Reference no: EM132774129

Question - As a result of the Covid-19 pandemic, the Tasmanian tourism industry has suffered a massive reduction in visitors. The Tasmanian government has decided to support the industry by awarding redeemable e-vouchers to Tasmanians who are planning to spend a minimum of 2 nights, during weekdays only, at approved businesses. There are 200 pre-approved Short-Stay establishments qualifying for inclusion in the scheme, which includes a number of Airbnb's. A requirement of the scheme is that the Short-Stay businesses must be regional and members of Tourism-Tasmania. Claimants must be Tasmanian residents.

To participate in the scheme, visitors intending to stay at a Short-Stay establishment must register on the Tourism-Tasmania website. Upon registration a 'once-off' voucher for $100 per person (2 nights at $50 per night) is recorded. Holders of the vouchers can claim the money back after visiting, and paying the approved establishments. The claims are submitted to the same Tourism-Tasmania website by capturing the name of the establishment and date of stay. The claims are paid directly into the claimant's bank account, the details of which was captured during the registration process.

Assume the Tasmanian government has become aware of e-Vouchers being sold for a profit on online-retail stores such as Gumtree and eBay. This is against the rules of the scheme. The government is also concerned about other fraudulent actions that may occur in both the online registration and claim processes. You have now been approached to assist the government with implementing application and general controls to reduce the risk of fraudulent behaviour by claimants and approved businesses. The government is particularly concerned about collusion between business owners and claimants to share refunds for visits that never took place.

Required -

a) Explain the difference between application controls and general controls by using examples from this case. Reference Parkes et al.

b) Analyse how the risk of fraudulent registrations by potential claimants OR Short-Stay businesses may result in fraudulent claims and refunds.

c) Explain what application controls should be in place to reduce the risks identified.

d) Analyse how fraudulent claims may be made and identify what risks are involved with this application. Consider collusion between claimants and businesses.

e) Explain what application controls should be in place to reduce the risks identified.