User contributions for Neil thibodaux

15 August 2026

• 22:0922:09, 15 August 2026 diff hist +651 N 8.05 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.05''' - Management considers information that internal and external parties provide to identify risks related to fraud, improper payments, and information security. This may include information reported by the office of inspector general, internal auditors, personnel, service organizations, and other external parties that interact with the entity..." Tag: Visual edit
• 22:0822:08, 15 August 2026 diff hist 0 8.03 No edit summary Tag: Visual edit
• 22:0722:07, 15 August 2026 diff hist +1,172 N 8.03 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8,03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and f..." Tag: Visual edit
• 22:0422:04, 15 August 2026 diff hist +164 7.10 No edit summary current
• 22:0322:03, 15 August 2026 diff hist +164 7.11 No edit summary current
• 22:0322:03, 15 August 2026 diff hist −13 7.12 No edit summary current Tag: Visual edit
• 22:0322:03, 15 August 2026 diff hist +164 7.12 No edit summary
• 22:0222:02, 15 August 2026 diff hist +164 7.13 No edit summary current
• 22:0122:01, 15 August 2026 diff hist +164 7.14 No edit summary current
• 22:0022:00, 15 August 2026 diff hist +138 7.15 No edit summary current
• 22:0022:00, 15 August 2026 diff hist +21 7.15 No edit summary Tag: Visual edit
• 21:5921:59, 15 August 2026 diff hist +547 N 7.14 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.14''' - Performance measures are used to assess whether risk response actions enable the entity to operate within the defined risk tolerances. When risk response actions do not enable the entity to operate within the defined risk tolerances, management may need to revise risk responses or reconsider defined risk tolerances. Management may need to conduct periodic risk..." Tag: Visual edit
• 21:5821:58, 15 August 2026 diff hist +446 N 7.13 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.13''' - After designing risk responses, management then considers residual risk. In instances where a risk response results in the residual risk exceeding defined risk tolerances, management revisits and revises the response. Operating within the defined risk tolerance provides greater assurance that the entity will achieve its objectives." Tag: Visual edit
• 21:5721:57, 15 August 2026 diff hist +904 N 7.12 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.12''' - When designing controls to mitigate risk, management may modify controls related to the entity's oversight responsibilities, organizational structure, and responsibilities and authorities throughout the entity. Management may also develop separate processes within the periodic and ongoing risk assessment process⁵⁰ with separate oversight responsibil..." Tag: Visual edit
• 21:5621:56, 15 August 2026 diff hist +664 N 7.11 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.11''' - Based on the selected risk response, management designs controls to effectively mitigate the analyzed risks on a timely basis. If management has chosen to reduce or share a risk, then management designs controls, which may exist within each component of internal control or constitute a specific control activity. Typically, controls are not needed when an entit..." Tag: Visual edit
• 21:5521:55, 15 August 2026 diff hist +885 N 7.10 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.10''' - Management designs responses to the analyzed risks so that risks are within the defined risk tolerance for the defined objective.⁴⁷ Management designs overall risk responses for the analyzed risks based on the significance of the risk, defined risk tolerance, and cost-benefit determination.⁴⁸ These risk responses may include the following..." Tag: Visual edit
• 21:5321:53, 15 August 2026 diff hist +164 7.09 No edit summary current
• 21:5321:53, 15 August 2026 diff hist +594 N 7.09 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.09''' - Risks may be analyzed individually or grouped into categories with related risks and analyzed collectively. Regardless of whether risks are analyzed individually or collectively, management considers the correlation among different risks or groups of risks when estimating their significance. The specific risk analysis methodology used can vary by entity becaus..." Tag: Visual edit
• 21:5221:52, 15 August 2026 diff hist +164 7.08 No edit summary current
• 21:5121:51, 15 August 2026 diff hist −13 7.07 No edit summary current Tag: Visual edit
• 21:5121:51, 15 August 2026 diff hist +913 N 7.08 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.08''' - Management estimates the significance of the identified risks to assess their impact on achieving the defined objectives at both the entity and transaction levels. Management estimates the significance of a risk by considering the magnitude of impact, likelihood of occurrence, and nature of the risk. Magnitude of impact refers to the likely magnitude of the e..." Tag: Visual edit
• 21:5021:50, 15 August 2026 diff hist +164 7.07 No edit summary
