Corporate Governance Flashcards

1
Q

5 Components of Internal Control

A
  1. The Control Environment
  2. Risk Assessment
  3. Control Activities
  4. Information and Communication
  5. Monitoring
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Factors of Control Environment (CHOPPER)

A
  1. Commitment to competence
  2. Human resource policies and procedures
  3. Organizational structure
  4. Philosophy and operating style of management
  5. Participation of the board of directors or audit committee
  6. Ethical and integrity values
  7. Responsibility and authority assignment
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Types of Control Activities (PIPS)

A
  1. Performance reviews
  2. Information processing
  3. Physical Controls
  4. Segregation of duties
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Segregation of Duties (ARCC)

A
  1. Authorization of transactions
  2. Recording of transactions
  3. Custody of assets
  4. Comparisons
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Monitoring - Sequence of Activities

A
  1. Control Baseline
  2. Change Identification
  3. Change Management
  4. Control Revalidation/Update
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Control Baseline

A

Development of an understanding of how the system of internal controls was designed and implemented

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Change Identification

A

Use of ongoing and separate evaluations t identify and address changes in the effectiveness of I/C to initiate changes to controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Change Management

A

Determination of when changes to I/C are needed and the types of changes that are likely to be effective

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Control Revalidation/Update

A

Development of a new baseline understanding of the revised system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Limitations of Internal Controls (COCCO)

A
  1. Collusion
  2. Override by Management
  3. Competence
  4. Cost/Benefit Constraints
  5. Obsolescence
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Purpose of ERM

A

Find the balance between minimizing or managing risk and maximizing the return and opportunities that can be provided to stakeholders

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

8 Components of ERM

A
  1. Internal Environment
  2. Objective Setting
  3. Event Identification
  4. Risk Assessment
  5. Risk Response
  6. Control Activities
  7. Information Communication
  8. Monitoring
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

ERM - Internal Environment

A

Tone at the top

Starts with Mission Statement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

ERM - Objective Setting

A
Objectives the companies set to meet its mission statement.
4 Types of Objectives
1. Strategic Objectives
2. Operational Objectives
3. Reporting Objectives
4. Compliance Objectives
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

ERM - Event Identification

A

How to distinguish between events that are opportunities and threats and how to deal with them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Risk Assessment

A

Evaluation of the extent of potential effects of identified events on the ability of the entity to achieve its objects

17
Q

3 Approaches to Risk Assessment

A
  1. Balance Sheet Approach
  2. Process Approach
  3. Event Identification Approach
18
Q

ERM - Risk Response

A
Mgt.'s response to risk it is  exposed to.
4 Responses
1. Acceptance
2. Share
3. Reduce
4. Avoid
19
Q

3 Approaches to quantify risks

A
  1. Benchmarking - compares expected outcomes to common measures
  2. Probabilistic Models -uses probabilities of possible outcomes
  3. Nonprobabilistic Models - uses subjective assumptions to measure possible outcomes
20
Q

ERM - Control Activities

A
Procedures to make sure decisions follow on how to respond to risk are carried out
Activities:
1. Top-level Reviews
2. Activity Management
3. Information processing
4. Physical Controls
5. Performance Indicators
6. Segregation of Duties (ARCC)