D774 Introduction to Business Accounting - Set 2 - Part 2

Correct Answer: Internal controls

Internal controls are the systems, policies, and procedures a company uses to manage risk, safeguard assets, support accurate reporting, and diminish fraud and error. They form the organized defense the new owner is describing. Option a is incorrect because a marketing funnel describes how a business attracts and converts customers, not how it protects assets and records. The organized safeguard against fraud and error is the internal-control system. Option c is incorrect because an external opinion is an auditor's judgment on the statements, not the company's own protective framework. The systems that safeguard assets and reduce error are internal controls. Option d is incorrect because a petty cash voucher is one small control document, not the whole defensive framework. The broad set of systems and procedures the owner wants is called internal controls.

Correct Answer: False, controls only reduce risk

The claim is false. A well-designed internal-control system reduces the risk of loss but never eliminates it, since no system is perfect and determined collusion or unforeseen gaps can still occur. Option a is incorrect because no control system removes all risk. The course is explicit that the correct verb is reduce, not eliminate, because perfect protection against fraud and loss is unattainable. Option b is incorrect because firm size does not change the rule. Controls reduce risk for businesses large and small alike, but they cannot eliminate it for any of them. Option c is incorrect because an annual audit does not transform reduction into elimination. Even regularly audited firms retain residual risk, since controls lower the probability of loss without driving it to zero.

Correct Answer: With management

Under the Sarbanes-Oxley Act, ultimate responsibility for internal controls rests on the company's management. Executives cannot shift the blame to accountants or auditors, because the buck stops with management. Option b is incorrect because accounting clerks carry out tasks but do not bear ultimate accountability under the law. SOX places that responsibility on management, so blaming the staff misstates who is on the hook. Option c is incorrect because the external auditor independently opines on the statements rather than owning the company's controls. The law assigns ultimate responsibility for those controls to the firm's own management. Option d is incorrect because customers are outside parties with no duty over internal controls. Responsibility for the control system belongs to management, which the executive is wrongly trying to deflect.

Correct Answer: The COSO framework

COSO developed the Internal Control Integrated Framework, the most widely recognized blueprint, which outlines five key components for an effective internal-control system. It is the standard reference for designing and evaluating controls. Option a is incorrect because GAAP is a set of accounting rules and is created by the FASB, not the SEC. The recognized blueprint for designing internal controls with five components comes from COSO. Option b is incorrect because IFRS is a set of international accounting standards developed by the IASB, not a control framework from the PCAOB. The five-component control blueprint is the COSO framework. Option d is incorrect because there is no Big Four checklist that defines the five components. The course attributes the five-part internal-control framework to COSO, the standard reference for control design.

Correct Answer: Control activities

In the CRIME aid the final letter is only a placeholder, and the fifth COSO component it represents is control activities, meaning the specific actions, policies, and procedures that actually carry out control. Option a is incorrect because risk assessment is the second component, cued by the R in the aid. The placeholder at the end stands for control activities, the procedures that put control into practice. Option c is incorrect because control environment is the first component, captured by the leading C for the organization's culture and ethics. The closing placeholder represents control activities instead. Option d is incorrect because encryption standards are not a COSO component at all. The aid's final letter is just a reminder, and the genuine fifth component is control activities.

Correct Answer: Control environment

The control environment is the overall tone, culture, and ethical attitude of the organization toward control. As the foundation of the framework, it reflects whether leadership genuinely takes honesty and oversight seriously. Option a is incorrect because monitoring activities involve ongoing oversight that the controls keep working over time. The scenario describes the cultural foundation set by leadership, which is the control environment. Option b is incorrect because information and communication concerns getting the right information to the right people. The tone and ethical attitude that anchor the whole system belong to the control environment. Option c is incorrect because risk assessment is about identifying and analyzing threats the organization faces. The foundational culture and ethics described here correspond to the control environment instead.

Correct Answer: Risk assessment

Risk assessment is the process of identifying and analyzing the risks the organization faces, so it understands what its controls need to defend against. The scenario's act of sizing up threats fits this component. Option b is incorrect because the control environment is the cultural and ethical foundation, not the analysis of specific dangers. Pinpointing and weighing threats is the work of risk assessment. Option c is incorrect because control activities are the concrete procedures, like approvals and reconciliations, that carry out control. Identifying and analyzing risks comes earlier and belongs to risk assessment. Option d is incorrect because monitoring activities check that controls keep functioning over time. Evaluating which threats exist in the first place is risk assessment, a different stage of the framework.

