User contributions for Neil thibodaux

15 August 2026

• 15:2015:20, 15 August 2026 diff hist +685 N 8.13 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.13''' - Management considers existing improper payment estimates, if available, when determining the significance of risks and the effectiveness of the internal control system in responding to improper payment risks. These estimates may come from management's annual improper payment estimates as part of its monitoring activities, which may be man..." Tag: Visual edit
• 15:1915:19, 15 August 2026 diff hist +1,447 N 8.12 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.12''' - Management considers improper payment risk factors, both internal and external, which may include the following: * whether the program or activity is new to the entity; * the complexity of the program or activity; * the volume of payments made through the program or activity; * whether the payments or payment eligibility decisions are ma..." Tag: Visual edit
• 15:1715:17, 15 August 2026 diff hist +1,287 N 8.11 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.11''' - Management considers the types of improper payments that could impact the entity to provide a basis for identifying and analyzing improper payment risks. Improper payments are any payments that should not have been made or that were made in an incorrect amount. Payments are also considered improper when there is insufficient or lack of do..." Tag: Visual edit
• 15:1615:16, 15 August 2026 diff hist +922 N 8.10 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.10''' - Management considers fraud risk factors. Fraud risk factors do not necessarily indicate that fraud exists but are often present when fraud occurs. Fraud risk factors may include the following: * '''Incentive/pressure''' - Management, other personnel, or external parties have an incentive or are under pressure, which provides a motive to..." Tag: Visual edit
• 15:1415:14, 15 August 2026 diff hist +353 N 8.09 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.09''' - In addition to fraud, management also considers the risk of management override of controls. Management override of controls does not necessarily involve fraud but may indicate potential fraud and increases fraud risk." Tag: Visual edit
• 15:1315:13, 15 August 2026 diff hist +966 N 8.08 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.08''' - In addition to fraud, management considers other forms of misconduct that can occur, such as waste and abuse. Waste is the act of using or expending resources carelessly, extravagantly, or to no purpose. Abuse involves behavior that is deficient or improper when compared with behavior that a prudent person would consider reasonable and ne..." Tag: Visual edit
• 15:1215:12, 15 August 2026 diff hist +563 N 8.07 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.07''' - As part of a risk assessment, management considers the risk of fraud that could impact the entity from both within the entity and from external parties. For example, external fraud risk may arise when an entity relies on service organizations' internal control systems to perform business processes for the entity. External parties that pre..." Tag: Visual edit
• 15:1115:11, 15 August 2026 diff hist +1,434 N 8.06 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.06''' - Management considers the types of fraud that could impact the entity to provide a basis for identifying and analyzing fraud. Fraud involves obtaining something of value through willful misrepresentation. Types of fraud may include the following: * '''Fraudulent reporting''' - Intentional misstatements or omissions of amounts or disclosur..." Tag: Visual edit
• 15:0915:09, 15 August 2026 diff hist +651 N 8.05 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8.05''' - Management considers information that internal and external parties provide to identify risks related to fraud, improper payments, and information security. This may include information reported by the office of inspector general, internal auditors, personnel, service organizations, and other external parties that interact with the entity..." Tag: Visual edit
• 15:0815:08, 15 August 2026 diff hist 0 8.03 No edit summary Tag: Visual edit
• 15:0715:07, 15 August 2026 diff hist +1,172 N 8.03 Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8,03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and f..." Tag: Visual edit
• 15:0415:04, 15 August 2026 diff hist +164 7.10 No edit summary
• 15:0315:03, 15 August 2026 diff hist +164 7.11 No edit summary
• 15:0315:03, 15 August 2026 diff hist −13 7.12 No edit summary Tag: Visual edit
• 15:0315:03, 15 August 2026 diff hist +164 7.12 No edit summary
• 15:0215:02, 15 August 2026 diff hist +164 7.13 No edit summary
• 15:0115:01, 15 August 2026 diff hist +164 7.14 No edit summary
• 15:0015:00, 15 August 2026 diff hist +138 7.15 No edit summary
• 15:0015:00, 15 August 2026 diff hist +21 7.15 No edit summary Tag: Visual edit
• 14:5914:59, 15 August 2026 diff hist +547 N 7.14 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.14''' - Performance measures are used to assess whether risk response actions enable the entity to operate within the defined risk tolerances. When risk response actions do not enable the entity to operate within the defined risk tolerances, management may need to revise risk responses or reconsider defined risk tolerances. Management may need to conduct periodic risk..." Tag: Visual edit
