Internal Control Flashcards

1
Q

auditors of entities that do not report to SEC aka non-issuers are required to follow

A

GAAS issued by auditing standard board (ASB) of the AICPA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

auditors of entities that DP report to SEC aka issuers are required understand

A

internal control

required to perform integrated audit 3 both internal control over financial reporting and of financial statements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

5 assertions related to Events and Transactions that occurred during period of audit

A

CPA-CO

Completeness
Period Cuttof
Accuracy

Classification
Occurrence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

4 assertions related to Account Balances

A

RACE

Rights and obligations
Allocation and Valuation
Completeness
Existence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

5 assertions related to Presentation

A

RACOU-n

Rights and obligations
Accuracy and valuation
Completeness
Occurence
Understandability and Classification
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

auditor seeks reasonable assurance that internal control are achieving certain objectives:

A

ACE

Accurate and reliable financial reporting
Compliance w law and reg.
Effectiveness and efficiency of operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

5 components of internal control

A

CRIME

  1. control activities (C)
  2. risk assessment (R)
  3. info and communication (I)
  4. monitoring (M)
  5. control ‘E’nvironment (E)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

control environment

A

CHOPPER

C-ommitment to competence
H-uman resource policies and practices
O-rganizational structure
P-articipation of those charged w governance
P-hilosophy of management and mgt operating style
E-thical values and integrity
R-esponsibility assignment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

inherent limitation - things that could occur even if theres rly good internal control

A

COCO

Collusion (no segregation of duties)
Override by mgmt
Competence/Human error
Obsolescent (changes in company’s operation/size , change in tech, changes affecting entity’s business)

Management override, mistakes in judgment, and collusion among employees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

reasonable assurance

A

cost of maintain internal control should now exceed benefit derived from having the control.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Segegration

A

ARCC

authorization
recording
custody
comparison/ reconciliation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what has more scope, internal control or assessment of risk of material misstatement?

A

In the assessment of RMM, the auditor will only test those controls that are expected to be relied upon, more limited in scope than an examination of internal control

In an examination of internal control, the auditor expresses an opinion in relation to the effectiveness of internal control, requiring an engagement more extensive in scope.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

letter written about internal control is for who?

A

The distribution of the report on internal controls in conjunction with an audit is restricted to management, the audit committee and the board of directors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Control activities are the policies and procedures that

A

management uses to provide reasonable assurance that the entity’s objectives will be achieved

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

monitoring

A

Monitoring is the process the entity uses to make certain that policies and procedures are, in fact, being followed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

The control environment, or tone at the top,

A

would include the fact that management is control conscious and willing to commit the resources to develop policies and procedures, but the policies and procedures themselves are control activities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

checking credit before sending item is part of manager’s assertion of

A

valuation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

management’s assertions: implicit/explicit assertions regarding recognition, measurement, presentation, and disclosure of info in f/s and disclosures. goal is to give opinion about f/s

A

COCA-CURVE

Completeness
Occurence
Cutoff
Classification

Classification
Understandability
Rights and Obligations
Valuation and Allocation
Existence
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

purchasing manager would be responsible for

A

authorization, including negotiating terms with vendors, and would not defer to the accounts payable department

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

when to cancel documentation

A

Documentation will be canceled at the time payment is made, often by the check signer at the time checks are being signed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

what does accounts payable do

A

Accounts payable will establish agreement between the vendors invoice, the receiving report, and the purchase order as a basis for determining that payment may be made.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

personnel, aka

A

HR

generally approve pay rate changes that are recommended by operating personnel, and deductions from employees’ salaries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

controller and payroll

A

are responsible for the recordkeeping function, which should also be segregated from authorization of transactions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

treasurer

A

has custody of the cash, which should be segregated from authorization of transactions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Analytical procedures and testing account balances are part of

A

substantive testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

report on internal control will include

A
  1. acknowledgement of management’s responsibility for internal control;
  2. a description of what aspects of the system of internal control were examined;
  3. the criteria used for performing the evaluation;
  4. management’s assertion regarding the effectiveness of the entity’s internal controls;
  5. a description of any material weaknesses; and
  6. the date of the assertion
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

how to understand effectiveness of internal control:

A
  1. inquiry of client personnel
  2. inspection of documents and reports
  3. observation of client personnel because each provides evidence relevant to the functioning of internal controls.
28
Q

communication of internal control structure related matters is normally addressed to

A

the board of directors or the audit committee

The report would not be addressed to the director of internal auditing or any member of management because the deficiency may be a result of management actions.

