Corporate Governance Flashcards

2
Q

What is the primary duty of the board of directors?

A

To monitor management behavior.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the responsibility of the Nominating or Corporate Governance Committee of the board of directors?

A

Oversees the board

Responsible for hiring new CEO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the responsibility of the audit committee of the board of directors?

A

The audit committee appoints and oversees the external auditor.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the duty of the compensation committee of the board of directors?

A

The compensation committee handles the CEO’s compensation package.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does the NYSE and NASDAQ require of the board of directors?

A

They require the board to be independent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the main goal in an executive compensation package?

A

The package should ensure that the goals of management should match those of the shareholders.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How can an executive compensation package ensure that goals of management align with those of shareholders?

A

Executive compensation should create an incentive for management to govern in a shareholder-friendly way that doesn’t sacrifice the long-term success of the enterprise for short-term gain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which influences help mold the direction that management takes?

A

They range from internal (Board of Directors- Audit Committee- Internal Control) to external (Creditors- SEC- IRS)

These influences should not be tainted by undue influence from management or have financial ties to management such as compensation-related duties

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is shirking?

A

When management doesn’t act in the best interest of shareholders.

It can be alleviated by tying compensation to stock performance or company profit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What requirements are imposed on a public company under Sarbanes-Oxley?

A

Management must submit a report on the effectiveness of Internal Control in the 10K.

Management must disclose significant Internal Control deficiencies.

CEO/CFO must certify that the financial statements comply with securities laws and fairly present the financial condition of the company.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the elements of the control environment?

A

The following are elements of the control environment:

  1. Integrity & Ethics
  2. Competence
  3. The Board of Directors & Audit Committee
  4. Management’s Operating Style
  5. Organizational Structure
  6. Authority & Roles of Responsibilities
  7. HR Policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What characteristics are promoted by the COSO framework on internal control?

A

Reliable financial reporting

Effective and efficient operations

Compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the basic elements of internal control?

A

The basic elements of internal control are:

  1. Control Environment
  2. Risk Assessment
  3. Control Activities
  4. Information and Communication
  5. Monitoring
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are control activities?

A

A component of internal control that includes actions being taken to promote the control environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the significance of the Information and Communication aspect of internal control?

A

Management must have access to relevant and timely information to make good decisions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How does Monitoring affect internal control?

A

Internal Control activities must be constantly monitored and evaluated for effectiveness.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are possible responses to risk under the COSO framework for enterprise risk management?

A

Avoid or Reduce

Share or Accept

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What activities does the COSO framework for enterprise risk management include?

A

COSO framework for enterprise risk management include the following activities:

  1. Identifies Risk Factors
  2. Promotes Risk Response Decisions
  3. Compares Management Risk vs. Shareholder Goals
  4. Aids in evaluating opportunities
  5. Promotes Quicker Capital movement

Does NOT eliminate all risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are some examples of controls for the following risk:

Risk: Inaccurate or incomplete sales data and lack of security over sales order information

(Sales & Collections Business Process)

A

In regards to a company’s process where sales orders are inputted manually

Example controls are:

  1. Password control over terminals to assure that sales are authorized by sales department
  2. Accuracy and completeness controls over inputs (accuracy and completeness controls include controls such a validity checks, missing data checks, logic checks, limit tests, etc.)
  3. Physical controls over terminals and files
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are some examples of controls for the following risk:

Risk: Inaccurate or incomplete sales data and lack of security over sales order information

(Sales & Collections Business Process)

A

In regards to a Company’s process where sales are made over the internet

Example controls are:

  1. Encryption of transmitted data
  2. Accuracy and completeness controls over inputs
  3. Password control over access to information to maintain a segregation of duties
  4. Data controls to ensure that sales prices are accurately inputted and updated
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are some examples of controls for the following risk:

Risk: Sales to customers that are NOT creditworthy

(Sales & Collections Business Process)

A

In regards to a Company’s process where they outsource credit to a credit card company

Example controls are:

Protect credit card information with password control and physical security over terminals and files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are some examples of controls for the following risk:

Risk: Sales to customers that are NOT creditworthy

(Sales & Collections Business Process)

A

In regards to a Company’s process where the credit department extends credit

Example controls are:

