7 Control and AIS（课件）- 《会计信息系统英文版》同步教学（人民大学版）

Chapter 7 Control and AIS 7-1 Learning Objectives Explain basic control concepts and explain why computer control and security are important. Compare and contrast the COBIT, COSO, and ERM control frameworks. Describe the major elements in the internal environment of a company Describe the four types of control objectives that companies need to set. Describe the events that affect uncertainty and the techniques used to identify them. Explain how to assess and respond to risk using the Enterprise Risk Management (ERM) model. Describe control activities commonly used in companies. Describe how to communicate information and monitor control processes in organizations. 7-2 Internal Control System to provide reasonable assurance that objectives are met such as: Safeguard assets. Maintain records in sufficient detail to report company assets accurately and fairly. Provide accurate and reliable information. Prepare financial reports in accordance with established criteria. Promote and improve operational efficiency. Encourage adherence to prescribed managerial policies. Comply with applicable laws and regulations. 7-3 Internal Control Functions Preventive Deter problems Detective Discover problems Corrective Correct problems Categories General Overall IC system and processes Application Transactions are processed correctly 7-4 Sarbanes Oxley (2002) Designed to prevent financial statement fraud, make financial reports more transparent, protect investors, strengthen internal controls, and punish executives who perpetrate fraud Public Company Accounting Oversight Board (PCAOB) Oversight of auditing profession New Auditing Rules Partners must rotate periodically Prohibited from performing certain non-audit services 7-5 Sarbanes Oxley (2002) New Roles for Audit Committee Be part of board of directors and be independent One member must be a financial expert Oversees external auditors New Rules for Management Financial statements and disclosures are fairly presented, were reviewe