Accounting Information Systems
11th Edition
ISBN: 9781337552127
Author: Ulric J. Gelinas, Richard B. Dull, Patrick Wheeler, Mary Callahan Hill
Publisher: Cengage Learning
expand_more
expand_more
format_list_bulleted
Question
Chapter 8, Problem 1DQ
Summary Introduction
To determine: The Enterprise Risk Management (ERM) framework can be used to make decisions on which controls should be implemented. Whether do you agree and discuss the statement?
Introduction:
Enterprise risk management (ERM)
The techniques and procedures adopted by the companies to tackle risks and grab opportunities in accordance with their goals.
Expert Solution & Answer
Want to see the full answer?
Check out a sample textbook solution
Students have asked these similar questions
1. Looking at the COSO framework for Enterprise Risk Management, you will notice that this is present all throughout the various functions and levels in an organization. This is to ensure that policies and procedures are followed in making risk responses and implementing company's directives.
A. Control Activities
B. Risk Assessment
C. Monitoring Activities
D. Risk Culture
For an enterprise wide risk management program to be most effective, it should be led by which of the following?
A.
A management committee.
B.
The chief audit executive.
C.
A centralized coordinator.
D.
Audit committee members.
Section 404 requires management to make a statement identifying the control framework used to conduct their assessment of internal controls. Discuss the options in selecting a control framework.
Chapter 8 Solutions
Accounting Information Systems
Ch. 8 - What are the four major categories of pervasive...Ch. 8 - What are the differences among a pervasive control...Ch. 8 - Prob. 3RQCh. 8 - Describe some compensating controls that can be...Ch. 8 - What are policy controls plans? How do policies...Ch. 8 - Why should an organization conduct monitoring...Ch. 8 - Prob. 8RQCh. 8 - Prob. 10RQCh. 8 - What are the major elements of the strategic IT...Ch. 8 - Prob. 12RQ
Ch. 8 - Prob. 13RQCh. 8 - What are the four stages through which a program...Ch. 8 - What steps are commonly included in a business...Ch. 8 - Prob. 16RQCh. 8 - Prob. 17RQCh. 8 - Prob. 18RQCh. 8 - Prob. 19RQCh. 8 - Prob. 20RQCh. 8 - Prob. 21RQCh. 8 - Prob. 22RQCh. 8 - Prob. 23RQCh. 8 - Prob. 24RQCh. 8 - Prob. 25RQCh. 8 - Prob. 26RQCh. 8 - Prob. 27RQCh. 8 - Prob. 28RQCh. 8 - Prob. 29RQCh. 8 - Prob. 30RQCh. 8 - Prob. 31RQCh. 8 - Prob. 1DQCh. 8 - Prob. 2DQCh. 8 - No matter how sophisticated a system of internal...Ch. 8 - Prob. 4DQCh. 8 - Prob. 5DQCh. 8 - Prob. 6DQCh. 8 - Prob. 7DQCh. 8 - Contracting for a hot site is too cost-prohibitive...Ch. 8 - Prob. 9DQCh. 8 - Prob. 10DQCh. 8 - Prob. 11DQCh. 8 - The following is a list of six control plans from...Ch. 8 - Prob. 2SPCh. 8 - Prob. 3SPCh. 8 - Prob. 2PCh. 8 - The following is a list of 13 control plans from...Ch. 8 - Prob. 4PCh. 8 - Prob. 5PCh. 8 - Prob. 6PCh. 8 - Examine the last column in Table 8.2 (p. 280) for...
