Internal Control Crap (Chapter 1) Flashcards
Framework Objectives (three of them)
Operations - effectiveness and efficiency of an entity’s operations
Reporting - reliability, timeliness, and transparency of an entity’s external and internal financial and nonfinancial reporting
Compliance - adhering to applicable laws and regulations
Elements of COSO Framework
Control Environment Risk Assessment Information and Communication Monitoring Existing Control Activities
Control Environment
TONE AT THE TOP - "EBOCA" Ethics and integrity Board independence Organizational structure Commitment to competence Accountability
Risk Assessment
MISSTATEMENT AND/OR FRAUD - “EAR”
Event identification
Assessment of risk
Response to risk
Information and Communication
“FACT” - fair, accurate, complete and timely
Internal (internal audit, audit committee, Board)
External (auditor, stockholders)
Monitoring
Ongoing and/or separate evaluations (frequency of testing dictated by risk)
Communication of deficiencies
Existing Control Activities
MITIGATE RISK
Policies and procedures
Detective and preventive
Segregation of duties