SOX and Corp Design Flashcards
Which Internal control model is the most widely accepted?
COSO
What is the COSO definition of internal Controls?
Process affected by the Board of Directors,management, ad other personnel to provide reasonable assurance regarding the achievements of objectives.
What are the classes of objectives of Internal controls?
Operations, reporting, and compliance (ORC)
Name some operation objectives.
Improving Financial performance, productivity, quality,, innovation, and customer satisfaction Asset management.
Name some reporting objectives
financial and non financial reporting. Internal and external.
Name some Compliance Objectives
Tax compliance, employee relations, and environmental concerns
What are some inherent limitations to internal controls?
Human judgement is faulty; failure due to breakdowns; management override; circumvented by collusion; external events
What are the components of internal controls of the COSO environments?
(Controls Stop Crime) Control Environment, Risk Assessment, Control Activities, Communication, and monitoring.
SOX Section 802 states:
Criminal penalties - fines , imprisonment, or both for destroying evidence with the intent to impede and federal investigation.
What are the SOX requirements of the audit committee?
Composed of independent board of directors. one must be a finanical expert.They must appoint, compensate and oversee the independent auditor.
SOX created a new oversight board called PCAOB
Public company accounting oversight board
What is the PCAOB’s purpose?
Issues auditing standards, inspects/investigates accounting firms, enforces compliance, accounting firms must register to perform audits.
What does SOX Section 302 require for reporting?
In every annual/quarterly SEC filings the CEO and CFO must certify that the financial statements are free from material misstatements; take responsibility for internal control; have reported all significant control defeciencies and frauds.
What does SOX section 404 require in the annual report?
Annual report must contain a statement from the CEO or CFO: managements responsibility for internal controls over financial reports, the internal control framework used, assessment of effective functioning internal controls, registered CPA firm has also assessed the system
What does SOX section 407 require regardng the audit committee?
Issuer must disclose if the audit committee has a financial expert. If not reasons must be disclosed.