Knowledge Booster
Similar questions
- Refer to Exhibit 3.10 and Exhibit 3.11. Describe management’s process for evaluating internal control over financial reporting. For the control environment principles, identify evidence that management might obtain to assess the operating effectiveness of the control environment.arrow_forwardWhat are the components of internal control per COSO’s Internal Control—Integrated Framework? a. Organizational structure, management philosophy, planning, risk assessment, and control activities. b. Control environment, risk assessment, control activities, information and communication, and monitoring. c. Risk assessment, control structure, backup facilities, responsibility accounting, and natural laws. d. Legal environment of the firm, management philosophy, organizational structure, control activities, and control assessment.arrow_forwardRefer to Exhibit 3.3. For each risk assessment principle, provide an example of how an organization might apply that principle.arrow_forward
- Which of the following is not one of the components of COSO’s framework? A. Objective setting which includes setting the objectives and critical success factors B. Continuously monitoring the ERM process C. Risk Assessment to manage risk related to achieving corporate objectives D. Safeguarding assets to prevent or detect unauthorized acquisition, use or disposition E. Control Activities which include policies and procedures to assure that management’s control objectives are metarrow_forwardWhich of the following are true regarding internal auditors and the adequacy of an organization’s risk management process: I. Internal auditors must understand the risk assessment process and the tools used to make the assessment II. Internal auditors should determine the level of risks acceptable to the organization III. Internal auditors need to be satisfied that the key objectives of risk management processes are being met IV. Internal auditors should evaluate management’s risk processes the same way they analyze risk when planning an engagement Choices: a. I and III only b. I and II only c. None of the choices d. I, II, III and IV e. I, II and III onlyarrow_forward. According to COSO, which component of enterprise risk management (ERM) addresses an entity’s operating structures and core values? A. Review and revision. B. Governance and culture. C. Strategy and objective-setting. D. Information, communication, and reporting.arrow_forward
- Discuss the weaknesses in COSO’s internal control framework that led to the development of the COSO Enterprise Risk Management framework.arrow_forward1. How does internal control impart on the achievement of organization’s goals? 2. Why risk management process is essential in addressing risks that the organization is facing? 3. Differentiate qualitative and quantitative assessment of risks.arrow_forward4. Which of the following are true regarding internal auditors and the adequacy of an organization’s risk management process I. Internal auditors must understand the risk assessment process and the tools used to make the assessment II. Internal auditors should determine the level of risks acceptable to the organization III. Internal auditors need to be satisfied that the key objectives of risk management processes are being met IV. Internal auditors should evaluate management’s risk processes the same way they analyze risk when planning an engagement Group of answer choices I and III only I, II, III and IV None of the choices I, II and III only I and II onlyarrow_forward
- 1. What are objectives? What three categories of objectives are set forth in the COSO framework? 2. What does the control environment comprise? 3. What are control activities? What types of control activities are present in a well-designed system of internal controls? 4. When are monitoring activities most effective? Who performs monitoring activities? What distinguishes separate evaluations from ongoing monitoring activities? 5. How does internal auditors' perspective of internal control differ from management's perspective? 6. How does COSO define risk? How does ISO define risk? 7. What are the five COSO ERM components? 8. How does COSO define risk appetite? 9. What are some ERM assurance activities the internal audit function may perform? What are some ERM consulting activities the internal audit function may perform if appropriate safeguards are implemented? What ERM activities should the internal audit function not perform? 10. What are COSO's five categories of risk…arrow_forwarda)discuss the following risks: operational risk, model risk, liquidity risk, accounting risk, legal risk, tax risk, regulatory risk, settlement (Herstatt) risk, systemic risk b)compare and contrast view-driven risk management and needs-driven risk management. c)identify the key players in the risk management industry, and discuss how risk management requirements and practices differ amongst these key players. d)discuss some important organizational considerations for an effective risk management system. e)explain what is meant by enterprise risk management, and compare and contrast it with decentralized risk management.arrow_forwardRisk is defined by some as the possiblity of danger or the possible exposure to danger. Whereas, risk management is viewed as a systematic process of assessing the potential risk to a business which incorporates identifying, evaluating, monitoring/tracking and reporting risk to the board/senior management. Risk management processes are evolving with the focus on all of the following EXCEPT: Question 1Answer a. Development of regulator guidelines for imposing risk-based techniques to reduce systemic risks. b. Examining the different components of the risk management framework. c. Emergence of new organizational processes for better integrating these advances. d. Developing risk-based techniques to meet risk-based capital requirementsarrow_forward
arrow_back_ios
SEE MORE QUESTIONS
arrow_forward_ios
Recommended textbooks for you
Auditing: A Risk Based-Approach (MindTap Course L...AccountingISBN:9781337619455Author:Karla M Johnstone, Audrey A. Gramling, Larry E. RittenbergPublisher:Cengage Learning
Business/Professional Ethics Directors/Executives...AccountingISBN:9781337485913Author:BROOKSPublisher:Cengage
Auditing: A Risk Based-Approach to Conducting a Q...AccountingISBN:9781305080577Author:Karla M Johnstone, Audrey A. Gramling, Larry E. RittenbergPublisher:South-Western College Pub
Auditing: A Risk Based-Approach (MindTap Course L...
Accounting
ISBN:9781337619455
Author:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg
Publisher:Cengage Learning
Business/Professional Ethics Directors/Executives...
Accounting
ISBN:9781337485913
Author:BROOKS
Publisher:Cengage
Auditing: A Risk Based-Approach to Conducting a Q...
Accounting
ISBN:9781305080577
Author:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg
Publisher:South-Western College Pub