Sarbanes-Oxley requires management to issue an internal control report that includes
two specific items. Which of the following is one of these two requirements?
A) a statement that management is responsible for establishing and maintaining an
adequate internal control structure and procedures for financial reporting
B) a statement that management and the board of directors are jointly responsible for
establishing and maintaining an adequate internal control structure and procedures for
financial reporting
C) a statement that management, the board of directors, and the external auditors are
jointly responsible for establishing and maintaining an adequate internal control
structure and procedures for financial reporting
D) a statement that the external auditors are solely responsible for establishing and
maintaining an adequate system of internal control
Which of the following is an accurate statement regarding how the acceptable risk of
overreliance (ARO) and the acceptable risk of incorrect acceptance (ARIA) interact to
affect evidence accumulation?
A) If internal controls are likely to be effective, preliminary control risk can be
increased.
B) A lower control risk requires a lower ARO in testing the controls, which requires a
smaller sample size.
C) If controls are found to be effective, control risk can remain low, which permits the
auditor to increase ARIA, thereby requiring a smaller sample size in the substantive
tests of details of balances.
D) If misstatements are considered unlikely, ARIA will decrease, and the sample size
will also decrease.