Internal Control Evaluation Flashcards
7 cards from real CFA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Internal Control Evaluation flashcards as text
Which control activity is most effective at preventing fictitious vendor payments?
Answer: Mandatory vendor approval and verification before setup in accounts payable system
Preventing fictitious vendors requires a robust vendor vetting and approval process before any payment can be initiated.
A company's IT department has unrestricted access to both program source code and production data. This represents a failure in which control principle?
Answer: Segregation of duties
When the same individuals control programming and live data, they can alter programs and conceal the changes, violating segregation of duties.
Under the COSO framework, 'tone at the top' is a component of which element?
Answer: Control Environment
Tone at the top — management's ethical stance and commitment to integrity — is the foundation of the Control Environment component.
An auditor discovers that purchase orders are approved by the same employee who receives goods. What type of fraud risk does this create?
Answer: Misappropriation of assets through fictitious purchases or theft of inventory
When one person approves purchases and receives goods, they can order fictitious items or personally steal received inventory without detection.
Which of the following best describes a 'preventive control'?
Answer: A physical lock on a storage room that stops unauthorized access before it occurs
Preventive controls stop fraud or errors before they occur, such as physical barriers that block unauthorized access.
Which scenario represents a control deficiency classified as a 'material weakness' under internal control standards?
Answer: The complete absence of a period-end financial close review process
A material weakness is a deficiency where there is a reasonable possibility that a material misstatement will not be prevented or detected, such as lacking a financial close review.
An organization uses a compensating control because segregating payroll processing duties is not cost-effective with its small staff. Which control would best compensate?
Answer: Having an independent manager review and approve the final payroll register before disbursement
An independent managerial review of the payroll register provides oversight that compensates for the inability to segregate duties in a small organization.