Chapter 7 Flashcards
why are threats to accounting information systems increasing
Many companies do not realize that data security is crucial to their survival
a control procedure designed so that the employee that records cash received from customers does not also have access to the cash itself is an example of a
preventative control
Identify the preventative control
a) reconciling the bank statement to the cash control account
b) approving customer credit prior to approving a sales order
c) maintaining frequent backup records to prevent loss of data
d) counting inventory on hand and comparing counts to the perpetual inventory records
B
according to Sarbanes-Oxley Act of 2002, the audit committee of the board of directors is directly responsible for
hiring and firing external auditors
what measures can be taken to protect a company from AIS threats
- take a proactive approach to eliminate threats
- detect threats that do occur
- correct and recover from threats that do occur
Internal control is often referred as what, because it permeates an organization’s operating activities and is an integral part of management activities
process
duplicate checking of calculations is an example of what kind of control
detective
procedures to resubmit rejected transactions are an example of what kind of control
corrective
which type of control is associated with making sure an organization’s control environment is stable
general
which type of control prevents, detects, and corrects transaction errors and fraud
application
the primary purpose of the Foreign Corrupt Practices Act of 1977 was
to prevent the bribery of foreign officials by American companies
What was not an important change introduced by the Sarbanes-Oxley Act of 2002
new rules for information systems development
measures company progress by comparing actual performance to planned performance
diagnostic control system
helps top level managers with high level activities that demand frequent and regular attention
interactive control system
Sarbanes-Oxley Act applies to whom
all publicly traded companies
measures, monitors, and compares actual company progress to budgets and performance goals
diagnostic control system
describes how a company creates value, helps employees understand management’s vision, communicates company core values, and inspires employees to live by those rules
belief system
helps employees act ethically by setting boundaries on employee behavior
boundary system
helps managers to focus subordinates’ attention on key strategic issues and to be more involved in their decisions
interactive control system
COSO framework that improves the risk management process by expanding COSO’s Internal Control–Integrated
Enterprise Risk Management (ERM)
which of the following is not a component of COSO ERM
a) monitoring
b) control environment
c) risk assessment
d) compliance with federal, state, or local laws
D