Index of Attributes: Difference between revisions

From Arizona Citizen Voice
 
(3 intermediate revisions by the same user not shown)
Line 5: Line 5:


=== '''<u>Control Environment</u>''' ===
=== '''<u>Control Environment</u>''' ===
[[File:Control Environment.jpg|border|center|250x250px]]
[[File:Control Environment.jpg|border|center]]


==== Principle 1 - Demonstrate Commitment to Integrity and Ethical Values ====
==== [[Principle 1 - Demonstrate Commitment to Integrity and Ethical Values]] ====


* '''Attribute [[1.01]]'''
* '''Attribute [[1.01]]'''
Line 14: Line 14:


* '''Attribute [[1.02]]'''
* '''Attribute [[1.02]]'''
* '''Attribute [[1.03]] - with example(s) of potential governance gaps'''
* '''Attribute [[1.03]]'''
* '''Attribute [[1.04]]'''
* '''Attribute [[1.04]]'''
* '''Attribute [[1.05]]'''
* '''Attribute [[1.05]]'''
Line 29: Line 29:
* '''Attribute [[1.10]]              '''
* '''Attribute [[1.10]]              '''


==== Principle 2 - Exercise Oversight Responsibility ====
==== [[Principle 2 - Exercise Oversight Responsibility]] ====


* '''Attribute [[2.01]]'''
* '''Attribute [[2.01]]'''
Line 54: Line 54:
* '''Attribute [[2.13]]'''
* '''Attribute [[2.13]]'''


==== Principle 3 - Establish Structure, Responsibility, and Authority ====
==== [[Principle 3 - Establish Structure, Responsibility, and Authority]] ====


* '''Attribute [[3.01]]'''
* '''Attribute [[3.01]]'''
Line 78: Line 78:
* '''Attribute [[3.12]]'''
* '''Attribute [[3.12]]'''


==== Principle 4 - Demonstrate Commitment to Competence ====
==== [[Principle 4 - Demonstrate Commitment to Competence]] ====


* '''Attribute [[4.01]]'''
* '''Attribute [[4.01]]'''
Line 98: Line 98:
* '''Attribute [[4.08]]'''
* '''Attribute [[4.08]]'''


==== Principle 5 - Enforce Accountability ====
==== [[Principle 5 - Enforce Accountability]] ====


* '''Attribute [[5.01]]'''
* '''Attribute [[5.01]]'''
Line 118: Line 118:
[[File:Risk Assessment.jpg|border]]
[[File:Risk Assessment.jpg|border]]


==== Principle 6 - Define Objectives and Risk Tolerances ====
==== [[Principle 6 - Define Objectives and Risk Tolerances]] ====


* '''Attribute [[6.01]]'''
* '''Attribute [[6.01]]'''
Line 137: Line 137:
* '''Attribute [[6.10]]'''
* '''Attribute [[6.10]]'''


==== Principle 7 - Identify, Analyze, and Respond to Risks ====
==== [[Principle 7 - Identify, Analyze, and Respond to Risks]] ====


* '''Attribute [[7.01]]'''
* '''Attribute [[7.01]]'''
Line 165: Line 165:
* '''Attribute [[7.15]]'''
* '''Attribute [[7.15]]'''


==== Principle 8 - Assess Fraud, Improper Payment, and Informati<big>on</big> ====
==== [[Principle 8 - Assess Fraud, Improper Payment, and Information|Principle 8 - Assess Fraud, Improper Payment, and Informati<big>on</big>]] ====


* '''Attribute [[8.01]]'''
* '''Attribute [[8.01]]'''
Line 204: Line 204:
* '''Attribute [[8.20]]'''
* '''Attribute [[8.20]]'''


==== Principle 9 - Identify, Analyze, and Respond to Change ====
==== [[Principle 9 - Identify, Analyze, and Respond to Change]] ====


* '''Attribute [[9.01]]'''
* '''Attribute [[9.01]]'''
Line 232: Line 232:
[[File:Control Activities.jpg|border|center]]
[[File:Control Activities.jpg|border|center]]


==== Principle 10 - Design Control Activities ====
==== [[Principle 10 - Design Control Activities]] ====


* '''Attribute [[10.01]]'''
* '''Attribute [[10.01]]'''
Line 276: Line 276:
* '''Attribute [[10.23]]'''
* '''Attribute [[10.23]]'''


