Chapter 3 Flashcards
What are internal control
is a process that specifically mitigates risk to the company financial information
What can internal control do
Create quality info
Identify financial issue
Prevent fraud
Increase operating efficiency
Ensure compliance with laws and regulation
Lessen the risk of financial misstatement
What are the function of Internal control
Prevent
Detect
Correct
What are preventive Control
Precent problem from happening ex: Segregation of duties
What are Detective control
alert the management to an issue once it has occurred. They identify problems like fraud, legal compliance and quality control
What are corrective controls
these are the changes you makes after an undesirable outcome occur after the risk has occurred
Explain management override
this is when the internal control dont work due to management not following the policy or procedure
Explain the time based model of control
This measure the residual risk for technology attacks by comparing the relationship of the three control functions
Whats the time base model of control formula
P>(D+C)
What are three locations for controls
Physical control ( human actives )
IT General Control (
IT Application Control
It general controls
Apply to the entire operation of the full systems and it environment ( emails, web browsers, time keeping software)
What are the two methods of implementing control
Manual
automated
Whats does implementing manual control requires
it requires human judgement or physical interaction .
Risk and error and manipulation
What are automated control implementation
use technology to implement control activities. This increased reliability and consistency
Continuous Monitoring technology are use for
create detective controls that use rules based programming to monitor the business data for red flags risk