Flashcards
Chapter 13 Key Terms
Flashcards do conjunto (26)
- 1Application controlsSpecific to a subsystem or an application to ensure the transaction's validity, completeness, and accuracy.
- 2Code of EthicsFormal expectations of what is considered ethical within an organization promote ethical behavior.
- 3Committee of Sponsoring Organizations (COSO)Composed of several organizations (AAA, AICPA, FEI, IIA, and IMA), study the causal factors that lead to fraudulent financial reporting and develop recommendations for public companies, independent auditors, the SEC, and other regulators, and educational institutions to improve the quality of financial reporting through internal controls and corporate governance.
- 4control objectives for information and related technology (COBIT)An internationally accepted set of best IT security and control practices for IT management released by the IT Governance Institute (ITGI).
- 5Control RiskThe threat that errors or irregularities in the underlying transactions will not be prevented, detected, and corrected by the internal control system.
- 6Corporate GovernanceA set of processes and policies in managing an organization with sound ethics safeguards its stakeholders' interests.
- 7Corrective ControlsFix problems identified, such as using backup files to recover corrupted data.
- 8Cost/Benefit AnalysisImportant in determining whether to implement internal control.
- 9Detective ControlsFind problems when they arise.
- 10Enterprise Risk Management (ERM)A process, affected by the entity’s board of directors, management, and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity and manage risk to be within the risk appetite, to provide reasonable assurance regarding the achievement of objectives.
- 11General ControlsPertain to enterprisewide issues such as controls over accessing the network, developing and maintaining applications, and documenting changes of programs.
- 12Information Technology Infrastructure Library (ITIL)A set of concepts and practices for IT service management.
- 13Inherent RiskThe risk is related to the nature of the business activity itself.
- 14Input ControlsEnsure the authorization, entry, and verification of data entering the system.
- 15International Organization for Standardization (ISO) 27000 seriesThis series contains a range of individual standards and documents reserved explicitly by ISO for information security.
- 16IT application controlsActivities are specific to subsystems or applications' input, processing, and output.
- 17IT controlsInvolve processes that provide assurance for information and help mitigate risks associated with using technology.
- 18IT general controls (ITGC)Enterprise-level controls over IT.
- 19Output ControlsProvide output to authorized people and ensure the result is used correctly.
- 20Physical ControlsMainly manual but could involve the physical use of computing technology.
- 21Preventive ControlsDeter problems before they arise.
- 22Processing ControlsEnsure that data and transactions are processed accurately.
- 23Public Company Accounting Oversight Board (PCAOB)SOX established it to provide independent oversight of public accounting firms.
- 24Residual RiskThe product of inherent risk and control risk (i.e., Residual risk = Inherent risk × Control risk).
- 25Risk AssessmentIt identifies and analyzes risks systematically to determine the firm’s risk response and control activities.
- 26Sarbanes-Oxley Act of 2002 (SOX)Response to business scandals such as Enron, WorldCom, and Tyco International; requires public companies registered with the SEC and their auditors to assess and report on the design and effectiveness of internal control over financial reporting.
Informações
- Descrição
- These are the critical words for Chapter 13.
- Criado por
- JACKSON BOEVE
- Visualizações
- 36
- Tags
- Avaliação