==== Principle 11 - Design General Control Activities over Information ====
==== [[Principle 11 - Design General Control Activities over Information]] ====


* '''Attribute [[11.01]]'''
* '''Attribute [[11.01]]'''
Line 305: Line 305:
* '''Attribute [[11.17]]'''
* '''Attribute [[11.17]]'''


==== Principle 12 - Implement Control Activities ====
==== [[Principle 12 - Implement Control Activities]] ====


* '''Attribute [[12.01]]'''
* '''Attribute [[12.01]]'''
Line 320: Line 320:


=== '''<u>Information and Communication</u>''' ===
=== '''<u>Information and Communication</u>''' ===
[[File:Information and Communication.jpg|border|center]]


==== Principle 13 - Use Quality Information ====
==== [[Principle 13 - Use Quality Information]] ====


* '''Attribute [[13.01]]'''
* '''Attribute [[13.01]]'''
Line 340: Line 341:
* '''Attribute [[13.07]]'''
* '''Attribute [[13.07]]'''


==== Principle 14 - Communicate Internally ====
==== [[Principle 14 - Communicate Internally]] ====


* '''Attribute [[14.01]]'''
* '''Attribute [[14.01]]'''
Line 357: Line 358:
* '''Attribute [[14.08]]'''
* '''Attribute [[14.08]]'''


==== Principle 15 - Communicate Externally ====
==== [[Principle 15 - Communicate Externally]] ====


* '''Attribute [[15.01]]'''
* '''Attribute [[15.01]]'''
Line 376: Line 377:


=== '''<u>Monitoring</u>''' ===
=== '''<u>Monitoring</u>''' ===
[[File:Monitoring.jpg|border|center]]


==== Principle 16 - Perform Monitoring Activities ====
==== [[Principle 16 - Perform Monitoring Activities]] ====


* '''Attribute [[16.01]]'''
* '''Attribute [[16.01]]'''
Line 399: Line 401:
* '''Attribute [[16.10]]'''
* '''Attribute [[16.10]]'''


==== Principle 17 - Evaluate Issues and Remediate Deficiencies ====
==== [[Principle 17 - Evaluate Issues and Remediate Deficiencies]] ====


* '''Attribute [[17.01]]'''
* '''Attribute [[17.01]]'''

Latest revision as of 06:38, 16 September 2026

Overview

This page is an index, referencing Green Book Attributes (potential deviations) to parts of my story.

Control Environment

Tone at the Top

Standards of Conduct

Adherence to Standards of Conduct

  • Attribute 1.08
  • Attribute 1.09
  • Attribute 1.10              

Oversight Structure

Oversight for the Internal Control System

Input for Remediation of Deficiencies

Organizational Structure

Assignment of Responsibility and Delegation of Authority

Documentation of the Internal Control System

Expectations of Competence

Recruitment, Development, and Retention of Individuals

Succession and Contingency Plans and Preparation

Enforcement of Accountability

Consideration of Excessive Pressures

Risk Assessment

Definitions of Objectives

Definitions of Risk Tolerances

Identify Risks

Analyze Risks

Respond to Risks

Identify Risks Related to Fraud, Improper Payments, and Information Security

Types of Fraud and Fraud Risk Factors

Types of Improper Payments and Improper Payment Risk Factors

Types of Information Security Risk and Information Security Risk Factors

Analyze and Respond to Identified Risks

Identify Significant Changes

Establish a Change Assessment Process

Identify, Analyze and Respond to Risks Related to Significant Changes

Control Activities

Response to Risks

Design of Appropriate Types of Control Activities

Design of Automated and Manual Control Activities

Design of Preventive and Detective Control Activities

Design of Control Activities at Various Levels

Segregation of Duties

Response to Risks

Design of the Entity’s Information Technology

Design of Appropriate Types of General Control Activities

Documentation of Control Activities Through Policies and Procedures

Periodic Review of Control Activities

Information and Communication

Identification of Information Requirements

Relevant Data from Reliable Sources

Data Processed into Quality Information

Communication Throughout the Entity

Appropriate Methods of Communication

Communication with External Parties

Appropriate Methods of Communication

Monitoring

Establishment of a Baseline

Internal Control System Monitoring

Evaluation of Results

Reporting of Issues

Evaluation of Issues

Corrective Actions