1/5
Looks like no tags are added yet.
policies
what should or should not be done. can be documented, stated in communicataions, or implied through actions and decisions.
procedures
actions that implement policies. the contrete steps, by people or the system, that make the policy happen
four ways to respond to a risk
avoid
prevent
detect&correct
insure:transfering the risk
the five componenents of internal control
control environement
risk assessment process: does management identify and manage risks?
monitoring: how doe smanagement know contorl skeep working?
information system & communication: how does information flow into the financial statement?
control acitivites: which specific controls prevent or deterct material misstatement.
coso framework
developed for companies to understand their internal controlsÍ

design and implementation