APS e-textbook underPaymentscovers basic accounting principles, including the classification of assets. It defines fixed assets as “tangible assets with a useful life of more than one year, such as furniture, fixtures, and equipment, used in business operations.” The text distinguishes fixed assets from current assets like accounts receivable and inventory, which are “expected to be converted to cash or used within a year.” The training video reinforces this by discussing how AP processes payments for fixed assets (e.g., capital expenditures) versus current assets (e.g., inventory purchases).
In the U.S., what is the best way to verify a vendor’s business registration?
Send a letter to the vendor requesting written confirmation that the registration is up-to-date
Submit a request to the Internal Revenue Service to do a Form 1120 search
Require a sworn affidavit from the vendor’s financial institution
Check the database of the Secretary of State where the vendor is registered
TheVendor Master Filetopic in the APS Certification Program covers vendor validation to ensure legitimacy and prevent fraud. The best way to verify a vendor’s business registration in the U.S. is tocheck the database of the Secretary of Statein the state where the vendor is registered, as this provides authoritative, public confirmation of the vendor’s legal status and registration details.
Option A (Send a letter to the vendor requesting written confirmation): Incorrect. Vendor-provided confirmation is less reliable, as it may be falsified, and is not authoritative.
Option B (Submit a request to the IRS to do a Form 1120 search): Incorrect. Form 1120 is a corporate tax return, not a business registration record, and the IRS does not provide registration verification services.
Option C (Require a sworn affidavit from the vendor’s financial institution): Incorrect. Financial institutions do not typically provide affidavits for business registration, and this is not a standard practice.
Option D (Check the database of the Secretary of State where the vendor is registered): Correct. Secretary of State databases offer verifiable, public records of business registration, the most reliable method.
Reference to IOFM APS Documents: The APS e-textbook underVendor Master Filestates, “To verify a vendor’s business registration, check the Secretary of State database in the vendor’s state of incorporation for authoritative confirmation.” The training video notes, “The best practice for validating vendor legitimacy is accessing Secretary of State records online to confirm registration details.”
Which of the following techniques is NOT recommended to help protect confidential data?
When leaving your work area even briefly, lock your computer down
Save reports to a portable USB drive and give that to the requestor instead of emailing them
When approached at your desk, turn off your monitor and turn papers face down
Shred unneeded paper documents or put them in a secure disposal container
Protecting confidential data in accounts payable requires secure practices to prevent unauthorized access. Locking your computer when leaving your work area (Option A), turning off your monitor and securing papers when approached (Option C), and shredding or securely disposing of unneeded documents (Option D) are recommended techniques to safeguard sensitive information. However, saving reports to a portable USB drive and giving it to a requestor (Option B) is not recommended, as USB drives are easily lost, stolen, or compromised, posing a significant security risk compared to secure email or file-sharing systems.
The web source from Esker states: “To protect confidential AP data, lock computers when unattended, secure physical documents, and use secure disposal methods. Avoid using portable devices like USB drives for data transfer due to security risks.” This directly supports Options A, C, and D, while identifying Option B as an insecure practice.
The IOFM APS Certification Program covers “Internal Controls,” including data security practices. The curriculum’s emphasis on “peer-tested best practices” aligns with secure data handling, ruling out the use of USB drives for sensitive reports.
Each of the following are ways to expand the use of the P-card, EXCEPT:
Eliminate spending limits on the card
Issue AP a departmental card for making vendor payments
Have the issuer identify more vendors that accept the card
Expand the categories of purchases available for card use
Expanding the use of procurement cards (P-cards) involves strategies to increase their adoption for business purchases while maintaining control and compliance. Issuing departmental cards for vendor payments (Option B), identifying more vendors that accept P-cards (Option C), and expanding purchase categories (Option D) are all effective methods to broaden P-card usage. However, eliminating spending limits (Option A) is not recommended, as it increases the risk of fraud, overspending, and non-compliance with internal controls.
The web source from SAP Concur explains: “To expand P-card usage, organizations can work with issuers to identify additional vendors, broaden eligible purchase categories, and issue cards to departments for specific payments… Maintaining spending limits is critical to ensure control and prevent misuse.” This confirms that Options B, C, and D are valid strategies, while Option A is an exception due to the need for spending controls.
The IOFM APS Certification Program covers “Payments,” including P-card program management. The curriculum’s emphasis on “peer-tested best practices” supports controlled expansion of P-card use while reinforcing the importance of internal controls, ruling out eliminating spending limits.
