According to COSO, which of the following is included in the assess-and-report phase of an effective approach to monitoring internal controls?

According to COSO, which of the following is included in the assess-and-report phase of an effective approach to monitoring internal controls?

a. Prioritize findings.

b. Tone at the top.

c. Prioritize risks.

d. Identify controls.

Answer: A

According to COSO, which of the following provides oversight of an entity's enterprise risk management?

According to COSO, which of the following provides oversight of an entity's enterprise risk management?

a. Management.

b. The Board of Directors.

c. The risk officer.

d. Financial executives.

Answer: B

An internal auditor is considering a client's organizational structure as it affects the ethical climate established by company management. Each of the following considerations is valid in this regard, except:

An internal auditor is considering a client's organizational structure as it affects the ethical climate established by company management. Each of the following considerations is valid in this regard, except:

a. The appropriateness of an entity's organizational structure depends in part on the nature of its activities.

b. A company that is highly centralized will have a more diverse ethical culture than a company that is decentralized.

c. A highly structured organization with formal reporting lines may be appropriate regardless of entity size.

d. A decentralized environment may increase the risk that unethical decisions could be made by unit managers.

Answer: B

According to COSO's Enterprise Risk Management Framework, which of the following is an essential element of the internal environment?

According to COSO's Enterprise Risk Management Framework, which of the following is an essential element of the internal environment?

a. Control activities.

b. Risk assessment.

c. Event identification.

d. Ethical values.

Answer: D

The internal auditor who works in enterprise risk management (ERM) performs each of the following activities, except:

The internal auditor who works in enterprise risk management (ERM) performs each of the following activities, except:

a. Giving assurance that the risks of the organization are correctly evaluated.

b. Setting the risk appetite of the organization.

c. Evaluating the risk-management process.

d. Coordinating ERM activities.

Answer: B

According to COSO, each of the following is an example of an appropriate ongoing monitoring activity, except:

According to COSO, each of the following is an example of an appropriate ongoing monitoring activity, except:

a. Periodic analysis of variances between expectations and actual results.

b. Approval of high-dollar transactions by supervisors.

c. Follow-up of customer and vendor complaints regarding amounts due and owed.

d. Comparisons of information from various sources within the company.

Answer: B

According to COSO, the four categories of entity objectives in the enterprise risk management framework include each of the following, except:

According to COSO, the four categories of entity objectives in the enterprise risk management framework include each of the following, except:

a. Compliance with applicable laws and regulations.

b. Implementation of internal controls.

c. Effective and efficient use of the entity's resources.

d. Reliability of reporting.

Answer: B

The Enterprise Risk Management-Integrated Framework of the committee of sponsoring organizations (COSO) is best defined as a:

The Enterprise Risk Management-Integrated Framework of the committee of sponsoring organizations (COSO) is best defined as a:

a. Process that replaces the COSO internal control framework.

b. Process that takes a control-based approach to an organization.

c. Serial process in which one component affects only the next component.

d. Process effected by an entity's board of directors, management, and other personnel.

Answer: D

Company management completes event identification and analyzes the risks. The company wishes to assess its risk after management's response to the risk. According to COSO, which of the following types of risk does this situation represent?

Company management completes event identification and analyzes the risks. The company wishes to assess its risk after management's response to the risk. According to COSO, which of the following types of risk does this situation represent?

a. Inherent risk.

b. Detection risk.

c. Event risk.

d. Residual risk.

Answer: D

According to COSO, which of the following is a compliance objective?

According to COSO, which of the following is a compliance objective?

a. To maintain a safe level of carbon dioxide emissions during production.

b. To maintain accounting principles that conform to GAAP.

c. To maintain adequate staffing to keep overtime expense within budget.

d. To maintain material price variances within published guidelines.

Answer: A

Within the COSO Internal Control—Integrated Framework, which of the following components is designed to ensure that internal controls continue to operate effectively?

Within the COSO Internal Control—Integrated Framework, which of the following components is designed to ensure that internal controls continue to operate effectively?

a. Information and communication.

b. Control environment.

c. Risk assessment.

d. Monitoring.

