BEC Mnemonics Flashcards
What are the three objectives within the COSO Internal Control Framework and what do they aim to achieve?
ORC
- Operation Objectives - relates to the EFFECTIVENESS and EFFICIENCY of entities operations.
- Reporting Objectives - relate the reliability, timeliness, and transparency of entity’s external and internal reporting
- Compliance Objectives - make sure the entity is complying with laws and regulations
What are the principles that make up Control Environment?
EBOCA
E - Ethical Values and Integrity
B - Board Independence and Oversight
O - Organizational Structure
C - Commitment to Competence
A - Accountability
What are the principles that make up Risk Assessment?
SICI
S - Specify objectives
I - Identify and analyze risks
C - Consider the potential for fraud
I - Identify and and assess change
What are the principles that make up Information and Communication?
OIE
O - Obtain and use information
I - Internally communicate information
E - Externally communicate information
What are the principles that make up Monitoring?
SOC
S - Separate and/or Ongoing evaluations
C - Communication of deficiencies
What are the principles that make up Existing Controls?
SSD
S - Select and develop control activities
S - Select and develop technology controls
D - Deploy through policies and procedures
What are the components of Enterprise Risk Management?
GO PRO
G - Governance and Culture
O - Objective and Strategy-Setting
P - Performance
R - Review and Revision
O - Ongoing information, communication, and reporting
What are the principles that make up Governance and Culture?
DEEAD
D - Defines Desired Culture
E - Exercises board oversight
E - Establishes operating structure
A - Attracts, develops, and retains competent employees
D - Demonstrates commitment to core values
What are the principles that make up Objective and Strategy-setting Culture?
FADE
F - Formulates business objectives
A - Analyzes business context
D - Defines risk appetite
E - Evaluates alternative strategies
What are the principles that make up Performance?
I PAID
I - Identify risks
P - Prioritize risks
A - Assess severity of risk
I - Implement risk response
D - Develop portfolio review
What are the principles that make up Review and Revision?
APR
A - Assess substantial change
P - Pursue improvement in ERM
R - Review risk and performance
What are the principles that make up Ongoing information, communication, and reporting?
LCR
L - Leverages IT
C - Communicates risk information
R - Reports on risk, culture, and performance
What are the types of risk responses?
RAAPS
R - Reduce risk by hedging
A - Accept (no action is taken
A - Avoid (leaving line of business)
P - Pursue
S - Share (outsourcing and buying insurance)
What are the components of SCOR model?
Plan, source, make and deliver
What are some examples of carrying costs?
Storage costs, insurance costs, opportunity costs, lost inventory due to obsolescence or spoilage
In essence, it is the cost of having inventory