ACCT 4300 - Exam 1 Review

(Module 1) What is an Accounting Information System?

• The digital backbone of organizational decision-making, operational efficiency, financial reporting, and internal control

• Consists of several interconnected components that work together to collect, process, store, and report financial data

(Module 1) What are the components of an AIS?

• Data

• Hardware

• Software

• Processes

• Procedures

• People

(Module 1) Data

• The raw, unprocessed facts collected by the system

• Is the primary input in an AIS

• Example: Customer ID, Item, Purchase Price, and Payment Information for a product

(Module 1) Hardware

• The physical devices required to run the AIS

• Enables the input, processing, storage, and output of accounting data

• Examples: Scanners and POS (Point of Sale) Terminals

(Module 1) Software

• The applications and programs that run on the hardware and direct system operations

• Automates transaction processing, ensures compliance with accounting standards, and facilitates real-time reporting

(Module 1) Processes and Procedures

• The structured workflows, rules, and control activities that govern how the system operates

• Provide standardization, accuracy, and control

• Examples: Requirement of input validation, approval workflows, and reconciliation procedures

(Module 1) People

• All individuals who interact with the AIS

• Most variable component and risk-prone

• Examples: Data entry clerks, IT support, senior executives, external auditors, etc.

(Module 1) Information

• Data that has been processed—sorted, aggregated, classified, and structured—so that it becomes useful for a specific purpose

• Structured, summarized output

• Example: A report states that 2,356 customers completed purchases totaling $364,143.36 on July 4, 2024 and the top-selling items were ground beef, burger buns, and charcoal

(Module 1) Knowledge

• Information that is interpreted and applied, ultimately informing decisions

• The understanding that allows managers, accountants, and executives to make informed decisions

• Example: Knowing that ground beef sales spike before major holidays may prompt a procurement decision to increase inventory before Labor Day

(Module 1) Value

• Benefits derived from the use of knowledge

• Is realized only after data is contextualized and interpreted

• Examples: Higher profits or returns

(Module 1) What are the three functions of an AIS?

• Collecting and Storing Data About Organizational Activities and Resources

• Transforming Data Into Information For Decision-Making

• Implementing Controls to Safeguard Organizational Assets and Ensure System Integrity

(Module 1) Collect and Store Data

Capturing transaction-level events, such as customer purchases, supplier invoices, payroll activity, or inventory movements, then maintaining this data in structured databases

(Module 1) Data Transformation

• The sorting, classification, aggregation, and analyzation of raw data to make it useful information

• Information Dissemination (distributing information to the right people in the right format, such as financial statements) is an extension of this

(Module 1) Providing Internal Control

• Implementing both manual and automated controls that prevent, detect, and correct errors or irregularities

• Examples: Segregation of Duties, approval workflows, audit trails, and system access restrictions

(Module 1) Information that is relevant…

Influences current decisions, which ensures reports are decision-useful

(Module 1) Information that is reliable…

Accurately and faithfully represents what occurred, building trust financial reports

(Module 1) Information that is complete…

Includes all necessary, which avoids misleading or partial responses

(Module 1) Information that is timely…

Is delivered when needed, enabling real-time or proactive responses

(Module 1) Information that is verifiable…

Can be confirmed by independent users, promoting accountability and transparency

(Module 1) Information that is understandable…

Is easy to interpret by intended users, making complex information actionable

(Module 1) Information that is comparable…

Enables side-by-side analysis across time or departments, supporting performance benchmarking and trend analysis

(Module 1) Revenue Cycle

• All activities involved in providing goods or services to customers and collecting payment

• Includes order entries, shipping, billing, and cash collections

(Module 1) Expenditure Cycle

• Purchasing goods and services and making payments to suppliers

• Begins with a purchase requisition and continues through purchase order approval, receipt of goods, invoice processing, and payment disbursement

(Module 1) Production/Conversion Cycle

• Captures the transformation of raw materials into finished goods or deliverables

• Includes product design, material planning, scheduling, work-in-process tracking, and inventory accounting

