How to Prevent Invoice Splitting to Bypass Approval Thresholds?

CISA By islever Editorial Last updated Sep 8, 2026

Short answer

A Deploy computer-assisted audit techniques to systematically scan complete annual transaction records for structural spending patterns.

Question

An organization requires any travel and entertainment expenses over $10,000 to be approved by senior management. Which of the following is the MOST effective way to mitigate the risk that employees will split invoices to avoid the approval process?

Develop computer-assisted audit techniques (CAATs) to check the full year's transactions. Correct Answer
Adopt a zero-tolerance policy that requires termination of employees who submitted fraudulent claims.
Establish a whistle-blowing policy that allows employees to report suspicious activity anonymously.
Review alerts generated from continuous auditing scripts for suspicious claims submitted.

Key Takeaways

Tests your ability to choose the optimal fraud detection method for transaction structuring, with the common trap favoring real-time continuous auditing over historical data analysis.

Invoice splitting bypasses financial controls by fragmenting large expenses into smaller, unapproved amounts. While continuous monitoring offers real-time alerts, CISA experts agree that comprehensive CAATs analyzing full-year transaction datasets remain the most effective control for detecting these cross-period patterns.

Common mistake: Option D (continuous auditing scripts) is frequently chosen because real-time alerting seems more proactive, but it fails to capture split invoices that span multiple accounting periods or lack immediate suspicious flags.

Expert Analysis

Why the Answer Is Correct

CAATs enable auditors to run comprehensive algorithms against complete historical datasets, identifying complex spending patterns that evade single-transaction checks. By analyzing the full fiscal year, auditors can easily spot structuring techniques where employees deliberately fragment purchases across different months to stay under the $10,000 threshold. This holistic approach directly addresses the core objective of mitigating systematic approval evasion.

Why the Other Options Are Wrong

Option B relies on punitive measures that only apply after fraud is confirmed, offering zero proactive mitigation. Option C depends entirely on voluntary employee reports, creating inconsistent coverage and potential retaliation fears. Option D generates real-time alerts but lacks the longitudinal scope needed to connect fragmented transactions submitted weeks or months apart.

Community Comment Notes

Several learners initially favored continuous auditing due to its perceived real-time advantages, arguing that automated scripts catch fraud faster than batch processing [2]. However, experienced candidates emphasize that cross-period structuring renders point-in-time alerts ineffective, as split invoices rarely trigger immediate system flags [3]. Reviewers consistently highlight that historical data mining remains the industry standard for detecting deliberate transaction fragmentation.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When CISA questions ask for the MOST effective mitigation, prioritize controls that address the root behavior rather than just punishing outcomes. Always evaluate the temporal scope of audit tools: if a threat involves cross-period manipulation, choose solutions that aggregate historical data over those limited to real-time snapshots.

Frequently Asked Questions

Why isn't continuous auditing better for stopping split invoices?

Continuous scripts typically flag individual transactions in real time, missing structured claims that span months or fall below automated suspicion thresholds.

Does a zero-tolerance policy effectively prevent expense splitting?

No. Termination policies act as post-fraud deterrents rather than active detection or prevention mechanisms for ongoing transaction manipulation.

More CISA FAQ →

Community Votes

80%

20%

80% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

Swallows 👍 4 Answered A

Option D has a narrow scope of auditing for invoices that have already been submitted, and cannot effectively prevent the discovery of split travel and entertainment expense claims in real time. Although it is important to always audit for new suspicious claims, there is a limit to how much it can do to prevent invoices that have already been split. Therefore, the most effective method is to use CAAT to audit annual transactions and ensure that travel and entertainment expenses are properly approved.
SayakSib 👍 1

🔹 Key difference: CAATs (A) are reactive → They analyze transactions after they occur. Continuous auditing (D) is proactive → It generates alerts in real-time. Since the question asks for the MOST effective way, real-time alerting (D) is a stronger control than periodic reviews (A).
PurpleParrot 👍 1 Answered D

what if the split happens between december and january, option A wont catch that. hence, option D

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All CISA Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISA Practice Test →

← Back to CISA Study Guide