Correct Answer: Information and communication

Information and communication is the COSO component focused on making sure the right information flows to the right people so they can carry out their control responsibilities. The described channels serve exactly that purpose. Option a is incorrect because risk assessment identifies and analyzes threats rather than routing facts to staff. Ensuring people receive the information they need to act is information and communication. Option b is incorrect because the control environment sets the organization's ethical tone, not its information pathways. Delivering the right facts to the right people is the information and communication component. Option d is incorrect because regular audits are a control procedure that reviews whether policies are followed, not a flow of information for daily control duties. The matching COSO component is information and communication.

Correct Answer: Monitoring activities

Monitoring activities are the ongoing oversight that checks whether controls remain present and operating as intended over time. The continuous verification described here is precisely what this component covers. Option b is incorrect because control activities are the specific procedures that perform control, such as approvals and reconciliations. Watching over time to ensure those procedures keep functioning is monitoring activities. Option c is incorrect because risk assessment analyzes the threats a firm faces, an earlier design step. Continuously confirming that installed controls still work is the role of monitoring activities. Option d is incorrect because information and communication concerns delivering needed facts to staff, not verifying control performance. The ongoing oversight that controls remain effective is monitoring activities.

Correct Answer: Control activities

Control activities are the specific actions, policies, and procedures that actually carry out control, including approvals, reconciliations, separation of duties, and physical safeguards. These concrete procedures fall under that component. Option a is incorrect because the control environment is the cultural and ethical foundation, not the hands-on procedures. Approvals, reconciliations, and separation of duties are grouped under control activities. Option b is incorrect because risk assessment identifies and analyzes threats rather than executing any control steps. The concrete procedures that perform the actual controlling work belong instead to control activities. Option c is incorrect because monitoring activities provide ongoing oversight that controls keep working. The actual approvals and reconciliations that do the controlling are classified as control activities.

Correct Answer: Separation of duties

Separation of duties ensures no single employee has complete control over a financial transaction, dividing handling, recording, and approving among different people. Splitting the clerk's combined roles is exactly what this procedure accomplishes. Option b is incorrect because physical safeguards secure access to cash, inventory, and documents with locks and restricted areas. They do not address one person controlling an entire transaction, which separation of duties remedies. Option c is incorrect because a bank reconciliation compares records to the bank statement to catch discrepancies. It checks accuracy after the fact rather than preventing a single clerk from owning every step of a payment. Option d is incorrect because adequate insurance covers losses after they happen rather than dividing responsibilities. The fix for one employee controlling a whole transaction is separation of duties.

Correct Answer: Authorization and approvals

Authorization and approvals require that large transactions receive management approval before they occur, so a junior employee cannot single-handedly commit the company to a big expense. That sign-off requirement is the matching procedure. Option a is incorrect because reconciliation reviews records to find discrepancies after transactions occur. It does not gate a large purchase in advance, which is what authorization and approvals are designed to do. Option b is incorrect because physical safeguards protect assets with locks and restricted access. Stopping a junior staffer from committing a big expense without sign-off is the job of authorization and approvals. Option d is incorrect because separation of duties splits a transaction among several people but does not by itself require managerial sign-off for large amounts. The pre-approval requirement is authorization and approvals.

Correct Answer: Reconciliation

Reconciliation reviews financial records regularly to identify discrepancies by comparing two independent sources of the same information, such as company records against the bank's records. That comparison is what catches errors and fraud. Option a is incorrect because physical safeguards secure assets through locks and restricted access rather than cross-checking records. Comparing two independent sources of the same data is reconciliation. Option c is incorrect because authorization and approvals gate large transactions with sign-off before they happen. Matching one set of records against another to find discrepancies is the work of reconciliation. Option d is incorrect because adequate insurance compensates for losses after they occur rather than detecting them through any comparison. The procedure that actually checks two independent records against each other is reconciliation.

Correct Answer: Physical safeguards

Physical safeguards secure access to cash, inventory, and financial documents through locks, safes, restricted areas, and password-protected systems. Keeping valuable assets physically protected is exactly what this procedure provides. Option a is incorrect because reconciliation compares records to spot discrepancies rather than locking up assets. Securing physical access to cash and inventory is the role of physical safeguards. Option b is incorrect because authorization and approvals require sign-off on large transactions, not the physical protection of goods. Locks, safes, and restricted areas fall under physical safeguards. Option c is incorrect because regular audits review whether policies are followed, an after-the-fact check. Physically securing assets with locks and password protection is the purpose of physical safeguards.

Correct Answer: Regular audits

Regular audits are internal reviews that ensure financial policies are followed, with periodic checks confirming that controls are actually working. Recurring internal verification of policy compliance is precisely what this procedure delivers. Option b is incorrect because physical safeguards protect assets with locks and restricted access rather than reviewing policy compliance. Periodic internal checks that controls are working are regular audits. Option c is incorrect because separation of duties divides a transaction among employees, not periodic review of the whole system. Recurring confirmation that policies are followed is the regular-audits procedure. Option d is incorrect because reconciliation compares two independent records of the same activity to find discrepancies. Broad periodic review confirming that policies and controls hold up is regular audits.

Correct Answer: A petty cash fund

A petty cash fund is a predetermined amount of cash kept on hand to pay for small day-to-day purchases. It spares the business the hassle of writing a check for trivial amounts like office supplies. Option a is incorrect because a reserve loan implies borrowed money set aside, not a small on-hand cash fund for minor purchases. The course calls the cash kept for trivial expenses a petty cash fund. Option c is incorrect because a deposit in transit is a bank-reconciliation timing item the company recorded before the bank did. It is unrelated to holding cash for everyday small purchases. Option d is incorrect because an outstanding check is one the company wrote that has not yet cleared the bank. That reconciliation term has nothing to do with a fund kept for minor expenses.

Correct Answer: An imprest account

An imprest account holds a fixed amount of cash that is replenished as it is spent to maintain a set balance. Because a petty cash fund always returns to its original fixed amount, it is a type of imprest account. Option a is incorrect because a revenue account records earnings from sales, not a replenished cash fund. The account that keeps returning to a fixed balance after being spent down is an imprest account. Option b is incorrect because outstanding checks are a bank-reconciliation item, not a category for a fixed-balance fund. The always-restored petty cash fund is properly called an imprest account. Option c is incorrect because an NSF account is not a recognized term; NSF refers to a bounced check. The fund that is topped back up to a set amount is an imprest account.

Correct Answer: A petty cash voucher

A petty cash voucher is an internal-control document used to trace the use of cash within the fund, capturing how the cash was used, the balance that should remain, and who approved the payment. Option b is incorrect because a bank reconciliation compares the company's books to the bank statement, a much broader cash control. A single small withdrawal from the fund is documented instead by a voucher. Option c is incorrect because an external audit opinion is an independent auditor's judgment on the statements, not a record of small cash withdrawals. What the scenario describes is the petty cash voucher. Option d is incorrect because a securities filing is a disclosure submitted to a regulator. Tracking how petty cash was spent and who approved each payment falls to the voucher described here.

Correct Answer: A bank reconciliation

A bank reconciliation is an internal report prepared by the company that owns the checking account. It uses timing-difference transactions to adjust both the bank balance and the book balance until they equal the same amount. Option a is incorrect because an income statement reports revenue and expenses over a period, not a comparison of cash balances. Aligning the bank figure with the book figure is what the reconciliation does. Option b is incorrect because a petty cash voucher tracks a single small cash withdrawal. Reconciling the company's overall cash records against the bank's statement is the job of a bank reconciliation. Option d is incorrect because an external opinion is an auditor's conclusion about the statements, not a routine cash-matching report. The internal report that adjusts both sides until they agree is the reconciliation.

Correct Answer: Deposit in transit, bank side

A deposit in transit is money the business recorded on its books before the bank entered it. Because the bank does not yet know about it, the adjustment is added to the bank side of the reconciliation. Option a is incorrect because an outstanding check, written by the company but not yet cashed by its recipient, subtracts from the bank balance. The described deposit recorded ahead of the bank is something else entirely. Option c is incorrect because a service fee originates with the bank and lowers the company's book figure. Here the firm logged a deposit before the bank did, which belongs on the opposite side. Option d is incorrect because a bounced customer check gets reversed and reduces what the company shows in its records. A pending deposit awaiting bank entry adjusts the bank balance, not the book balance.