{"id":2594,"date":"2026-02-28T16:34:57","date_gmt":"2026-02-28T16:34:57","guid":{"rendered":"https:\/\/gmsisuccess.in\/?p=2594"},"modified":"2026-02-28T16:34:57","modified_gmt":"2026-02-28T16:34:57","slug":"internal-control-comprehensiveexaminable-notes","status":"publish","type":"post","link":"https:\/\/gmsisuccess.in\/?p=2594","title":{"rendered":"Internal Control.. Comprehensive,examinable notes"},"content":{"rendered":"<div class=\"Y3BBE\" data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAEQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_4|npT2md&quot;,&quot;jscontroller&quot;:&quot;zcfIf&quot;,&quot;jsuid&quot;:&quot;KSfMec_4&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><strong>An\u00a0<a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=define+internal+control+system&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">internal control system<\/a>\u00a0is\u00a0<mark class=\"HxTRcb\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;DfH0l&quot;,&quot;jsuid&quot;:&quot;KSfMec_6&quot;,&quot;style&quot;:&quot;&quot;}\">a set of policies, procedures, and processes implemented by management to ensure reliable financial reporting, operational efficiency, compliance with laws, and asset protection<\/mark>. It acts as a safeguard against fraud and errors, providing\u00a0<a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=define+reasonable+assurance+in+internal+controls&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">reasonable assurance<\/a>, rather than absolute certainty, of achieving organizational objectives.<\/strong><span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_8,KSfMec_9&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_7|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_7&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_7\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;76316031-614a-4765-b402-151c1e74fe4a&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIARAC&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_7\/C5gNJc;aria-label=KSfMec_7\/bOjMyf;class=KSfMec_7\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_7|S9kKve;mouseenter:&amp;KSfMec_7|sbHm2b;mouseleave:&amp;KSfMec_7|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_9&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/div>\n<div class=\"Fsg96\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_d|npT2md&quot;,&quot;jscontroller&quot;:&quot;KHhJQ&quot;,&quot;jsuid&quot;:&quot;KSfMec_d&quot;,&quot;style&quot;:&quot;&quot;}\"><a href=\"http:\/\/www.gmsisuccess.in\">http:\/\/www.gmsisuccess.in<\/a><\/div>\n<div class=\"otQkpb\" data-original-attrs=\"{&quot;aria-level&quot;:&quot;3&quot;,&quot;data-animation-nesting&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;a7qCn&quot;,&quot;jsuid&quot;:&quot;KSfMec_e&quot;,&quot;role&quot;:&quot;heading&quot;,&quot;style&quot;:&quot;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_f&quot;}\">Definition<\/span><button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;db2027e6-f634-43e9-a51e-fb8cb502e936&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIAhAA&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_g\/C5gNJc;aria-label=KSfMec_g\/bOjMyf;class=KSfMec_g\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_g|S9kKve;mouseenter:&amp;KSfMec_g|sbHm2b;mouseleave:&amp;KSfMec_g|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_i&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/div>\n<div class=\"Y3BBE\" data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAMQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_j|npT2md&quot;,&quot;jscontroller&quot;:&quot;zcfIf&quot;,&quot;jsuid&quot;:&quot;KSfMec_j&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\">According to the\u00a0<span data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;Sk3xkc&quot;,&quot;jsuid&quot;:&quot;KSfMec_k&quot;}\"><a class=\"H23r4e\" href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" rel=\"noopener\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/url?sa=i&amp;source=web&amp;rct=j&amp;url=https:\/\/www.taxmann.com\/post\/blog\/auditing-internal-control-meaning-objective-duties&amp;ved=2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQy_kOegQIAxAB&amp;opi=89978449&amp;cd&amp;psig=AOvVaw2ajgY_8voxwljNxvoZPcms&amp;ust=1769837796455000&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: rgba(0, 0, 0, 0.1);&quot;,&quot;target&quot;:&quot;_blank&quot;}\">AICPA Taxmann<\/a><\/span>, internal control comprises the plan of organization and all coordinate methods adopted within a business to safeguard assets, check the accuracy and reliability of accounting data, promote operational efficiency, and encourage adherence to prescribed managerial policies.<span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_m,KSfMec_n&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_l|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_l&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_l\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;0a684c9d-4c72-4193-b494-fe73ad3dcaab&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIAxAC&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_l\/C5gNJc;aria-label=KSfMec_l\/bOjMyf;class=KSfMec_l\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_l|S9kKve;mouseenter:&amp;KSfMec_l|sbHm2b;mouseleave:&amp;KSfMec_l|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_n&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/div>\n<div class=\"Fsg96\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_p|npT2md&quot;,&quot;jscontroller&quot;:&quot;KHhJQ&quot;,&quot;jsuid&quot;:&quot;KSfMec_p&quot;,&quot;style&quot;:&quot;&quot;}\"><div class=\"wpforms-container \" id=\"wpforms-10\"><form id=\"wpforms-form-10\" class=\"wpforms-validate wpforms-form wpforms-ajax-form\" data-formid=\"10\" method=\"post\" enctype=\"multipart\/form-data\" action=\"\/index.php?rest_route=%2Fwp%2Fv2%2Fposts%2F2594\" data-token=\"b13325b76cfed17bd8bd6375d5d3e49e\" data-token-time=\"1792195883\"><noscript class=\"wpforms-error-noscript\">Please enable JavaScript in your browser to complete this form.<\/noscript><div class=\"wpforms-field-container\"><div id=\"wpforms-10-field_1-container\" class=\"wpforms-field wpforms-field-text\" data-field-id=\"1\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-10-field_1\">Your Name <span class=\"wpforms-required-label\">*<\/span><\/label><input type=\"text\" id=\"wpforms-10-field_1\" class=\"wpforms-field-large wpforms-field-required\" name=\"wpforms[fields][1]\" placeholder=\"Your Name\" required><\/div><div id=\"wpforms-10-field_2-container\" class=\"wpforms-field wpforms-field-number\" data-field-id=\"2\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-10-field_2\">Phone Number<\/label><input type=\"number\" id=\"wpforms-10-field_2\" class=\"wpforms-field-large\" name=\"wpforms[fields][2]\" placeholder=\"Phone Number\" step=\"any\" ><\/div><div id=\"wpforms-10-field_3-container\" class=\"wpforms-field wpforms-field-email\" data-field-id=\"3\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-10-field_3\">Email <span class=\"wpforms-required-label\">*<\/span><\/label><input type=\"email\" id=\"wpforms-10-field_3\" class=\"wpforms-field-large wpforms-field-required\" name=\"wpforms[fields][3]\" placeholder=\"Email\" spellcheck=\"false\" required><\/div><div id=\"wpforms-10-field_4-container\" class=\"wpforms-field wpforms-field-textarea\" data-field-id=\"4\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-10-field_4\">Message<\/label><textarea id=\"wpforms-10-field_4\" class=\"wpforms-field-medium\" name=\"wpforms[fields][4]\" placeholder=\"Message\" ><\/textarea><\/div><\/div><!-- .wpforms-field-container --><div class=\"wpforms-submit-container\" ><input type=\"hidden\" name=\"wpforms[id]\" value=\"10\"><input type=\"hidden\" name=\"page_title\" value=\"\"><input type=\"hidden\" name=\"page_url\" value=\"https:\/\/gmsisuccess.in\/index.php?rest_route=\/wp\/v2\/posts\/2594\"><input type=\"hidden\" name=\"url_referer\" value=\"\"><button type=\"submit\" name=\"wpforms[submit]\" id=\"wpforms-submit-10\" class=\"wpforms-submit\" data-alt-text=\"Sending...\" data-submit-text=\"SEND NOW\" aria-live=\"assertive\" value=\"wpforms-submit\">SEND NOW<\/button><img decoding=\"async\" src=\"https:\/\/gmsisuccess.in\/wp-content\/plugins\/wpforms-lite\/assets\/images\/submit-spin.svg\" class=\"wpforms-submit-spinner\" style=\"display: none;\" width=\"26\" height=\"26\" alt=\"Loading\"><\/div><\/form><\/div>  <!-- .wpforms-container --><\/div>\n<div class=\"otQkpb\" data-original-attrs=\"{&quot;aria-level&quot;:&quot;3&quot;,&quot;data-animation-nesting&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;a7qCn&quot;,&quot;jsuid&quot;:&quot;KSfMec_q&quot;,&quot;role&quot;:&quot;heading&quot;,&quot;style&quot;:&quot;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_r&quot;}\">Types of Internal Controls<\/span><button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;1c02abfd-91d8-416a-a440-abd17d3d81fa&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIBBAA&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_s\/C5gNJc;aria-label=KSfMec_s\/bOjMyf;class=KSfMec_s\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_s|S9kKve;mouseenter:&amp;KSfMec_s|sbHm2b;mouseleave:&amp;KSfMec_s|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_u&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/div>\n<div class=\"Y3BBE\" data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAUQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_v|npT2md&quot;,&quot;jscontroller&quot;:&quot;zcfIf&quot;,&quot;jsuid&quot;:&quot;KSfMec_v&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\">Internal controls are categorized based on their function:<span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_x,KSfMec_y&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_w|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_w&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_w\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;843af58b-c1fa-491c-9e8a-cdc3368eac3b&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIBRAB&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_w\/C5gNJc;aria-label=KSfMec_w\/bOjMyf;class=KSfMec_w\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_w|S9kKve;mouseenter:&amp;KSfMec_w|sbHm2b;mouseleave:&amp;KSfMec_w|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_y&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/div>\n<ul class=\"KsbFXc U6u95\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;mPWODf&quot;,&quot;jsuid&quot;:&quot;KSfMec_10&quot;,&quot;style&quot;:&quot;&quot;}\">\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAYQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_11&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_12&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_13&quot;}\">Preventive Controls:<\/span>\u00a0Designed to stop errors or fraud before they occur (e.g.,\u00a0<a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=define+segregation+of+duties&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">segregation of duties<\/a>, authorization limits, password protections).