Category 1: Internal Controls Basics
Category 2: Responsibility for Controls
Category 3: COSO Framework
Category 4: COSO Components (Deep Dive)
Category 5: Risk & Controls
100

The process designed to provide reasonable assurance that objectives are achieved

What are internal controls?

100

The group is primarily responsible for internal controls

Who is management?

100

The framework used for internal controls

What is COSO?

100

Policies and procedures that help carry out directives

What are control activities?

100

The possibility of loss or error

What is risk?

200

The main purpose of internal controls

What is to prevent fraud and errors?

200

This group provides oversight of internal controls

Who is on the board of directors?

200

The number of COSO components

What is five?

200

Sharing important information within the company

What is information and communication?

200

Identifying risks helps prevent this

What is fraud?

300

Internal controls help ensure this type of reporting is accurate

What is financial reporting?

300

These individuals test and evaluate internal controls

Who are internal auditors?

300

The first COSO component focused on ethics and tone

What is a control environment?

300

Evaluating risks that affect objectives

What is risk assessment?

300

This type of control prevents errors before they occur

What is preventive control?

400

Internal controls improve this within an organization

What is the efficiency and effectiveness of operations

400

Everyone in the company shares this responsibility

What is maintaining internal controls?

400

The COSO component focused on identifying risks

What is risk assessment?

400

Management’s attitude toward control

What is control environment?

400

This control finds errors after they occur

What is detective control?

500

Internal controls also ensure compliance with these

What are laws and regulations? 

500

This act requires companies to maintain strong internal controls

What is the Sarbanes-Oxley Act?

500

The COSO component focused on reviewing performance

What is monitoring? 

500

Ongoing evaluations of internal controls

What is monitoring activities?

500

Risk assessment helps organizations achieve these

What are business objectives?