Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

BEC > Corporate Governance, Internal Control & Enterprise Risk Management > Flashcards

Corporate Governance, Internal Control & Enterprise Risk Management Flashcards

1
Q

audit committee

A

are members of board of directors

independent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

inherit limitations

A

COCO

collusion (2 or more ppl conspire to circumvent control)
override by mgmt
cost/benefit restraint
obsolescence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Dodd frank act (Wall Street Reform and Consumer Protection Act of 2010)

A

dodd frank was passed to promote fin. stability in U.S.

improve accountability and transaparency of fin. systems

end "too big to fail"
end bailouts (GM, citigroup, chrysler)

protect consumers from abusive fin. serv. practices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

The Enterprise Risk Management–Integrating with Strategy and Performance Framework

A

risk-based approach designed to help management evaluate the interrelated impacts of decisions and deal with multiple risks.

It is separate from and additional to the COSO internal control framework and is a process effected by an entity’s board of directors, management, and other personnel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Codes of conduct

A
  1. must be comprehensive,
  2. must be periodically acknowledged,
  3. must communicate what constitutes both proper and improper behavior,
  4. must provide courses of action in the event of improper behavior,
  5. should be acknowledged by employees periodically
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Consumer Financial Protection Bureau (CFPB)

A

budget is financed by Fed
financed by Fed reserve
housed within fed but operates independently
oversees most federal consumer financial protection issues (fair lending from credit cards, mortgage)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

who is required to register w the SEC

A

hedge fund with over $150mill in assets

private equity funds with over $150 mill in assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

except to register with SEC

A

family offices

venture capital firms

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

cpa that destroys documents to impede investigation can be

A

Fined and/or imprisoned not more than 20 years

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

primary factor in measuring risk exposure is

A

expected value

risks are prioritized in terms of their likelihood of occurrence and their expected impact on the company. The expected value of the risk is considered important because it will be compared to the expected values of risks associated with alternative decisions in order to determine risk priority.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

order of monitoring of internal control

A
  1. control baseline: understand of how IC was designed and implemented
  2. identify the need to make changes
  3. manage the changes
  4. revalidate or update the baseline
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Revised Model Business Corporation Act requires articles of incorporation to contain a corporation’s name and the nature and purpose purpose of a corporation’s business

A

corporate name,
number of authorized shares,
name and address for the registered agent
name and address of each incorporator
nature and purpose purpose of a corporation’s business

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

internal control

A

CRIME

control activities
risk assessment
information and communication
monitoring
control Environment
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

control activities

A
  1. selects and develops control activities
  2. selects and develops general control over technology
  3. deploys through policies and procedures
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

risk assessment

A
  1. specifies suitable objectives
  2. identifies and analyzes risk
  3. assesses fraud risk
  4. ID and analyzes significant change
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

information and communication

A
  1. use relevant information
  2. communicates internally
  3. communicates externally
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

monitoring

A
  1. conducts ongoing and or separate evaluations
  2. evaluates and communicates deficiencies

ensures that internal control continues to operate effectively by evaluating its effectiveness on an ongoing basis, using separate evaluations, or both to identify when it is not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

control environment

A
  1. demonstrates commitment to integrity and ethical values
  2. exercise oversight responsibilities
  3. est. structure, authority and responsibilities
  4. demonstrate commitment to competence
  5. enforces accountability
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

control environment

A

CHOPPER

C-ommitment to competence
H-uman resource policies and practices
O-rganizational structure
P-articipation of those charged w governance
P-hilosophy of management and mgt operating style
E-thical values and integrity
R-esponsibility assignment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

control activities

A

PIPS

performance reviews (actual v. budget, financial to nonfinancial)
information processing
physical control
segregation of duties (ARCCS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

ARCC

A

authorization
record
custody
comparions (reconciliation)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

The 3 principles associated with the control activities component of internal control

