Types of Internal Controls?
Who's in Charge?
COSO Framework
Risk Assessment
Company Responsibilities
100

This type of internal control is used to stop errors or fraud before they happen.

What are preventive controls?

100

These groups hold primary responsibility for designing, implementing, and maintaining internal controls.

What are top managers and the board of directors?

100

This acronym stands for the organization that created the widely used model for internal control systems.

What are the Committee of Sponsoring Organizations?

100

This internal control step involves identifying possible threats to company processes or goals.

What are risk assessment procedures?


100

These are two steps experts often list as the foundation for any company’s internal control system.  

What are setting policies and training employees?  

200

These controls are designed to catch problems after they’ve already occurred.

What are detective controls?

200

These individuals play a supporting role by following internal control policies in their daily work.

What are employees?

200

This is the number of key components that make up the COSO internal control framework.

What are the five components of the COSO framework?

200

Companies assess risk mainly to prevent this.  

What are mistakes, fraud, or loss?

200

This is one way external reviewers or auditors can tell that a company’s internal controls are working.

What are consistent procedures and accurate records?

300

This type of control includes activities like fixing entries or fixing broken processes.

What are corrective controls?

300

This is what leaders do when they follow company rules and expect others to do the same.

What is setting the tone at the top?

300

These are the five named elements that make up the COSO internal control framework

What are control environment, risk assessment, control activities, information and communication, and monitoring?

300

This is how companies should check for new risks.

What are regular risk reviews?

300

This ensures that policies, updates, and expectations are understood at every level of the company.

What is clear internal communication?

400

Segregation of duties and required approvals are examples of this type of control.

What are preventive controls?

400

True or False: Internal controls are more effective when company leadership actively supports and follows them.

True
400

This COSO component refers to the ethical tone and culture set by leadership.

What are the values defined by the control environment?

400

These common issues can hurt a business if not caught early. (Name at least one)

What are theft, fraud, or data breaches?

400

According to best practices in academic and government sources, this is the company’s responsibility when a control isn’t working.

What is correcting or replacing weak controls?

500

This type of control helps verify that internal controls are working as planned through audits or ongoing checks.

What are monitoring controls?

500

When no one is held responsible for internal controls, this can occur, weakening trust and increasing the chance of fraud or compliance issues.

What are control breakdowns?

500

This COSO component involves ongoing review to ensure that internal controls are functioning as intended.

What are monitoring activities?

500

This is what can happen when companies ignore known risks.

What are financial losses or damaged reputation?

500

Companies should do this to make sure their internal controls still work as risks, technology, or regulations evolve.

What is regularly update and test their internal controls?