Finc Mgmt E - Financial Trans. Processes and Controls Flashcards
SOX 404 requires that all publicly traded firms establish internal controls related to financial reporting and to be in compliance, a company needs to:
- develop documentation of existing internal controls and procedures associated with financial reporting
- test the effectiveness of those controls and procedures
- provide details on any deficiencies in the controls and/or documentation
Risk will never be completely eliminated since there are limitations related to the control process. These limitations include:
- small staff size, cant segregate duties
- cost of implementing a control > benefit
- need for rapid responses by employees
- breakdowns in communication, training, and technology
- collusion of 2+ employees
- override of various controls by mgmt for illegitimate purposes
With the Top-down risk assessment, the
- focus will deal with significant (material) accounts
- higher levels of risk are examined first in the assessment process
- then consider whether an internal control failure is low, medium, or high after internal controls have been assessed
In the internal conrol process, Control sufficiency is
the group of controls with a variety of degrees of precision necessary to achieve a control objective
In the internal conrol process, Control precision is
the alignment between a risk and the control activity designed to mitigate that risk
Top-down risk assessment (TDRA) is used to identify and assess:
- financial reporting items
- the risks related to financial reporting
- the internal control procedures meant to limit the identified risks
According to COSO, the 5 components of an internal control are:
CRIME - control activities, risk assessment, info/comm., monitoring, and control environment
COSO framework was designed to provide reasonable assurance for a firm’s objectives related to:
- effectiveness and efficiency of operations
- reliability of financial report
- compliance with laws and regulations
Control activities include
preventive and detective controls
Detective activities include
audits, required vacations, background investigations, rotation of duties, variance analysis, reconciliations, and physical inventories
Preventive activities include
separation of duties, use of passwords, required authorizations, required approvals, alarm systems, use of locks, security guards and cameras, and the education/training/monitoring of employees
Internal control allows for the firm’s resources to be:
- used
- monitored
- measured
Internal and external auditors are responsible for :
- the assessment of whether internal controls are correctly designed, properly implemented, and are effective
- making recommendations for improvements in the internal control procedures
The best internal control procedure to provide a reasonable guarantee that all cash sales are being rung up properly and cash put in the cash drawer would be to
Post a sign in a visible spot near the checkout counter that states, “If you do not get a receipt, your purchase is free.”