Chapter 6 Flashcards
a body guiding principles that form a template against which organizations can evaluate a multitude of business practices
framework
- control enviroment
- risk assessment
- control activities
- information and commuication
- monitoring
Components of internal control
a process, effected by an entity’s board of directors, management, and other personal, designed to provide reasonable assurance and other personnel, designed to provide reasonable assurance regarding the achievement of objectives relating to operations, reporting, and compliance
internal control
the three categories of objectives set forth in the COSO framework are:
-operations objectives
- reporting objectives
- compliance objectives
pertain to effectiveness and effiencey of the entities operations
operations objectives
pertain to internal and external financial and non financial reporting and may encompass reliability, timeliness, transparency, or other terms as set forth by regulators, standard setters, or the entity policies.
reporting objectives
pertain to adherence to laws and regulations to which the entity is subject
compliance objectives
control designed to reduce key risks associated with business objectives
key control
control designed to either mitigate risks that are not key to business objectives or partially reduce the level of risk when a key control does not operate effectively
secondary control
control designed to supplement a key control that is either ineffective or cannot fully mitigate a risk or group of risks by itself to an acceptable level
compensating control
control designed to deter unintended events from occurring in the first place
preventive control
control designed to discover undesirable events that have already occured
detective control
control that apply to many if not all application systems and help ensure their continued proper operation
general control
control that includes computerized steps within the application software and related manual procedures to control the processing of various types of transactions
application control