• 21:4921:49, 15 August 2026 diff hist +357 N 7.07 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.07''' - Management analyzes the identified risks, on a periodic and ongoing basis, to estimate their significance, which provides a basis for responding to the risks.⁴⁶ Significance refers to a risk's impact on achieving a defined objective." Tag: Visual edit
• 21:4821:48, 15 August 2026 diff hist +6 7.06 No edit summary current Tag: Visual edit
• 21:4821:48, 15 August 2026 diff hist +164 7.06 No edit summary
• 21:4721:47, 15 August 2026 diff hist +950 N 7.06 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.06''' - Risk identification methods may include qualitative and quantitative ranking activities, forecasting and strategic planning, data analytics, and consideration of internal control deficiencies identified through monitoring activities or reported by internal or external parties. Performing an analysis to identify the root causes of internal control deficiencies..." Tag: Visual edit
• 21:4621:46, 15 August 2026 diff hist +1 7.02 No edit summary current Tag: Visual edit
• 21:4321:43, 15 August 2026 diff hist +51 5.08 →This is a Place Saver - Seven Second Barrier to Fraud current Tag: Visual edit
• 21:4021:40, 15 August 2026 diff hist +769 5.08 →No Examples Tag: Visual edit
• 19:5419:54, 15 August 2026 diff hist +6 7.05 No edit summary current Tag: Visual edit
• 19:5319:53, 15 August 2026 diff hist +164 7.05 No edit summary
• 19:5319:53, 15 August 2026 diff hist +409 N 7.05 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.05''' - Management's consideration of risk factors related to fraud, improper payments, and information security is discussed further in principle 8. Management's consideration of significant internal and external changes that could impact the internal control system is discussed further in principle 9." Tag: Visual edit
• 19:5119:51, 15 August 2026 diff hist +120 7.04 No edit summary current
• 19:4919:49, 15 August 2026 diff hist +6 7.03 No edit summary current Tag: Visual edit
• 19:4919:49, 15 August 2026 diff hist +164 7.03 No edit summary
• 19:4819:48, 15 August 2026 diff hist +872 N 7.03 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.03''' - To identify risks, management considers the types of risks that impact the entity. This includes both inherent and residual risk. Inherent risk is the risk to an entity in the absence of management's response to the risk. Residual risk is the risk that remains after management's response to inherent risk. Once risk responses have been developed to address inhe..." Tag: Visual edit
• 19:4719:47, 15 August 2026 diff hist +5 7.02 No edit summary Tag: Visual edit
• 19:4619:46, 15 August 2026 diff hist +164 7.02 No edit summary
• 19:4619:46, 15 August 2026 diff hist +1,084 N 7.02 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.02''' - Management identifies risks throughout the entity on a periodic and ongoing basis to provide a basis for analyzing risks. Risk is the possibility that an event will occur and adversely affect the achievement of objectives. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk..." Tag: Visual edit
• 19:4419:44, 15 August 2026 diff hist +6 7.01 No edit summary current Tag: Visual edit
• 19:4319:43, 15 August 2026 diff hist +164 7.01 No edit summary
• 19:4319:43, 15 August 2026 diff hist +438 N 7.01 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.01''' - Management should identify, analyze, and respond to risks related to achieving the defined objectives. '''Green Book Attribute Categories for Principle 7''' The following attributes contribute to the design, implementation, and operating effectiveness of this principle: * Identify Risks * Analyze Risks * Respond to Risks" Tag: Visual edit
• 19:4019:40, 15 August 2026 diff hist +6 6.10 No edit summary current Tag: Visual edit
• 19:4019:40, 15 August 2026 diff hist +164 6.10 No edit summary
• 19:3919:39, 15 August 2026 diff hist +744 N 6.10 Created page with "'''Risk Assessment''' '''Principle 6 - Define Objectives and Risk Tolerances''' '''Attribute 6.10''' - Management also evaluates whether risk tolerances enable the appropriate design of internal control by considering whether they are consistent with requirements and expectations for the defined objectives. As in defining objectives, management considers the risk tolerances in the context of the entity's applicable laws, regulations, and standards as well as the entity..." Tag: Visual edit
• 19:3719:37, 15 August 2026 diff hist +6 6.09 No edit summary current Tag: Visual edit
• 19:3719:37, 15 August 2026 diff hist +164 6.09 No edit summary
• 19:3619:36, 15 August 2026 diff hist +1,350 N 6.09 Created page with "'''Risk Assessment''' '''Principle 6 - Define Objectives and Risk Tolerances''' '''Attribute 6.09''' - Management defines risk tolerances in specific and measurable terms so that they are clearly stated and can be measured. For example, for an objective to process all benefit applications within 10 business days of receipt, management may determine that a risk tolerance of a range of 8-12 business days would be an acceptable level of variation. Depending on the categor..." Tag: Visual edit
• 19:3519:35, 15 August 2026 diff hist +6 6.08 No edit summary current Tag: Visual edit
• 19:3419:34, 15 August 2026 diff hist +164 6.08 No edit summary