SA 240 requires the auditor to test journal entries with three specific risk areas: last-minute manual journals (often the final fortnight of the financial year), unusual debit-credit pairings that may signal earnings management, and related-party transaction rings. CORAA tests the complete journal universe against all three, not a sample. The SA 240 working paper documents the procedure with source vouchers attached.
Two paths to the same audit conclusion. One leaves traces; the other doesn't.
CORAA filters the journal for entries created manually (user-posted, not system-generated) within a configurable window before year-end. Default is the last 14 days. The auditor sees every such JE, its amount, the ledgers debited and credited, and the source voucher.
Some ledger pairs are red flags: Bank debited with Revenue credited (unusual; revenue typically goes to Debtors first), Suspense ledger debited with Other Income credited, etc. CORAA's pairing rules flag these patterns across the complete journal.
Once the Related Party list is set in Engagement Setup, CORAA builds a graph of transactions between related parties. Circular flows (Entity A pays B, B pays C, C pays A) surface as rings. The graph is shown in Intelligence Studio.
Tally and SAP both distinguish user-created journals from system-posted ones (system journals are typically depreciation, accrual reversals, etc.). CORAA reads the entry's origin and filters the journal universe accordingly.
Rules anchored to common earnings management patterns: revenue recognition shortcuts, expense deferrals, suspense ledger usage, late-period reclassifications. Each rule has an SA 240 paragraph reference.
Intelligence Studio renders the related-party transaction graph. Each related entity is a node; each transaction is an edge weighted by amount. Circular flows are highlighted automatically. Click any node to drill into transactions.
The SA 240 Working Paper documents the procedure performed: which window was tested, which rules were applied, which entries were flagged, which were dismissed with auditor rationale.