  1. Credit department should be independent of sales function and approve credit limits
  2. Effective practices for collecting credit information to make evaluations to grant credit
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are some examples of controls for the following risk:

Risk: Maintaining too much or too little inventory

(Sales & Collections Business Process)

A

In regards to a Company’s process over inventory control and management

Example controls are:

  1. Use of a perpetual inventory system
  2. Use of techniques such as just-in-time, economic order quantity and reorder points as methods of managing inventory: heavy reliance on technology to determine when and how much to order
25
Q

What are some examples of controls for the following risk:

Risk: Inaccurate filling of orders

(Sales & Collections Business Process)

A

In regards to a Company’s process over manual filling of orders

Example controls are:

Have an individual NOT involved in filling the order check it for accuracy

26
Q

What are some examples of controls for the following risk:

Risk: Inaccurate filling of orders

(Sales & Collections Business Process)

A

In regards to a Company’s process over using technology to fill orders

Example controls are:

  1. Input controls to assure information is correct in computer fulfillment process
  2. Use technology such as bar code scanners to pack goods
27
Q

What are some examples of controls for the following risk:

Risk: Inaccurate billing of customers

(Sales & Collections Business Process)

A

In regards to a Company’s process over the manual billing process

Example controls are:

  1. Individual doing billing match sales order to shipping document to assure the accuracy of billing invoice
  2. Use of pre-numbered documents and accounting for all documents
  3. Invoice checked for clerical accuracy by an individual NOT involved in preparation
  4. Billing department is independent of individuals maintaining receivables records
  5. Account for numerical sequence of documents
28
Q

What are some examples of controls for the following risk:

Risk: Inaccurate billing of customers

(Sales & Collections Business Process)

A

In regards to a Company’s process over technology used for billing

Example controls are:

  1. Accuracy and completeness input controls to assure billing information is accurate and based on accurate shipping information input by shipping personnel
  2. Accuracy and completeness controls to assure that pricing information is accurate and based on authorization from the sale department
  3. Password control over terminals to insure segregation of duties
29
Q

What are some examples of controls for the following risk:

Risk: Failure to bill for shipment

(Sales & Collections Business Process)

A

In regards to a Company’s process over a manual shipping process

Example controls are:

Accounting for ALL pre-numbered shipping documents

30
Q

What are some examples of controls for the following risk:

Risk: Failure to bill for shipment

(Sales & Collections Business Process)

A

In regards to a Company’s process over technology used for shipping

Example controls are:

Accuracy and completeness input controls to assure that all shipping information is entered to the system for billing

31
Q

What are some examples of controls for the following risk:

Risk: Errors or fraud in processing and depositing cash receipts

(Sales & Collections Business Process)

A

In regards to a Company’s process over cash receipts received through the mail

Example controls are:

Segregation of cash handling from accounts receivable records or use of a lockbox at a financial institution

32
Q

What are some examples of controls for the following risk:

Risk: Errors or fraud in processing and depositing cash receipts

(Sales & Collections Business Process)

A

In regards to a Company’s process over the use of an electronic funds transfer system

Example controls are:

  1. Control over access to the system through the use of a password system
  2. Use of accuracy and completeness controls over input of cash receipt information
33
Q

What are some examples of controls for the following risk:

Risk: Accounts may be written off WITHOUT authorization

(Sales & Collections Business Process)

A

In regards to a Company that has a manual process for writing-off uncollectible accounts

Example controls are:

  1. Individual independent of sales and cash receipts should be authorized to write off accounts
  2. Use of pre-numbered authorization forms
  3. Accounting for all forms (pre-numbered authorization forms)
34
Q

What are some examples of controls for the following risk:

Risk: Accounts may be written off WITHOUT authorization

(Sales & Collections Business Process)

A

In regards to a Company that has a technology-based system for writing-off uncollectible accounts

Example controls are:

Access to terminal for authorization by independent individual should be restricted by password system

35
Q

What are some examples of controls for the following risk:

Risk: Ordering un-needed goods

(Acquisitions & Payments Process)

A

In regards to a Company that has a manual or technology-based system (or process) to order goods (purchase inventory)

Example controls are:

  1. Use of a perpetual inventory system
  2. Ordering based on inventory management techniques such as just-in-time, economic order quantity and reorder points
36
Q

