PRL Corporation’s internal control plan is based on the COSO framework. It includes
five items: (i) conducting ongoing evaluations of internal control during the normal
course of operations, (ii) hiring accountants who understand the importance of strong
internal control, (iii) including a segment in new employee orientation on the
importance of strong internal control, (iv) periodic employee surveys that identify new
issues that require internal controls, (v) a quarterly newsletter explaining elements of
the internal control plan. Based on those five items alone, which element of PRL’s
internal control plan is weakest?
A. Risk/control matrix
B. Control activities
C. Information and communication
D. Monitoring
I focuses on monitoring. II and III help establish a strong control environment. IV is a
type of risk assessment. V is a form of information and communication.
Robert and Claudia are partners in Retail Consulting Associates (RCA), a firm
specializing in enterprise risk management for small retail businesses. As their client
base expands, they want to develop a knowledge management system that will benefit
themselves, their employees and their clients. They have established three key
knowledge areas for RCA: costs of enterprise risk management, role of information
technology in enterprise risk management and communication with clients. Use those
three areas to complete the following knowledge map for RC
A.