1. Describe the difference between preventive, detective, and corrective controls. What are some examples of each type?
2. What are some ways management can mitigate risks in an IT environment?
3. Internal control is intended to accomplish at least three objectives and consists of five components of internal control. List the three objectives and five components of internal control.
4. Describe the limitations of internal control. Why do limitations on internal control exist?
5. What are four potential tools available to the auditor for documenting her understanding of an entity's system of internal control?
6. What are some typical types of evidence that may be collected in testing an entity's internal controls?
7. Identify indicators of a material weakness in internal control over financial reporting.
8. Discuss the differences between a control deficiency, a significant deficiency, a material weakness, and the two dimensions of the control deficiency - likelihood and magnitude.
9. Discuss entity-level controls and provide examples of these types of controls.