Corp Governance Flashcards
What are the elements of COSO’s internal controls framework?
1.) Control environment: tone at the top.
Integrity and ethical, board of directors, management established structures, competence and accountability.
2.)risk assessment:
Objectives, assessment, fraud, change mgmt
3.) control activities:
Risk reduction, tech controls, policies
4.) info and communication:
Quality, internal communication, external communication
5.)monitoring:
ongoing and periodic, address deficiency
What are the limitations of IC?
- Inappropriate objectives can be set.
- control override
- human error
- collusion
What type of assurance do internal controls provide?
Reasonable assurance
What are preventative and detective controls?
Prevention controls are before controls
Detective controls are after controls. Meaning the data is available
What are the components of COSOs risk mgmt framework?
- Governance and culture: identification and allocation of roles, including risk culture
- Information communication and reporting: obtaining and sharing information
- Strategy and objective setting: development of strategy and tolerance (risk appetite)
- Erm and performance:
What is the key performance indicator and the key risk indicator?
The performance indicator is a historical analysis of risk and the risk indicator is the analysis of the like hood.