CAA Internal Controls & Risk Management 1 — Questions and Answers
Question 1: What is the primary purpose of internal controls within an organization?
- To maximize shareholder returns
- To safeguard assets, ensure financial accuracy, and promote operational efficiency (Correct answer)
- To eliminate all business risk
- To replace the need for external audits
Correct answer: To safeguard assets, ensure financial accuracy, and promote operational efficiency
Internal controls are designed to safeguard assets, ensure the accuracy and reliability of financial reporting, and promote operational efficiency and compliance.
Question 2: Which component of the COSO Internal Control Framework establishes the organization's tone, values, and operating style?
- Risk Assessment
- Control Activities
- Control Environment (Correct answer)
- Monitoring Activities
Correct answer: Control Environment
The Control Environment is the foundation of COSO and sets the tone of the organization by reflecting management's philosophy and operating style.
Question 3: A bank reconciliation performed monthly by an accounting clerk is best classified as which type of internal control?
- Preventive control
- Detective control (Correct answer)
- Corrective control
- Directive control
Correct answer: Detective control
A bank reconciliation detects discrepancies that have already occurred between book and bank balances, making it a detective control.
Question 4: What is the primary objective of segregation of duties as an internal control?
- To increase employee workload
- To ensure no single employee can commit and conceal an error or fraud (Correct answer)
- To reduce payroll costs
- To simplify the accounting process
Correct answer: To ensure no single employee can commit and conceal an error or fraud
Segregation of duties divides key tasks among different employees so that no single person can both perpetrate and conceal a fraudulent act or error.
Question 5: Which of the following is the best example of a preventive internal control?
- Reviewing exception reports after month-end
- Requiring dual authorization before releasing large payments (Correct answer)
- Conducting surprise inventory counts
- Performing variance analysis on financial statements
Correct answer: Requiring dual authorization before releasing large payments
Requiring dual authorization before releasing payments prevents unauthorized transactions from occurring in the first place, making it a preventive control.
Question 6: Which of the following frameworks is most widely used by U.S. public companies to evaluate the effectiveness of internal controls over financial reporting?
- ISO 31000
- COBIT 5
- COSO Internal Control — Integrated Framework (Correct answer)
- Basel III
Correct answer: COSO Internal Control — Integrated Framework
The COSO Internal Control — Integrated Framework is the most widely accepted standard for evaluating internal controls, particularly as required under Sarbanes-Oxley Section 404.
Question 7: What does a risk assessment in the context of internal controls primarily help management determine?
- The market value of company assets
- How risks that could prevent the organization from achieving its objectives should be managed (Correct answer)
- The tax liability for the current period
- The appropriate number of accounting staff needed
Correct answer: How risks that could prevent the organization from achieving its objectives should be managed
Risk assessment identifies and analyzes relevant risks to achieving organizational objectives, forming the basis for determining how those risks should be managed.
CAA Internal Controls & Risk Management 1
What is the primary purpose of internal controls within an organization?