Corporate Governance Flashcards

1
Q

What are the objectives to internal controls?

A
  1. Effectiveness & efficiency of operations
  2. Reliability of financial and non-financial reporting
  3. Compliance with applicable laws and regulations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the 17 principles of internal control?

A

A. Control Environment (5 principals)

1. Ethical Values & Integrity
2. Board of directors
3. Management
4. Competence
5. Accountability

B. Risk Assessment (4 principals)

  1. Objectives
  2. Assessment
  3. Fraud
  4. Change management

C. Control Activities (3 principles)

  1. Risk reduction
  2. Technology controls
  3. Policies

D. Information & Communication (3 principles)

  1. Quality
  2. Internal
  3. External

E. Monitoring (2 principles)

  1. Ongoing & periodic
  2. Address deficiencies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the 4 stages in monitoring for change continuum?

A

A. Establish control baseline

1. Begin with areas where controls are well understood    2. Provides baseline for enhanced monitoring

B. Change Identification

  1. identify changes in control operations, design or related risk
  2. includes evaluations to identify & address the potential changes in IC effectiveness

C. Control Revalidation
1. Periodically revalidate that controls remain effective

D. Change Management
1. When changes occur, verify that controls remain effective. Establish a new control baseline for the modified controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the 2 activities that comprise assessing a reporting on control monitoring?

A
  1. Prioritize findings
  2. report results as appropriate
  3. Follow up to implement corrective actions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the COSO Model control monitoring process?

A

A. Establish a Foundation

  1. Tone from the top
  2. Organizational structure
  3. baseline understanding of internal controls effectiveness

B. Design & Execute

  1. Prioritize risks
  2. Identify controls
  3. Identify persuasive info about controls
  4. Implement monitoring procedures

C. Asses & Report

  1. Prioritize findings
  2. Report results to the appropriate level
  3. Follow-up on corrective action
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the 4 types of objectives for the COSO ERM Model?

A

A. Strategic - goals that support the overall mission

B. Operations - goals that deal with day to day operating activities

C. Reporting - information system goals related to accuracy, completeness, timeliness & reliability of reporting

D. Compliance - goals design to ensure that the organization meets all legal & regulatory requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is risk appetite?

A

The amount of risk that an organization is willing to accept in pursuit of its goals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the determinants of Risk Appetite?

A

A. Existing Risk Profile - current levels & distribution of risk across entity

B. Risk Capacity - Amount of risk an entity can support

C. Risk Tolerance - acceptable levels of variation an entity can accept

D. Attitudes towards risk - stakeholders attitudes towards risk, growth and return

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Enterprise Risk Management (ERM)?

A

The culture, capabilities, and practices by which organizations manage risk to create, preserve and realize value (performance)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How does COSO define risk?

A

As a neutral event

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is an example of negative risk?

A

The new accounting system that your company implemented fails and can’t keep track of sales and inventory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is an example of positive risk?

A

The company’s servers fail because demand for your project is do high

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Why is ERM important?

A
  1. Expands opportunities
  2. Identify and manage entity-wide risk
  3. Increase positive and reduce negative outcomes
  4. Reducing performance variability
  5. Better deploying assets and human resources
  6. Increase enterprise resilience
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the 3 risk of strategy selection?

A
  1. Misalignment - does strategy align with mission and core values
  2. Implications - do you understand the risk implications
  3. Risks to Success - will we be successful
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the 5 components of ERM?

A
  1. Governance and Culture
  2. Strategy and Objective setting
  3. Performance
  4. Review and Revision
  5. Information, Communication and Reporting
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are risk management policies and procedures?

A

A. the goals of risk management include:

  1. Aligning risk appetite & strategy
  2. Improving risk responses
  3. Reducing operational surprises and losses
  4. Identifying & managing multiple & cross enterprise risk
  5. Seizing opportunities
  6. Improving capital deployment

B. Manage change in the system of internal control elements:

  1. Change agents
  2. Impediments to system user & designer communication
  3. Management commitment & support

C. Limitations of ERM

  1. Risks relate to future, the future is inherently uncertian
  2. Problems happen
  3. ERM cannot provide absolute assurance