Question

1. Please answer two parts of this question.

a) What are the opinions offered by auditors on the CEO's certification of the companies internal controls (control environment, risk assessment, control activities, information & communication, and monitoring)? Do they ever cite problems with companies that have suffered major frauds or operational problems? You can get that information at the SEC's web site.

f) What about government audits? Do State auditors discuss the five components (control environment, risk assessment, control activities, information & communication, and monitoring)?

Answer 1

control Environment-

• Commitment to Competence
• Organizational Structure
• Assignment of Authority and Responsibility
• Human Resource Policies and Procedures

Risk Assessment-

• Company-wide Objectives
• Process-level Objectives
• Risk Identification and Analysis
• Managing Change

Control Activities-

• Policies and Procedures
• Security (Application and Network)
• Application Change Management
• Business Continuity/Backups
• Outsourcing

Information & Communication-

• Quality of Information
• Effectiveness of Communication

Monitering-

• Ongoing Monitoring
• Separate Evaluations