Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AUD NINJA > Internal Control > Flashcards

Internal Control Flashcards

1
Q

What is the primary goal of COSO?

A

Provide guidance and frameworks for enterprise risk management, internal control, and fraud deterrence.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Who are COSO members?

A

AICPA
American Accounting Association (AAA)
Financial Executives International (FEI)
Institute of Internal Auditors (IIA)
Institute of Management Accountants (IMA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the objectives of internal control?

A

Ensure effective and efficient operations
Accurate and reliable financial reporting
Compliance with laws and regulations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the components of internal control?

A

Control environment
Risk assessment
Information and communication
Monitoring
Control activities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Control Environment

A

Demonstrate commitment to integrity and ethics
Board of directors exercise oversight responsibility
Establish structure, authority & responsibility
Demonstrates commitment to competence
Enforces accountability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Risk Assessment

A

Specifies suitable objectives
Identifies and analyzes risk
Assesses fraud risk
Identifies and analyzes significant change

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Information and Communication Systems

A

Uses relevant information
Communicates internally
Communicates externally

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Monitoring

A

Conducts ongoing and/or separate evaluations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Control Activities

A

Selects and develops control activities
Selected and develops general controls over technology
Deploys control activities through policies and procedures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Segregation of Duties

A

Custody
Authorization
Recording
Reconciliation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the limitations of internal control?

A

Competence
Collusion
Override by management
Obsolescence
Cost constraints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a control deficiency?

A

Exists when the design or operation of a control does not allow management or employees, in the normal course of performing their assigned functions, to prevent or detect misstatements on a timely basis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a significant deficiency?

A

A deficiency, or a combination of deficiencies, in internal control over financial reporting that is less severe than a material weakness yet important enough to merit attention of those charged with governance and management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a material weakness?

A

A deficiency, or a combination of deficiencies, in internal control involving financial reporting, such that there is a reasonable possibility that a material misstatement exists.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the types of control?

A

Preventative
Detective
Corrective
Directive
Compensating

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When is an auditor required to perform test of controls?

A

On audits of issuers. Audits of non-issuers does not require a test of controls, it’s optional.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

When is an auditor required to opine on a client’s financial statements?

A

On audits of issuers & non-issuers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When is an auditor required to perform substantive procedures?

A

On audits of issuers & non-issuers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

In assessing inherent risk, the auditor obtains an understanding…

A

of the entity and its environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

In assessing control risk, the auditor obtains an understanding…

A

of the entity’s internal control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What should the auditor consider when obtaining an understanding of the entity and its environment?

A

Objectives & strategies
Financial performance
External environment
Nature of operations
Ownership and governance
Investments
Financing structure
Accounting policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How should the auditor obtain an understanding of the entity and its environment?

A

Analytical procedures
Inquiries
Inspection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What should the auditor consider when obtaining an understanding of the entity’s internal control?

A

Evaluate design of I/C
Assess implementation of I/C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How should the auditor obtain an understanding of the entity’s internal control?

A

Inquiries
Walkthroughs
Inspection
Observation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is the top down approach (obtain an understanding of the entity’s internal control)?

A

Step 1: assess risk at financial statement level / entity level
Step 2: evaluate risk at account balances, transactions, & disclosures level
Step 3: evaluate risk at assertion level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the key elements of internal control to document?

A

Each of the I/C components
Any significant risks identified and related I/C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are the types of documentation forms for internal control?

A

Flowcharts
Internal Control Questionnaire (ICQ)
Narratives
Decision tree

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is risk of material misstatement?

A

RMM = IR x CR
Risk of material misstatement = Inherent risk x Control risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are the steps to assess RMM?

A

Identify risks
Consider the likelihood of identified risks
Consider the magnitude of the impact on FS
Determine if identified risks are significant

30
Q

What are the steps of the Non-Control Reliance Approach?

A

Improper design & implementation of controls > Controls are not designed properly and therefore not operating effectively > do not perform test of operating effectiveness of internal controls

31
Q

What are the NET of the audit procedures of the Non-Control Reliance Approach?

A

Improper design & implementation of controls > Controls are not designed properly and therefore not operating effectively > do not perform test of operating effectiveness of internal controls.
Assess CR at maximum > RMM is high > DR is low > increase NET of audit procedures

32
Q

What are the steps of the Control Reliance Approach?

A

Proper design & implementation of internal controls > controls are designed properly and therefore could be operating effectively > perform test of operating effectiveness of internal controls

33
Q

What are the steps of the Control Reliance Approach?

A

Proper design & implementation of internal controls > controls are designed properly and therefore could be operating effectively > perform test of operating effectiveness of internal controls

34
Q

What are the NET of the audit procedures of the Control Reliance Approach, when controls are not operating?

A

Proper design & implementation of internal controls > controls are designed properly and therefore could be operating effectively > perform test of operating effectiveness of internal controls
Controls are not operating > assess CR at maximum > RMM is high > DR is low > increase NET of audit procedures

35
Q

What is the nature of test of controls?