What are some examples of controls for the following risk:

Risk: Purchasing goods from unauthorized vendors

(Acquisitions & Payments Process)

A

In regards to a Company that has a manual or technology-based system (or process) to order goods

Example controls are:

  1. Establish preferred vendor relationships
  2. Establish criteria for authorized vendors
  3. Creation of purchase orders
  4. Accuracy and completeness controls over inputting purchasing information into the computer
  5. Password control over terminals
37
Q

What are some examples of controls for the following risk:

Risk: Receiving goods that were NOT ordered

(Acquisitions & Payments Process)

A

In regards to a Company that has a manual system (or process) for receiving goods purchased

Example controls are:

Matching of purchase order to goods received

38
Q

What are some examples of controls for the following risk:

Risk: Receiving goods that were NOT ordered

(Acquisitions & Payments Process)

A

In regards to a Company that has a technology-based system (or process) for receiving goods purchased

Example controls are:

Computer comparison of purchase information input by the purchasing department with information on goods received inputted by the receiving department

39
Q

What are some examples of controls for the following risk:

Risk: Payment for goods NOT received

(Acquisitions & Payments Process)

A

In regards to a Company that has a manual system (or process) for receiving goods

Example controls are:

  1. Matching of purchase orders with receiving reports
  2. Accounting for all pre-numbered documents
  3. Individual authorized to sign checks is independent of those maintaining records and receiving goods
  4. Check signer cancels supporting documents
40
Q

What are some examples of controls for the following risk:

Risk: Payment for goods NOT received

(Acquisitions & Payments Process)

A

In regards to a Company that uses computer generation of payments based on purchase and receiving information

Example controls are:

  1. Accuracy and completeness input controls for purchase and receiving information
  2. Segregation of those maintaining records and processing payments from those authorized to make payments
  3. Password control to ensure segregation of duties
41
Q

What are some examples of controls for the following risk:

Risk: Payment for purchase twice

(Acquisitions & Payments Process)

A

In regards to a Company that has a manual system (or process) for cutting checks

Example controls are:

Cancel supporting documents for all payments

42
Q

What are some examples of controls for the following risk:

Risk: Payment for purchase twice

(Acquisitions & Payments Process)

A

In regards to a Company that uses a technology-based system (or process) for cutting checks

Example controls are:

Control access to receiving and purchasing information by use of passwords and appropriate segregation of duties

43
Q

What are some examples of controls for the following risk:

Risk: Unauthorized cash payments

(Acquisitions & Payments Process)

A

In regards to a Company that has a manual system (or process) for the authorization of cash payments

Example controls are:

  1. Segregation of duties of accounting and authorized check signers
  2. Reconciliation of bank account by individual independent of individuals preparing and signing checks
44
Q

What are some examples of controls for the following risk:

Risk: Unauthorized cash payments

(Acquisitions & Payments Process)

A

In regards to a Company that uses a technology-based system (or process) for making cash payments

Example controls are:

  1. Passwords and controls over terminals prevent issuance of unauthorized payments
  2. Reconciliation of bank account by computer or independent individual
45
Q

What are some examples of controls for the following risk:

Risk: Loss or theft of assets

(Acquisitions & Payments Process)

A

In regards to a Company that uses a manual or technology-based system (or process) for tracking and maintaining assets

Example controls are:

Periodic reconciliations of physical assets to accounting records by individuals independent of individuals having custody of the assets and individuals maintaining the accounting records for the assets (i.e. reconciliations of bank accounts, taking physical inventories and inventories of supplies and equipment

46
Q

What are key controls that a Company should have over inventory?

A

Key controls over inventory include:

  1. Perpetual inventory records for large dollar items
  2. Pre-numbered receiving reports prepared when inventory received
  3. Receiving reports should be accounted for
  4. Adequate standard cost system to cost inventory items
  5. Physical controls over theft
  6. Written inventory requisitions used
  7. Proper authorization of purchases and use of pre-numbered purchase orders
47
Q

What are key controls that a Company should have over Fixed assets?

