What is the role of the audit committee in internal control systems?

Provide oversight for financial reporting and internal controls

What is response time in control systems?

The duration between an incident and system reaction

Who are forensic investigators in accounting systems?

Experts in fraud detection and investigation

Which of the following defines compliance objectives?

Complying with laws and regulations

Which of the following best defines likelihood?

The probability that a threat will occur

What are strategic objectives?

Long-term goals aligned with the company’s mission

What is a function of the Audit Committee in the context of COSO?

Provide oversight for internal controls

Which of the following is a control activity?

Proper authorization of transactions

What is residual risk?

Risk remaining after internal controls are applied

What does exposure or impact refer to?

The potential value of loss from a threat

What is a policy and procedures manual?

A document describing company rules and operational steps

What is a belief system in internal control frameworks?

A system that defines the organization’s core values and culture

What is specific authorization?

Approval granted only for unusual or large transactions

What are operations objectives concerned with?

Efficiency and effectiveness of operations

What is a digital signature used for in control systems?

To authenticate documents and ensure data integrity

What is the main purpose of internal controls?

To secure company assets and ensure reliable financial reporting

Which of the following is a goal of preventive controls?

To deter errors and fraud before they happen

What is the purpose of a background check in internal controls?

To assess new hires for fraud risk

What is expected loss in risk management?

Product of impact and likelihood of a threat

Which of the following is an example of a control activity?

Proper authorization of transactions.

What does residual risk refer to?

The risk after control measures have been implemented

What does the internal environment in the COSO ERM framework refer to?

The organization's culture, values, structure, and risk philosophy

What does the 'internal environment' component of COSO-ERM primarily refer to?

The company's culture, ethical values, and risk appetite.

What is an event in the context of risk management and internal control?

An incident that could affect the achievement of objectives

Which of the following best describes security management?

Overseeing access controls and safeguarding IT assets

What does a computer security officer (CSO) do?

Oversee system access controls and data security

Which of the following is a monitoring activity?

Implementing effective employee supervision.

What is the role of a systems administrator?

Manage user access and IT resources

What is the purpose of detective controls?

To uncover problems after they occur

What are general controls designed to do?

Ensure system-level stability and governance

What does collusion refer to in an accounting context?

Cooperation between two or more people to commit fraud

What does a policy and procedures manual typically contain?

Operational instructions and internal control policies

What is the purpose of an audit trail?

traced back and forth between their origin and the financial statem

What is the internal environment in COSO ERM?

The tone at the top, culture, and values influencing risk and control

What does an event represent in COSO ERM?

Any occurrence that could affect achievement of objectives

What is segregation of systems duties designed to prevent?

One person from controlling all aspects of an IT system

Which of the following duties should be segregated to ensure good internal control?

Custody of assets, recording, and authorization.

Which best describes an audit trail?

A record allowing transactions to be traced in both directions

What do reporting objectives aim to ensure?

