B1 Corporate Gov and Operations Mgmt Flashcards
COSO ERM - entity’s assignment of authority and responsibility
Internal environment
COSO ERM - entity’s reporting deficiencies
Monitoring
COSO IC framework - entity’s timely reporting of identified IC deficiencies
Monitoring
Having a CPA at work gives you
financial reporting competencies
SOX AC says that board members or independent auditor needs to be independent
Board member
SOX requires companies to have a _____ due to scandals etc.
Audit committee
SOX AC requires that one of more members be a financial expert and that they disclose
state the existence of financial expert(s) on the AC or reasons why they don’t
benefit of having a financial expert on the AC
financial sophistication and can serve as a resource for the AC
Choosing a CPA who is independent for the AC under SOX
evaluate his qualifications and be designated a financial expert based on the mix of knowledge and experience
SOX requires a code of ethics, it should include:
compliance with rules, laws, and regulations; honest and ethical conduct; and full, fair, accurate, and timely disclosure in periodic FS
SOX requires mgmt’s report on IC include:
statement that the auditor has attested and reported on mgmt’s I/C
statement of mgmt’s responsibilities for maintaining I/C
conclusion about the effectiveness of the company’s I/C
SOX provides greater transparency of:
AC, adequacy of I/C, and a code of ethics
Communication by external auditor is
external communication
Treadway commission was established by:
private sponsoring organizations
Committee on sponsoring organizations prepared the IC integrated framework
to help businesses assess IC
Response to potential risk - Mgmt elects to divest the company from a risky area
Avoidance
Response to potential risk - Mgmt insures the risky area
Sharing
Response to potential risk - Mgmt buys land in the risky area and in a non risky area too
Reduction
Response to potential risk - Mgmt treats potential damages as a part of their business model
Acceptance
Mgmt consults population trends and affluence in the region
Event Inventory
Tone at the top includes
orgs commitment to compliance and confidentiality; prohibits conflicts of interest and self dealings; limits gifts and gratuities or establishes required reporting
Companies inherent risk
amount of money they could lose without doing anything to stop it
Residual risk
risk that remains after mgmt responds to risk
Control activities are closely related to:
risk responses