(Module 1) Human Resources and Payroll Cycle

• Handles all employee-related transactions

• Involves calculating wages, withholding taxes, and maintain compliance

(Module 1) General Ledger and Reporting Cycle

• Journal Entry Creation, Posting to Accounts, Adjusting Entries, and the Preparation of Financial Statements

(Module 1) General Ledger

The central repository for all accounting data and contains a record of all account balances used in preparing financial statements

(Module 1) Subsidiary Ledger

Organizes transactions by individual accounts and maintains detailed records that reconcile to a corresponding general ledger control account

(Module 1) General Journal

A chronological record of accounting transactions used to record transactions that require explanation, adjustment, correction, or do not fit neatly into routine processing

(Module 1) Specialized Journals

Journals designed to record large volumes of similar, routine transactions, grouping them by type

(Module 1) Trial Balance

A key internal document used to confirm that debits equal credits and that accounts appear reasonable

(Module 1) Primary Activities in the Value Chain

• Inbound Logistics

• Operations

• Outbound Logistics

• Marketing and Sales

• Service

(Module 1) Support Activities in the Value Chain

• Firm Infrastructure

• Human Resource Management

• Technology Development

• Procurement

(Module 1) Who are the users of accounting information?

• Managers

• Accountants and Controllers

• Employees

• Internal Auditors and Compliance Personnel

• Investors

• Creditors and Banks

• Regulatory Agencies

• Vendors and Customers

• External Auditors

(Module 1) How are managers connected to an AIS?

AIS provides timely, relevant internal reports and KPIs

(Module 1) How are accountants and controllers connected to an AIS?

AIS supports transaction processing, the general ledger, and financial reporting

(Module 1) How are employees connected to an AIS?

AIS captures time data and processes payroll accurately

(Module 1) How are internal auditors and compliance personnel connected to an AIS?

AIS maintains logs and control documentation needed for oversight

(Module 1) How are investors connected to an AIS?

AIS produces GAAP-compliant financial statements and disclosures

(Module 1) How are creditors and banks connected to an AIS?

AIS tracks liabilities and generates financial metrics

(Module 1) How are regulatory agencies connected to an AIS?

AIS generates tax filings, regulatory reports, and audit support

(Module 1) How are vendors and customers connected to an AIS?

AIS manages procurement, invoicing, accounts payable, and receivable

(Module 1) How are external auditors connected to an AIS?

AIS provides audit trails, reconciliations, and system documentation

(Module 2) What is a system?

A set of components that work together to achieve a common goal

(Module 2) What is a subsystem?

• A specialized part of an organization that performs distinct functions but is interdependent with other parts of the system in achieving overall organizational objectives

• Examples: sales, production, purchasing, financing, human resources, and information technology

(Module 2) System Conflicts

When the combined actions of subsystems reduce the effectiveness of the organization as a whole, even though each subsystem is acting rationally on its own.

(Module 2) Subsystem Conflicts

When individual departments or units (subsystems) pursue goals that optimize their own performance at the expense of the overall organization.

(Module 2) How can conflicts be mitigated or resolved?

• Use an integrated AIS, which provides a shared database

• Standardize processes and data, such as setting common definitions of terms

• Align incentives and performance metrics, such as KPIs and balanced scorecards

• Increase transparency and monitoring, such as reports, alerts, and audit trails

• Embed controls in the AIS, such as approval workflows, segregation of duties, and automated exception reporting

(Module 2) Agency Theory

Examines the relationship between principals and agents, focusing on how conflicts of interest and information asymmetry can lead agents to act in ways that do not fully serve the principal’s best interests.

(Module 2) What kind of Agency Costs impact organizations?

Monitoring, Bonding, and Residual Loss

(Module 2) Monitoring Costs

The costs incurred by principals to observe, direct, and evaluate agent behavior in order to reduce shirking, opportunism, and actions that conflict with organizational goals.

(Module 2) Bonding Costs

The costs incurred by agents to assure principals that they will act in good faith and align their behavior with organizational goals, often through contracts, guarantees, or accountability mechanisms.