Accurate and reliable internal and external reports

studbud

Chapter 10 Ket terms

83 termsStudBud Administration3 plays

Imported from external platform

Flashcards83 cardsFPractice quizPHost liveL

Questions 83

Answers

1
What is the role of the audit committee in internal control systems?
Provide oversight for financial reporting and internal controls
Process supplier payments
Approve company budgets
Supervise marketing staff
2
What is response time in control systems?
Time between audit checks
The time required to install new software
The duration between an incident and system reaction
Time it takes to record a journal entry
3
Who are forensic investigators in accounting systems?
Backup system developers
Bank auditors
System programmers
Experts in fraud detection and investigation
4
Which of the following defines compliance objectives?
Reducing employee turnover
Meeting company strategy
Achieving cost efficiency
Complying with laws and regulations
5
Which of the following best defines likelihood?
The number of controls implemented
The estimated financial impact
The severity of a system breach
The probability that a threat will occur
6
What are strategic objectives?
Long-term goals aligned with the company’s mission
Laws and policies for employee conduct
Goals related to financial reporting accuracy
Policies for enforcing timekeeping
7
What is a function of the Audit Committee in the context of COSO?
Oversee ethical conduct of all employees
Design operational plans
Enforce tax policies
Provide oversight for internal controls
8
Which of the following is a control activity?
Proper authorization of transactions
Budget forecasting
Ignoring warnings
Training interns
9
What is residual risk?
Risk remaining after internal controls are applied
Risk avoided through outsourcing
Risk introduced by vendor activities
Risk shared with an insurance company
10
Which internal control function helps to uncover errors after a transaction has occurred?
Corrective
Preventive
Detective
Directive
11
Which type of objective deals with the effectiveness and efficiency of operations and resource allocation?
Operations objectives
Strategic objectives
Reporting objectives
Compliance objectives
12
What does exposure or impact refer to?
The likelihood a control fails
The potential value of loss from a threat
The number of employees affected by a risk
The speed of system recovery
13
What is a policy and procedures manual?
A system for product inventory
A set of control objectives
A document describing company rules and operational steps
A marketing guide
14
SOX mandates internal controls be evaluated using which framework?
ISO 27001
COBIT
COSO-ERM
COSO
15
What is a belief system in internal control frameworks?
A fraud prevention mechanism
A backup data structure
An audit methodology
A system that defines the organization’s core values and culture
16
What is specific authorization?
Approval granted only for unusual or large transactions
A type of encryption key
A daily audit process
General approval for any transaction
17
What are operations objectives concerned with?
Ensuring compliance with laws
Accuracy of tax returns
Aligning with the company's mission
Efficiency and effectiveness of operations
18
Which of the following best describes a threat in the context of AIS?
A guaranteed loss
A potential adverse event
A beneficial event
A software update
19
According to COBIT5, who directs management and monitors their performance?
External Auditors
Management
The Board of Directors
Internal Auditors
20
What is a digital signature used for in control systems?
To authenticate documents and ensure data integrity
To encrypt databases
To replace traditional login credentials
To track employee hours
21
What is the main purpose of internal controls?
To generate marketing strategies
To maximize profit margins
To secure company assets and ensure reliable financial reporting
To track employee working hours
22
Which of the following is a goal of preventive controls?
To allow unlimited system access
To verify audit results
To recover from damage
To deter errors and fraud before they happen
23
What is the purpose of a background check in internal controls?
To evaluate company culture
To assess new hires for fraud risk
To reduce payroll errors
To update accounting policies
24
What is expected loss in risk management?
Cost of implementing controls
Probability of error
Maximum value of loss
Product of impact and likelihood of a threat
25
Which of the following is an example of a control activity?
Allowing one person to handle all aspects of a transaction.
Proper authorization of transactions.
Ignoring potential risks to avoid unnecessary expenses.
Avoiding communication with external stakeholders.
26
What does residual risk refer to?
The risk after control measures have been implemented
The likelihood of fraud occurring
The risk before any action is taken
The impact of external threats
27
What does the internal environment in the COSO ERM framework refer to?
Employee break room police
Weather conditions that affect inventory
Office building layout
The organization's culture, values, structure, and risk philosophy
28
What does the 'internal environment' component of COSO-ERM primarily refer to?
The external economic conditions affecting the company.
