Chapter 9 Part 1 Flashcards
Provides a structure for understanding, analyzing, and assessing the internal controls of business organizations
-Tools are used for implementing framework
~ one of these tools is the CONTROL MATRIX
Control framework
Tool designed TO ASSIST IN ANALYZING THE EFFECTIVENESS OF CONTROLS in a particular business process by MATCHING CONTROL GOALS with their ASSOCIATED CONTROL PLAN
Control matrix
a) control goals
b) recommend control plans
c) cell entries
d) explanation of cell entries
Four elements of the control matrix
Steps in preparing the control matrix
Step 1. Specify control goals
Step 2. Identify recommended control plans
Describe measures of success for the operations process and are unique to an organization
(Step 1)
Effectiveness goals
Identify operations process control goals
Relate to ensuring resources used in the business process are being employed in the most productive manner
(Step 1)
Efficiency goals
Identify operations process control goals
Relate to protecting entity resources from loss, destruction, disclosure, copying, sale, or other misuse
(Step 1)
Security goods
Identify operations process control goals
_____ ______ of the information process relate to ensuring input validity (IV), input completeness (IC), and input accuracy (IA) with respect to all business process data entering the system
(Step 1)
Input goals
Identify information process control goals
reduce RESIDUAL RISK to an acceptance level
Step 2
Identifies the control strengths and weaknesses of a particular system
Facilitates evaluation from the perspective of
~control effectiveness
~control efficiency
~control redundancy
Completed matrix and annotated systems flowchart
Defines ACCEPTABLE FORMAT of each data field. Includes drop-down data lists, automatic cursor move to the next field, mandatory inputs, and auto population of certain fields
Preformatted screens
_______ ______ of the information process relate to ensuring the update completeness (UC) and update accuracy (UA) of the business process input data
(Step 1)
Update goals
Identify information process control goals