Internal Control (Chapter 2) [P2] Flashcards
List the types of control
- preventative
- detective
- corrective
- directive
What are preventive controls?
Used to deter or prevent an undesirable event from occurring
Eg. Burglar bars to prevent burglars from breaking in
What are detective controls?
Used to detect undesirable events that have occurred
Eg. Burglar alarm to detect when someone’s broken into a building
What are corrective controls?
Used to correct the effects of undesirable events
Eg. Burglar alarm is linked to security company that responds in time to stop the burglars
What are directive controls?
Used to discourage an undesirable event from occurring or to encourage a desirable event to occur
Eg. A sign warning that a building is protected by burglar alarm is used to discourage burglars from attempting to break in
What activities do business operations include?
- handling of cash
- buying and selling on credit
- inventory
- debtors
- creditors
- fixed assets
- payroll
List three possible risks
- error
- fraud
- theft
Why do business operations leave businesses vulnerable to risk?
They often entail complex procedures, involving several personnel and numerous transactions
How can businesses guard against the risks of business operations?
By establishing an effective risk management and control system
List the components of a risk management and control system
- risk management function
- system of internal control
- internal audit function
Define risk management
The process of identifying, assessing and managing risk
Define risk
Uncertain future events that may have a negative impact on business operations and a detrimental effect on the business achieving its objectives
What activities should the risk management function be responsible for?
- establishing risk management policy and strategy of the business
- analysing business operations and procedures to identify risks
- evaluating and assessing potential impact of risks identified
- deciding on appropriate action to be taken in response to each of the risks identified
- developing and implementing appropriate internal control processes to combat risks
- continual reviewing of risk management process and strategy
List the four responses of the risk management function
- avoid the risk
- control the risk
- transfer the risk
- tolerate the risk
Explain avoiding the risk
This is likely to be the response if the risk is significant and either cannot be contained or is too costly to control
Explain controlling the risk
This is normally the response if the risk is significant, but can be cost-effectively controlled
Explain transferring the risk
This is likely to be the response if the risk is significant, but unlikely to occur
Explain tolerating the risk
A risk may be tolerated if it’s found that the risk is unlikely to occur and it would have little impact even if it did occur
What is the purpose of internal controls in a business?
To control risks to help ensure that the business objectives are accomplished
What should an effective system of internal controls ensure?
- the financial and operational information of a business is reliable and accurate
- employees comply with policies, procedures and rules of business
- employees adhere to the business code of ethics
- business assets are safeguarded
- business resources are used economically and efficiently
What is the purpose of internal controls in accounting?
The purpose is to control risks to help ensure that the accounting objectives of the business are achieved. They form part of the system of internal controls of a business and are implemented not only to ensure that the transactions of the business are recorded accurately, but also to protect the business against the risk of financial loss due to fraud or error