Assurance & Compliance Engagements Flashcards

1
Q

The chief executive officer wants to know whether the purchasing function is properly meeting its charge to “purchase the right materials at the right time in the right quantities.” Which of the following types of engagements addresses this request?

A financial engagement relating to the purchasing department.
An operational engagement relating to the purchasing function.
A compliance engagement relating to the purchasing function.
A full-scope engagement relating to the manufacturing operation.

A

An operational engagement relating to the purchasing function.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The primary difference between operational engagements and financial engagements is that, in the former, the internal auditors

Are not concerned with whether the client entity is generating information in compliance with financial accounting standards.
Are seeking to help management use resources in the most effective manner possible.
Start with the financial statements of the client entity and work backward to the basic processes involved in producing them.
Can use analytical skills and tools that are not necessary in financial engagements.

A

Are seeking to help management use resources in the most effective manner possible.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

During an operational engagement, the internal auditors compare the current staffing of a department with established industry standards to

Identify bogus employees on the department’s payroll.
Assess the current performance of the department and make appropriate recommendations for improvement.
Evaluate the adequacy of the established internal controls for the department.
Determine whether the department has complied with all lass and regulations governing its personnel.

A

Assess the current performance of the department and make appropriate recommendations for improvement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which group is charged with overseeing the establishment, administration, and evaluation of the processes of risk management and control?

Operating managers.
Internal auditors.
External auditors.
Senior management.

A

Senior management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which of the following statements about control self-assessment (CSA) is false?

CSA is usually an informal and undocumented process.
In its purest form, CSA integrates business objectives and risks with control processes.
CSA is also known as control/risk self-assessment.
Most implemented CSA programs share some key features and goals.

A

CSA is usually an informal and undocumented process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

In reviewing a cost-plus construction contract for a new catalog showroom, the internal auditor should be cognizant of the risk that

The contractor could be charging for the use of equipment not used in the construction.
Income taxes related to construction equipment depreciation may have been calculated erroneously.
Contractor cash budgets could have been inappropriately complied.
Payroll taxes may have been inappropriately omitted from billings.

A

The contractor could be charging for the use of equipment not used in the construction.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A company would like to contract for janitorial services for 1 year with 4 option years. The specifications require the potential contractor to perform certain cleaning services at specified intervals. Which of the following is the best contract type for this requirement?

Cost-reimbursable.
Indefinite delivery.
Fixed-price.
Time-and-materials.

A

Fixed-price.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

An internal auditor is conducting an audit of environmental protection and alarm devices. Which is the most significant objective of such an assignment? To determine whether

The devices are installed and operating properly.
The costs of the devices were properly recorded.
The device specification documents ate complete.
Acquisitions and disposals are properly authorized.

A

The devices are installed and operating properly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which of the following does the internal auditor not have to review as thoroughly in a lump-sum contract?

Progressive payments.
Adjustments to labor costs.
Work completed in accordance with the contract.
Incentives associated with the contract.

A

Work completed in accordance with the contract.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Total quality management in a manufacturing environment is best exemplified by

Identifying and reworking production defects before sale.
Designing the product to minimize defects.
Performing inspections to isolate defects as early as possible.
Making machine adjustments periodically to reduce defects.

A

Designing the product to minimize defects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which forms of control self-assessment assume that managers and members of work teams possess an understanding of risk and control concepts and use those concepts in communications?

The self-certification approach.
The self-certification approach and facilitated approach.
The self-certification approach and questionnaire approach.
All self-assessment programs.

A

All self-assessment programs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which of the following statements about TQM is false?

This approach can increase revenues and decrease costs significantly.
TQM is a comprehensive approach to quality.
TQM begins with internal suppliers’ requirements.
TQM concepts are applicable to the operations of the internal audit activity itself.

A

TQM begins with internal suppliers’ requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

TQM is the continuous pursuit of quality in every aspect of organizational activities through a number of goals. Which of the following is not one of those goals?

A philosophy of doing it right the first time.
Promotion of individual work.
Employee training and empowerment.
Improvement of processes.

A

Promotion of individual work.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

An internal audit team is performing a due diligence audit to assess plans for a potential merger/acquisition. Which of the following would be the least valid reason for a company to merge with or acquire another company?

To diversify risk.
To respond to government policy.
To reduce labor costs.
To increase stock prices.

A

To increase stock prices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

An organization is considering purchasing a small toxic waste disposal business. The internal auditors are part of the team doing a due diligence review for the acquisition. The scope of the internal auditors’ work will most likely not include

An evaluation of the merit of lawsuits currently filed against the acquiree.
A review of the acquirree’s procedures for acceptance of waste material and comparison with legal requirements.
Analysis of the acquiree’s compliance with, and disclosure of, loan covenants.
Assessment of the efficiency of the operations of the acquiree.

A

An evaluation of the merit of lawsuits currently filed against the acquiree.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

The reliability and integrity of all critical information of an organization, regardless of the media in which the information is stored, is the responsibility of

Shareholders.
IT department.
Management.
All employees.

A

Management.

17
Q

Freedom from monitoring best defines

Personal privacy.
Privacy of space.
Privacy of communication.
Privacy of information.

A

Privacy of communication.

18
Q

When evaluating management of the organization’s privacy framework, the internal auditor considers

The applicable laws relating to privacy.
Conferring with in-house legal counsel.
Conferring with information technology specialists.
All of the answers are correct.

A

All of the answers are correct.

19
Q

Using the balanced scorecard approach, an organization evaluates managerial performance based on

A single ultimate measure of operating results, such as residual income.
Multiple financial and nonfinancial measures.
Multiple nonfinancial measures only.
Multiple financial measures only.

A

Multiple financial and nonfinancial measures.

20
Q

Which type of engagement focuses on operations and how effectively and efficiently the organizational units affected will cooperate?

Program-related engagement.
Process engagement.
Privacy engagement.
Compliance engagement.

A

Process engagement.

21
Q

Which type of engagement attempts to measure the accomplishment and relative success of undertaking?

Program-results engagement.
Privacy engagement.
Process engagement.
Compliance engagement.

A

Program-results engagement.

22
Q

Discipline of employee may be limited by all of the following except

Whistleblower laws.
A requirement to report certain employee violations to a governmental entity.
Union contracts.
Exceptions to the employee-at-will doctrine.

A

A requirement to report certain employee violations to a governmental entity.

23
Q

Compliance programs most directly assist organizations by doing which of the following?

  1. Developing a plan for business continuity management.
  2. Determining director and officer liability.
  3. Planning for disaster recovery.

1 only
2 only
1 and 2 only.
1, 2, and 3.

A

2 only

24
Q

An organization establishes compliance standards and procedures and develops a written business code of conduct to be followed by its employees. Which of the following is true concerning business codes of conduct and the compliance standards?

Compliance standards should be straightforward and reasonably capable of reducing the prospect of criminal conduct.
The compliance standards should be codified in the charter of the audit committee.
Companies with international operations should institute various compliance programs, based on selective geographic locations, that reflect appropriate local regulations.
In order to prevent future legal liability, the code should consist of legal terms and definitions.

A

Compliance standards should be straightforward and reasonably capable of reducing the prospect of criminal conduct.

25
Q

Employees have the most confidence in a hotline monitored by which of the following?

An expert from the legal department, backed by a nonretaliation policy.
An in-house representative, backed by a retaliation policy.
An on-site ombudsperson, backed by a nonretaliation policy.
An off-site attorney who can better protect attorney-client privilege.

A

An on-site ombudsperson, backed by a nonretaliation policy.