Strengthening Business Practices: The Language of Our Control Environment
description
Transcript of Strengthening Business Practices: The Language of Our Control Environment
![Page 1: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/1.jpg)
The University of California
Strengthening Business Practices:The Language of Our Control
Environment
Dan Sampson Assistant Vice President
Financial Services and ControlOffice of the President
November 2011
![Page 2: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/2.jpg)
The University of California
Control Environment Agenda• Speaking a Common Language
– What is Internal Control?• The Right Controls at the Right Place?
– A Five-Part Model• Interactive Self Assessment
– Attitudes Toward Risk and Control• Resources
– Role of the Controller, Auditor
2
![Page 3: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/3.jpg)
The University of California
We are Like a Business
• Good control is everyone’s business
• Good control is good business
• Business Officers play an especially important role in our control systems
3
![Page 4: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/4.jpg)
The University of California
Another Good Reason: Audit Requirements
• Statement of Auditing Standards (SAS) No. 115 (aka SAS 112): Communicating Internal Control Related Matters Identified in an Audit
• Significantly tightens the requirements for public reporting of internal control deficiencies
Sarbanes Oxley
4
![Page 5: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/5.jpg)
The University of California
…by the way, what is Internal Control?
A process, put in place by people, that is designed to provide reasonable assurance that we will achieve the following objectives:
1. Effectiveness and efficiency of operations2. Reliability of financial reporting3. Compliance with laws and regulations5
![Page 6: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/6.jpg)
The University of California
A Framework for Achieving Objectives
EstablishManagementEnvironment
Implement ControlActivities
MonitorPerformance
Information
Communication
andand
PerformRisk Assessment
Reference Document:Understanding Internal Controls
6
![Page 7: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/7.jpg)
The University of California
Management EnvironmentPeople and the Work Environment
The foundation of sound internal control Control Consciousness Tone at the top Ethics Integrity Accountability
7
![Page 8: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/8.jpg)
The University of California
Management EnvironmentPeople and the Work Environment
Wouldn’t you agree?
Good people can make a bad system work, while bad people can make the best system fail
8
![Page 9: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/9.jpg)
The University of California
Risk AssessmentIdentify, Analyze and Manage Risks
UnderstandObjectives
Understand Risks
Manage Risks
AcceptableExposure
What are you trying to
accomplish?
What gets in your way?
What are you doing to
manage this?
Where do you feel
exposed?
9
![Page 10: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/10.jpg)
The University of California
Control ActivitiesBusiness Policies and Practices
• Two types of control activities– Preventive– Detective
• Common control activities:– authorization, approval,
reconciliation, review, asset security, separation of duties, information system controls 10
![Page 11: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/11.jpg)
The University of California
MonitoringAnalysis of Control Systems over
Time
• Are our control practices keeping pace?–Ongoing monitoring activities–Separate evaluations
11
![Page 12: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/12.jpg)
The University of California
Information and Communication
Capture and Exchange of Key Data
• Getting the right information to the right people in time to make quality decisions
• Systems can be formal or informal– Formal: sophisticated computer
systems– Informal: periodic staff meetings 12
![Page 13: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/13.jpg)
The University of California
A BOI Challenge:Conduct Your Own Controls
Review• Identify an important business process in
your area• Apply the concepts from the Control
Framework– What is the business objective?– Where is the risk?– What are the controls?
• Evaluate the results… take action if needed! 13
![Page 14: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/14.jpg)
The University of California
Interactive Self AssessmentAttitudes Toward Risk and Control
• How do you view risk and control?– Personal perspectives impact the
quality of our Control Environment• Meet Mary, John and Bob
– Your imaginary co-workers
14
![Page 15: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/15.jpg)
The University of California
ResourcesWho can I call for help?
Controller Line management champion of internal control
Auditor Control consulting, evaluation of controls established by management
Colleagues Everyone is responsible for internal controls
19
![Page 16: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/16.jpg)
The University of California
A Balancing Act• Controls should
be proactive, value-added and cost effective
• Cost of a control should not exceed the benefit derived from it 20
![Page 17: Strengthening Business Practices: The Language of Our Control Environment](https://reader036.fdocuments.in/reader036/viewer/2022062323/568162fa550346895dd3753d/html5/thumbnails/17.jpg)
The University of California
21