<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAYQAQ&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_14&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_15&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_16&quot;}\">Detective Controls:<\/span>\u00a0Designed to identify errors or fraud after they have occurred (e.g., bank reconciliations, physical inventory checks, audits).<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAYQAg&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_17&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_18&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_19&quot;}\">Corrective Controls:<\/span>\u00a0Implemented to fix issues discovered by detective controls (e.g., correcting data entry errors, updating policies).<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAYQAw&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_1a&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_1b&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_1c&quot;}\">Administrative\/Management Controls:<\/span>\u00a0Focused on operational efficiency and compliance (e.g., training programs, performance evaluations).<\/span><span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_1e,KSfMec_1f&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_1d|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_1d&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_1d\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;93d03837-3ca3-4de9-87ba-ed3b39235691&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIBhAE&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_1d\/C5gNJc;aria-label=KSfMec_1d\/bOjMyf;class=KSfMec_1d\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_1d|S9kKve;mouseenter:&amp;KSfMec_1d|sbHm2b;mouseleave:&amp;KSfMec_1d|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_1f&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/li>\n<\/ul>\n<div class=\"Fsg96\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_1l|npT2md&quot;,&quot;jscontroller&quot;:&quot;KHhJQ&quot;,&quot;jsuid&quot;:&quot;KSfMec_1l&quot;,&quot;style&quot;:&quot;&quot;}\"><\/div>\n<div class=\"otQkpb\" data-original-attrs=\"{&quot;aria-level&quot;:&quot;3&quot;,&quot;data-animation-nesting&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;a7qCn&quot;,&quot;jsuid&quot;:&quot;KSfMec_1m&quot;,&quot;role&quot;:&quot;heading&quot;,&quot;style&quot;:&quot;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_1n&quot;}\">Components of Internal Control<\/span><button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;63eb4e58-0aa9-40e6-b0fb-4b984d4141ff&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIBxAA&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_1o\/C5gNJc;aria-label=KSfMec_1o\/bOjMyf;class=KSfMec_1o\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_1o|S9kKve;mouseenter:&amp;KSfMec_1o|sbHm2b;mouseleave:&amp;KSfMec_1o|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_1q&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/div>\n<div class=\"Y3BBE\" data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAgQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_1r|npT2md&quot;,&quot;jscontroller&quot;:&quot;zcfIf&quot;,&quot;jsuid&quot;:&quot;KSfMec_1r&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\">Often based on the\u00a0<a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=define+COSO+framework&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">COSO framework<\/a>, these include:<span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_1t,KSfMec_1u&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_1s|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_1s&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_1s\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;022365c1-9f1e-4297-8a70-0ddabd0d9d5e&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQICBAB&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_1s\/C5gNJc;aria-label=KSfMec_1s\/bOjMyf;class=KSfMec_1s\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_1s|S9kKve;mouseenter:&amp;KSfMec_1s|sbHm2b;mouseleave:&amp;KSfMec_1s|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_1u&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/div>\n<ol class=\"IaGLZe VimKh\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;xE4zce&quot;,&quot;jsuid&quot;:&quot;KSfMec_1x&quot;,&quot;style&quot;:&quot;&quot;}\">\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAkQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_1y&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_1z&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_20&quot;}\">Control Environment:<\/span>\u00a0The tone at the top.<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAkQAQ&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_21&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_22&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_23&quot;}\">Risk Assessment:<\/span>\u00a0Identifying risks to objectives.<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAkQAg&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_24&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_25&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_26&quot;}\">Control Activities:<\/span>\u00a0Policies\/procedures (segregation of duties).<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAkQAw&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_27&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_28&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_29&quot;}\">Information and Communication:<\/span>\u00a0Systems that facilitate controls.<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAkQBA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_2a&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_2b&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_2c&quot;}\">Monitoring:<\/span>\u00a0Ongoing evaluations of the system.<\/span><span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_2e,KSfMec_2f&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_2d|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_2d&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_2d\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;df6b52a3-f289-4e1d-bd8c-676813fdf1f0&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQICRAF&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_2d\/C5gNJc;aria-label=KSfMec_2d\/bOjMyf;class=KSfMec_2d\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_2d|S9kKve;mouseenter:&amp;KSfMec_2d|sbHm2b;mouseleave:&amp;KSfMec_2d|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_2f&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/li>\n<\/ol>\n<div class=\"Fsg96\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_2g|npT2md&quot;,&quot;jscontroller&quot;:&quot;KHhJQ&quot;,&quot;jsuid&quot;:&quot;KSfMec_2g&quot;,&quot;style&quot;:&quot;&quot;}\"><\/div>\n<div class=\"otQkpb\" data-original-attrs=\"{&quot;aria-level&quot;:&quot;3&quot;,&quot;data-animation-nesting&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;a7qCn&quot;,&quot;jsuid&quot;:&quot;KSfMec_2h&quot;,&quot;role&quot;:&quot;heading&quot;,&quot;style&quot;:&quot;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_2i&quot;}\">Limitations of Internal Controls<\/span><button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;a2154fb1-883b-462e-946a-f1807d9f0812&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIChAA&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_2j\/C5gNJc;aria-label=KSfMec_2j\/bOjMyf;class=KSfMec_2j\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_2j|S9kKve;mouseenter:&amp;KSfMec_2j|sbHm2b;mouseleave:&amp;KSfMec_2j|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_2l&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/div>\n<div class=\"Y3BBE\" data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAsQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_2m|npT2md&quot;,&quot;jscontroller&quot;:&quot;zcfIf&quot;,&quot;jsuid&quot;:&quot;KSfMec_2m&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\">While essential, internal controls have inherent limitations:<span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_2o,KSfMec_2p&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_2n|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_2n&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_2n\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;f23e069a-2eb0-409e-9d78-87218ee33da1&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQICxAB&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_2n\/C5gNJc;aria-label=KSfMec_2n\/bOjMyf;class=KSfMec_2n\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_2n|S9kKve;mouseenter:&amp;KSfMec_2n|sbHm2b;mouseleave:&amp;KSfMec_2n|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_2p&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/div>\n<ul class=\"KsbFXc U6u95\" data-original-attrs=\"{&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;mPWODf&quot;,&quot;jsuid&quot;:&quot;KSfMec_2r&quot;,&quot;style&quot;:&quot;&quot;}\">\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAwQAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_2s&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_2t&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_2u&quot;}\">Human Judgment &amp; Error:<\/span>\u00a0Mistakes in decision-making, fatigue, or misunderstanding of instructions.