Chapter 6: CONSIDERATION OF INTERNAL CONTROLS Flashcards
Nature of internal control
The primary responsibility for establishing and maintaining an internal control rests with
a. The external auditors
b. The internal auditors
C. Management and those charged with governance
d. The controller or the treasurer
The fundamental purpose of an internal control is to
a. Safeguard the resources of the organization
b. Provide reasonable assurance that the objectives of the organization are achieved
C. Encourage compliance with organization objectives.
d. Ensure the accuracy, reliability, and timeliness of information.
Which of the following is not one of the three primary objectives of effective internal control?
a. Reliability of financial reporting
b. Efficiency and effectiveness of operations
C. Compliance with laws and regulations
d. Each of the above is a primary objective of effective internal control
Which of the following is not typically one of management’s concerns in designing effective internal controls?
a. To generate profits from operations
b. To generate fairly stated financial statements
C. To comply with applicable laws and regulations
d. To design the most effective internal control possible no matter how much it will cost
Which of the following is not one of the three primary objectives of effective internal control?
a. reliability of financial reporting
b. efficiency and effectiveness of operations
c. compliance with laws and regulations
d. assurance of elimination of business risk
Which of the following internal control objectives would be most relevant to the audit?
a. Operational objective
b. Compliance objective
c. Financial reporting objective
d. Administrative control objective
An act of two or more employees to steal assets or misstate records is frequently referred to as
a. Collusion
b. A material weakness
C. A control deficiency
d. Any of the above
Which statement is correct concerning the relevance of various types of controls to a financial audit?
a. An auditor may ordinarily ignore a consideration of controls when a substantive audit approach is taken.
b. Controls over the reliability of financial reporting are ordinarily most directly relevant to an audit but other controls may also be relevant.
C. Controls over safeguarding of assets and liabilities are of primary importance, while controls over the reliability of financial reporting may also be relevant.
d. All controls are ordinarily relevant to an audit.
An auditor would most likely be concerned with internal control policies and procedures that provide reasonable assurance about the
a. Efficiency of management’s decision-making process
b. Appropriate prices the entity should charge for its products
C. Methods of assigning production tasks to employees
d. Entity’s ability to process and summarize financial data
In an audit of financial statements, an auditor’s primary consideration regarding an internal control activity is whether
the control
a. Reflects management’s philosophy and operating style
b. Affects management’s financial statement assertions
c. Provides adequate safeguards over access to assets
d. Enhances management’s decision-making processes
Two key concepts that underlie management’s design and implementation of internal control are:
a. costs and materiality.
b. absolute assurance and costs.
C. inherent limitations and reasonable assurance.
d. collusion and materiality.
Internal control can provide only reasonable assurance of achieving entity’s control objectives. One factor limiting the likelihood of achieving those objectives is that
a. The auditor’s primary responsibility is the detection of fraud
b. The board of directors is active and independent
C. The cost of internal control should not exceed its benefits
d. Management monitors internal control
Inherent limitations in an internal control must be considered in evaluating its effectiveness in preventing and detecting errors and fraud. Inherent limitations do not include
a. Misunderstanding of instructions, mistakes of judgment, personal carelessness, distraction, or fatigue.
b. Incompatible functions performed by the same person.
C. Collusion among employees.
d. Management override of certain policies or procedures.
The following statements relate to internal controls, which is
false?
a. No one person should be responsible for the custodial responsibility and the recording responsibility for an asset.
b. Transactions must be properly authorized before such transactions are processed.
C. Because of the cost benefit relationship, a client may apply
control procedures on a test basis.
d. Control procedures reasonably ensure that collusion among employees cannot occur.
When considering the effectiveness of a system of internal accounting control, the auditor should recognize that inherent limitations do exist. Which of the following is an example of an inherent limitation in a system of internal accounting control?
a. The effectiveness of procedures depends on the segregation of employee duties.
b. Procedures are designed to assure the execution and recording of transactions in accordance with management’s authorization.
C. In the performance of most control procedures, there are possibilities of errors arising from mistakes in judgment
d. Procedures for handling large numbers of transactions are processed by electronic data processing equipment
Internal controls are not designed to provide reasonable assurance that:
a. all frauds will be detected.
b. transactions are executed in
accordance with management’s authorization.
c. access to assets is permitted only in accordance with management’s authorization.
d. company personnel comply with applicable rules and regulations.
19. The internal control cannot be designed to provide reasonable assurance that
a. Transactions are executed in accordance with management’s authorization.
b. Fraud will be eliminated.
C.
Access to assets is permitted only in accordance with management’s authorization.
d. The recorded accountability for assets is compared with the existing assets at reasonable intervals
20. Which of the following statements about internal control is correct?
a.
b.
C.
Properly maintained internal control reasonably ensures that collusion among employees cannot occur.
