Internal Controls & Governance Flashcards
7 cards from real CA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Internal Controls & Governance flashcards as text
Which of the following is NOT one of the five components of the COSO Internal Control – Integrated Framework?
Answer: Profit Optimization
The five COSO components are Control Environment, Risk Assessment, Control Activities, Information & Communication, and Monitoring Activities; Profit Optimization is not a component.
Segregation of duties is primarily designed to prevent which type of risk?
Answer: Fraud and error through collusion or unauthorized access
Segregation of duties reduces the opportunity for any one individual to commit and conceal fraud or errors by dividing authorization, custody, and recordkeeping among different people.
Under Sarbanes-Oxley (SOX) Section 404, management is required to:
Answer: Assess and report on the effectiveness of internal controls over financial reporting
SOX Section 404 requires management to assess the design and operating effectiveness of internal controls over financial reporting and have that assessment attested by the external auditor.
A preventive control is best described as one that:
Answer: Stops errors or irregularities from occurring in the first place
Preventive controls are proactive measures designed to stop errors or fraud before they occur, such as requiring dual authorization on large payments.
Which body is primarily responsible for overseeing a company's financial reporting and external auditor relationship in a U.S. public company?
Answer: The Audit Committee of the Board of Directors
The Audit Committee, composed of independent directors, is responsible for overseeing financial reporting integrity, hiring the external auditor, and reviewing audit findings.
A 'material weakness' in internal controls over financial reporting is defined as:
Answer: A deficiency where there is a reasonable possibility that a material misstatement will not be prevented or detected on a timely basis
PCAOB and FASB define a material weakness as a significant deficiency, or combination of deficiencies, in ICFR such that there is a reasonable possibility of a material financial statement misstatement going undetected.
The 'control environment' component of COSO is often referred to as the foundation of internal control because it:
Answer: Sets the tone at the top and influences the overall culture of integrity and ethical values
The control environment encompasses the organization's ethical values, management philosophy, organizational structure, and commitment to competence — elements that shape how employees regard internal controls.