A

See how controls were applied at relevant times during the period under audit
See the consistency with which controls were applied
See by whom or by what means they were applied

36
Q

When should you have a smaller sample size or less frequent testing, assuming there have been no changes to the system?

A

When the controls are automated

37
Q

When should you have a larger sample size and more frequent testing due to higher susceptibility to inconsistency and errors?

A

When controls are manual

38
Q

When controls are tested during interim and there are significant changes in control, how much testing should be done?

A

Additional testing should be done

39
Q

When controls are tested during interim and there are no significant changes in control, how much testing should be done?

A

No additional testing should be done

40
Q

When there are changes in controls and controls were tested during the previous year audit of a non-issuer, what testing should be done?

A

The controls should be tested again in the current year

41
Q

When there are no changes in controls and controls were tested during the previous year audit of a non-issuer, what testing should be done

A

If no significant changes have occurred, the controls should be tested at least once every third year.

42
Q

Are auditors of issuers required to test controls each year?

A

Yes

43
Q

What are the procedures for test of controls to determine operating effectiveness?

A

Reperformance
Inquiry
Inspection
Observation

44
Q

What are the major transaction cycles?

A

Revenue
Cash receipts
Expenditure
Inventory
Personnel & payroll

45
Q

What is a design deficiency?

A

The control is not designed properly

46
Q

What is an operating deficiency?

A

The control is designed properly but doesn’t work

47
Q

What are the levels of deficiency?

A

Low - control deficiency
Medium - significant deficiency
High - material weakness

48
Q

Is communication of a control deficiency required in the audit of financial statements of a non-issuer?

A

No communication is required to management of TCWG

49
Q

Is communication of a control deficiency required in the audit of financial statements & internal control of a non-issuer?

A

Communication is required to management within 60 days of the audit report release date, in writing or orally.
No communication is required to TCWG

50
Q

Is communication of a control deficiency required in the audit of financial statements & internal control of an issuer?

A

Communication is required to management by the audit report release date in writing or orally.
No communication is required to TCWG

51
Q

Is communication of a significant deficiency required in the audit of financial statements of a non-issuer?

A

Communication is required to management & TCWG within 60 days of the audit report release date, in writing or orally.

52
Q

Is communication of a significant deficiency required in the audit of financial statements & internal control of a non-issuer?

A

Communication is required to management & TCWG by the audit report release date in writing.

53
Q

Is communication of a significant deficiency required in the audit of financial statements & internal control of an issuer?

A

Communication is required to management & TCWG by the audit report release date in writing.

54
Q

Is communication of a material weakness required in the audit of financial statements of a non-issuer?

A

Communication is required to management & TCWG within 60 days of the audit report release date, in writing or orally.

55
Q

Is communication of a significant deficiency required in the audit of financial statements & internal control of a non-issuer?

A

Communication is required to management & TCWG by the audit report release date in writing.

56
Q

Is communication of a material weakness required in the audit of financial statements & internal control of an issuer?

A

Communication is required to management & TCWG by the audit report release date in writing.

57
Q

What is an example of a service organization?

A

IT services
Cloud computing
Payroll processing
Data center management
Application hosting

58
Q

What is a SOC 1 report?

A

Report on controls related to financial reporting at the service organization

59
Q

What is a SOC 2 report?

A

Restricted use report on controls related to the AICPA’s 5 Trust Service Categories (security, availability, processing integrity, confidentiality, and privacy) at the service organization

60
Q

What is a SOC 3 report?

A

General use report on controls related to the AICPA’s 5 Trust Service Categories (security, availability, processing integrity, confidentiality, and privacy) at the service organization

61
Q

What is the focus of a SOC 1 Type 1 report?

A

Design of internal controls

62
Q

What is the focus of a SOC 1 Type 2 report?

A

Design and operating effectiveness of internal control

63
Q

What does a SOC 1 Type 1 report assess?

A

Assess the suitability and effectiveness of the controls in place at the service organization.

64
Q

What does a SOC 1 Type 2 report assess?

A

Assess the suitability and effectives of the controls, and how they are operating in practice

65
Q

What is the timeframe of a SOC 1 Type 1 report?

A

Specific point in time

66
Q

What is the timeframe of a SOC 1 Type 2 report?

A

Over a period of time

67
Q

What does a SOC 2 Type 1 report focus on?

A

Design of internal controls related to the security, availability, confidentiality, privacy, and integrity of systems.

68
Q

What does a SOC 2 Type 2 report focus on?

A

Design and operating effectiveness of internal controls related to the security, availability, confidentiality, privacy, and integrity of systems.

69
Q

What does a SOC 2 Type 1 report assess?

A

Assesses the suitability and effectiveness of controls in place at the service organization.

70
Q

What does a SOC 2 Type 2 report assess?

A

Assess the suitability and the effectiveness of the controls, and how they are operating in practice.

71
Q

What is the timeframe of a SOC 2 Type 1 report?

A

Specific point in time

72
Q

What is the timeframe of a SOC 2 Type 2 report?

A

Over a period of time

AUD NINJA (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions