Corporate Governance Flashcards
Does SOX require a code of ethics for companies?
No, only to report if one has been adopted
Bounty Range
10%-30%
SOX retaliate relates to a whistelblower regarding what type of offense?
Any Federal Offense
What is the threashold to automatically provide for bounty provisions?
$1 million in sanctions
A well controlled systems balances what and includes what else?
Balance preventive and detective controls, and adds corrective when needed
Passive Controls are related to what type of controls?
Preventative
Active Controls are related to what type of controls?
Dectective
Are detective or preventive controls more costly?
Detective
A daily backup is what type of control? (Detective, Corrective, Preventive)
Corrective
How do control objectives differ between manual and computerize environments?
They don’t
COSO Elements of Internal Control
Control Activities Risk Assessment Information and Communication Monitoring Control Envrionment
Elements of Control Environment (5)
Integrity and ethics Board of Directors Management Competence Accountability
Elements of Risk Management (4)
Objectives
Assessment
Fraud
Change Management
Elements of Control Activities (3)
Risk Reduction
Tech Controls
Policies
Elements of Information and Communication (3)
Quality
Internal
External
Elements of Monitoring (2)
Ongoing and Periodic
Address Deficiencies
Why objectives of COSO ERM (4)
Strategic
Operations
Reporting
Compliance
Where objectives of COSO ERM (4)
Entity - Level
Division
Subsidiary
Business Unit
Additional What objectives for COSO ERM (3)
Objective Setting
Event Identification
Risk Response
Expected Value of Loss equation
EV = likelihood x amount
3 qualities of Reliable Info
Accurate
Verifiable
Objective source
3 qualities of Suitable Info
Relevant
Reliable
Timely
The monitoring for change process that would include ongoing and separate evaluations intended to identify and address changes in internal control effectiveness
Change Identification
3 major steps in Control Monitoring
Establish Foundation
Design and Execute
Assess and Report