A2 Flashcards
A company that retains a CPA with the appropriate knowledge, skills, and abilities to prepare timely and effective financial reporting is applying the ideas from which principle of effective internal control over financial reporting?
A. Accountability
B. Board independence and oversight
C. Commitment to competence
D. Commitment to ethics and integrity
C. Commitment to competence
The external auditors for the Horace Company assess the achievement of internal control objectives each year and communicate the assessment to management and the board. Communication by the external auditor illustrates which principle of the information and communication component of the Committee of Sponsoring Organizations’ Integrated Framework?
A. Internal Communication
B. Obtain and use information
C. External Communication
D. Accountability
C. External Communication
An auditor would most likely be concerned with controls that provide reasonable assurance about the:
A. Methods of assigning production tasks to employees.
B. Appropriate prices the entity should charge for its products.
C. Entity’s ability to process and summarize financial data.
D. Efficiency of management’s decision-making process.
C. Entity’s ability to process and summarize financial data.
Objectives of an entity include:
Information an Communication Systems:
Reliable Financial Reporting:
Effective and Efficient Operations:
Information an Communication Systems: No
Reliable Financial Reporting: Yes
Effective and Efficient Operations: Yes
Which of the following statements is true regarding internal control objectives of information systems?
A. Control objectives primarily emphasize output distribution issues.
B. A secure system may have inherent risks due to management’s analysis of trade-offs identified by cost-benefit studies.
C. An entity’s corporate culture is irrelevant to the objectives.
D. Primary responsibility of viable internal control rests with the internal audit division.
B. A secure system may have inherent risks due to management’s analysis of trade-offs identified by cost-benefit studies.
The Gotham Corporation regularly produces budget vs. actual data for its managers. The company is particularly sensitive to personnel costs, and division variances of greater than five percent for any period are promptly investigated to determine if budgeted positions have not been filled or if there has been extraordinary overtime. Timely exception resolution of this character illustrates the information and communication principles typically associated with:
A. Internal Communication.
B. Obtain and Use Information.
C. External Communication.
D. Financial Reporting Information.
B. Obtain and Use Information.
An internal audit manager requested information detailing the amount and type of training that the IT department’s staff received during the last year. According to COSO, the training records would provide documentation for which of the following principles?
A. Developing general control activities over technology to support the achievement of objectives.
B. Demonstrating a commitment to retain competent individuals in alignment with objectives.
C. Holding individuals responsible for their internal control responsibilities in the pursuit of objectives.
D. Exercising oversight of the development and performance of internal control.
B. Demonstrating a commitment to retain competent individuals in alignment with objectives.
According to COSO, each of the following is a principle relating to the risk assessment component of internal control, except:
A. The organization specifies objectives with sufficient clarity to enable the identification and assessment of risks relating to objectives.
B. The organization identifies and assesses changes that could significantly impact the system of internal control.
C. The organization selects and develops activities contributing to the mitigation of risks to the achievement of objectives to acceptable levels.
D. The organization considers the potential for fraud in assessing risks to the achievement of objectives.
C. The organization selects and develops activities contributing to the mitigation of risks to the achievement of objectives to acceptable levels.
Which of the following would an auditor most likely consider in evaluating the control environment of an audit client?
A. Management reviews of monthly financial statements.
B. The entity’s process to regularly monitor control performance.
C. Management’s operating style.
D. Overall employee satisfaction with assigned duties.
C. Management’s operating style.
Which of the following components of internal control would be considered the foundation for the other components?
A. Control environment.
B. Risk assessment.
C. Control activities.
D. Information and communication.
A. Control environment.
A company has established and communicated baseline expectations for performance to all employees. The company’s action demonstrates a focus on which of the following components of the COSO Internal Control framework?
A. Control environment
B. Monitoring activities
C. Information and communication
D. Control activities
A. Control environment
Which of the following components (elements) of an entity’s system of internal control includes the development of personnel manuals documenting employee promotion and training policies?
A. Information and communication system.
B. Control environment.
C. Quality control system.
D. Monitoring.
B. Control environment.
Which of the following factors would an auditor most likely consider in evaluating the control environment for an audit client?
A. Organizational structure used for tax purposes.
B. The ethical values demonstrated by management.
C. The number of employees in each department.
D. Monthly bank reconciliations with supervisor sign-offs.
B. The ethical values demonstrated by management.
Which of the following statements is true regarding the risk assessment component of internal control?
A. An auditor evaluates an entity’s risk assessment to understand how management addresses risks relevant to financial reporting.
B. An auditor’s evaluation of an entity’s risk assessment may not be applicable to the audit of every entity.
C. An auditor need not consider an entity’s risk assessment because he or she is primarily concerned with audit risk in a financial statement audit.
D. An auditor evaluates an entity’s risk assessment because it is a component of overall audit risk in a financial statement audit.
A. An auditor evaluates an entity’s risk assessment to understand how management addresses risks relevant to financial reporting.
The monitoring component of internal control excludes:
A. Improving controls that are not operating effectively.
B. Assessing the quality of control performance over time.
C. Eliminating controls that are not operating effectively.
D. Assessing information derived from external parties.
C. Eliminating controls that are not operating effectively.
Within the COSO Internal Control—Integrated Framework, which of the following components is designed to ensure that internal controls continue to operate effectively?
A. Information and communication.
B. Risk assessment.
C. Monitoring.
D. Control environment.
C. Monitoring.
Which of the following is a management control that most likely could improve management’s ability to supervise company activities effectively?
A. Establishing budgets and forecasts to identify variances from expectations.
B. Limiting direct access to assets by physical segregation and protective devices.
C. Supporting employees with the resources necessary to discharge their responsibilities.
D. Monitoring compliance with control requirements imposed by regulatory bodies.
A. Establishing budgets and forecasts to identify variances from expectations.
Proper segregation of duties reduces the opportunities to allow any employee to be in a position to both:
A. Adopt new accounting pronouncements and authorize the recording of transactions.
B. Monitor internal controls and evaluate whether the controls are operating as intended.
C. Record and conceal fraudulent transactions in the normal course of assigned tasks.
D. Journalize cash receipts and disbursements and prepare the financial statements.
C. Record and conceal fraudulent transactions in the normal course of assigned tasks.
Inherent risk and control risk differ from detection risk in that they:
A. Arise from the misapplication of auditing procedures.
B. Exist independently of the financial statement audit.
C. May be assessed in either quantitative or nonquantitative terms.
D. Can be changed at the auditor’s discretion.
B. Exist independently of the financial statement audit.
On the basis of audit evidence gathered and evaluated, an auditor decides to increase the assessed risk of material misstatement from that originally planned. To achieve an overall audit risk level that is substantially the same as the planned audit risk level, the auditor would:
A. Decrease substantive testing.
B. Increase inherent risk.
C. Decrease detection risk.
D. Increase materiality levels.
C. Decrease detection risk.