<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAwQAQ&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_2v&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_2w&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_2x&quot;}\"><a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=define+Management+Override+internal+control&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">Management Override<\/a>:<\/span>\u00a0High-level personnel may bypass controls for, or, to mask fraud.<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAwQAg&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_2y&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_2z&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_30&quot;}\">Collusion:<\/span>\u00a0Two or more employees work together to bypass segregation of duties.<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAwQAw&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_31&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_32&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_33&quot;}\">Cost vs. Benefit:<\/span>\u00a0The cost of implementing a control might outweigh its benefits.<\/span><\/span><\/li>\n<li data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CAwQBA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;vsuOFb&quot;,&quot;jsuid&quot;:&quot;KSfMec_34&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><span class=\"T286Pc\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jscontroller&quot;:&quot;fly6D&quot;,&quot;jsuid&quot;:&quot;KSfMec_35&quot;}\"><span class=\"Yjhzub\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;jscontroller&quot;:&quot;zYmgkd&quot;,&quot;jsuid&quot;:&quot;KSfMec_36&quot;}\">Obsolescence:<\/span>\u00a0Systems may not adapt quickly enough to new, changing business risks.<\/span><span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_38,KSfMec_39&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_37|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_37&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_37\/TKHnVd&quot;}\">\u00a0<button class=\"rBl3me\" tabindex=\"0\" data-original-attrs=\"{&quot;aria-label&quot;:&quot;View related links&quot;,&quot;data-amic&quot;:&quot;true&quot;,&quot;data-icl-uuid&quot;:&quot;84f62133-bf2d-4b2d-9537-fe1fcda5301b&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-ved&quot;:&quot;2ahUKEwiRpc7axbKSAxXsTGwGHWblNBsQye0OegQIDBAF&quot;,&quot;data-wiz-attrbind&quot;:&quot;disabled=KSfMec_37\/C5gNJc;aria-label=KSfMec_37\/bOjMyf;class=KSfMec_37\/UpSNec&quot;,&quot;jsaction&quot;:&quot;click:&amp;KSfMec_37|S9kKve;mouseenter:&amp;KSfMec_37|sbHm2b;mouseleave:&amp;KSfMec_37|Tx5Rb&quot;,&quot;jsuid&quot;:&quot;KSfMec_39&quot;,&quot;style&quot;:&quot;&quot;}\"><\/button><\/span><\/span><\/span><\/li>\n<\/ul>\n<div class=\"Y3BBE\" data-original-attrs=\"{&quot;data-hveid&quot;:&quot;CA0QAA&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-sfc-cp&quot;:&quot;&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_3d|npT2md&quot;,&quot;jscontroller&quot;:&quot;zcfIf&quot;,&quot;jsuid&quot;:&quot;KSfMec_3d&quot;,&quot;style&quot;:&quot;-webkit-tap-highlight-color: transparent;&quot;}\"><span style=\"font-size: x-large;\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\">Internal control systems are not designed to eliminate risk entirely, but to manage it to an acceptable level.<span class=\"uJ19be notranslate\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-uids&quot;:&quot;KSfMec_3f,KSfMec_3g&quot;,&quot;jsaction&quot;:&quot;rcuQ6b:&amp;KSfMec_3e|npT2md&quot;,&quot;jscontroller&quot;:&quot;udAs2b&quot;,&quot;jsuid&quot;:&quot;KSfMec_3e&quot;}\"><span class=\"vKEkVd\" data-keep-original-tag=\"false\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;,&quot;data-animation-atomic&quot;:&quot;&quot;,&quot;data-processed&quot;:&quot;true&quot;,&quot;data-wiz-attrbind&quot;:&quot;class=KSfMec_3e\/TKHnVd&quot;}\">\u00a0<\/span><\/span><\/span><\/div>\n<hr \/>\n<h1>INTERNAL CONTROL \u2013 ULTRA IMPORTANT REVISION NOTES<\/h1>\n<p><em>(US CMA Part 1 &amp; Part 2)<\/em><\/p>\n<hr \/>\n<h2>1\ufe0f\u20e3 Meaning &amp; Definition of Internal Control<\/h2>\n<p><strong>Internal Control<\/strong>\u00a0= a process designed and implemented by\u00a0<strong>Board, Management &amp; Employees<\/strong>\u00a0to provide\u00a0<strong>reasonable assurance<\/strong>\u00a0regarding:<\/p>\n<ol>\n<li><strong>Effectiveness &amp; efficiency of operations<\/strong><\/li>\n<li><strong>Reliability of financial reporting<\/strong><\/li>\n<li><strong>Compliance with laws &amp; regulations<\/strong><\/li>\n<\/ol>\n<p>\ud83d\udc49\u00a0<strong>KEY WORD<\/strong>:\u00a0<em>Process<\/em>, not event |\u00a0<em>Reasonable<\/em>, not absolute<\/p>\n<p>\ud83d\udccc\u00a0<strong>Exam Trap<\/strong>: Internal control does\u00a0<strong>NOT<\/strong>\u00a0guarantee prevention of fraud or errors.<\/p>\n<hr \/>\n<h2>2\ufe0f\u20e3 Objectives of Internal Control<\/h2>\n<ul>\n<li>Safeguard assets<\/li>\n<li>Ensure accurate &amp; reliable records<\/li>\n<li>Promote operational efficiency<\/li>\n<li>Ensure compliance<\/li>\n<li>Prevent &amp; detect fraud\/errors<\/li>\n<\/ul>\n<hr \/>\n<h2>3\ufe0f\u20e3 Types of Internal Control<\/h2>\n<h3>(A) Based on Nature<\/h3>\n<ul>\n<li><strong>Administrative controls<\/strong>\u00a0\u2013 policies, authorizations<\/li>\n<li><strong>Accounting controls<\/strong>\u00a0\u2013 safeguarding assets, accurate records<\/li>\n<\/ul>\n<h3>(B) Based on Timing<\/h3>\n<ul>\n<li><strong>Preventive controls<\/strong>\u00a0\u2192 stop errors (authorizations, segregation)<\/li>\n<li><strong>Detective controls<\/strong>\u00a0\u2192 find errors (reconciliation, audits)<\/li>\n<li><strong>Corrective controls<\/strong>\u00a0\u2192 fix errors (backup restoration, adjustments)<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Best Practice<\/strong>: Strong preventive controls \u2193 need for detective controls<\/p>\n<hr \/>\n<h2>4\ufe0f\u20e3 Requisites of Good Internal Control System<\/h2>\n<ul>\n<li>Proper\u00a0<strong>segregation of duties<\/strong><\/li>\n<li>Authorization &amp; approval procedures<\/li>\n<li>Adequate documentation<\/li>\n<li>Physical &amp; logical access controls<\/li>\n<li>Independent checks<\/li>\n<li>Competent personnel<\/li>\n<li>Rotation of duties &amp; mandatory leave<\/li>\n<\/ul>\n<hr \/>\n<h2>5\ufe0f\u20e3 Inherent Limitations of Internal Control (VERY EXAMINABLE)<\/h2>\n<p>Internal control\u00a0<strong>cannot eliminate risk<\/strong>\u00a0because of:<\/p>\n<ol>\n<li><strong>Human error<\/strong><\/li>\n<li><strong>Management override<\/strong><\/li>\n<li><strong>Collusion<\/strong><\/li>\n<li><strong>Cost &gt; benefit constraint<\/strong><\/li>\n<li><strong>Changing environment<\/strong><\/li>\n<li><strong>Poor judgment<\/strong><\/li>\n<\/ol>\n<p>\ud83d\udccc\u00a0<strong>MCQ Clue<\/strong>: Any option claiming\u00a0<em>absolute assurance<\/em>\u00a0= \u274c<\/p>\n<hr \/>\n<h2>6\ufe0f\u20e3 Effective Internal Control System \u2013 Characteristics<\/h2>\n<ul>\n<li>Integrated with operations<\/li>\n<li>Continuous monitoring<\/li>\n<li>Risk-based approach<\/li>\n<li>Clear accountability<\/li>\n<li>Supported by governance<\/li>\n<li>Technology enabled<\/li>\n<\/ul>\n<hr \/>\n<h2>7\ufe0f\u20e3 Internal Control Process Flow<\/h2>\n<p><strong>Objectives \u2192 Risk Identification \u2192 Control Design \u2192 Implementation \u2192 Monitoring \u2192 Improvement<\/strong><\/p>\n<hr \/>\n<h2>8\ufe0f\u20e3 Risk Owner (Frequently Tested Concept)<\/h2>\n<ul>\n<li>Person\u00a0<strong>accountable for managing a specific risk<\/strong><\/li>\n<li>Usually\u00a0<strong>process owner<\/strong>, not auditor<\/li>\n<li>Responsible for:\n<ul>\n<li>Identifying risk<\/li>\n<li>Implementing controls<\/li>\n<li>Reporting failures<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Trap<\/strong>: Internal auditor is\u00a0<strong>NOT<\/strong>\u00a0risk owner<\/p>\n<hr \/>\n<h2>9\ufe0f\u20e3 Governance &amp; Internal Control<\/h2>\n<h3>Governance ensures:<\/h3>\n<ul>\n<li>Ethical behavior<\/li>\n<li>Accountability<\/li>\n<li>Transparency<\/li>\n<li>Oversight<\/li>\n<\/ul>\n<h3>Key Governance Players:<\/h3>\n<ul>\n<li><a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=Board+of+Directors+responsibilities+internal+control&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">Board of Directors<\/a><\/li>\n<li>Audit Committee<\/li>\n<li>Senior Management<\/li>\n<li>Internal Audit<\/li>\n<\/ul>\n<hr \/>\n<h2>\ud83d\udd1f Role of Board of Directors<\/h2>\n<ul>\n<li>Ultimate responsibility for IC<\/li>\n<li>Set tone at the top<\/li>\n<li>Approve risk appetite<\/li>\n<li>Oversee financial reporting<\/li>\n<li>Ensure independence of auditors<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Board does NOT design controls<\/strong>\u00a0\u2013 management does<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e31\ufe0f\u20e3 Role of Audit Committee (HOT EXAM AREA)<\/h2>\n<ul>\n<li>Independent directors<\/li>\n<li>Oversees:\n<ul>\n<li>Financial reporting<\/li>\n<li>Internal control effectiveness<\/li>\n<li>Internal &amp; external auditors<\/li>\n<\/ul>\n<\/li>\n<li>Reviews whistleblower complaints<\/li>\n<li>Ensures auditor independence<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Audit Committee \u2260 Management<\/strong><\/p>\n<hr \/>\n<h2>1\ufe0f\u20e32\ufe0f\u20e3 COSO Framework (CORE FOR CMA)<\/h2>\n<h3>COSO = Internal Control \u2013 Integrated Framework<\/h3>\n<h3><strong>5 Components<\/strong><\/h3>\n<ol>\n<li><strong>Control Environment<\/strong><\/li>\n<li><strong>Risk Assessment<\/strong><\/li>\n<li><strong>Control Activities<\/strong><\/li>\n<li><strong>Information &amp; Communication<\/strong><\/li>\n<li><strong>Monitoring Activities<\/strong><\/li>\n<\/ol>\n<h3><strong>17 Principles<\/strong>\u00a0(conceptual, not memorization heavy)<\/h3>\n<p>\ud83d\udccc\u00a0<strong>Most tested component<\/strong>: Control Environment &amp; Risk Assessment<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e33\ufe0f\u20e3 Risk Assessment (Deep Focus Area)<\/h2>\n<ul>\n<li>Identify &amp; analyze risks<\/li>\n<li>Consider:\n<ul>\n<li>Inherent risk<\/li>\n<li><a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=define+Residual+risk+in+risk+management&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">Residual risk<\/a><\/li>\n<\/ul>\n<\/li>\n<li>Risk responses:\n<ul>\n<li>Avoid<\/li>\n<li>Reduce<\/li>\n<li>Transfer<\/li>\n<li>Accept<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Dynamic process<\/strong>, not one-time<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e34\ufe0f\u20e3 COBIT &amp; COSO \u2013 How They Support Each Other<\/h2>\n<table>\n<thead>\n<tr>\n<th>COSO<\/th>\n<th>COBIT<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Overall internal control<\/td>\n<td>IT governance &amp; control<\/td>\n<\/tr>\n<tr>\n<td>Enterprise-wide<\/td>\n<td>IT focused<\/td>\n<\/tr>\n<tr>\n<td>Strategic framework<\/td>\n<td>Detailed control objectives<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\ud83d\udccc\u00a0<strong>Exam Line<\/strong>:\u00a0<em><a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=COBIT+vs+COSO+IT+controls&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">COBIT complements COSO for IT controls<\/a><\/em><\/p>\n<hr \/>\n<h2>1\ufe0f\u20e35\ufe0f\u20e3 Preventive, Detective &amp; Corrective Controls<\/h2>\n<h3>Examples:<\/h3>\n<ul>\n<li><strong>Preventive<\/strong>: Segregation, authorization<\/li>\n<li><strong>Detective<\/strong>: Reconciliations, audits<\/li>\n<li><strong>Corrective<\/strong>: Data restoration, reprocessing<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Best IC system uses all three<\/strong><\/p>\n<hr \/>\n<h2>1\ufe0f\u20e36\ufe0f\u20e3 Compensating (Complementary) Controls<\/h2>\n<p>Used when\u00a0<strong>ideal control not feasible<\/strong>\u00a0Example:<\/p>\n<ul>\n<li>No segregation \u2192 strong supervisory review<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Common MCQ<\/strong>: Compensating \u2260 replacement<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e37\ufe0f\u20e3 Failure of Internal Control \u2013 Reasons<\/h2>\n<ul>\n<li>Poor design<\/li>\n<li>Weak implementation<\/li>\n<li>Lack of monitoring<\/li>\n<li>Override by management<\/li>\n<li>Inadequate training<\/li>\n<li>System changes<\/li>\n<\/ul>\n<hr \/>\n<h2>1\ufe0f\u20e38\ufe0f\u20e3 Components of Control System<\/h2>\n<h3>(A) Input Controls<\/h3>\n<ul>\n<li>Authorization<\/li>\n<li>Edit checks<\/li>\n<li>Validation checks<\/li>\n<li>Batch controls<\/li>\n<\/ul>\n<h3>(B) Processing Controls<\/h3>\n<ul>\n<li>Run-to-run totals<\/li>\n<li>Reasonableness checks<\/li>\n<li>Error logs<\/li>\n<\/ul>\n<h3>(C) Output Controls<\/h3>\n<ul>\n<li>Distribution controls<\/li>\n<li>Review of reports<\/li>\n<li>Reconciliation with source data<\/li>\n<\/ul>\n<hr \/>\n<h2>1\ufe0f\u20e39\ufe0f\u20e3 Application Controls vs General Controls<\/h2>\n<h3>Application Controls<\/h3>\n<ul>\n<li>Specific to individual systems<\/li>\n<li>Input, processing, output controls<\/li>\n<\/ul>\n<h3>General Controls<\/h3>\n<ul>\n<li>Affect overall IT environment<\/li>\n<li>Access controls<\/li>\n<li>Change management<\/li>\n<li>Backup &amp; recovery<\/li>\n<li>IT governance<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>General controls must be strong for application controls to be effective<\/strong><\/p>\n<hr \/>\n<h2>2\ufe0f\u20e30\ufe0f\u20e3 Accounting Information System (AIS) &amp; Internal Control<\/h2>\n<p>AIS helps:<\/p>\n<ul>\n<li>Capture transactions accurately<\/li>\n<li>Process data consistently<\/li>\n<li>Generate reliable reports<\/li>\n<li>Enforce controls automatically<\/li>\n<\/ul>\n<h3>AIS + IC Ensures:<\/h3>\n<ul>\n<li>Data integrity<\/li>\n<li>Audit trail<\/li>\n<li>Timely reporting<\/li>\n<li>Compliance<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Automation improves control but does NOT eliminate risk<\/strong><\/p>\n<hr \/>\n<h2>\ud83d\udd25 2-Minute EXAM ELIMINATION LOGIC<\/h2>\n<p>\u2714 Look for \u201creasonable assurance\u201d<br \/>\n\u274c Eliminate \u201cabsolute assurance\u201d<br \/>\n\u2714 Management designs controls<br \/>\n\u274c Auditors are not responsible for IC<br \/>\n\u2714 Preventive &gt; Detective<br \/>\n\u274c Collusion can defeat IC<\/p>\n<hr \/>\n<h2>\ud83c\udfaf HOW CMA EXAM TESTS THIS TOPIC<\/h2>\n<ul>\n<li>Conceptual MCQs (definitions &amp; roles)<\/li>\n<li>Case-based questions (control failure)<\/li>\n<li>COSO component identification<\/li>\n<li>IT &amp; AIS control linkage<\/li>\n<li>Governance vs Management responsibility<\/li>\n<\/ul>\n<hr \/>\n<p>www.gmsisuccess.in<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e3 Control Environment vs Control Activities \u2013 Core Difference<\/h2>\n<table>\n<thead>\n<tr>\n<th>Basis<\/th>\n<th><strong>Control Environment<\/strong><\/th>\n<th><strong>Control Activities<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Meaning<\/td>\n<td>Overall\u00a0<strong>tone, culture &amp; attitude<\/strong>\u00a0of the organization<\/td>\n<td><strong>Specific policies &amp; procedures<\/strong>\u00a0to ensure directives are carried out<\/td>\n<\/tr>\n<tr>\n<td>Nature<\/td>\n<td><strong>Intangible \/ qualitative<\/strong><\/td>\n<td><strong>Tangible \/ operational<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Focus<\/td>\n<td><em>\u201cHow seriously management takes control\u201d<\/em><\/td>\n<td><em>\u201cWhat controls are actually performed\u201d<\/em><\/td>\n<\/tr>\n<tr>\n<td>Level<\/td>\n<td>Organization-wide<\/td>\n<td>Process \/ transaction level<\/td>\n<\/tr>\n<tr>\n<td>Responsibility<\/td>\n<td>Board, Top management, Audit committee<\/td>\n<td>Managers, employees<\/td>\n<\/tr>\n<tr>\n<td>Timing<\/td>\n<td><strong>Foundational<\/strong>\u00a0\u2013 exists before other controls<\/td>\n<td><strong>Executed daily<\/strong><\/td>\n<\/tr>\n<tr>\n<td>COSO component<\/td>\n<td>1st component<\/td>\n<td>3rd component<\/td>\n<\/tr>\n<tr>\n<td>Impact<\/td>\n<td>Influences effectiveness of all controls<\/td>\n<td>Directly prevents\/detects errors &amp; fraud<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\ud83d\udccc\u00a0<strong>One-line exam logic<\/strong><\/p>\n<blockquote><p>Control Environment =\u00a0<em>Mindset<\/em><br \/>\nControl Activities =\u00a0<em>Mechanism<\/em><\/p><\/blockquote>\n<hr \/>\n<h2>2\ufe0f\u20e3 Control Environment \u2013 Explained with Example<\/h2>\n<h3>\ud83d\udd39 What it includes<\/h3>\n<ul>\n<li>Integrity &amp; ethical values<\/li>\n<li>Management philosophy<\/li>\n<li>Organizational structure<\/li>\n<li>Assignment of authority &amp; responsibility<\/li>\n<li>HR policies<\/li>\n<li>Role of Board &amp; Audit Committee<\/li>\n<\/ul>\n<h3>\ud83d\udd39 Practical Example<\/h3>\n<p><strong>Company A<\/strong><\/p>\n<ul>\n<li>Strong code of ethics<\/li>\n<li>Zero tolerance for fraud<\/li>\n<li>Independent audit committee<\/li>\n<li>Clear reporting lines<\/li>\n<\/ul>\n<p>\u27a1\ufe0f This creates a\u00a0<strong>strong control environment<\/strong>, even before any procedures are applied.<\/p>\n<p>\ud83d\udccc\u00a0<strong>Key exam trick<\/strong><br \/>\nIf the question talks about\u00a0<strong>culture, ethics, tone at the top, governance<\/strong>\u00a0\u2192 it is\u00a0<strong>Control Environment<\/strong>.<\/p>\n<hr \/>\n<h2>3\ufe0f\u20e3 Control Activities \u2013 Explained with Example<\/h2>\n<h3>\ud83d\udd39 What it includes<\/h3>\n<ul>\n<li>Authorization &amp; approval<\/li>\n<li>Segregation of duties<\/li>\n<li>Reconciliations<\/li>\n<li>Physical controls<\/li>\n<li>IT access controls<\/li>\n<li>Supervisory reviews<\/li>\n<\/ul>\n<h3>\ud83d\udd39 Practical Example<\/h3>\n<p><strong>Company B<\/strong><\/p>\n<ul>\n<li>Purchase orders approved by manager<\/li>\n<li>Cash handling and recording done by different employees<\/li>\n<li>Bank reconciliation prepared monthly<\/li>\n<\/ul>\n<p>\u27a1\ufe0f These are\u00a0<strong>control activities<\/strong>.<\/p>\n<p>\ud83d\udccc\u00a0<strong>Key exam trick<\/strong><br \/>\nIf the question talks about\u00a0<strong>procedures, approvals, checks, reconciliations<\/strong>\u00a0\u2192 it is\u00a0<strong>Control Activities<\/strong>.<\/p>\n<hr \/>\n<h2>4\ufe0f\u20e3 Side-by-Side Real-Life Case Example<\/h2>\n<h3>\ud83c\udfed Manufacturing Company Case<\/h3>\n<ul>\n<li>CEO promotes ethical behavior &amp; transparent reporting<br \/>\n\ud83d\udc49\u00a0<strong>Control Environment<\/strong><\/li>\n<li>Inventory is:\n<ul>\n<li>Counted monthly<\/li>\n<li>Access restricted<\/li>\n<li>Differences investigated<br \/>\n\ud83d\udc49\u00a0<strong>Control Activities<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\ud83d\udd25\u00a0<strong>Exam Insight<\/strong><br \/>\nA company can have\u00a0<strong>strong control activities but weak control environment<\/strong>\u00a0\u2192 controls may fail due to management override.