Module 3 Flashcards
What is a business process?
Anything a business will put in place to try to achieve its objectives
What is Business risk?
The threat that an action or event will adversely affect the organisations ability to achieve its objectives
What 3 things do directors implement internal control to provide assurance over?
The reliability of financial reporting
The effectiveness and efficiency of operations
Compliance with applicable laws and regulations
What are the five components of internal control?
Control activities Risk assessment process Information systems Monitoring of controls control Environment
CRIME
What is the control environment?
‘Tone at the top’
Overall attitude, awareness and actions of directors
What is risk assessment process?
The process by which business risks are identified and managed
What are information systems?
Used to record financial transactions and non-financial data
What are control activities?
Policies and procedures that management put in place to ensure their directives are carried out
What are monitoring of controls?
Ongoing assessment by management of the performance of the internal control systems
Control activities can be classified into what 5 categories?
Authorisation controls Physical controls Information processing controls Performance reviews Segregation of duties
APIPS
Authorisation controls ensure that what?
Transactions are authorised by personnel acting within the scope of their authority
Performance review controls allow?
Management to review information to highlight any exceptions or controls that haven’t operated effectively
Information processing controls can be broken down into what subcategories?
IT general controls
Application controls:
IT application controls
Manual application controls
What are IT general controls?
Operate over the whole IT system
Support effective functioning of app controls by ensuring continuing function of whole item system
What are application controls?
Operate at transaction level and apply to the processing of specific types of transactions
Ensure genuine, accurate and complete
Can involve both manual and automatic