Internal Controls Flashcards
What are the five components of a comprehensive framework of internal controls (as outlined in the COSO Report) (5)?
- Control Environment
- Risk Monitoring and Assessment
- Control-related policies and procedures
- Information and communication
- Monitoring
An analysis of management’s fundamental responsibilities would need to address all of the following (4):
- Effectiveness
- Efficiency
- Compliance
- Financial Reporting
The comprehensiveness of an entity’s internal control framework can be assessed on the basis of whether it does all of the following (5):
- Provides a favorable control environment
- Continually assesses risk
- Establishes and maintains effective control-related policies and procedures
- Effectively communicates information
- Monitors the effectiveness of control policies and procedures as well as the resolution of potential problems identified by controls
A favorable control environment is (3):
- management is knowledgeable about internal controls
- management is committed to establishing and maintaining controls
- management communicates its support for internal controls to staff at all levels
Limitations of Internal Controls (3):
- cost considerations will prevent management from ever installing a “perfect” system
- subject to management override
- risk of collusion
Managements responsibilities for internal controls can be categorized as follows:
- Design
- Implementation
- Monitoring
- Reporting
Define “Effectiveness”
the extent to which management is achieving its goals and objectives (directly relates to management’s ability to communicate its directives to employees and ensure those directives are being carried out)
Define “Efficiency”
attaining goals and objectives with least expenditure of scarce resources
Management must demonstrate “Compliance” with?
restrictions imposed by policy, regulation, law or contract (i.e. annual appropriated budget, grantor requirements, state oversight requirements, IRS requirements, bond covenants, and local laws/regulations)
Management must use “Financial Reporting” effectively to?
ensure that decision makers, both inside and outside the government, have the financial data they need to make informed decisions
Who is primarily responsible for internal controls?
Management
Who is ultimately responsible for internal controls?
Governing body
The audit committee’s purpose (3):
- To ensure that the auditor of the financial statements is truly independent of management
- To provide an objective perspective on matters related to internal controls and the audit of the financial statements
- To provide a communications link between management, the independent auditor and the governing board
Which of the five elements of a comprehensive internal control framework can be viewed as the most important?
Control environment (because the effectiveness of the other four elements ultimately will depend on it)
What is the focus of risk monitoring?
A comprehensive internal control framework requires that management attempt on an ongoing basis to identify potential risks that could hinder it from fully realizing any of the four objectives (effectiveness, efficiency, compliance with laws and regulations, proper financial reporting).
Significant changes need to be monitored and assessed by management for potential risk. What are some of the types of changes requiring particular attention from management? (6)
- Changes in the operating environment
- Changes in personnel
- Changes in information systems and technology
- Rapid growth
- New programs and services
- Changes in structure
Examples of inherent risk: (6)
- Complexity increases dangers
- Cash receipts
- Direct third-party beneficiaries (i.e. food stamps)
- Degree of centralization
- Prior problems
- Prior unresponsiveness to identified control weaknesses
A balanced assessment of risk should take these two factors into consideration:
- Significance
2. Likelihood of occurrence
As part of control-related policies and procedures, a suitable accounting system should: (6)
- Assemble all relevant information
- Analyze assembled data
- Classify assembled data
- Record assembled data
- Furnish data needed for internal and external financial reporting on a timely basis
- Maintain accountability over the government’s assets
Management’s implicit assertions when issuing financial reports: (5)
- Existence or occurrence
- Completeness
- Rights and obligations
- Allocation
- Presentation and disclosure