A

Key controls over fixed assets include:

  1. Major asset acquisitions are properly approved by the firm’s board of directors and properly controlled through capital budgeting techniques
  2. Detailed records are available for property assets and accumulated depreciation
  3. Written policies exist for capitalization vs. expensing decisions
  4. Depreciation properly calculated
  5. Retirements approved by an appropriate level of management
  6. Physical control over assets to prevent theft
  7. Periodic physical inspection of plant and equipment by individuals who are otherwise independent of PP&E (i.e. internal auditors)
48
Q

What are key controls that a Company should have over Payroll?

A

Key controls over payroll include:

  1. Segregate the following functions:

a. Timekeeping
b. Payroll preparation
c. Personnel (HR)
d. Paycheck distribution

  1. Time clocks used where possible
  2. Job time tickets reconciled to time clock cards
  3. Time clock cards approved by supervisors (overtime and regular hours)
  4. Treasurer signs paychecks
  5. Unclaimed paychecks controlled by someone otherwise independent of the payroll function (locked up and eventually destroyed if not claimed). In cases in which employees are paid cash (as opposed to checks) unclaimed pay should be deposited into a special bank account
  6. Personnel department promptly sends termination notices to the payroll department
49
Q

What are the 8 elements of Enterprise Risk Management (ERM)?

A

The 8 elements of ERM are as follows:

  1. Internal Environment
  2. Objective setting
  3. Event Identification
  4. Risk Assessment
  5. Risk Response
  6. Control Activities
  7. Information & Communication
  8. Monitoring
50
Q

What are key factors within an entity Internal Environment?

Element of Enterprise Risk Management

A

An important aspect of an organization’s internal control environment is it’s risk appetite & risk tolerance:

Risk appetite - amount of risk an organization is willing to accept to achieve its goals

Risk tolerance - relates to an organization’s objectives. It is the acceptable variation with respect to a particular objective

51
Q

What does the Objective setting entail?

Element of Enterprise Risk Management

A

Objective setting are divided into 3 categories:

  1. Operation objectives - relates to the effectiveness and efficiency of operations
  2. Reporting objectives - internal and external using financial and non-financial information
  3. Compliance objectives - relates to adherence to laws and regulations
52
Q

What does Event Identification entail?

Element of Enterprise Risk Management

A

Event identification techniques include the following:

  1. Event inventories - developing a detailed listing of potential events
  2. Internal analysis - involving using information from other stakeholders (i.e. customers, suppliers, etc.)
  3. Escalation / Threshold triggers - management predetermines limits that cause an event to be further assessed
  4. Facilitated workshops / interviews - involves soliciting information about events from management & staff
  5. Process flow analysis - involves breaking processes down to inputs, tasks, responsibilities and outputs to identify events that might adversely affect the process
  6. Leading event indicators - involves monitoring data correlated to event to identify when the event is likely to occur
  7. Loss event data methodologies - management attempt to identify trends based on past events to determine occurrence of events that are unlikely and could have a very negative impact
53
Q

What does Risk Assessment entail?

Element of Enterprise Risk Management

A

Risk assessment involves the following:

  1. Inherent risk - the risk to the organization if management does nothing to alter its likelihood or impact
  2. Residual risk - risk of the event occurring after considering management response
54
Q

What is a qualitative technique that management can use to assess risk?

A

Risk assessment is an element of enterprise risk management. Management can use the following QUALITATIVE technique to assess risk:

Probabilistic Model - associate a range of events and the resulting impact with the likelihood of these events based on a certain assumption (i.e. value at risk, cash flow risk, earnings at risk and development of credit and operational distributions)

55
Q

What is a quantitative model that management can use to assess risk?

A

Risk assessment is an element of enterprise risk management. Management can use the following QUANTITATIVE technique to assess risk:

Non-probabilistic Model - use subjective assumptions in estimating the impact of events without quantifying an associated likelihood (i.e. sensitivity measures, stress test and scenario analysis)

56
Q

What does Risk Response entail?

Element of Enterprise Risk Management

A

An organization can deal with risk response in the following ways based upon its risk appetite:

  1. Avoidance - avoiding the risk all together (dropping the activity which causes the risk)
  2. Reduction - taking action to reduce risk (i.e. managing the risk or adding additional controls to the process)
  3. Sharing - transfers a portion of the risk to reduce it (i.e. insurance, hedging or outsourcing)
  4. Acceptance (retention) - just don’t do anything to mitigate it