<\/p>\n<hr \/>\n<h2>5\ufe0f\u20e3 Case-Based MCQs (US CMA \/ CA \/ ACCA Style)<\/h2>\n<h3><strong>MCQ 1 \u2013 Identification<\/strong><\/h3>\n<p>A company has well-designed approval procedures, but senior management frequently overrides them to meet profit targets. Which component is weak?<\/p>\n<p>A. Risk assessment<br \/>\nB. Control activities<br \/>\nC. Control environment<br \/>\nD. Information &amp; communication<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<p><strong>Explanation:<\/strong><br \/>\nOverride by top management indicates weak\u00a0<strong>tone at the top<\/strong>, i.e., control environment.<\/p>\n<p>\u274c\u00a0<em>Wrong option trap:<\/em><br \/>\nB looks tempting because procedures exist, but procedures are\u00a0<strong>not the problem<\/strong>.<\/p>\n<hr \/>\n<h3><strong>MCQ 2 \u2013 Best Option<\/strong><\/h3>\n<p>Which of the following BEST represents a control activity?<\/p>\n<p>A. Management commitment to integrity<br \/>\nB. Board oversight<br \/>\nC. Segregation of cash handling and recording<br \/>\nD. Ethical code of conduct<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<p><strong>Elimination logic:<\/strong><\/p>\n<ul>\n<li>A, B, D \u2192 Control Environment<\/li>\n<li>Only C is an operational control<\/li>\n<\/ul>\n<hr \/>\n<h3><strong>MCQ 3 \u2013 Case Based<\/strong><\/h3>\n<p>An organization has:<\/p>\n<ul>\n<li>Strong ethical culture<\/li>\n<li>Clear authority structure<\/li>\n<li>No bank reconciliations<\/li>\n<li>Same employee handles cash &amp; recording<\/li>\n<\/ul>\n<p>Which statement is MOST appropriate?<\/p>\n<p>A. Control environment and control activities are strong<br \/>\nB. Control environment strong; control activities weak<br \/>\nC. Control environment weak; control activities strong<br \/>\nD. Both are weak<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Exam gold point:<\/strong><br \/>\nStrong culture\u00a0<strong>cannot substitute<\/strong>\u00a0for missing control activities.<\/p>\n<hr \/>\n<h3><strong>MCQ 4 \u2013 Look Correct but Wrong<\/strong><\/h3>\n<p>Which of the following is NOT a control activity?<\/p>\n<p>A. Management review of performance reports<br \/>\nB. Authorization of transactions<br \/>\nC. Commitment to competence<br \/>\nD. Physical safeguards over assets<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<p>\u26a0\ufe0f\u00a0<strong>Trap:<\/strong><br \/>\n\u201cCommitment\u201d sounds like action but belongs to\u00a0<strong>Control Environment (HR policy)<\/strong>.<\/p>\n<hr \/>\n<h2>6\ufe0f\u20e3 Ultra-Short Exam Ready Summary (Write &amp; Score)<\/h2>\n<blockquote><p><strong>Control Environment<\/strong>\u00a0sets the tone of the organization by influencing control consciousness, while\u00a0<strong>Control Activities<\/strong>\u00a0are specific actions and procedures designed to ensure management directives are carried out.<\/p><\/blockquote>\n<hr \/>\n<p>www.gmsisuccess.in<\/p>\n<hr \/>\n<h2>\ud83d\udd25 MCQ SET: Control Environment vs Control Activities (25 Questions)<\/h2>\n<hr \/>\n<h3><strong>MCQ 1<\/strong><\/h3>\n<p>Which of the following BEST describes the control environment?<\/p>\n<p>A. Specific procedures designed to prevent errors<br \/>\nB. Policies ensuring proper authorization<br \/>\nC. Overall attitude, awareness, and actions of management<br \/>\nD. Periodic reconciliation of accounts<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 2<\/strong><\/h3>\n<p>A company has strong segregation of duties, but senior management pressures employees to bypass controls to meet targets. Which component is MOST weak?<\/p>\n<p>A. Control activities<br \/>\nB. Risk assessment<br \/>\nC. Control environment<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 3<\/strong><\/h3>\n<p>Which of the following is an example of a\u00a0<strong>control activity<\/strong>?<\/p>\n<p>A. Code of ethical conduct<br \/>\nB. Independent audit committee<br \/>\nC. Management philosophy<br \/>\nD. Monthly bank reconciliation<\/p>\n<p>\u2705\u00a0<strong>Answer: D<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 4<\/strong><\/h3>\n<p>\u201cTone at the top\u201d primarily affects which COSO component?<\/p>\n<p>A. Risk assessment<br \/>\nB. Control activities<br \/>\nC. Information &amp; communication<br \/>\nD. Control environment<\/p>\n<p>\u2705\u00a0<strong>Answer: D<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 5<\/strong><\/h3>\n<p>A company emphasizes ethical behavior but has no formal approval process for purchases. Which statement is CORRECT?<\/p>\n<p>A. Strong control environment, weak control activities<br \/>\nB. Weak control environment, strong control activities<br \/>\nC. Both strong<br \/>\nD. Both weak<\/p>\n<p>\u2705\u00a0<strong>Answer: A<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 6<\/strong><\/h3>\n<p>Which of the following is LEAST likely to be a control activity?<\/p>\n<p>A. Authorization of credit sales<br \/>\nB. Physical safeguards over inventory<br \/>\nC. Segregation of duties<br \/>\nD. Management commitment to competence<\/p>\n<p>\u2705\u00a0<strong>Answer: D<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 7<\/strong><\/h3>\n<p>An organization has detailed procedures, but employees ignore them because management does not enforce discipline. This BEST illustrates:<\/p>\n<p>A. Inherent limitations<br \/>\nB. Weak control activities<br \/>\nC. Weak control environment<br \/>\nD. Poor risk assessment<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 8<\/strong><\/h3>\n<p>Which statement BEST differentiates control activities from the control environment?<\/p>\n<p>A. Control activities are preventive; environment is detective<br \/>\nB. Control activities are operational; environment is cultural<br \/>\nC. Control activities are strategic; environment is tactical<br \/>\nD. Control activities are informal; environment is formal<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 9<\/strong><\/h3>\n<p>Which of the following belongs to the\u00a0<strong>control environment<\/strong>?<\/p>\n<p>A. IT access controls<br \/>\nB. Approval limits<br \/>\nC. Human resource policies<br \/>\nD. Inventory counts<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 10<\/strong><\/h3>\n<p>A company requires dual signatures on cheques. This is an example of:<\/p>\n<p>A. Risk assessment<br \/>\nB. Control environment<br \/>\nC. Control activity<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 11 (Case Based)<\/strong><\/h3>\n<p>Despite having ethical guidelines and a strong board, the same employee records cash receipts and deposits cash. What does this indicate?<\/p>\n<p>A. Strong control environment but weak control activities<br \/>\nB. Weak control environment but strong control activities<br \/>\nC. Both strong<br \/>\nD. Inherent limitation only<\/p>\n<p>\u2705\u00a0<strong>Answer: A<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 12<\/strong><\/h3>\n<p>Which COSO component provides the\u00a0<strong>foundation<\/strong>\u00a0for all other components?<\/p>\n<p>A. Monitoring<br \/>\nB. Control activities<br \/>\nC. Control environment<br \/>\nD. Risk assessment<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 13<\/strong><\/h3>\n<p>Which of the following is a\u00a0<strong>preventive control activity<\/strong>?<\/p>\n<p>A. Internal audit review<br \/>\nB. Bank reconciliation<br \/>\nC. Segregation of duties<br \/>\nD. Exception report<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 14<\/strong><\/h3>\n<p>Management override of controls primarily undermines:<\/p>\n<p>A. Control activities<br \/>\nB. Control environment<br \/>\nC. Monitoring<br \/>\nD. Information systems<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 15<\/strong><\/h3>\n<p>Which of the following would MOST likely strengthen the control environment?<\/p>\n<p>A. Increasing number of reconciliations<br \/>\nB. Installing CCTV cameras<br \/>\nC. Establishing an independent audit committee<br \/>\nD. Introducing approval stamps<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 16 (Look Correct but Wrong)<\/strong><\/h3>\n<p>Which of the following appears to be a control activity but is actually part of the control environment?<\/p>\n<p>A. Supervision of employees<br \/>\nB. Commitment to integrity and ethical values<br \/>\nC. Review of exception reports<br \/>\nD. Authorization of transactions<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 17<\/strong><\/h3>\n<p>Control activities are designed primarily to:<\/p>\n<p>A. Set ethical standards<br \/>\nB. Identify organizational risks<br \/>\nC. Ensure management directives are carried out<br \/>\nD. Establish governance structure<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 18<\/strong><\/h3>\n<p>Which of the following is NOT a characteristic of control activities?<\/p>\n<p>A. Transaction-level focus<br \/>\nB. Cultural influence<br \/>\nC. Preventive or detective nature<br \/>\nD. Policy and procedure based<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 19<\/strong><\/h3>\n<p>A weak control environment may result in:<\/p>\n<p>A. Elimination of inherent limitations<br \/>\nB. Stronger risk assessment<br \/>\nC. Failure of otherwise well-designed control activities<br \/>\nD. Automatic fraud detection<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 20<\/strong><\/h3>\n<p>Which of the following pairs is CORRECT?<\/p>\n<p>A. Control environment \u2013 Authorization procedures<br \/>\nB. Control activities \u2013 Ethical culture<br \/>\nC. Control environment \u2013 Governance oversight<br \/>\nD. Control activities \u2013 Management philosophy<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 21 (Case Based)<\/strong><\/h3>\n<p>The board is independent, ethical training is mandatory, but purchase orders are not reviewed. Identify the weakness.<\/p>\n<p>A. Control environment<br \/>\nB. Control activities<br \/>\nC. Risk assessment<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 22<\/strong><\/h3>\n<p>Which statement is TRUE?