Question 1

Which of the following best describes the primary objective of an Accounting Information System (AIS) in relation to internal controls?

Accepted Answer

To control the organization so it can achieve its objectives by safeguarding assets and ensuring reliable information.

Question 2

A company is considering implementing a data validation procedure to reduce payroll errors. The cost to reprocess payroll is $$10,000, and the likelihood of errors is 15%. If the validation reduces the likelihood to 1%, what is the expected annual savings from implementing the control? Use the formula $$	ext{Expected Loss} = 	ext{Impact} 	imes 	ext{Likelihood}$.

Accepted Answer

$$\1$$,400$

Question 3

Which of the following is NOT a function of internal controls?

Accepted Answer

Guaranteeing zero risk in all business processes.

Question 4

According to the COSO Internal Control – Integrated Framework, which of the following is NOT one of the five components?

Accepted Answer

Strategic Planning

Question 5

Which of the following best describes the difference between inherent risk and residual risk?

Accepted Answer

Inherent risk is the risk that exists before controls are implemented; residual risk is the risk remaining after controls are applied.

Question 6

A company estimates the potential loss from a threat as $$\200$$,000$$ and the likelihood of occurrence as 30$$\%$. What is the expected loss?

Accepted Answer

$$\60$$,000$

Question 7

Which of the following is a key difference between the COSO ERM framework and the COSO Internal Control framework?

Accepted Answer

COSO ERM takes a risk-based approach and explicitly connects strategy, objective-setting, and risk appetite, while COSO Internal Control is more control-based.

Question 8

Which of the following is an example of a detective control?

Accepted Answer

Reconciling bank statements to the general ledger.

Question 9

Under the Sarbanes-Oxley Act (SOX), which section requires management to assess and report on the effectiveness of internal controls over financial reporting?

Accepted Answer

Section 404

Question 10

Which of the following best illustrates the concept of segregation of duties?

Accepted Answer

Different employees are responsible for authorizing transactions, recording them, and handling the related assets.

Question 11

Which of the following is a primary benefit of SOX compliance for organizations?

Accepted Answer

A strengthened control environment and improved documentation.

Question 12

Which control framework is specifically designed to align IT strategy with business goals and ensure effective IT resource management?

Accepted Answer

COBIT

Question 13

A company is deciding whether to implement a new control. The cost of the control is $$\2$$,000$$ per year. The expected loss from a threat without the control is $$\$$5,000 ($$calculated as $$\25$$,000 	imes 0.2$). Should the company implement the control, and why?

Accepted Answer

Yes, because the cost of the control is less than the expected loss.

Question 14

Which of the following is NOT a principle of the control environment according to COSO?

Accepted Answer

Select and develop technology controls.

Question 15

Which of the following is an example of a risk response that involves sharing risk?

Accepted Answer

Purchasing insurance to cover potential losses.

Question 16

Which of the following best describes the purpose of a Service Organization Control (SOC) report?

Accepted Answer

To independently audit and report on a company’s information security systems and controls.

Question 17

Which of the following is a key principle of the 'Information, Communication, and Reporting' component in the COSO ERM framework?

Accepted Answer

Leverage information and technology.

Question 18

A company’s board of directors is responsible for which of the following in the context of internal controls?

Accepted Answer

Exercising oversight responsibility for internal control.

Question 19

Which of the following is an example of a control activity designed to safeguard assets?

Accepted Answer

Restricting access to the warehouse to authorized personnel only.

Question 20

Which of the following best describes the relationship between financial reporting and internal controls over financial reporting (ICFR)?

Accepted Answer

ICFR ensures the accuracy and reliability of financial reporting.

Internal Controls and Control Frameworks in Financial Accounting

Study Guide - Practice Questions

Study Guide - Flashcards