Corporate Governance Flashcards
Whats the different type of risks
Inherit Risk - Before management decision
Residual Risk - after management’s response
Event Risk - Risk of Loss after event
COSO risk responses includes
Avoidance
Reduction
Sharing
Institute of Internal Auditors’ Standards, the internal audit function should have Knowledge of
Key Information Technology Risks
Information Technology Audit Techniques
Evaluate Fraud Risks
The components of COSO enterprise risk management are
(1) internal environment,
(2) objective setting,
(3) event identification,
(4) risk assessment,
(5) risk response,
(6) control activities,
(7) information and communication, and
(8) monitoring
definition of internal control developed by the Committee of Sponsoring Organizations (COSO) includes
the objectives of reporting, compliance with laws and regulations and Effectiveness and efficiency of operations
Control environment Principals include
sets the standards, processes and structure
A commitment to integrity and ethical values
Individuals are held accountable for their control responsibilities.
A commitment to attract, develop, and retain competent individuals
Risk Assessment principals include
The organization identifies and assesses changes that could significantly affect internal control
The organization specifies objectives with sufficient clarity
The organization considers the potential for fraud
Control Activities
encompass policies and procedures that ensure that management’s directives are carried out
A financial expert should have knowledge of
GAAP
Audit Committee
Internal control procedures for financial reporting
CEO succession
is overseen by the Nominating/corporate governance committee