Question 1

Which of the following is not true of the concepts that are embodied in the COSO framework of internal controls?

Accepted Answer

The COSO framework of internal controls actually identifies five, not six, components of internal control: control environment, risk assessment, control activities, information and communication, and monitoring activities.

Question 2

Several significant deficiencies in internal controls may constitute a material weakness.

Accepted Answer

According to the standards of the Public Company Accounting Oversight Board (PCAOB), several significant deficiencies in internal controls may constitute a material weakness. Material weaknesses are defined as "a deficiency, or combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the company's annual or interim financial statements will not be prevented or detected on a timely basis."

Question 3

Which of the following is not part of the control environment of an organization?

Accepted Answer

All of the above options (management's philosophy and operating style, organizational structure, and organization's commitment to ethical values) are part of the control environment of an organization.

Question 4

Which of the following is considered to be a transaction control?

Accepted Answer

The answer of Which of the following is considered to...

Question 5

Internal control is a process designed to achieve objectives in which one of the following categories?

Accepted Answer

Internal control is designed to achieve objectives in all three categories: reliability of financial reporting, compliance with applicable laws, and operational effectiveness.

Question 6

A significant deficiency should be reported to the audit committee and to external users of an organization's financial statements.

Accepted Answer

A significant deficiency is reported to the audit committee and management, not to external users of an organization's financial statements.

Question 7

A material weakness in internal control is a deficiency,or a combination of deficiencies,in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of the company's annual or interim financial statements will not be prevented or detected on a timely basis.

Accepted Answer

This statement accurately describes a material weakness in internal control over financial reporting.

Question 8

The quality of an organization's internal control affects which of the following?

Accepted Answer

The quality of an organization's internal control affects all of the above factors. The reliability of financial data depends on the effectiveness of internal controls over financial reporting. The ability of management to make good decisions relies on the accuracy of financial data and other information provided by internal control systems. The ability to remain in business is affected by the ability of internal controls to mitigate risks and prevent fraud or misuse of resources.

Question 9

Which of the following is not included as a component of an organization's internal control structure in the COSO framework?

Accepted Answer

Control risk is not a component of an organization's internal control structure in the COSO framework. The five components of the framework are the control environment, risk assessment, control activities, information and communication, and monitoring.

Question 10

Internal control is a process effected by the organization's board of directors,management,and other personnel to provide reasonable assurance of achieving certain objectives.Which of the following does not fit into one of these categories of objectives?

Accepted Answer

The categories of objectives mentioned in the statement are reliability of financial reporting, compliance with laws and regulations, and effectiveness and efficiency of operations. Continuing existence is not one of these categories, as it is not directly related to the internal control process, but rather a general business objective.

Question 11

Managers must use professional judgment to determine whether identified control deficiencies rise to the level of a significant deficiency or material weakness.

Accepted Answer

Managers are responsible for evaluating the significance of control deficiencies and determining if they are significant deficiencies or material weaknesses. This requires professional judgment and an understanding of the entity's goals, risks, and controls.

Question 12

What is the primary benefit of effective internal control in an organization?

Accepted Answer

The primary benefit of effective internal control in an organization is achieving certain organizational goals. Internal control helps to ensure that management's objectives for the organization are met, including the safeguarding of assets, the prevention and detection of fraud and error, and the accuracy and completeness of financial reporting. While completing a successful audit, maximizing value for shareholders, and obtaining profitability and financial strength are all important objectives for an organization, they are not the primary benefit of effective internal control.

Question 13

An auditor needs to understand a company's internal controls in order to anticipate the types of material misstatements that may occur.

Accepted Answer

Understanding a company's internal controls helps the auditor to identify the areas where there is a higher risk of material misstatements, and design audit procedures accordingly to mitigate those risks.

Question 14

The quality of an organization's internal control does not affect either the audit approach or the amount of testing required for an engagement.

Accepted Answer

The quality of an organization's internal control directly affects the audit approach and the amount of testing required for an engagement. A low-quality internal control system requires more extensive testing and a different approach compared to a strong internal control system.

Question 15

Management should test all internal controls for effectiveness when performing their annual evaluation of the internal control structure.

Accepted Answer

Management should focus on testing key controls that are critical to the internal control structure's effectiveness, rather than testing all controls annually.

Question 16

A deficiency in design of internal controls exists when an existing control is not properly designed so that,even if the control operates as designed,the control objective would not be met.

Accepted Answer

A deficiency in design of internal controls refers to a situation where an existing control is not properly designed to achieve its objective. Even if the control operates as intended, it may not be effective in achieving the desired outcome. This type of deficiency can occur when controls are designed without considering all potential risks or when controls are not updated to reflect changes in the organization or operating environment.

Question 17

Walkthroughs and inquiries are often used to obtain an understanding of internal controls.

Accepted Answer

Walkthroughs and inquiries are commonly used by auditors and evaluators to obtain an understanding of the design and implementation of internal controls. These methods involve going through a process or system step-by-step and asking questions about the internal controls in place. This understanding helps auditors and evaluators determine the effectiveness of the controls and the extent of testing needed to be performed.

Question 18

When auditing the financial statements of a public company,the auditor is required to express an opinion on the company's internal controls whenever a material weakness in control is identified.

Accepted Answer

The answer of When auditing the financial statements of a...

Question 19

Which of the following is not true of internal control as defined by COSO?

Accepted Answer

Internal control as defined by COSO is broader than internal control over financial reporting, not narrower. The other choices are all true statements about internal control as defined by COSO.

Question 20

Which of the following is considered to be an entity-wide control?

Accepted Answer

Entity-wide controls are those controls that apply to the entire organization and impact multiple processes. The controls over management override is an example of entity-wide control as it affects the entire organization and its management. Segregation of duties, authorization procedures for purchasing, and adequately documented transaction trails are examples of process-level controls.

Quiz 3: Internal Control Over Financial Reporting: Responsibilities of Management and the External Auditor