The establishment and maintenance of internal control are important responsibilities of the internal auditor. Exceptionally strong internal control is enough for the auditor to eliminate substantive tests on a significant account balance.
d. The cost-benefit relationship is a primary criterion that
should be considered in designing internal control
An effective system of internal control
a. Cannot be circumvented by management
b. Can reduce the cost of an external audit
C. Can prevent collusion among employees
d. Eliminates risks and potential to the organization
Which of the following best describes an inherent limitation that should be recognized by an auditor when considering the potential effectiveness of an internal control structure?
a. Procedures whose effectiveness depends on segregation of duties can be circumvented by collusion.
b. The competence and integrity of client personnel provide an environment conducive to control and provides assurance that effective control will be achieved.
c. Procedures designed to assure the execution and recording of transactions in accordance with proper authorizations are effective against fraud perpetrated by management
d. The benefits expected to be derived from effective internal control usually do not exceed the cost of such control.
Which of the following statements about internal control is correct?
a. Properly maintained internal control reasonably ensures that collusion among employees cannot occur.
b. The establishment and maintenance of internal control are important responsibilities of the internal auditor.
c. Exceptionally strong internal control is enough for the auditor to eliminate substantive tests on a significant account balance.
d. The cost-benefit relationship is a primary criterion that
should be considered in designing internal control
The internal control cannot be designed to provide reasonable assurance that
a. Transactions are executed in accordance with management’s authorization.
b. Fraud will be eliminated.
C. Access to assets is permitted only in accordance with management’s authorization.
d. The recorded accountability for assets is compared with the existing assets at reasonable intervals
Which of the following is correct about internal control?
a. Accounting and internal control systems provide management with conclusive evidence that objectives are reached.
b. One of the inherent limitations of accounting and internal control systems is the possibility that the procedures may become inadequate due to changes in conditions, and compliance with procedures may deteriorate.
c. Most internal controls tend to be directed at non-routine transactions.
d. Management does not consider costs of the accounting and internal control systems.
Internal control, no matter how well designed and operated, can only provide an entity with reasonable assurance about achieving the entity’s objectives. The likelihood of achievement is affected by limitations inherent to internal control. These limitations do not include:
a. Collusion among employees
b. Inappropriate management override of internal control.
c. Human failures.
d. Incompatible functions.
When obtaining an understanding of an entity’s control environment, an auditor should concentrate on the substance of management’s policies and procedures rather than their form
because
a. The auditor may believe that the policies and procedures are inappropriate for that particular entity
b. The board of directors may not be aware of management’s attitude toward the control environment
c. Management may establish appropriate policies and procedures but not act on them
d. The policies and procedures may be so ineffective that the auditor may assess control risk at a high level
Which of the following best describes the interrelated components of internal control?
a. Organizational structure, management, philosophy, and planning
b. Control environment, risk assessment, control activities, information and communication systems, and monitoring
c. Risk assessment, backup facilities, responsibility accounting, and natural laws
d. Internal audit and management’s philosophy and operating style.
Internal controls can never be regarded as completely effective. Even if company personnel could design an ideal system, its effectiveness depends on the:
a. adequacy of the computer system.
b. proper implementation by management.
C. ability of the internal audit staff to maintain it.
d. competency and dependability of the people using it.
Internal controls can never be considered as absolutely effective because
a. Their effectiveness is highly dependent on the competence and integrity of Company’s employees b. Controls always have inherent weaknesses that can be exploited
C. Controls are designed to prevent and detect only material
misstatements
d. None of the above
The overall attitude and awareness of an entity’s board of directors concerning the importance of the internal control usually is reflected in its
a. Computer-based controls
b. System of segregation of duties
C. Control environment
d. Safeguards over access to assets
In evaluating the design of the entity’s internal control environment, the auditor considers the certain subcomponents of control environment and how they have been incorporated into the entity’s processes. Subcomponents of control environment would not include
a. Integrity and ethical values
b. Commitment to competence
c. Organizational structure
d. Information and communications systems
Basic to a proper control environment are the quality and integrity of personnel who must perform the prescribed procedures. Which is not a factor in providing for
personnel?
a. Segregation of duties
b. Hiring practices
C. Training programs
d. Performance evaluations
competent
Which of the following is not one of the components of an entity’s internal control?
a. Control risk
b. Control activities
c. Information and communication d. The control environment
It is important for the auditor to consider the competence of the audit client’s employees, because their competence bears directly and importantly upon the
a. Cost-benefit relationship of internal control
b. Achievement of the objectives of internal control
C. Comparison of recorded accountability with assets
d. Timing of the tests to be performed
Which of the following components of an entity’s internal control structure includes the development of employee promotion and training policies?
a. Control activities
b. Control environment
C. Information and communication
d. Quality control system
Which of the following subcomponents of the control environment define the existing lines of responsibility and authority?
a. Organizational Structure
C. Management philosophy and operating style
c. Human resource policies and practices
d. Management integrity and ethical values
Which of the following is not one of the subcomponents of the control environment?
a. management’s philosophy and operating style
b. organizational structure
C. adequate separation of duties
d. commitment to competence
A proper segregation of duties requires
a. an individual authorizing a transaction records it
b. an individual authorizing a transaction maintains a custody of the asset that resulted from the transaction
c. an individual
maintaining custody of an asset be entitled to access the accounting records for the asset
d. an individual recording a transaction not compare the accounting record of the asset with the asset itsel
Management philosophy and operating style most likely would have a significant influence on an entity’s control environment when
a. The internal auditor reports directly to management.
b. Management is dominated by one individual.