The company's IT infrastructure.
The company's physical office space.
The company's culture, ethical values, and risk appetite.
29
What is an event in the context of risk management and internal control?
An internal policy meeting
A scheduled audit activity
An incident that could affect the achievement of objectives
A type of control activity
30
What is the risk that exists before any plans are made to control it called?
Detection risk
Inherent risk
Residual risk
Control risk
31
Which of the following best describes security management?
Managing company logos and branding
Training sales representatives
Overseeing access controls and safeguarding IT assets
Organizing employee health plans
32
What does a computer security officer (CSO) do?
Supervise factory operations
Train staff on ERP systems
Prepare balance sheets
Oversee system access controls and data security
33
Which of the following is a monitoring activity?
Relying solely on management's assessment of internal controls.
Ignoring unusual transactions.
Avoiding external audits to save money.
Implementing effective employee supervision.
34
What is the role of a systems administrator?
Conduct internal audits
Manage user access and IT resources
Approve budget reports
Analyze financial ratios
35
Which of the following is not one of the COSO ERM components?
Monitoring
Control activities
Risk assessment
Asset management
36
What framework is focused on IT control and governance?
COBIT
GAAP
COSO
ERM
37
What is the purpose of detective controls?
To uncover problems after they occur
To write financial statements
To authorize transactions
To avoid legal responsibility
38
Which type of internal control is designed to discover problems that were not prevented?
Detective control
Corrective control
General control
Preventive control
39
What are general controls designed to do?
Conduct bank reconciliations
Forecast budget plans
Approve transactions
Ensure system-level stability and governance
40
What does collusion refer to in an accounting context?
An audit practice
A type of software
A control activity
Cooperation between two or more people to commit fraud
41
What does a policy and procedures manual typically contain?
Operational instructions and internal control policies
Tax filing schedules
Company marketing plans
Asset depreciation rates
42
Which risk response involves buying insurance?
Accept
Avoid
Reduce
Share
43
What is the purpose of an audit trail?
To make it difficult to track employee performance.
To confuse auditors.
traced back and forth between their origin and the financial statem
To hide fraudulent transactions.
44
What is the correct formula for expected loss?
Impact / Likelihood
Risk – Control
Risk × Likelihood
Likelihood × Impact
45
What is the internal environment in COSO ERM?
The tone at the top, culture, and values influencing risk and control
Computer software settings
Financial resources
Company's mission statement
46
What does an event represent in COSO ERM?
A system backup
A stakeholder meeting
Any occurrence that could affect achievement of objectives
A financial transaction
47
What is segregation of systems duties designed to prevent?
Software updates from failing
The outsourcing of internal audits
Computer viruses
One person from controlling all aspects of an IT system
48
Which of the following duties should be segregated to ensure good internal control?
Custody of assets, recording, and authorization.
Custody of assets, authorization, and IT management.
System maintenance, authorization, and custody of assets.
Recording, authorization, and system maintenance.
49
What does Enterprise Risk Management (ERM) focus on?
Complying with tax regulations
Managing enterprise-wide risks
Recording journal entries
Enforcing segregation of duties
50
Which best describes an audit trail?
A software patch log
A record allowing transactions to be traced in both directions
An external audit team
A security camera system
51
What do reporting objectives aim to ensure?
Reduced turnover
Accurate and reliable internal and external reports
Cost savings
Legal compliance
52
Which of the following is an example of inherent risk?
Risk created by new laws
Risk due to management override
Risk that exists before any controls are applied
Risk that remains after controls are implemented
53
Hiring qualified personnel is an example of which type of control?
Application
Detective
Corrective
Preventive
54
What is the main difference between general and application controls?
Application controls are managed by the Board of Directors
General controls are only for physical security
Application controls apply to entire organizations
Generalcontrol manage infrastructure application control manage transaction
55
In the context of internal control systems, who are users?
Customers who buy a product
Hackers attempting to break into the system
Employees who interact with the system and input or retrieve data
Suppliers who issue invoices
56
What is "risk appetite" in the context of ERM?
The process of identifying and assessing potential risks.
The total amount of potential losses an organization faces.
The amount of risk an organization is willing to accept.
The organization's desire to take on risky ventures for high returns.
57