A
  1. Selection and development of control activities contribute to reducing risks to the achievement of the entity’s objectives
  2. general controls over technology are developed to support the achievement of the entity’s objectives
  3. policies identify expectations and procedures convert policies into actions.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Objectives may be divided into three categories,

A

(1) operations objectives,
(2) reporting objectives, or
(3) compliance objectives.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

insolvent

A

liabilities exceed assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

audit committee financial expert should have knowledge of

A

GAAP, financial statements, and have experience with internal accounting controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

how to dissolve a corp

A

Revised Model Business Corporation Act requires a recommendation from the board of directors and subsequent approval of a majority of voting shareholders to voluntarily dissolve a corporation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

who must make special certification statements regarding the establishment of internal control systems on Form 10-K

A

Both the principal executive officer and the principal financial officer

28
Q

Control activities

A

are the actions established by policies and procedures that help ensure that management’s directives are carried out

29
Q

Monitoring activities

A

are processes the entity uses to determine if all components of internal control are in place and are functioning as intended

30
Q

Information and communication

A

refer to the processes by which management obtains or generates and uses information and how it is disseminated through the entity

31
Q

Risk assessment

A

refers to an entity’s recognition of the fact that events may occur that pose risks to the achievement of the entity’s objectives and the process that is established to identify and evaluate those risks.

32
Q

greatest impact on management’s ability to make effective decisions

A

relevance

Relevance implies that the information is accurate, timely and useful for decision-making purposes.

33
Q

Exception orientation

A

is the reporting of unusual items or events

34
Q

inherit risk v. residual risk

A

Inherent risk exists because one engages in an activity; it may be mitigated with various safeguards.

Residual risk is the risk that remains after safeguards are employed

35
Q

if one takes action to reduce risk,

A

then the portion reduced is no longer a residual risk

36
Q

if theres no safeguard to reduce risk

A

then inherit risk equals residual risk

37
Q

Publicly-traded companies have to disclose purchases of conflict minerals that ultimately came from the Democratic Republic of Congo

A

If they are substantial users of conflict minerals

Title XV of Dodd frank act - miscellaneous provision

38
Q

4 categories of entity objectives in the enterprise risk management (ERM) framework are:

A
  1. strategic, referring to high-level goals, supporting and aligned with the entity’s mission
  2. operations, referring to efficient and effective use of the entity’s resources
  3. reporting, referring to reliable reporting
  4. compliance, which refers to compliance with applicable laws and regulations.
39
Q

An effective FRMP

A
  1. initiates a visible and rigorous fraud governance process,
  2. entails a thorough periodic fraud risk assessment, and
  3. responds quickly to fraud allegations.
40
Q

bylaws

A

establish a corporation’s internal rules and procedures for corporate governance. Bylaws take effect after the corporation is created (through articles of incorporation) and generally have a larger impact on day-to-day operations.

41
Q

The Volcker rule

A
  1. is named after a Federal Reserve chairman first appointed by Jimmy Carter.
  2. limits banking entities’ ability to engage in proprietary trading
  3. limits banking entities’ ownership of hedge funds and private equity funds
42
Q

The COSO framework outlines four responses to risk:

A
  1. risk avoidance, (not doing activity at all to avoid risk)
  2. risk sharing, ( buy insurance to share risk)
  3. risk acceptance (take not action and accepting risk)
  4. risk reduction (doing something to reduce risk)
43
Q

sifi

A
  1. they are systemically-important financial institutions
  2. required to engage in additional disclosures and risk-management practices (living wills and stress tests)
  3. identified by the Financial Stability Oversight Council (FSOC)
  4. The reference value for SIFIs is $50 billion
44
Q

title IX of dodd frank act

A

Title IX of the Dodd-Frank Act gives authorizes stockholders to vote to approve executive compensation every 3 years and to vote every 6 years to determine if voting to approve compensation every 3 years is frequent enough. It also authorizes them to vote to disapprove a “golden parachute” arrangement, although the vote is not binding

45
Q

clawback provision of dodd frank act

A

Require executives to return some compensation if their companies undergo accounting restatements due to either unintentional mistakes or fraud

46
Q

BOD

A

responsible for appointing the external auditor and has the authority to terminate the firm as well

can declare dividends.