29
Q

what should not be included in a report on internal control structure related matters noted in an audit

A

The report may NOT indicate that there are “no significant deficiencies”, which are more prone to going undetected in a financial statement audit engagement

may indicate that there are no material weaknesses since a properly designed and executed audit should identify all material weaknesses

30
Q

When performing a risk assessment in an integrated audit of a nonissuer, the auditor will

A
  1. identify significant accounts, a misstatement of which could result in a material misstatement to the financial statements nad
  2. the relevant assertions related to those accounts
31
Q

three categories of internal control objectives

A
  1. Operations Objectives
  2. Reporting Objectives
  3. Compliance Objectives
32
Q

Audit evidence concerning segregation of duties ordinarily is BEST obtained by

A

Observation of duties.

can also:

  1. review of documentation of internal control procedures, 2. obtaining flowcharts,
  2. making inquiries.
33
Q

significant deficiency defined as:

A

a control deficiency that is not as severe as a material weakness but significant enough to merit the attention of management.

34
Q

Accounting pronouncements represent

A

an external factor that increases the risk that financial statements may be prepared that are not in conformity with GAAP

35
Q

factors that would influence the form and extent of the auditor’s documentation of an entity’s internal control environment

A

Complexity and size of the entity

36
Q

An auditor would decide not to test internal controls if

A

the controls are not likely to be effective at preventing or detecting misstatements or if it is more efficient to simply perform substantive tests

37
Q

The auditor’s opinion of an issuer’s internal control applies as of which date?

A

date of financial statement

38
Q

risk assessment procedures that are used when obtaining an understanding of the entity, including its internal control

A
  1. inquiries,
  2. analytical procedures, and
  3. observation and inspection
39
Q

restriction of report on internal control from auditor is given to whom?

A

The distribution of the report on internal controls in conjunction with an audit is restricted to

  1. management,
  2. the audit committee and
  3. the board of directors.
40
Q

recalculation is

A

a substantive test

41
Q

Reperformance and observation are both

A

risk assessment procedures used to assess RRM

42
Q

Comparison and confirmation are both

A

substantive procedures

43
Q

inspection may be

A

either a risk assessment procedure or a substantive test,

44
Q

verification

A

substantive testing

45
Q

Control activities are the

A

policies and procedures that management uses to provide reasonable assurance that the entity’s objectives will be achieved

are designed to prevent errors and fraud or to detect and correct them on a timely basis in order to achieve the objective of reliable financial reporting.

46
Q

The control environment, or tone at the top, would include

A

the fact that management is control conscious and willing to commit the resources to develop policies and procedures,

47
Q

when would entity implemented automated controls to reduce risks of misstatement

A

Automated controls work best when there is a high volume of transactions, all of which have similar characteristics

48
Q

objectives of internal control are

A
  1. accurate and reliable financial reporting,
  2. compliance with applicable laws and regulations, and
  3. effective and efficient operations
49
Q

report on internal controls in conjunction with an audit is

A

not a general use report but is restricted to the use of management, the audit committee and the board of directors.

50
Q

working papers of audit documentation includes

A

Working papers include the audit program or audit plan indicating work performed, analytical procedures performed demonstrating evidence gathered, and the adjusted trial balance demonstrating agreement with the financial statements.

51
Q

use of specialist in unmodified opinion

A

not allowed to mention specialist in report

52
Q

use of specialist in report that’s NOT unmodified opinion

A

can mention in other matter report

53
Q

when can external auditors use internal auditor’s help

A

The auditor is most likely to rely on the work done by internal auditors for areas that represent the LOWEST risk of material misstatement, such as an item that can be evaluated objectively, rather than subjectively.

54
Q

A performance indicator involves

A

comparing results to expectations

55
Q

Which organization developed the framework most commonly used by the auditing profession for benchmarking internal controls of non-issuers

A

The Committee of Sponsoring Organizations of the Treadway Commission

aka COSO

56
Q

entity’s internal control report over financial reporting

A

the auditor must include an inherent limitation paragraph indicating that errors and irregularities can occur and go undetected in any control structure

57
Q

form of control activities

A

Segregation of duties
performance indicators
Descriptions of accounting procedures
Reviews of operating performance

58
Q

A debit memo is

A

the document used to indicate that goods have been returned to vendors

59
Q

credit memo

A

good being return to company

60
Q

When engaged to examine and report on management’s written assertion about the effectiveness of internal control,

A

the written assertion must be in the form of a separate report that will accompany the accountant’s report

61
Q

A credit balance in a suspense account will be reported as a reduction in assets or an increase in liabilities,

A

implying that financial position may be understated.

62
Q

A debit balance in a suspense account represents an increase in assets or a decrease in liabilities,

A

implying that financial position may be overstated.

63
Q

analytical procedures

A

A comparison of financial statement data to other data, including prior year data, industry data, or other sources of data

64
Q

A performance indicator involves

A

comparing results to expectations

Performance indicators are benchmarks against which performance can be compared to identify potential problems

65
Q

information processing control

A

designed to prevent certain information from being processed