(Module 2) Residual Loss

The remaining gap—the reduction in firm value that results when agents make decisions not fully aligned with the principal’s interests

(Module 2) As equity financing increases, what agency cost(s) increase?

Monitoring costs (audits, performance-based compensation, etc.)

(Module 2) As debt financing increase, what agency cost(s) increase?

Monitoring costs (financial reporting) and bonding costs (covenants)

(Module 2) What is the optimal capital structure?

A mix of debt and equity that minimizes total agency costs

(Module 2) What type of firms tend to use more debt and lower equity agency costs?

Mature firms with strong internal cash flows

(Module 2) What type of firms tend to rely more on equity and avoid high debt-related agency costs?

Growth firms or startups

(Module 2) How might incentives or KPIs produce unintended results?

• Too focused on short-term metrics

• Overemphasize quantity over quality

• Lack context or balance

• Isolate metrics, not considering cross-functional impact

• Risk employees gaming the system (ethical issues)

(Module 2) Leading Indicators - Definition and Uses in Performance Evaluation

• Measures that signal or predict future performance or outcomes

• Uses:

  • Identify problems early

  • Take corrective action before outcomes deteriorate

  • Evaluate whether teams are on track to meet goals

(Module 2) Examples of Leading Indicators

• Employee training hours

• Sales pipelines or orders received

• Customer complaints

• Machine downtime

(Module 2) Lagging Indicators - Definition and Uses in Performance Evaluation

• Measures that reflect outcomes that have already occurred

• Uses:

  • Measure whether goals were achieved

  • Assess accountability and effectiveness

  • Support formal reporting and compensation decisions

(Module 2) Examples of Lagging Indicators

• Net Income or Profit Margin

• Customer Churn Rate

• Budget Variance

• Defect Rates or Warranty Claims

(Module 2) Characteristics of a Transaction Processing System (TPS)

• Department-specific and fragmented (departments have their own systems and databases); poor coordination across departments

• Designed to process routine, high volume transactions (sales, A/P, payroll, inventory, etc.)

• Required duplicate data entry and manual reconciliations

• Limited real-time reporting, internal controls, and auditability

• Contained a lot of data silos

• Required high maintenance with little flexibility

(Module 2) Characteristics of an Enterprise Resource Planning (ERP) System

• Unified platform with centralized database, eliminating fragmented systems and the presence of duplicate entries

• Real-time, organization-wide data access, removing data silos and inconsistent information

• End-to-end process integration and automated workflows, increasing coordination across departments

• System-enforced controls, logs, and role-based access, increasing internal controls and auditability

• Streamlined infrastructure with modular design and centralized support, reducing IT maintenance and simplifying the upgrade process

(Module 3) What are the three primary areas on which internal controls are focused?

Operations, Reporting, and Compliance

(Module 3) Operations

Ensuring the effectiveness and efficiency of organizational processes

(Module 3) Reporting

Promoting the reliability, accuracy, and timeliness of financial and non-financial information

(Module 3) Compliance

Supporting adherence to laws, regulations, and internal policies

(Module 3) How does the AIS support the operations area of internal controls?

• Automating approval workflows to minimize delays

• Enforcing segregation of duties to reduce conflicts of interest

• Providing real-time reporting to aid in decision-making and process adjustments

(Module 3) How does the AIS support the reporting area of internal controls?

• Input validation (e.g., numeric checks, drop-downs for account codes)

• Edit checks and error correction mechanisms

• Audit trails documenting the source and timing of each transaction

(Module 3) How does the AIS support the compliance area of internal controls?

• Automated tax calculations and regulatory updates

• Role-based access restrictions to sensitive data

• Logging and monitoring of policy violations or override attempts

(Module 3) How does COSO define internal controls?

A process implemented by people to provide reasonable assurance that an organization will achieve its operations, reporting, and compliance objectives.

(Module 3) What are the three types of internal controls?

