IIA-CCSA Certification in Control Self-Assessment (CCSA) Question and Answers

Internal audit characteristic of the internal auditor’s paradigm has internal control as its old paradigm and risk management as its new paradigm.

Internal audit characteristic of the internal auditor’s paradigm has internal control as its new paradigm and cost management as its old paradigm.

Internal audit response characteristic of the internal auditor’s paradigm has internal control as its old paradigm and risk management as its new paradigm.

Internal audit response characteristic of the internal auditor’s paradigm has internal control as its new paradigm and risk management as its old paradigm.

Employee orientation

Confidentiality agreement

Both A & B

Neither A nor B

Enterprise Risk Management

Stricter Risk Disclosure

Overlapping Risk Classification

Risk Management Strategy

External control

Internal control

Independent appraisal function

Risk factors

Management awareness

Achievement Orientation

Conscientiousness

Adaptability

True

False

True

False

auditor implements several critical points with respect to use of CSA

auditor doesn’t able to recognize several critical points with respect to use of CSA

auditor reports several critical points with respect to use of CSA

auditor recognizes several critical points with respect to use of CSA

Change

Risk

Cost

Resources

To establish individual responsibilities to handle complexity of the organization’s processes.

To establish individual responsibilities as a means of control and to ensure the organization achieves its goals.

To establish individual responsibilities, their number and type.

To establish individual responsibilities to formalize the organization’s processes.

Risk management

Enterprise risk management

Strategic risk management

Operational risk management

Change in policy

Change in technology

Change in practices

Change in expertise

True

False

Senior management

Operating managers

Internal & External

Organizational

Personality characteristics

Organizational characteristics

Accounts payable

Accounts receivable

Template organization

Complex structure

Matrix organization

Multilevel hierarchical structure

Identify control points

Document an understanding of the control environment

Assess the level of control risk

Define the adequacy of the system of internal control

Committee on Sponsoring Organizations

Criteria of Commitment

Control Auditors Committee

Control risk property value

those risks that reduce consequences to immateriality are tested at the time of risk measurement.

those audits that reduce consequences to immateriality are tested during the program execution.

those internal controls that reduce consequences to immateriality are tested in the audit program.

those amendments that reduce consequences to immateriality are tested after the feedback.

CSA facilitation

CSA process

CSA goal

CSA function

Promotion system

Code of conduct

Rank vulnerability

Rank inherent risk

The organization’s competence to standards is appropriate for its size and the nature of its operations.

The organization’s operating style is appropriate for its size and the nature of its operations.

The organization’s organizational structure is appropriate for its size and the nature of its operations.

The organization’s organizational authority and responsibility is appropriate for its size and the nature of its operations.

Machine bureaucracy

Performance bureaucracy

Functional bureaucracy

Organizational bureaucracy

True

False

True

False

Sufficiency

Feasibility

Consistency

Reliability

Facts

Impacts

Scenarios

Figures

to make analysis through interviews

to find report issued by auditors

through which internal control effectiveness is examined and assessed

to focus on policies and procedures that are strategy compliance

Directed vision

Visionary leadership

Visionary management

Intended vision

Communications from external parties should corroborate internally generated data or indicate problems with internal control.

Approval from external parties should corroborate externally generated data or indicate problems with internal control.

Communications from internal parties should corroborate internally generated data or indicate problems with external control.

Communications from internal parties should corroborate externally generated data or indicate problems with external control.

History of control weakness

Strong code of conduct

Strong ethics policy

Improve productivity

Interviews

Survey

Voting

Auditing

Manual controls

Error controls

Internal controls

Automated controls

Program evaluation

Audit resolution

Ongoing monitoring

Control environment

Common to Formal, decentralized organizations that tend to be more participative, open and fixed.

Common to Formal, centralized organizations that tend to be more participative, open and fixed.

Common to informal, centralized organizations that tend to be more participative, open and flexible.

Common to informal, decentralized organizations that tend to be more participative, open and flexible.

True

False

Implementation

Follow-up

Reporting

Analyzing