CRIME

Question 1

C.R.I.M.E. ?

Answer 1

Control Environment
Risk Assessment
Information and Communication
Monitoring Activities
Existing Control Activities

Question 2

The Organization demonstrates a commitment to integrity and ethical values.

Answer 2

Control Environment

Question 3

The board of directors demonstrates independence from management and exercises oversight of the development and performance of internal control.

Answer 3

Control Environment

Question 4

Management establishes, with board oversight, structures, reporting lines, and appropriate authorities, and responsibilities in the pursuit of objectives

Answer 4

Control Environment

Question 5

The organization demonstrates a commitment to attract, develop, and retain competent individuals in alignment with objectives.

Answer 5

Control Environment

Question 6

The organization holds individuals accountable for their internal control responsibilities in the pursuit of objectives

Answer 6

Control Environment

Question 7

The organization specifies objectives with sufficient clarity to enable the identification and assessment of risks relating to objectives

Answer 7

Risk Assessment

Question 8

The organization identifies risks to the achievement of its objectives across the entity and analyzes risks as a basis for determining how the risks should be managed

Answer 8

Risk Assessment

Question 9

The organization considers the potential for fraud in assessing risks to the achievement of objectives

Answer 9

Risk Assessment

Question 10

The organization identifies and assesses changes that could significantly affect the system of internal control

Answer 10

Risk Assessment

Question 11

The organization selects and develops control activities that contribute to the mitigation of risks to the achievement of objectives to acceptable levels

Answer 11

Control Activities

Question 12

The organization selects and develops general control activities over technology to support the achievement of objectives.

Answer 12

Control Activities

Question 13

The organization deploys control activities through policies that establish what is expected and procedures that put policies into action

Answer 13

Control Activities

Question 14

The organization obtains or generates and uses relevant, quality information to support the functioning of internal control.

Answer 14

Information and Communication

Question 15

The organization internally communicates information, including objectives and responsibilities for internal control, necessary to support the functioning of internal control.

Answer 15

Information and Communication

Question 16

The organization communicates with external parties regarding matters affecting the functioning of internal control.

Answer 16

Information and Communication

Question 17

The organization selects, develops, and performs ongoing and/or separate evaluations to ascertain whether the components of internal control are present and functioning.

Answer 17

Monitoring Activities

Question 18

The organization evaluates and communicates internal control deficiencies in a timely manner to those parties responsible for taking corrective action, including senior management and the board of directors, as appropriate

Answer 18

Monitoring Activities

Question 19

Control Environment

Answer 19

1) Commitment to integrity and ethical values
2) BOD is independent and has oversight of Internal Controls Development
3) Mgmt establishes structure, authority, and responsibility
4) Org demonstrates commitment to competence
5) Org enforces accountability

Question 20

Risk Assessment

Answer 20

1) Org specifies suitable objectives
2) Org identifies and analyzes risk
3) Org assesses fraud risk
4) Org identifies and analyzes significant changes

Question 21

Information and Communication

Answer 21

1) Org uses relevant, quality information
2) Communicates internally responsibilities for Internal Control
3) Communicates Externally

Question 22

Monitoring Activities

Answer 22

1) Conducts ongoing and/or separate evaluations
2) Evaluates and communicates deficiencies

Question 23

Existing Control Activities

Answer 23

1) Selects and develops control activities to mitigate risks
2) Selects and develops general controls over IT
3) Deploys control activities through policies and procedures