Which COSO component involves evaluating external and internal events that may affect the entity?
Monitoring
Risk response
Event identification
Objective setting
58
Which of the following is NOT a primary objective of an AIS (Accounting Information System)?
To protect sensitive data from unauthorized access.
To ensure the organization's stock price consistently increases.
control organization so it achieve objectives efficiently effectively
collect, store, & process financial & accounting data for decision maker
59
Which of the following frameworks is specifically designed for IT control?
Sarbanes-Oxley Act
COSO
COBIT
COSO-ERM
60
What is a threat or event in the context of internal control systems?
A backup procedure
A planned system upgrade
A potential adverse occurrence that could impact the organization
A guaranteed financial loss
61
What is the function of forensic investigators in accounting?
Design software applications
Investigate suspected fraud or irregularities
Conduct tax assessments
Create user manuals
62
In risk assessment, what does "likelihood" refer to?
The probability that an event will occur.
The difficulty in controlling a particular risk.
The reputational damage from a risk event.
The potential financial loss if an event occurs.
63
What is the role of a computer security officer (CSO)?
Oversee system security and data protection
Maintain payroll systems
Approve vendor payments
Manage software updates
64
What is segregation of duties designed to prevent?
Training gaps
Concentration of control in one individual
Financial reporting
Job specialization
65
Which COBIT5 domain ensures IT solutions support business strategies?
APO (Align, Plan and Organize)
EDM (Evaluate, Direct, and Monitor)
DSS (Deliver, Service, and Support)
BAI (Build, Acquire, Implement)
66
Which term refers to a record that supports tracing transactions through the accounting system?
Likelihood
Audit trail
Segregation of duties
Internal environment
67
Which of the following best defines control activities?
Legal procedures related to taxation
Steps taken to eliminate an organization’s mission
Action help ensure objective are achieved & risk responses are carried out
High-level business goals
68
What is the goal of segregation of accounting duties?
Reduce the risk of errors and fraud by dividing responsibilities
Allow more flexible budgeting
Speed up financial reporting
Improve marketing efforts
69
What is the function of application controls?
Secure an organization’s physical assets
Detect and correct transaction-level errors
Limit the scope of system audits
Monitor staff productivity
70
Which of the following best defines general authorization?
A formal company-wide meeting
Approval required for every individual transaction
Pre-approved permission for routine, low-risk transactions
Authorization reserved for upper management only
71
What is the purpose of segregation of duties in internal control?
To prevent one person from having control over all aspects of a transaction
To reduce time taken for task completion
To increase job satisfaction
To minimize training costs
72
What does risk appetite represent?
The minimum risk a company avoids
The total amount of risk a company faces
The level of risk a company is willing to accept
The number of threats facing a business
73
Which of the following is a preventive control?
Bank reconciliation
Error correction
Antivirus software
Internal audit
74
Which of the following is NOT a component of the COSO-ERM framework?
Information and Communication
Control Activities
Competitive Analysis
Risk Assessment
75
What is a primary objective of an Accounting Information System (AIS)?
To audit tax returns
To design marketing strategies
To collect, store, and process accounting data
To increase production output
76
What is the function of an audit committee?
Develop marketing strategies
Approve all IT spending
Maintain daily transaction logs
Oversee the organization’s internal control and financial reporting
77
What is the role of a chief compliance officer (CCO)?
Oversee payroll processes
Manage IT infrastructure
Ensure the organization adheres to laws and regulations
Track employee performance
78
What does segregation of accounting duties help prevent?
Delay in reporting
Errors and fraud by separating authorization, custody, and recording
Customer dissatisfaction
Unauthorized system upgrades
79
What do corrective controls aim to do?
Detect accounting fraud
Prevent loss of sales
Correct and recover from identified problems
Approve hiring decisions
80
What is authorization in internal control systems?
Allowing access to employees only during audits
Deleting data entries
Monitoring server activity
Approval of transactions and decisions by responsible personnel
81
Which of the following is a strategic objective in ERM?
Complying with tax law
Minimizing marketing budget
Processing payroll efficiently
Supporting the company’s mission and goals
82
In COBIT5, which domain is focused on aligning IT-related goals with business goals?
MEA (Monitor, Evaluate, Assess)
DSS (Deliver, Service, Support)
BAI (Build, Acquire, Implement)
APO (Align, Plan, Organize)
83
What term describes the potential value of loss associated with a threat?
Risk
Likelihood
Impact
Exposure

Chapter 10 Ket terms Flashcards | StudBud