Directors are appointed by the stockholders, who would also have the authority to remove a director.

47
Q

CFO or CEO misrepresents the company’s finances may be penalized by being

A

imprisoned and fined

The penalties could range from $1 million and 10 years to $5 million and 20 years in prison

48
Q

whistle blower bounty program

A

can get monetary incentive for whistle blowing

to receive 10-30% of proceeds over $1mill

49
Q

TARP

A

troubled asset relief program

50
Q

ACFE

A

association of certified fraud examiners

51
Q

who usually uncovers fraud?

A

40% by whistle blower and tips
15% by mgmt and internal auditors
4% by external auditors

52
Q

audit committee’s role includes to

A

(1) consider the risk of management override of controls;
(2) monitor fraud risks throughout the entity (using internal auditor or other personnel);
(3) meets privately with appropriate individuals (e.g., internal auditor, external auditors);
(4) consider reputation risk when reviewing work of management, internal auditors, and external auditors;
(5) remain cognizant of the external auditor’s responsibilities pertaining to fraud; and
(6) seek counsel when responding to allegations of fraud.

53
Q

fraud losses

A

estimated 5% of revenue
(140k) duration of 18 months
highest impact on small entity

54
Q

fraud risk management program (FRMP)

A
  1. establish governance policies
  2. conduct comprehensive risk assessment
  3. plan and execute preventative and detective control processes
  4. perform timely and confidential investigations
  5. monitor and assess program, periodically on and ongoing basis. or both. reporting results and improving the processes
55
Q

parties who manage fraud risk

A
  1. those charged w governance (audit committee)
  2. BOD
  3. mgmt ( ceo, cfo coo)
  4. internal auditors
  5. employees
56
Q

business processes

A
  1. initiation
  2. authorization
  3. execution
  4. verification
57
Q

enterprise risk management (ERM)

in 2017 updated it and calls it enterprise risk management - integrating with strategy and performance

A

to strategically ID events that may affect the entity and to manage those risk in accordance with the entity’s risk appetite, to provide reasonable assurance of achieving the entity’s objective

58
Q

ERM framework has 5 components (COPe RR)

A

COPe RR

Culture and governance
Objective setting and strategy
Performance

Review and revision
Reporting, information, and communication

59
Q

Culture and governance

A
  1. exercise board risk oversight
  2. est. operating structures
  3. define desired culture
  4. demonstrate commitment to core values
  5. attracts, develops, and retain capable ind.
60
Q

Objective setting and strategy

A
  1. analyze business context
  2. define risk appetite
  3. evalutates alt. strategies
  4. formulates business obj.
61
Q

performance

A
  1. ID risk
  2. assess severities of risk
  3. prioritizes risk
  4. implements risk response
  5. develop portfolio view
62
Q

review and revision

A
  1. assess substantial change
  2. reviews risk and performance
  3. pursues improvement in ERM
63
Q

reporting, info and communcation

A
  1. leverage information systems
  2. communicate risk information
  3. reports on risk, culture, and performance
64
Q

inherit limitations of ERM

A
  1. future cant be predicted w certainty
  2. some events beyond mgmt control, may not be able to pursue all objectives to the extent desired
  3. no system process, no matter how well designed, will always accomplish what its intended to accomplish (no absolute assurance)
65
Q

ERM provide reasonable assurance not absolute because

A
  1. decisions made depend on human judgement, which is not perfect
  2. system an suffer breakdowns due to change s in personnel, technology or failure
  3. collusions (segr. of duties ignored)
  4. cost vs benefits
  5. mgmt overide

BEC (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions