Test 2 Flashcards
(129 cards)
COSO internal control categories include ______ of financial reporting and ______ with applicable laws and regulations.
reliability, compliance
An employee knowingly doing something to bypass the internal control system is an act of ______.
deliberate circumvention
Which of the following are true regarding management responsibilities?
A. Management is responsible for monitoring, supervising, and maintaining control activities.
B. Management is responsible for documentation maintenance to provide evidence that the internal control system is designed and operating effectively.
C. There are criminal penalties for the Board of Directors of firms issuing materially misleading financial statements.
D. Managers should make their own judgments about the necessity of specific controls.
A. Management is responsible for monitoring, supervising, and maintaining control activities.
B. Management is responsible for documentation maintenance to provide evidence that the internal control system is designed and operating effectively.
D. Managers should make their own judgments about the necessity of specific controls.
The higher the assessment of control risk, the ______ the assessment of risk of material misstatement.
Higher
True or false: To achieve the specific objectives of each of the three goals, the COSO framework defines five components of a properly designed internal control system that work independently of each other to support the system’s overall effectiveness.
False
The COSO definition states that internal control is designed to provide ______ _______ regarding the achievement of objectives in three categories.
reasonable assurance
Two or more people working together to circumvent the internal control system is called ______ and it cannot be prevented by separation of duties.
Collusion
The foundation for all other components of internal control is the ______ ______.
control environment
Which of the following are true regarding the maintenance of internal controls?
A. Internal auditors are responsible for monitoring and maintaining control activities.
B. Managers are responsible for establishing a control environment.
C. Specific controls are required for all systems regardless of benefits versus costs.
D. Management should assess the risks it wishes to control.
B. Managers are responsible for establishing a control environment.
D. Management should assess the risks it wishes to control.
The risk of material misstatement is composed of ______ risk and ______ risk.
inherent, control
COSO developed a(n) ______ framework to facilitate the assessment and mitigation of business risks a company faces.
enterprise risk management
The five basic components of a properly designed internal control system as defined by COSO are:
(1) control environment,
(2) _______ assessment,
(3) _______ activities,
(4) _______ and
(5) information and _______.
risk assessment
control activities
monitoring
communication
Specific actions a client’s management and employees take to help ensure management’s directives are carried out are called _______ ________.
control activities
Obtaining an understanding of the information system relevant to financial reporting includes understanding ______.
A. how the entity communicates with vendors and customers to ensure they receive clear communication and information
B. how the information system captures events and conditions other than transactions significant to the financial statements
C. the nature of the underlying accounting records, information and accounts used to execute a transaction
B. how the information system captures events and conditions other than transactions significant to the financial statements
C. the nature of the underlying accounting records, information and accounts used to execute a transaction
Integrity, ethical values and competence of the entity’s people are all _______ _______ factors.
control environment
what are COSO’s 5 components?
control environment
risk assessment
control activities
monitoring
information & communication
an audit team’s responsibility would not include:
designing the client’s internal controls
documentation of understanding of a client’s internal controls
communicating internal control deficiencies
assessing the effectiveness of a client’s internal controls
designing the client’s internal controls
which of the following activities performed by a department supervisor most likely would help in the prevention or detection of a payroll fraud?
A. distributing paychecks directly to department store employees
B. setting the pay rate for departmental employees
C. hiring employees and authorizing them to be added to payroll
D. approving a summary of hours each employee worked during the pay period
D. approving a summary of hours each employee worked during the pay period
each of the following types of controls in considered to be a entity-level control except those:
A. relating to the control environment
B. pertaining to the company’s risk assessment process
C. regarding the company’s annual stockholder meeting
D. address policies over significant risk management practices
C. regarding the company’s annual stockholder meeting
what is the definition of control risk?
the risk that a material misstatement will not be prevented or detected on a timely basis by the client’s internal controls
why would an auditor use only substantive procedures to evaluate specific relevant assertions and risks?
because testing the operating effectiveness of the relevant controls would not be efficient
Which ASB management assertion best applies?
match sipping documents with sales invoices before a sale is recorded
occurence
Which ASB management assertion best applies?
balance total of individual customer receivable with the Trade A/R control accounts
classification
Which ASB management assertion best applies?
sales manager approves taking discounts
allocation or valuation