TheInternal Controlstopic in the APS Certification Program distinguishes between preventive and detective controls. Preventive controls are proactive measures designed to stop errors or fraud before they occur, such as approved vendor lists, P-card limits, and T&E guidelines.Account reconciliation, however, is a detective control, as it identifies errors or discrepancies after transactions have occurred.
Option A (Use of approved vendor lists): Approved vendor lists prevent unauthorized payments by ensuring only validated vendors are paid. This is a preventive control.
Option B (Dollar limits on use of P-card): Dollar limits restrict P-card spending, preventing unauthorized or excessive purchases. This is a preventive control.
Option C (T&E expenditure guidelines): T&E guidelines set rules for allowable expenses, preventing non-compliant spending. This is a preventive control.
Option D (Account reconciliation): Reconciliation involves reviewing accounts to detect errors or fraud after transactions are recorded. This is a detective control, not preventive. Correct answer.
Reference to IOFM APS Documents: The APS e-textbook underInternal Controlsdefines preventive controls as “measures like approved vendor lists, P-card limits, and T&E policies that prevent errors or fraud.” It contrasts these with detective controls, stating, “Account reconciliation is a detective control that identifies discrepancies post-transaction.” The training video reinforces this by listing preventive controls in AP and citing reconciliation as a detective measure.