Final Exam Flashcards
Which is not a management objective for an effective internal control system?
a. effectiveness of operations
b. compliance with laws and regulations
c. mitigate employee collusion
d. reliability of financial reporting
c. mitigate employee collusion
Which is not part of management’s IC reporting responsibilities?
a. identify the framework of IC evaluation
b. assessment of IC for financial reporting
c. establish adequate IC for financial reporting
d. state level of reasonable assurance
d. state level of reasonable assurance
Auditors first focus on internal control over classes of transactions because the accuracy of accounting system outputs (account balances) depends heavily on the accuracy of inputs
a. true
b. false
a. true
Which is not one of the 5 COSO components?
a. control environment
b. risk assessment
c. monitoring
d. IT management
d. IT management
Reducing management override is a part of which aspect of the COSO control environment component?
a. board and audit committee participation
b. commitment to competence
c. organizational structure
d. integrity and ethical values
a. board and committee participation
Manager purchasing limits are part of which COSO control activity?
a. adequate separation of duties
b. proper authorization of transactions
c. physical control of assets and records
d. independent check on performance
b. proper authorization of transactions
Which is not an area of general controls for IT?
a. backup and recovery
b. review of sales transactions
c. passwords and other access
d. system change approvals
b. review of sales transactions
Which is not a part of the written narrative description of a client’s IC?
a. document origin
b. transaction processing
c. records disposition
d. flowchart diagram
d. flowchart diagram
Which is not part of the control risk matrix?
a. control frequency
b. identify control deficiencies
c. associate controls with audit objectives
d. associate deficiencies with audit objectives
a. control frequency
Which activity would more likely be part of obtaining an understanding of controls rather than a substantive test of controls?
a. procedure observation with specific timing
b. document inspection sampling
c. transaction walkthrough
d. reperformance
c. transaction walkthrough
Unchanged automated controls require minimal testing
a. true
b. false
a. true
Which is not a procedure for tests of controls?
a. reperform client procedures
b. observe control-related activities
c. conduct analytical procedures
d. make inquiries
c. conduct analytical procedures
If a client uses an external service provider for important systems such as payroll, the auditor can rely on a service control organization audit rather than perform an audit of that service provider themselves
a. true
b. false
a. true
The control risk assessment is used in the financial statement audit to help determine:
a. acceptable audit risk
b. planned detection risk
c. inherent risk
d. engagement risk
b. planned detection risk
Which audit procedure takes place first, before the other “four audit procedures”?
a. tests of controls
b. risk assessment
c. substantive and analytical procedures
d. tests of details of balances
b. risk assessment