IIA IIA-CIA-Part1 Exam With Confidence Using Practice Dumps

The type of risk that an adequately designed and effectively operating system of internal controls should mitigate is "Residual" risk. Residual risk is what remains after internal controls are applied to inherent risk. This is the primary focus of most internal control systems, which are intended to reduce risks to an acceptable level.

Risk management frameworks and internal control literature, such as COSO and the Institute of Internal Auditors (IIA) guidance.

The duties that should not be performed by the same person to ensure adequate segregation of duties include recording cash receipts and preparing bank reconciliations. Combining these duties in one individual can lead to potential fraud or errors not being detected within the cash management processes.

Common principles of internal control regarding segregation of duties, aimed at preventing fraud and errors by ensuring no one individual has control over all aspects of a financial transaction.

An effective control to mitigate the risk of payments to ghost employees involves cross-verification and authorization by relevant departments. Reviewing the staff salary payment list by the head of payroll and its subsequent endorsement by the head of human resources ensures a double-check mechanism that can detect anomalies such as ghost employees. This control measure helps in verifying the legitimacy of the payroll and the accuracy of the payments made.

Best practices in internal controls for payroll and human resources departments