(a) Appropriate internal controls to manage each of the applicable risks

1. Failure to attract visitors due to poor condition of paintings and museum items
   • Implement a formal restoration schedule, prioritizing high-value or high-visibility items, and allocate a specific budget for restoration activities.
   • Hire additional qualified restorers or outsource restoration work to external specialists to address the backlog.
   • Conduct regular condition assessments of paintings and museum items, documented in a maintenance log, to ensure timely identification of deterioration.
   • Establish a fundraising committee to secure grants or donations specifically for restoration and acquisition of new items.
   • Monitor visitor feedback through surveys to assess the impact of item condition on attendance and adjust restoration priorities accordingly.
2. Failure to invoice corporate sponsorship agreements
   • Implement a centralized sponsorship management system to track all agreements, including contract terms, invoicing schedules, and communication records.
   • Require sponsorship managers to submit signed contracts to the accounts department within a specified timeframe (e.g., 5 working days) after agreement.
   • Assign a designated liaison officer to coordinate between sponsorship managers and the accounts department to ensure all agreements are communicated.
   • Perform monthly reconciliations of sponsorship agreements against invoices issued to identify unbilled contracts.
   • Use automated reminders in the accounting system to prompt invoicing for sponsorship agreements based on agreed timelines.
3. Incorrect invoicing of sponsorship agreements due to set-off arrangements
   • Require sponsors to provide written confirmation of advertising charges and set-off amounts before deducting from sponsorship payments.
   • Maintain a register of all set-off arrangements, updated by the sponsorship manager and reviewed by the accounts department before invoicing.
   • Implement a policy requiring the accounts department to verify set-off details with sponsorship managers for each invoice involving advertising deductions.
   • Conduct periodic audits of sponsorship invoices to ensure set-off amounts are accurately recorded and supported by documentation.
   • Train accounts staff on the procedures for handling set-off arrangements to ensure consistent application.
4. Theft or loss of cash from day visitors at the door
   • Install secure cash registers with access restricted to authorized personnel and require dual custody for cash handling (e.g., two staff members to count and deposit cash).
   • Use sequentially numbered tickets for cash sales, reconciled daily against cash collected to detect discrepancies.
   • Implement daily cash reconciliations, with cash counts performed by a supervisor independent of ticket sales staff, and deposit cash in the bank daily.
   • Install surveillance cameras at ticket counters to deter theft and provide evidence in case of discrepancies.
   • Prohibit the use of cash for business expenses; instead, use a petty cash system with formal requisition and approval processes.
5. Unavailability of the online booking system
   • Engage a reliable IT service provider to maintain and monitor the website, with a service level agreement guaranteeing minimal downtime (e.g., 99.9% uptime).
   • Implement regular system backups and a disaster recovery plan to restore the website quickly in case of failure.
   • Conduct routine stress tests and maintenance checks on the website to identify and address potential weaknesses.
   • Provide alternative booking channels (e.g., telephone hotline or third-party ticketing platforms) during website downtime, communicated to customers via social media.
   • Monitor website performance metrics and user complaints to identify recurring issues and prioritize IT improvements.

(b) Financial statement risks arising from each of the applicable risks

1. Failure to attract visitors due to poor condition of paintings and museum items
   • Revenue may be overstated if ticket sales or membership subscriptions are recorded based on optimistic forecasts rather than actual visitor numbers.
   • Assets (paintings and museum items) may be overstated if their impaired condition is not reflected through appropriate impairment charges.
   • Expenses may be understated if restoration costs are not accrued or recognized in the period they are incurred.
   • Going concern risk may arise if declining visitor numbers lead to insufficient revenue to sustain operations.
   • Disclosure risk exists if the financial statements fail to describe the impact of deteriorating assets on future revenue potential.
2. Failure to invoice corporate sponsorship agreements
   • Revenue may be understated if sponsorship agreements are not invoiced, leading to unrecorded income in the financial statements.
   • Receivables may be understated if invoices are not raised for sponsorship amounts due.
   • Cash flow statements may be misstated due to delayed or missing cash inflows from unbilled sponsorships.
   • Completeness risk exists if the financial statements omit material sponsorship revenue due to poor communication.
   • Disclosure risk arises if related party transactions with sponsors (e.g., those providing advertising) are not identified and disclosed.
3. Incorrect invoicing of sponsorship agreements due to set-off arrangements
   • Revenue may be understated or overstated if set-off amounts are incorrectly deducted or not accounted for in sponsorship invoices.
   • Receivables may be misstated if invoices do not reflect the net amount due after set-off arrangements.
   • Expenses (advertising costs) may be misstated if set-off amounts are not properly recorded as advertising expenses.
   • Accuracy risk exists if the financial statements reflect incorrect sponsorship revenue or expense figures due to unverified set-offs.
   • Disclosure risk arises if set-off arrangements are not adequately explained in the notes to the financial statements.
4. Theft or loss of cash from day visitors at the door
   • Revenue may be understated if stolen or lost cash is not recorded as ticket sales in the financial statements.
   • Cash and cash equivalents may be understated due to unrecorded or misappropriated cash receipts.
   • Profit may be understated due to the failure to recognize revenue from cash ticket sales.
   • Completeness risk exists if cash transactions are not fully captured in the accounting records.
   • Fraud risk arises if management or staff intentionally misappropriate cash, leading to misstatements in the financial statements.
5. Unavailability of the online booking system
   • Revenue may be understated if potential ticket sales are lost due to website downtime, reducing recorded income.
   • Receivables may be understated if advance ticket purchases are not processed due to system unavailability.
   • Cash flow statements may be misstated due to delayed or lost cash inflows from online ticket sales.
   • Completeness risk exists if online ticket sales are not recorded during periods of website downtime.
   • Disclosure risk arises if the financial statements do not disclose the impact of system unavailability on revenue generation.