1/12 Flashcards

1
Q

Which of the following is correct regarding the requirements of Sar Box for an issuer’s board of directors?

  • Board must have an audit committee composed entirely of members who are independent from management
  • Board must have a compensation committee, nominating committee and audit committee each composed of independent members
  • Majority of members must be independent from management influence
  • Each member must be independent from management influence, based on prior and current activities, economic and family relationships, other factors
A

Board of directors must have an audit committee entirely composed of members who are independent from management influence.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

COSO Enterprise risk management framework, SOAR mnemonic

A

Strategies, evaluate alternatives
Objectives, formulate business
Analyze, business context
Risk, define appetitie

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The committee on sponsoring organizations prepared the internal control integrated framework:

A

to help businesses assess internal control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

all correspondence to/from regulatory auditors received by management is provided to audit committee and board as needed. Conclusion?

A

Board of directors understands and exercises responsibility related to financial reporting and internal control.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

A manufacturer monitors foreign country’s political events. According to COSO which principle

A

Accept, monitoring without taking action.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

All of the following activities are evidence of the monitoring built into the company’s system except:
- CEO and CFO are required to verify all major disbursements
- CFO reviews changes in liability reserve
- CEO and CFO review monthly gross margin and operating maring
- CFO updates audit committee on status of internal control.

A

Updating audit committee on status of internal control is reporting of deficiencies, not ongoing monitoring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Calc for weighted average cost of capital
- Cost of Eq 20%
- Cost of Debt 8%
- Tax Rate 40%
- Debt to Eq. .8

A

Total value is 1.8 (This is due to D/E ratio being .8, implying for every $1 of eq there is .8 debt)

  • .8/1.8 = .4444
  • 1/1.8 = .5556
    = .5556 * .2 + .4444 * (.08 * (1-.4)) = .1325
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Sarbanes-Oxley requires that one or more members of the audit committee be a financial expert and that the financial reports disclose

A

The existence of financial expert on the audit committee or the reasons why the audit committee does not have one.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Able owns numerous businesses along the Florida coast. The company identifies a potential risk resulting from storm damage caused by hurricanes. The company elects to diversify by buying property investments on the coasts of other states and Florida’s interior. The response is

A

Reduction. The response is diversification rather than elimination.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When a customer calls Steve takes down their last name and later finds the customer in his records. Recently there was a problem because Steve had two customers with the same last name and sent the bill to the wrong customer. What control could have prevented this issue?

A

Closed-loop verification. Steve would pull up the customer info during the sales call and verify with customer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Managers that anticipate greater return for greater risk are referred to as having what attitude toward risk?

A

Risk averse. They demand more return as risk increases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which of the following sets of duties would not be performed by a single individual?
-Approving sales returns and depositing customer checks in the bank.
-Custody of signed checks and maintaining depreciation schedules
-Preparing customer statements and maintaining ap sub ledger
-Posting AP transactions and entering additions and terminations to payroll

A

Approving sales returns and depositing customer checks in the bank.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

According to COSO, each of the following is an example of an appropriate monitoring activity, except
-Approval of high-dollar transactions by supervisors.
-Comparisons of information from various sources within the company.
-Periodic analysis of variances between expectations and actual results.
-Follow-up of customer and vendor complaints regarding amounts due and owed.

A

Approval of high-dollar transactions by supervisors.

Monitoring involves evaluations of internal control. Approval of transactions is part of internal control.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

According to Sarbanes-Oxley of 2002, each of the following is a corporate responsibility requirement, except
-Audit committee chair must certify the quarterly report presents fairly
-Audit committee is responsible for the appointment, compensation, and oversight of the registered accounting firm.
-Audit committee must establish whistle-blowing mechanisms within the issuer.
-Each audit committee member must be independent.

A

The audit committee must certify the quarterly report.

The CEO and CFO must certify quarterly report.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Enterprise risk management as defined by COSO ERM is

A

a process, effected by an entity’s board of directors, management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

The purpose of the COSO ERM model is to provide

A

a framework for managing risk throughout all activities of the entity

17
Q

The 5 components of COSO ERM

A

Governance and culture
Strategy and objective setting
Performance
Review and revision
Information, communication, reporting

18
Q

4 main objectives of ERM model

SORC

A

Strategic - high level goals, support mission
Operations - effective and efficient use of resources
Reporting - reliable
Compliance - with laws and regulations

19
Q

Inherent limitations of an internal control system

A

Human judgement and error
Cost vs Benefit limitations
Simple errors can lead to big mistakes
Circumvention of controls, collusion
Management override

20
Q

Principles of Governance and Culture

DOVES

A

Desired culture
oversight - board, management
Values - commitment to
Employees - attract, develop, retain
Structure - operations

Board risk oversight - oversight and support
Establish operating procedures - in pursuit of objectives
Define desired culture - behaviors
Commitment to core values - all levels
Attracts, develops, and retains capable individuals - building human capital

21
Q

Principles of Strategy and Objective setting

SOAR

A

Strategies - evaluate alternatives, vision
Objectives - formulate, why do we exist
Analyze context
Risk appetite

Analyze business context - consider effects
Define risk appetite - creating, preserving and realizing value
Evaluates alternative strategies - potential impact
Formulates business objectives - align and support strategy

22
Q

Principles of performance

VAPIR

A

View - Develops portfolio view - evaluating risk in a portfolio setting
Assess - severity of risk
Prioritize - risks
Identifies risk events
Risk Responses - implement

23
Q

Principles of Review and Revision

SIR

A

substantial changes -
improvement in enterprise risk management
Review risk and performance -

24
Q

Principles of Information, Communication and Reporting

TIP

A

technology systems - leveraged
information communicates effectively
performance reporting

25
Q

COSO 5 major components of an internal control system

CRIME

A

Control Environment - tone at the top
Risk assessment - process for identifying and managing risk
Information and communication - system employees use to exchange information regarding controls
Monitoring - ongoing, separate, deficiencies
Existing Control activities - procedures to ensure actions are taken

26
Q

Objectives of COSO

ORC

A

Operating - effectiveness and efficiency of entity operations, meeting operational and financial performance goals, safeguarding assets
Reporting - internal or external, financial or non, reliability and timeliness
Compliance - adherence to laws and regulations

27
Q

Limitations of COSO

A

Human judgement and bias
Breakdowns and failures
Management override
Collusion
Events beyond control
Unrealistic objectives

28
Q

Principles of the Control Environment

EBOCA

A

ethical values and integrity
board independent and oversight
organizational structure
commitment to competence
accountability

29
Q

Principles of Risk Assessment

SAFR

A

specify objectives with clarity
assess changes
fraud risk
risks - analyze and determine how to manage

30
Q

Principles of (Existing) Control Activities

CAT P

A

Control activities developed
technology controls
policies and procedures

develop control activities that contribute to mitigation of risks
technology to support achieving objectives
establish expectations and procedures

31
Q

Principles of monitoring

SO D

A

ongoing and
separate evaluations of internal control
evaluate and communicate deficiencies in a timely manner