Answer: D

A company that routinely performs background checks on its employees to ensure that there is no criminal history is applying the ideas from which principle of effective internal control over financial reporting?

A company that routinely performs background checks on its employees to ensure that there is no criminal history is applying the ideas from which principle of effective internal control over financial reporting?

a. Financial reporting competencies.

b. Human resources.

c. Integrity and ethical values.

d. Management's philosophy and operating style.

Answer: B

A company that maintains a strong internal audit function that reports directly to the Board of Directors is applying the ideas from which principle of effective internal control over financial reporting?

A company that maintains a strong internal audit function that reports directly to the Board of Directors is applying the ideas from which principle of effective internal control over financial reporting?

a. Board of Directors.

b. Human resources.

c. Organizational structure.

d. Authority and responsibility.

Answer: C

The Enterprise Risk Management Integrated Framework states that an organization must identify events, both positive and negative, as part of its risk management program. Which of the following is true with regard to events?

The Enterprise Risk Management Integrated Framework states that an organization must identify events, both positive and negative, as part of its risk management program. Which of the following is true with regard to events?

a. Enterprise risk management is entirely focused on risks and ignores opportunities.

b. Event identification occurs after the development of objectives.

c. Event identification occurs prior to development of objectives.

d. Events serve as the basis for establishing objectives and thus occur simultaneously with development of objectives.

Answer: B

Which of the following is not a goal of an Enterprise Risk Management Framework (ERM)?

Which of the following is not a goal of an Enterprise Risk Management Framework (ERM)?

a. Achieve financial and performance targets.

b. Assess risks continuously and identify the steps to take and resources to allocate to overcome or mitigate risk.

c. Provide reasonable assurance that company objectives and goals are achieved and problems and surprises are minimized.

d. Avoid adverse publicity and damage to the entity's reputation.

Answer: D

The principle that protects corporate directors from personal liability for acts performed in good faith on behalf of the corporation is known as:

The principle that protects corporate directors from personal liability for acts performed in good faith on behalf of the corporation is known as:

a. The business judgment rule.

b. The responsible person doctrine.

c. The clean hands doctrine.

d. The full disclosure rule.

Answer: A

Knox, president of Quick Corp., contracted with Tine Office Supplies, Inc. to supply Quick's stationery on customary terms and at a cost less than that charged by any other supplier. Knox later informed Quick's board of directors that Knox was a majority stockholder in Tine. Quick's contract with Tine is:

Knox, president of Quick Corp., contracted with Tine Office Supplies, Inc. to supply Quick's stationery on customary terms and at a cost less than that charged by any other supplier. Knox later informed Quick's board of directors that Knox was a majority stockholder in Tine. Quick's contract with Tine is:

a. Void because the disclosure was made after execution of the contract.

b. Valid because the contract is fair to Quick.

c. Valid because of Knox's full disclosure.

d. Void because of Knox's self-dealing.

Answer: B

Davis, a director of Active Corp., is entitled to:

Davis, a director of Active Corp., is entitled to:

a. Unilaterally grant a corporate loan to one of Active's shareholders.

b. Take sole advantage of a business opportunity that would benefit Active.

c. Serve on the board of a competing business.

d. Rely on information provided by a corporate officer.

Answer: D

Establishing objectives that will support the mission and vision of an organization generally involve supporting the mission with:

Establishing objectives that will support the mission and vision of an organization generally involve supporting the mission with:

a. Strategic objectives, supported by strategies and related objectives.

b. Strategy.

c. Strategy supported by strategic and related objectives.

d. Related objectives.

Answer: A

The Knight Corporation completed its annual retreat of board members and senior management and produced a document that links the organization's mission and vision with strategic and related objectives. The document includes an objective that the Knight Corporation will rank in the top quartile of quality for its industry. That objective would most likely be a:

The Knight Corporation completed its annual retreat of board members and senior management and produced a document that links the organization's mission and vision with strategic and related objectives. The document includes an objective that the Knight Corporation will rank in the top quartile of quality for its industry. That objective would most likely be a:

a. Related reporting objective.

b. Strategic objective.

c. Related compliance objective.

d. Related operations objective.

Answer: B