<\/p>\n<p>A. Strong control activities guarantee fraud prevention<br \/>\nB. Control environment eliminates management override<br \/>\nC. Control activities operate at transaction level<br \/>\nD. Control environment is a subset of control activities<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 23<\/strong><\/h3>\n<p>Which is an example of\u00a0<strong>detective control activity<\/strong>?<\/p>\n<p>A. Pre-approval of expenses<br \/>\nB. Bank reconciliation<br \/>\nC. Segregation of duties<br \/>\nD. Physical access restriction<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 24<\/strong><\/h3>\n<p>Which COSO component addresses\u00a0<strong>integrity, ethics, and competence<\/strong>?<\/p>\n<p>A. Control activities<br \/>\nB. Risk assessment<br \/>\nC. Monitoring<br \/>\nD. Control environment<\/p>\n<p>\u2705\u00a0<strong>Answer: D<\/strong><\/p>\n<hr \/>\n<h3><strong>MCQ 25 (Exam Trap)<\/strong><\/h3>\n<p>A company has strong internal controls on paper, but fraud still occurs due to collusion. This BEST reflects:<\/p>\n<p>A. Weak control activities<br \/>\nB. Weak control environment<br \/>\nC. Inherent limitations of internal control<br \/>\nD. Poor information system<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2>\ud83c\udfaf How Examiners Trap You (Quick Tips)<\/h2>\n<ul>\n<li><strong>Ethics \/ tone \/ culture<\/strong>\u00a0\u2192 Control Environment<\/li>\n<li><strong>Approval \/ segregation \/ reconciliation<\/strong>\u00a0\u2192 Control Activities<\/li>\n<li><strong>Override \/ collusion<\/strong>\u00a0\u2192 Inherent limitations<\/li>\n<li><strong>\u201cOn paper but not in practice\u201d<\/strong>\u00a0\u2192 Environment problem<\/li>\n<\/ul>\n<hr \/>\n<h1>\ud83d\udd25 50 ULTRA-TRICKY CASE-BASED MCQs<\/h1>\n<p><strong>INTERNAL CONTROL | COSO | GOVERNANCE | AIS | IT CONTROLS<\/strong><\/p>\n<hr \/>\n<h2><strong>Q1<\/strong><\/h2>\n<p>A company states that its internal control system ensures all fraud will be prevented.<\/p>\n<p>Which COSO principle is being misunderstood?<\/p>\n<p>A. Control Environment<br \/>\nB. Risk Assessment<br \/>\nC. Reasonable assurance<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<p><strong>Explanation:<\/strong><br \/>\nInternal control provides\u00a0<strong>reasonable<\/strong>, not absolute assurance. Fraud can still occur due to collusion or override.<\/p>\n<hr \/>\n<h2><strong>Q2<\/strong><\/h2>\n<p>A senior manager bypasses approval limits to authorize payments.<\/p>\n<p>This illustrates which inherent limitation?<\/p>\n<p>A. Human error<br \/>\nB. Cost-benefit constraint<br \/>\nC. Management override<br \/>\nD. Poor monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q3<\/strong><\/h2>\n<p>An internal auditor is assigned responsibility for mitigating cybersecurity risk.<\/p>\n<p>This violates which principle?<\/p>\n<p>A. Risk ownership<br \/>\nB. Independence<br \/>\nC. Segregation of duties<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: A<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Risk owner = Management, not Internal Audit<\/strong><\/p>\n<hr \/>\n<h2><strong>Q4<\/strong><\/h2>\n<p>Segregation of duties is not feasible due to staff shortage. Management increases supervisory review.<\/p>\n<p>This is an example of:<\/p>\n<p>A. Preventive control<br \/>\nB. Detective control<br \/>\nC.\u00a0<a href=\"https:\/\/draft.blogger.com\/blog\/post\/edit\/7086259273722151828\/4232736886052451396#\" data-original-attrs=\"{&quot;data-original-href&quot;:&quot;https:\/\/www.google.com\/search?ved=1t:260882&amp;q=define+Compensating+control&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&quot;,&quot;data-preview&quot;:&quot;&quot;,&quot;target&quot;:&quot;_blank&quot;}\">Compensating control<\/a><br \/>\nD. Corrective control<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q5<\/strong><\/h2>\n<p>Which control is MOST effective in preventing duplicate payments?<\/p>\n<p>A. Bank reconciliation<br \/>\nB. Independent audit<br \/>\nC. Authorization before payment<br \/>\nD. Post-payment review<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Preventive &gt; Detective<\/strong><\/p>\n<hr \/>\n<h2><strong>Q6<\/strong><\/h2>\n<p>A system logs all failed login attempts and alerts IT.<\/p>\n<p>This is a:<\/p>\n<p>A. Preventive control<br \/>\nB. Detective control<br \/>\nC. Corrective control<br \/>\nD. Governance control<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q7<\/strong><\/h2>\n<p>Which party has\u00a0<strong>ultimate responsibility<\/strong>\u00a0for internal control effectiveness?<\/p>\n<p>A. Internal auditor<br \/>\nB. Audit committee<br \/>\nC. Board of Directors<br \/>\nD. External auditor<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q8<\/strong><\/h2>\n<p>An audit committee is reviewing whistleblower complaints.<\/p>\n<p>This activity relates to:<\/p>\n<p>A. Risk assessment<br \/>\nB. Control activities<br \/>\nC. Governance oversight<br \/>\nD. Application control<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q9<\/strong><\/h2>\n<p>A company uses run-to-run totals to ensure data completeness.<\/p>\n<p>This is a:<\/p>\n<p>A. Input control<br \/>\nB. Processing control<br \/>\nC. Output control<br \/>\nD. General IT control<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q10<\/strong><\/h2>\n<p>Access to accounting software is restricted using passwords.<\/p>\n<p>This is:<\/p>\n<p>A. Application control<br \/>\nB. Output control<br \/>\nC. General control<br \/>\nD. Detective control<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q11<\/strong><\/h2>\n<p>Which COSO component sets ethical tone?<\/p>\n<p>A. Monitoring<br \/>\nB. Risk Assessment<br \/>\nC. Control Environment<br \/>\nD. Control Activities<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q12<\/strong><\/h2>\n<p>A company identifies foreign exchange risk due to overseas sales.<\/p>\n<p>Which COSO component?<\/p>\n<p>A. Information &amp; Communication<br \/>\nB. Risk Assessment<br \/>\nC. Monitoring<br \/>\nD. Control Activities<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q13<\/strong><\/h2>\n<p>An automated system rejects invalid customer codes.<\/p>\n<p>This is:<\/p>\n<p>A. Preventive application control<br \/>\nB. Detective general control<br \/>\nC. Corrective control<br \/>\nD. Output control<\/p>\n<p>\u2705\u00a0<strong>Answer: A<\/strong><\/p>\n<hr \/>\n<h2><strong>Q14<\/strong><\/h2>\n<p>If general IT controls are weak, application controls are:<\/p>\n<p>A. Strengthened<br \/>\nB. Unaffected<br \/>\nC. Less reliable<br \/>\nD. Automatically overridden<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Classic CMA favorite<\/strong><\/p>\n<hr \/>\n<h2><strong>Q15<\/strong><\/h2>\n<p>Which situation BEST indicates control failure?<\/p>\n<p>A. Error detected by reconciliation<br \/>\nB. Fraud detected by audit<br \/>\nC. Management override undetected<br \/>\nD. Corrective action taken<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q16<\/strong><\/h2>\n<p>AIS improves internal control primarily by:<\/p>\n<p>A. Eliminating human involvement<br \/>\nB. Increasing automation &amp; audit trails<br \/>\nC. Replacing management judgment<br \/>\nD. Ensuring absolute accuracy<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q17<\/strong><\/h2>\n<p>Which control ensures reports go only to authorized users?<\/p>\n<p>A. Input validation<br \/>\nB. Output distribution control<br \/>\nC. Processing check<br \/>\nD. Access authorization<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q18<\/strong><\/h2>\n<p>Which risk response accepts residual risk?<\/p>\n<p>A. Risk avoidance<br \/>\nB. Risk reduction<br \/>\nC. Risk transfer<br \/>\nD. Risk acceptance<\/p>\n<p>\u2705\u00a0<strong>Answer: D<\/strong><\/p>\n<hr \/>\n<h2><strong>Q19<\/strong><\/h2>\n<p>COBIT primarily focuses on:<\/p>\n<p>A. Financial reporting controls<br \/>\nB. Enterprise governance<br \/>\nC. IT governance &amp; controls<br \/>\nD. Ethical standards<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q20<\/strong><\/h2>\n<p>COSO and COBIT relationship is BEST described as:<\/p>\n<p>A. Competing frameworks<br \/>\nB. COBIT replaces COSO<br \/>\nC. COBIT complements COSO<br \/>\nD. COSO is IT-specific<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q21<\/strong><\/h2>\n<p>Which control BEST detects unauthorized changes in programs?<\/p>\n<p>A. Input validation<br \/>\nB. Version control<br \/>\nC. Change management<br \/>\nD. Access control<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q22<\/strong><\/h2>\n<p>Mandatory employee vacation helps prevent:<\/p>\n<p>A. Human error<br \/>\nB. Collusion<br \/>\nC. Long-term fraud concealment<br \/>\nD. System failure<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q23<\/strong><\/h2>\n<p>A reconciliation identifies an error after posting.<\/p>\n<p>This is:<\/p>\n<p>A. Preventive<br \/>\nB. Detective<br \/>\nC. Corrective<br \/>\nD. Compensating<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q24<\/strong><\/h2>\n<p>Correcting the error after detection is:<\/p>\n<p>A. Preventive<br \/>\nB. Detective<br \/>\nC. Corrective<br \/>\nD. Governance<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q25<\/strong><\/h2>\n<p>Which control ensures data entered is reasonable?<\/p>\n<p>A. Limit check<br \/>\nB. Batch total<br \/>\nC. Hash total<br \/>\nD. Run-to-run total<\/p>\n<p>\u2705\u00a0<strong>Answer: A<\/strong><\/p>\n<hr \/>\n<h2><strong>Q26<\/strong><\/h2>\n<p>Which control BEST prevents collusion?<\/p>\n<p>A. Segregation alone<br \/>\nB. Independent oversight<br \/>\nC. Automation<br \/>\nD. Authorization<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Collusion defeats basic controls<\/strong><\/p>\n<hr \/>\n<h2><strong>Q27<\/strong><\/h2>\n<p>Who designs internal controls?