Governance & Organizational Structure Flashcards
7 cards from real Certified Internal Auditor practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Governance & Organizational Structure flashcards as text
As defined by COSO, the 'control environment' component of internal control refers to:
Answer: The set of standards, processes, and structures that provide the foundation for all other internal control components
COSO defines the control environment as the set of standards, processes, and structures that establish the foundation for carrying out internal control across the organization.
Which of the following represents a key governance challenge specific to decentralized organizations?
Answer: Maintaining consistent policies, ethical standards, and controls across relatively autonomous business units
Decentralized organizations face the governance challenge of ensuring consistent application of policies, controls, and ethical standards across business units operating with significant autonomy.
An organization's code of ethics is most effective when:
Answer: It is consistently enforced with visible and proportionate consequences for violations at all levels
A code of ethics achieves maximum effectiveness when senior leadership visibly enforces it consistently, including at leadership levels, demonstrating genuine organizational commitment.
In governance, the principle of 'accountability' means:
Answer: The obligation to accept responsibility for one's decisions and report transparently to those with oversight authority
Accountability in governance means accepting responsibility for one's decisions and actions and being obligated to report transparently to those with legitimate oversight authority.
Under Sarbanes-Oxley Act Section 302, which corporate officers are required to personally certify the accuracy and completeness of financial reports?
Answer: The Chief Executive Officer and the Chief Financial Officer
SOX Section 302 requires the CEO and CFO to personally certify the accuracy and completeness of financial reports filed with the SEC, making them personally liable for misstatements.
The purpose of an internal audit charter in the governance structure is to:
Answer: Formally define the purpose, authority, responsibility, and independence of the internal audit function
The internal audit charter formally establishes the function's purpose, authority, responsibility, and independence as required by IIA Standard 1000, and must be approved by the audit committee.
When evaluating governance effectiveness, internal audit should primarily assess whether:
Answer: Governance processes achieve their core objectives of transparency, accountability, ethical conduct, and stewardship
Internal audit evaluates governance effectiveness by assessing whether governance processes achieve their intended outcomes—transparency, accountability, ethical values, and effective stewardship—not just procedural compliance.