C. Accurate management job descriptions delineate specific duties.
d. The audit committee actively oversees the financial reporting process
Which of the following statements is most correct with respect to separation of duties?
a. Employees should not have temporary and permanent custody of assets.
b. Employees who authorize transactions should not have custody of related assets.
C. It is permissible to allow an employee to open cash receipts and record those receipts.
d. Employees who authorize transactions should have recording responsibility for these transactions.
The single most effective control procedure established to avoid allowing any person to be in a position to perpetrate and then
conceal errors or fraud is
a. The separation of the functional responsibilities custodianship, record keeping, operations, and
authorization.
b. Require each employee to take a vacation each year.
C. Establish an internal audit department.
d. Require the bonding of personnel in positions that necessitate handling of cash and other universally
desirable valuables.
Which of the following would contribute most to the safeguarding of assets?
a. Access to computer facilities and records is limited to authorized personnel.
b. Training programs are conducted to develop competence of newly hired personnel
c. Control and subsidiary accounts are reconciled on a regularly scheduled basis
d. Blank stock of all purchase orders and sales invoices are prenumbered
Accounting information system:
Initiates
transactions
Processes
transactions
Monitors
transactions
a.
Yes
Yes
Yes
b.
Yes
Yes
No
C.
No
Yes
No
d.
No
No
Yes
Which of the following statements is correct with respect to
separation of duties?
a. Employees should not have temporary and permanent custody of assets.
b. It is desirable to prevent employees who authorize transactions from having custody of related assets
C. It is permissible to allow an employee to open cash receipts and record those receipts
d. None of the above is correct
The most important type of protective measure for safeguarding assets and records is
a. Adequate separation of duties among personnel
b. Proper authorization of transactions
C. The use of physical precautions
d. Adequate documentation
Which of the following statements best describes the entity’s risk assessment process?
a. Entity’s process of identifying business risks relevant to financial reporting objectives and deciding about actions to address those risks.
b. Entity’s assessment of audit risks affecting the financial statements.
c. Entity’s process of evaluating the risks of misstatements due to fraud.
d. Entity’s assessment of risks that internal control may fail to detect misstatements affecting the financial statements.
Which of the following deal with ongoing or periodic assessment of the quality of internal control by management?
a. Quality control activities
b. Monitoring activities
C. Oversight activities
d. Management activities
An entity’s ongoing monitoring activities often include
a. Periodic audits by the audit committee.
b. Reviewing the purchasing function.
C. The audit of the annual financial statements.
d. Control risk assessment in conjunction with quarterly
reviews.
Proper segregation of functional responsibilities in an effective structure of internal control calls for separation of the functions of
a. Authorization, execution, and payment
b. Authorization, recording, and custody
c. Custody, execution, and reporting
d. Authorization, payment, and recording
The policies and procedures that help ensure that management directives are carried out are referred to as the:
a. Control environment
b. Control activities
C. Monitoring of controls
d. Information system
47. Which of the following is not one of the specific control activities that are relevant to financial statement audit? a. Performance reviews
b. Physical controls
C.
Segregation of duties
d. Monitoring
48. Proper segregation of functional responsibilities in an effective structure of internal control calls for separation of the functions of
a.
Authorization, execution, and payment b. Authorization, recording, and custody Custody, execution, and reporting d. Authorization, payment, and recording
C.
Which of the following is not one of the specific control activities that are relevant to financial statement audit?
a. Performance reviews
b. Physical controls
C. Segregation of duties
d. Monitoring
Which of the following activities would be least likely to strengthen a company’s internal control?
a. separating accounting from other financial operations
b. maintaining insurance for fire and theft
c. fixing responsibility for the performance of employee duties
d. carefully selecting and training employees
- Which of the following best describes the purpose of control activities?
a. the actions, policies and procedures that reflect the overall attitudes of management
b.
C.
the identification and analysis of risks relevant to the preparation of financial statements
the policies and procedures that help ensure that necessary actions are taken in order to achieve the entity’s objectives
d. activities that deal with the ongoing assessment of the quality of internal control by management - A small entity may use less formal means to ensure that internal control objectives are achieved. For example, extensive accounting procedures, sophisticated accounting records, or formal controls are least likely to be needed if
a.
b.
C.
d.
Management is closely involved in operations The entity is involved in complex transactions
The entity is subject to legal or regulatory requirements also found in larger entities.
Financial reporting objectives have been established - Which of the following may represent the biggest challenge smaller public companies face in implementing effective internal control?
a. a lack of expertise
reduced importance
limited resources
b.
C.
d.
limited available guidance