Preventive, Detective, and Corrective

(Module 3) Preventive Controls - Purpose and Example

• Deter errors or fraud before they occur

• Example: Requirement of two-level approval before payment is released

(Module 3) Detective Controls - Purpose and Example

• Identify issues after they have occurred

• Example: Running exception reports to flag duplicate entries

(Module 3) Corrective Controls - Purpose and Example

• Address problems and restore systems to proper state

• Example: Allowing only authorized users to reverse incorrect entries

(Module 3) What is on the front face of the COSO Internal Control Integrated Framework?

• Control Environment

• Risk Assessment

• Control Activities

• Information and Communication

• Monitoring Activities

(Module 3) Control Environment (COSO Internal Control Integrated Framework)

• Sets the tone for the organization and influences the consciousness of its people.

• Deals with the the culture and attitude toward control and ethics.

(Module 3) Risk Assessment (COSO Internal Control Integrated Framework)

• Identifies and analyzes risks that could prevent the organization from achieving its objectives.

• Deals with what could go wrong and how serious it could be

(Module 3) Control Activities (COSO Internal Control Integrated Framework)

• The specific policies, procedures, and practices that help mitigate identified risks and ensure directives are carried out

• The actual actions that reduce risk

(Module 3) Information and Communication (COSO Internal Control Integrated Framework)

• Focuses on how relevant information is identified, captured, and communicated—both internally and externally

• Getting the right information to the right people

(Module 3) Monitoring (COSO Internal Control Integrated Framework)

• Ensures that the internal control system remains relevant and effective over time

• Making sure controls continue to work

(Module 3) According to COSO, when is an internal control system effective?

• Each of the five components of an internal control is present and functioning

• All seventeen principles are present and functioning in a coordinated manner

• The system collectively reduces risk to an acceptable level such that the organization’s operational, reporting, and compliance objectives are likely to be achieved

(Module 3) What are the components of the COSO ERM Framework?

• Governance and Culture

• Strategy and Objective-Setting

• Performance

• Review and Revision

• Information, Communication, and Reporting

(Module 3) Governance and Culture (COSO ERM Framework)

Establishes the foundation for enterprise risk management by reinforcing the importance of ethical conduct, accountability, and transparency throughout the organization

(Module 3) Strategy and Objective-Setting (COSO ERM Framework)

Ensures that risk appetite is define, understood, and aligned with strategic goals

(Module 3) Performance (COSO ERM Framework)

Emphasizes identifying, assessing, and responding to risks that may impact achievement of performance objectives

(Module 3) Review and Revision (COSO ERM Framework)

Focuses on evaluating how past risk responses have performed and whether internal or external changes require updates to the risk strategy

(Module 3) Information, Communication, and Reporting (COSO ERM Framework)

Ensures that relevant risk information is identified, captured, and communicated to support decision-making

(Module 3) What is risk?

• The possibility of an event occurring that will have an adverse effect on the achievement of objectives

• Signifies uncertainties that could potentially interfere with an organization’s ability to meet its financial reporting objectives

(Module 3) What factors contribute to risk?

• Human Error (Negligence) (misclassification, mathematical mistakes, omission; this is the most significant factor)

• Fraudulent Activities (revenue recognition fraud, expense padding, asset misappropriation, etc.)

• System Failures (software glitches, data breaches, integration errors)

• External Factors (economic downturns, regulatory changes, natural disasters, pandemics, etc.)

(Module 3) Inherent Risk

The raw or natural risk associated with a particular process or activity, without any consideration of the controls in place

(Module 3) What are the ways to respond to inherent risk?

Risk Reduction/Mitigation and Risk Transfer

(Module 3) Risk Reduction/Mitigation

Done by introducing control measures, such as workflow approvals

(Module 3) Examples of Risk Transfer

Insurance or Outsourcing

(Module 3) Residual Risk

The risk that remains after all mitigation and transfer strategies have applied; the risk that persists even after accounting for internal controls

(Module 3) What are the ways to respond to residual risk?

Risk Acceptance or Risk Avoidance

(Module 3) Risk Acceptance

Not taking action to respond to the residual risk if its deemed acceptable

(Module 3) Risk Avoidance

Avoiding the risk entirely, such as discontinuing a particular activity, process, or product line