All CPA Business Environment and Concepts (BEC) Resources
Example Questions
Example Question #1 : Corporate Governance
Per the COSO ICIF, the main purpose of monitoring internal controls is to confirm that the internal control system can adequately address changes in:
Risk Assessment
Monitoring
Information and communication
Control Environment
Monitoring
Risks constantly change in terms of likelihood and severity. Internal controls should be created and upheld to address changes in risks.
Example Question #2 : Corporate Governance
A company's management is experiencing a lack of segregation of duties within its application environment as its programmers have access to both development and production. The programmers have the ability to implement changes in code in production without monitoring or quality assurance. This is a deficiency in which area?
Change control
Computer operations
Management override
Data integrity
Change control
Programmers who have access to both instructions and live data can undermine management's control of data and their ability to verify that all changes have been performed in a manner consistent with their instructions.
Example Question #3 : Corporate Governance
Of the following positions, which best describes the nature of a company's Board of Directors in relation to the company?
Executive
Agent
Fiduciary
Representative
Fiduciary
A company's board of directors has a fiduciary duty to act on behalf of and in the best interest of a corporation.
Example Question #1 : Coso Framework
According to COSO, which of the following is included in the assess and report phase of an effective approach to monitoring internal controls?
Prioritize findings
Prioritize risks
Tone at the top
Identify controls
Prioritize findings
Findings result from monitoring internal controls.
Example Question #4 : Corporate Governance
The Treadway Commission was established by:
The SEC
Private sponsoring organizations
The Treadway Foundation
SOX 2002
Private sponsoring organizations
The COSO was an independent private sector initiative.
Example Question #6 : Corporate Governance
Of the following components, which would not be included in Risk Assessment activities?
Consider the potential for fraud
Identify and assess changes
These are all included
Specify objectives
These are all included
All of these components are required when conducting Risk Assessment under the COSO framework.