CIG Governance & Internal Controls — Questions and Answers
Question 1: What is the main purpose of internal controls?
- Ignore risks
- Protect assets and ensure compliance (Correct answer)
- Increase errors
- Delay processes
Correct answer: Protect assets and ensure compliance
The main purpose of internal controls is twofold: to protect an organization's assets from waste, fraud, and inefficiency, and to ensure adherence to laws, regulations, and internal policies. These processes, implemented by management and personnel, provide reasonable assurance that objectives are achieved. Effective internal controls are fundamental for reliable financial reporting and operational effectiveness.
Question 2: Who is responsible for governance in an organization?
- Employees only
- Board and senior management (Correct answer)
- Customers
- External auditors
Correct answer: Board and senior management
Governance refers to the system by which an organization is directed and controlled, and the ultimate responsibility for this lies with the Board of Directors and senior management. The Board sets the strategic direction, oversees operations, and ensures accountability, while senior management implements these strategies and maintains effective internal controls and compliance frameworks. Their combined leadership ensures the organization operates ethically and effectively.
Question 3: What is segregation of duties?
- One person handles all tasks
- Divide tasks among individuals (Correct answer)
- Ignore responsibilities
- Delay approvals
Correct answer: Divide tasks among individuals
Segregation of duties is a key internal control principle designed to prevent fraud and errors by ensuring no single individual has complete control over a transaction from beginning to end. By dividing critical tasks, such as authorization, record-keeping, and asset custody, among different people, it creates a system of checks and balances. This makes it significantly more difficult for one person to commit and conceal irregularities.
Question 4: Why is risk assessment important in governance?
- Ignore risks
- Identify and manage risks (Correct answer)
- Increase vulnerabilities
- Delay decisions
Correct answer: Identify and manage risks
Risk assessment is important in governance because it enables the board and senior management to understand the potential threats and opportunities facing the organization. By systematically identifying, analyzing, and evaluating risks, governance bodies can make informed decisions about resource allocation, strategic planning, and the implementation of appropriate controls. This ensures the organization can achieve its objectives while navigating uncertainties effectively.
Question 5: What is the role of internal audit in governance?
- Ignore control weaknesses
- Assess and improve controls (Correct answer)
- Manage operations
- Approve budgets
Correct answer: Assess and improve controls
Internal audit plays a crucial role in governance by providing independent and objective assurance and consulting services. Its primary function is to assess and improve the effectiveness of an organization's risk management, control, and governance processes. By identifying weaknesses and recommending enhancements, internal audit helps strengthen the reliability of financial reporting, operational efficiency, and compliance with laws and regulations.
Question 6: Which of the following is a preventive control?
- Reconciliations
- Access restrictions (Correct answer)
- Audit reviews
- Error detection
Correct answer: Access restrictions
Preventive controls are designed to stop errors or unauthorized activities before they occur. Access restrictions, such as passwords, biometric scans, or locked doors, physically or logically limit who can access certain systems, data, or physical assets. This directly prevents unauthorized individuals from causing harm or making mistakes, making it a classic example of a proactive preventive measure.
Question 7: What is the tone at the top?
- Ignoring ethics
- Leadership setting ethical example (Correct answer)
- Avoiding responsibility
- Delegating ethics
Correct answer: Leadership setting ethical example
The 'tone at the top' refers to the ethical atmosphere created by the board of directors and senior management of an organization. It signifies their commitment to integrity, ethical values, and compliance. When leadership consistently demonstrates and communicates strong ethical principles, it sets a positive example that permeates throughout the entire organization, influencing employee behavior and fostering a culture of integrity.
Question 8: Why is documentation important in internal controls?
- Ignore controls
- Provide evidence and facilitate audits (Correct answer)
- Reduce accountability
- Delay reviews
Correct answer: Provide evidence and facilitate audits
Documentation is essential in internal controls as it creates a clear, verifiable record of processes, policies, and transactions. This documentation serves as tangible evidence that controls are in place and operating as intended, which is critical for internal and external audits. It also facilitates understanding, training, and consistent application of controls, ensuring accountability and transparency within the organization.
Question 9: How can technology support governance and controls?
- Ignore controls
- Automate and monitor processes (Correct answer)
- Increase manual errors
- Reduce transparency
Correct answer: Automate and monitor processes
Technology significantly supports governance and controls by enabling the automation of routine tasks, which reduces manual errors and increases efficiency. It also provides robust tools for continuous monitoring of activities, transactions, and compliance metrics, allowing for real-time detection of anomalies or deviations. This automation and monitoring capability strengthens control effectiveness and provides better oversight, enhancing overall organizational integrity.
CIG Governance & Internal Controls
What is the main purpose of internal controls?