<\/p>\n<p>A. Internal auditor<br \/>\nB. Board<br \/>\nC. Management<br \/>\nD. Audit committee<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q28<\/strong><\/h2>\n<p>Monitoring activities include:<\/p>\n<p>A. Authorization<br \/>\nB. Reconciliations<br \/>\nC. Ongoing evaluations<br \/>\nD. Risk identification<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q29<\/strong><\/h2>\n<p>A weak control environment MOST likely results in:<\/p>\n<p>A. Efficient processing<br \/>\nB. Ethical compliance<br \/>\nC. Increased fraud risk<br \/>\nD. Strong monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q30<\/strong><\/h2>\n<p>Which is NOT an inherent limitation?<\/p>\n<p>A. Human judgment<br \/>\nB. Collusion<br \/>\nC. Cost-benefit<br \/>\nD. Auditor independence<\/p>\n<p>\u2705\u00a0<strong>Answer: D<\/strong><\/p>\n<hr \/>\n<h2><strong>Q31<\/strong><\/h2>\n<p>Audit committee independence improves:<\/p>\n<p>A. Control design<br \/>\nB. Operational efficiency<br \/>\nC. Financial reporting oversight<br \/>\nD. Risk ownership<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q32<\/strong><\/h2>\n<p>Which is an output control?<\/p>\n<p>A. Check digit<br \/>\nB. Authorization<br \/>\nC. Report reconciliation<br \/>\nD. Access restriction<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q33<\/strong><\/h2>\n<p>An edit check rejects alphabetic characters in numeric fields.<\/p>\n<p>This is:<\/p>\n<p>A. Output control<br \/>\nB. Processing control<br \/>\nC. Input control<br \/>\nD. General control<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q34<\/strong><\/h2>\n<p>A company backs up data daily.<\/p>\n<p>This is:<\/p>\n<p>A. Preventive<br \/>\nB. Detective<br \/>\nC. Corrective<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Backup helps recovery<\/strong><\/p>\n<hr \/>\n<h2><strong>Q35<\/strong><\/h2>\n<p>Which control addresses compliance with laws?<\/p>\n<p>A. Control Environment<br \/>\nB. Risk Assessment<br \/>\nC. Governance<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q36<\/strong><\/h2>\n<p>Which party evaluates internal control independently?<\/p>\n<p>A. Management<br \/>\nB. Internal audit<br \/>\nC. Board<br \/>\nD. Risk owner<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q37<\/strong><\/h2>\n<p>Residual risk exists when:<\/p>\n<p>A. No controls exist<br \/>\nB. Controls eliminate all risk<br \/>\nC. Controls reduce but do not eliminate risk<br \/>\nD. Risk is transferred<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q38<\/strong><\/h2>\n<p>An automated approval workflow reduces:<\/p>\n<p>A. Human judgment<br \/>\nB. Inherent risk<br \/>\nC. Control risk<br \/>\nD. Detection risk<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q39<\/strong><\/h2>\n<p>Which control ensures data completeness?<\/p>\n<p>A. Hash totals<br \/>\nB. Authorization<br \/>\nC. Password control<br \/>\nD. Review reports<\/p>\n<p>\u2705\u00a0<strong>Answer: A<\/strong><\/p>\n<hr \/>\n<h2><strong>Q40<\/strong><\/h2>\n<p>Which COSO component links information flow?<\/p>\n<p>A. Monitoring<br \/>\nB. Control Activities<br \/>\nC. Information &amp; Communication<br \/>\nD. Control Environment<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q41<\/strong><\/h2>\n<p>A failure to update controls after system change is a:<\/p>\n<p>A. Design failure<br \/>\nB. Implementation failure<br \/>\nC. Monitoring failure<br \/>\nD. Inherent limitation<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q42<\/strong><\/h2>\n<p>Which situation MOST threatens internal control?<\/p>\n<p>A. Human error<br \/>\nB. Collusion<br \/>\nC. Automated processing<br \/>\nD. Independent review<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q43<\/strong><\/h2>\n<p>Which control is MOST cost-effective?<\/p>\n<p>A. Detective<br \/>\nB. Preventive<br \/>\nC. Corrective<br \/>\nD. Monitoring<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q44<\/strong><\/h2>\n<p>AIS contributes MOST to:<\/p>\n<p>A. Ethical behavior<br \/>\nB. Audit opinion<br \/>\nC. Reliable reporting<br \/>\nD. Risk ownership<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q45<\/strong><\/h2>\n<p>Which is NOT a general IT control?<\/p>\n<p>A. Backup &amp; recovery<br \/>\nB. Change management<br \/>\nC. Edit checks<br \/>\nD. Access controls<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q46<\/strong><\/h2>\n<p>An error found during external audit indicates:<\/p>\n<p>A. Effective control<br \/>\nB. Control failure<br \/>\nC. Reasonable assurance<br \/>\nD. Governance success<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q47<\/strong><\/h2>\n<p>Which COSO component addresses fraud risk?<\/p>\n<p>A. Control Environment<br \/>\nB. Risk Assessment<br \/>\nC. Monitoring<br \/>\nD. Information<\/p>\n<p>\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>Q48<\/strong><\/h2>\n<p>Which party ensures \u201ctone at the top\u201d?<\/p>\n<p>A. Internal auditor<br \/>\nB. Audit committee<br \/>\nC. Management &amp; Board<br \/>\nD. External auditor<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q49<\/strong><\/h2>\n<p>Which control ensures only valid programs run?<\/p>\n<p>A. Input validation<br \/>\nB. Access control<br \/>\nC. Program change control<br \/>\nD. Output control<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2><strong>Q50<\/strong><\/h2>\n<p>Strong internal control system ensures:<\/p>\n<p>A. Absolute fraud prevention<br \/>\nB. Zero errors<br \/>\nC. Reasonable assurance<br \/>\nD. Auditor responsibility<\/p>\n<p>\u2705\u00a0<strong>Answer: C<\/strong><\/p>\n<hr \/>\n<h2>\ud83c\udfaf EXAM STRATEGY TIP<\/h2>\n<p>&nbsp;<\/p>\n<p>Excellent choice \ud83d\udc4d<br \/>\nThis is\u00a0<strong>exactly how toppers crack CMA MCQs<\/strong>. Below is a\u00a0<strong>powerful WRONG-OPTION ELIMINATION LOGIC<\/strong>\u00a0for\u00a0<strong>Internal Control, COSO, Governance &amp; AIS<\/strong>\u00a0\u2014 use this when you\u2019re stuck between options.<\/p>\n<hr \/>\n<h1>\ud83d\udd25 WRONG OPTION ELIMINATION LOGIC<\/h1>\n<p><strong>Internal Control | COSO | AIS | Governance (US CMA Part 1 &amp; 2)<\/strong><\/p>\n<hr \/>\n<h2>1\ufe0f\u20e3 ABSOLUTE WORDS = \u274c (FIRST ELIMINATION)<\/h2>\n<p>Immediately eliminate options containing:<\/p>\n<ul>\n<li><strong>Always<\/strong><\/li>\n<li><strong>Completely<\/strong><\/li>\n<li><strong>Guarantees<\/strong><\/li>\n<li><strong>Eliminates all risk<\/strong><\/li>\n<li><strong>Ensures zero fraud<\/strong><\/li>\n<li><strong>Provides absolute assurance<\/strong><\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Correct CMA language<\/strong>\u00a0=\u00a0<em>Reasonable assurance<\/em><\/p>\n<hr \/>\n<h2>2\ufe0f\u20e3 WRONG RESPONSIBILITY = \u274c<\/h2>\n<p>Eliminate options that assign responsibility incorrectly.<\/p>\n<table>\n<thead>\n<tr>\n<th>Topic<\/th>\n<th>Correct<\/th>\n<th>Eliminate<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Design of IC<\/td>\n<td>Management<\/td>\n<td>Internal \/ External Auditor<\/td>\n<\/tr>\n<tr>\n<td>Ultimate oversight<\/td>\n<td>Board<\/td>\n<td>Management only<\/td>\n<\/tr>\n<tr>\n<td>Risk ownership<\/td>\n<td>Process owner<\/td>\n<td>Internal audit<\/td>\n<\/tr>\n<tr>\n<td>Monitoring<\/td>\n<td>Internal audit<\/td>\n<td>Operations<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\ud83d\udccc If auditor = owner\/designer \u2192 \u274c<\/p>\n<hr \/>\n<h2>3\ufe0f\u20e3 PREVENTIVE vs DETECTIVE CONFUSION = \u274c<\/h2>\n<p>If question asks\u00a0<strong>BEST prevention<\/strong>, eliminate:<\/p>\n<ul>\n<li>Reconciliations<\/li>\n<li>Audits<\/li>\n<li>Reviews after the fact<\/li>\n<\/ul>\n<p>\u2714 Choose:<\/p>\n<ul>\n<li>Authorization<\/li>\n<li>Segregation<\/li>\n<li>Validation checks<\/li>\n<\/ul>\n<p>\ud83d\udccc\u00a0<strong>Preventive &gt; Detective &gt; Corrective<\/strong><\/p>\n<hr \/>\n<h2>4\ufe0f\u20e3 COSO COMPONENT MISFIT = \u274c<\/h2>\n<p>When matching examples to COSO components:<\/p>\n<h3>Control Environment<\/h3>\n<p>\u2714 Ethics, integrity, tone at top<br \/>\n\u274c Reconciliations, approvals<\/p>\n<h3>Risk Assessment<\/h3>\n<p>\u2714 Identify &amp; analyze risks<br \/>\n\u274c Monitor controls<\/p>\n<h3>Control Activities<\/h3>\n<p>\u2714 Authorizations, segregation<br \/>\n\u274c Culture, ethics<\/p>\n<h3>Information &amp; Communication<\/h3>\n<p>\u2714 Data flow, reporting<br \/>\n\u274c Control testing<\/p>\n<h3>Monitoring<\/h3>\n<p>\u2714 Ongoing evaluations<br \/>\n\u274c Initial risk identification<\/p>\n<hr \/>\n<h2>5\ufe0f\u20e3 GENERAL vs APPLICATION CONTROL TRAP<\/h2>\n<p>If\u00a0<strong>general IT controls are weak<\/strong>:<\/p>\n<p>\u274c \u201cApplication controls are effective anyway\u201d<br \/>\n\u274c \u201cNo impact on systems\u201d<\/p>\n<p>\u2714 Correct logic:<\/p>\n<blockquote><p>Application controls become\u00a0<strong>unreliable<\/strong><\/p><\/blockquote>\n<hr \/>\n<h2>6\ufe0f\u20e3 COLLUSION LOGIC (HIGH-YIELD)<\/h2>\n<p>When collusion is mentioned:<\/p>\n<p>\u274c Segregation alone prevents fraud<br \/>\n\u274c Automation eliminates fraud<\/p>\n<p>\u2714 Best answers involve:<\/p>\n<ul>\n<li>Independent oversight<\/li>\n<li>Strong governance<\/li>\n<li>Audit committee involvement<\/li>\n<\/ul>\n<hr \/>\n<h2>7\ufe0f\u20e3 COMPENSATING CONTROL TRAP<\/h2>\n<p>Eliminate options saying:<\/p>\n<p>\u274c \u201cCompensating control replaces segregation\u201d<\/p>\n<p>\u2714 Correct:<\/p>\n<blockquote><p>Compensating control\u00a0<strong>reduces risk<\/strong>, does NOT replace ideal control<\/p><\/blockquote>\n<hr \/>\n<h2>8\ufe0f\u20e3 AIS &amp; AUTOMATION TRAPS<\/h2>\n<p>Eliminate options that say:<\/p>\n<p>\u274c Automation removes need for control<br \/>\n\u274c Computers eliminate human error<br \/>\n\u274c IT guarantees accuracy<\/p>\n<p>\u2714 Correct:<\/p>\n<blockquote><p>Technology\u00a0<strong>enhances<\/strong>, not eliminates risk<\/p><\/blockquote>\n<hr \/>\n<h2>9\ufe0f\u20e3 CONTROL FAILURE LOGIC<\/h2>\n<p>If error\/fraud is\u00a0<strong>not detected timely<\/strong>:<\/p>\n<p>\u2714 Control failure exists<br \/>\n\u274c Reasonable assurance achieved<br \/>\n\u274c Effective monitoring<\/p>\n<p>\ud83d\udccc Detection after external audit = \ud83d\udea8<\/p>\n<hr \/>\n<h2>\ud83d\udd1f AUDIT COMMITTEE vs MANAGEMENT CONFUSION<\/h2>\n<p>Eliminate options where:<\/p>\n<p>\u274c Audit committee manages daily controls<br \/>\n\u274c Board designs controls<\/p>\n<p>\u2714 Correct:<\/p>\n<ul>\n<li>Management \u2192 design &amp; operate<\/li>\n<li>Audit Committee \u2192 oversight<\/li>\n<li>Board \u2192 ultimate responsibility<\/li>\n<\/ul>\n<hr \/>\n<h2>1\ufe0f\u20e31\ufe0f\u20e3 INPUT\u2013PROCESS\u2013OUTPUT CONFUSION<\/h2>\n<h3>Input Controls<\/h3>\n<p>\u2714 Validation, edit checks<br \/>\n\u274c Reconciliations<\/p>\n<h3>Processing Controls<\/h3>\n<p>\u2714 Run-to-run totals<br \/>\n\u274c Authorization<\/p>\n<h3>Output Controls<\/h3>\n<p>\u2714 Report review, distribution<br \/>\n\u274c Data entry checks<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e32\ufe0f\u20e3 RISK RESPONSE ELIMINATION<\/h2>\n<p>If risk still exists after controls:<\/p>\n<p>\u2714 Residual risk<br \/>\n\u274c Inherent risk eliminated<br \/>\n\u274c Risk avoided completely<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e33\ufe0f\u20e3 GOVERNANCE LANGUAGE FILTER<\/h2>\n<p>Eliminate options lacking:<\/p>\n<ul>\n<li>Oversight<\/li>\n<li>Accountability<\/li>\n<li>Transparency<\/li>\n<li>Ethics<\/li>\n<\/ul>\n<p>\u2714 Governance \u2260 operations<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e34\ufe0f\u20e3 INHERENT LIMITATION FILTER<\/h2>\n<p>Valid inherent limitations: \u2714 Collusion<br \/>\n\u2714 Management override<br \/>\n\u2714 Cost-benefit<\/p>\n<p>\u274c Auditor incompetence<br \/>\n\u274c Lack of framework<\/p>\n<hr \/>\n<h2>1\ufe0f\u20e35\ufe0f\u20e3 FINAL 10-SECOND RULE (EXAM DAY)<\/h2>\n<p>If confused, choose the option that: \u2714 Sounds\u00a0<strong>balanced<\/strong><br \/>\n\u2714 Mentions\u00a0<strong>reasonable assurance<\/strong><br \/>\n\u2714 Assigns responsibility correctly<br \/>\n\u2714 Prefers\u00a0<strong>preventive control<\/strong><br \/>\n\u2714 Aligns with\u00a0<strong>COSO logic<\/strong><\/p>\n<hr \/>\n<h2>\ud83e\udde0 HOW TOPPERS USE THIS<\/h2>\n<ol>\n<li>Strike 2 wrong options immediately<\/li>\n<li>Apply responsibility check<\/li>\n<li>Check preventive vs detective<\/li>\n<li>Read\u00a0 remaining 2 slowly<\/li>\n<\/ol>\n<div><\/div>\n<div>\n<hr \/>\n<h1>\u26a0\ufe0f LOOKS-CORRECT-BUT-WRONG MCQs<\/h1>\n<p><strong>US CMA Part 1 &amp; Part 2 \u2013 Internal Control<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 1<\/strong><\/h2>\n<p>Internal control is effective if it\u00a0<strong>ensures all material misstatements are prevented<\/strong>.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Looks correct because:<\/strong>\u00a0\u201cmaterial\u201d + \u201cprevented\u201d<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udd0d\u00a0<strong>Why wrong:<\/strong><br \/>\nIC provides\u00a0<strong>reasonable assurance<\/strong>, not guaranteed prevention.<\/p>\n<hr \/>\n<h2><strong>MCQ 2<\/strong><\/h2>\n<p>Strong segregation of duties\u00a0<strong>eliminates fraud risk<\/strong>.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0\u201cStrong\u201d sounds convincing<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udd0d\u00a0<strong>Why wrong:<\/strong><br \/>\nCollusion &amp; management override still exist.<\/p>\n<hr \/>\n<h2><strong>MCQ 3<\/strong><\/h2>\n<p>Because internal auditors evaluate controls, they are responsible for\u00a0<strong>ensuring controls are effective<\/strong>.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Evaluation \u2260 responsibility<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 4<\/strong><\/h2>\n<p>If a control detects an error quickly, the control is considered\u00a0<strong>effective<\/strong>.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Speed \u2260 prevention<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udd0d\u00a0<strong>Detective \u2260 effective prevention<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 5<\/strong><\/h2>\n<p>Automation of accounting processes\u00a0<strong>removes human error<\/strong>.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Technology bias<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 6<\/strong><\/h2>\n<p>The audit committee is responsible for\u00a0<strong>designing and implementing internal controls<\/strong>.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Governance authority<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 7<\/strong><\/h2>\n<p>If errors are discovered during the external audit, the internal control system is still effective because errors were detected.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Detection logic<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udd0d\u00a0<strong>Late detection = control failure<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 8<\/strong><\/h2>\n<p>Compensating controls can fully replace segregation of duties.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0\u201cCompensating\u201d word<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 9<\/strong><\/h2>\n<p>Residual risk exists only when controls are weak.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Logical sounding<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udd0d\u00a0<strong>Residual risk exists even with strong controls<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 10<\/strong><\/h2>\n<p>General IT controls are less important when application controls are strong.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Practical thinking<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Weak general controls undermine everything<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 11<\/strong><\/h2>\n<p>A strong control environment ensures ethical behavior by all employees.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0\u201cTone at the top\u201d exaggeration<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 12<\/strong><\/h2>\n<p>If management accepts a risk, it means no control is required.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Risk acceptance misunderstanding<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 13<\/strong><\/h2>\n<p>Monitoring activities focus primarily on identifying new risks.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0COSO component mix<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<p>\ud83d\udccc\u00a0<strong>Risk identification = Risk Assessment<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 14<\/strong><\/h2>\n<p>Input controls alone are sufficient to ensure accurate processing.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0Partial truth<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h2><strong>MCQ 15<\/strong><\/h2>\n<p>Because AIS generates audit trails, internal auditors do not need to test controls extensively.<\/p>\n<p>A. True<br \/>\nB. False<\/p>\n<p>\u274c\u00a0<strong>Trap:<\/strong>\u00a0AIS overconfidence<br \/>\n\u2705\u00a0<strong>Answer: B<\/strong><\/p>\n<hr \/>\n<h1>\ud83e\udde0 COMMON PATTERNS IN \u201cLOOK-RIGHT-BUT-WRONG\u201d OPTIONS<\/h1>\n<p>Watch out for:<\/p>\n<ul>\n<li>Absolute promises<\/li>\n<li>Authority confusion (auditor\/board)<\/li>\n<li>Technology overconfidence<\/li>\n<li>Late detection = \u201ceffective\u201d<\/li>\n<li>One control solving everything<\/li>\n<\/ul>\n<hr \/>\n<h2>\ud83d\ude80 HOW TO BEAT THESE IN EXAM<\/h2>\n<p>When an option feels\u00a0<strong>too comfortable<\/strong>, ask: 1\ufe0f\u20e3 Does it claim perfection? \u274c<br \/>\n2\ufe0f\u20e3 Does it shift responsibility? \u274c<br \/>\n3\ufe0f\u20e3 Does it ignore residual risk? \u274c<\/p>\n<hr \/>\n<p>www.gmsisuccess.in<\/p>\n<\/div>\n<p>&nbsp;<\/p>\n<div class=\"separator\" data-original-attrs=\"{&quot;style&quot;:&quot;&quot;}\"><img decoding=\"async\" class=\"BLOG_object_iframe_sanitized\" src=\"https:\/\/draft.blogger.com\/share-widget\/7086259273722151828?w=poi&amp;u=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DInternal%2520Control%252FGmsisuccess&amp;ved=1t%3A269313&amp;bbid=7086259273722151828&amp;bpid=4232736886052451396&amp;thumbnail=1&amp;tw=200&amp;th=198\" width=\"200px\" height=\"198px\" data-original-html=\"&lt;iframe class=&quot;b-iframe-ws lTgB3 BLOG_object_iframe&quot; frameborder=&quot;0&quot; height=&quot;198px&quot; jsaction=&quot;load:lzUY8e&quot; src=&quot;\/share-widget?w=poi&amp;amp;u=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DInternal%2520Control%252FGmsisuccess&amp;amp;ved=1t%3A269313&amp;amp;bbid=7086259273722151828&amp;amp;bpid=4232736886052451396&quot; width=&quot;200px&quot;&gt;&lt;\/iframe&gt;\" \/><\/div>\n","protected":false},"excerpt":{"rendered":"<p>An\u00a0internal control system\u00a0is\u00a0a set of policies, procedures, and processes implemented by management to ensure reliable financial reporting, operational efficiency, compliance with laws, and asset protection. It acts as a safeguard against fraud and errors, providing\u00a0reasonable assurance, rather than absolute certainty, of achieving organizational objectives.\u00a0 http:\/\/www.gmsisuccess.in Definition According to the\u00a0AICPA Taxmann, internal control comprises the plan [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2594","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=\/wp\/v2\/posts\/2594","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2594"}],"version-history":[{"count":1,"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=\/wp\/v2\/posts\/2594\/revisions"}],"predecessor-version":[{"id":2595,"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=\/wp\/v2\/posts\/2594\/revisions\/2595"}],"wp:attachment":[{"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2594"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2594"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gmsisuccess.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}