AICPA Risk Management & Internal Control

Question 1

What is the primary purpose of internal controls?

Accepted Answer

To safeguard assets and ensure reliability

Answer

The primary purpose of internal controls is to safeguard an organization's assets, ensure the accuracy and reliability of its financial reporting, and promote operational efficiency and adherence to policies and laws. By establishing checks and balances, internal controls help prevent fraud, errors, and mismanagement. This contributes to the overall integrity and stability of the organization.

Question 2

Which framework is widely used to assess internal control systems?

Accepted Answer

COSO

Answer

COSO (Committee of Sponsoring Organizations of the Treadway Commission) provides a widely recognized framework for designing, implementing, and assessing internal control systems. Its framework, 'Internal Control – Integrated Framework,' is a benchmark for organizations worldwide to establish effective internal controls. This helps ensure financial reporting integrity and operational effectiveness.

Question 3

Which of the following is an example of a preventive control?

Accepted Answer

Segregation of duties

Answer

Segregation of duties is a fundamental preventive control designed to reduce the risk of error and fraud by ensuring that no single individual has control over all aspects of a financial transaction. By dividing responsibilities among different people, it makes it harder for one person to commit and conceal irregularities. This control aims to stop undesirable events from occurring in the first place.

Question 4

What is risk appetite?

Accepted Answer

The willingness to accept risk to meet goals

Answer

Risk appetite refers to the amount and type of risk an organization is willing to accept or take in pursuit of its objectives. It defines the boundaries within which the organization operates when making decisions involving risk. Understanding risk appetite is crucial for effective risk management, as it guides strategic choices and resource allocation.

Question 5

Which control activity involves verifying data accuracy after a process is completed?

Accepted Answer

Detective control

Answer

Detective controls are designed to identify errors, irregularities, or unauthorized activities *after* they have occurred. They do not prevent issues but rather alert management to problems so corrective action can be taken. Examples include reconciliations, reviews of financial reports, and audit logs, which verify data accuracy post-process.

(AICPA) Association of International Certified Professional Accountants Practice Test

(AICPA) Association of International Certified Professional Accountants Practice Test

AICPA Risk Management & Internal Control