• 14:5814:58, 15 August 2026 diff hist +446 N 7.13 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.13''' - After designing risk responses, management then considers residual risk. In instances where a risk response results in the residual risk exceeding defined risk tolerances, management revisits and revises the response. Operating within the defined risk tolerance provides greater assurance that the entity will achieve its objectives." Tag: Visual edit
• 14:5714:57, 15 August 2026 diff hist +904 N 7.12 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.12''' - When designing controls to mitigate risk, management may modify controls related to the entity's oversight responsibilities, organizational structure, and responsibilities and authorities throughout the entity. Management may also develop separate processes within the periodic and ongoing risk assessment process⁵⁰ with separate oversight responsibil..." Tag: Visual edit
• 14:5614:56, 15 August 2026 diff hist +664 N 7.11 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.11''' - Based on the selected risk response, management designs controls to effectively mitigate the analyzed risks on a timely basis. If management has chosen to reduce or share a risk, then management designs controls, which may exist within each component of internal control or constitute a specific control activity. Typically, controls are not needed when an entit..." Tag: Visual edit
• 14:5514:55, 15 August 2026 diff hist +885 N 7.10 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.10''' - Management designs responses to the analyzed risks so that risks are within the defined risk tolerance for the defined objective.⁴⁷ Management designs overall risk responses for the analyzed risks based on the significance of the risk, defined risk tolerance, and cost-benefit determination.⁴⁸ These risk responses may include the following..." Tag: Visual edit
• 14:5314:53, 15 August 2026 diff hist +164 7.09 No edit summary
• 14:5314:53, 15 August 2026 diff hist +594 N 7.09 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.09''' - Risks may be analyzed individually or grouped into categories with related risks and analyzed collectively. Regardless of whether risks are analyzed individually or collectively, management considers the correlation among different risks or groups of risks when estimating their significance. The specific risk analysis methodology used can vary by entity becaus..." Tag: Visual edit
• 14:5214:52, 15 August 2026 diff hist +164 7.08 No edit summary
• 14:5114:51, 15 August 2026 diff hist −13 7.07 No edit summary Tag: Visual edit
• 14:5114:51, 15 August 2026 diff hist +913 N 7.08 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.08''' - Management estimates the significance of the identified risks to assess their impact on achieving the defined objectives at both the entity and transaction levels. Management estimates the significance of a risk by considering the magnitude of impact, likelihood of occurrence, and nature of the risk. Magnitude of impact refers to the likely magnitude of the e..." Tag: Visual edit
• 14:5014:50, 15 August 2026 diff hist +164 7.07 No edit summary
• 14:4914:49, 15 August 2026 diff hist +357 N 7.07 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.07''' - Management analyzes the identified risks, on a periodic and ongoing basis, to estimate their significance, which provides a basis for responding to the risks.⁴⁶ Significance refers to a risk's impact on achieving a defined objective." Tag: Visual edit
• 14:4814:48, 15 August 2026 diff hist +6 7.06 No edit summary Tag: Visual edit
• 14:4814:48, 15 August 2026 diff hist +164 7.06 No edit summary
• 14:4714:47, 15 August 2026 diff hist +950 N 7.06 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.06''' - Risk identification methods may include qualitative and quantitative ranking activities, forecasting and strategic planning, data analytics, and consideration of internal control deficiencies identified through monitoring activities or reported by internal or external parties. Performing an analysis to identify the root causes of internal control deficiencies..." Tag: Visual edit
• 14:4614:46, 15 August 2026 diff hist +1 7.02 No edit summary Tag: Visual edit
• 14:4314:43, 15 August 2026 diff hist +51 5.08 →This is a Place Saver - Seven Second Barrier to Fraud Tag: Visual edit
• 14:4014:40, 15 August 2026 diff hist +769 5.08 →No Examples Tag: Visual edit
• 12:5412:54, 15 August 2026 diff hist +6 7.05 No edit summary Tag: Visual edit
• 12:5312:53, 15 August 2026 diff hist +164 7.05 No edit summary
• 12:5312:53, 15 August 2026 diff hist +409 N 7.05 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.05''' - Management's consideration of risk factors related to fraud, improper payments, and information security is discussed further in principle 8. Management's consideration of significant internal and external changes that could impact the internal control system is discussed further in principle 9." Tag: Visual edit
• 12:5112:51, 15 August 2026 diff hist +120 7.04 No edit summary
• 12:4912:49, 15 August 2026 diff hist +6 7.03 No edit summary Tag: Visual edit
• 12:4912:49, 15 August 2026 diff hist +164 7.03 No edit summary
• 12:4812:48, 15 August 2026 diff hist +872 N 7.03 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.03''' - To identify risks, management considers the types of risks that impact the entity. This includes both inherent and residual risk. Inherent risk is the risk to an entity in the absence of management's response to the risk. Residual risk is the risk that remains after management's response to inherent risk. Once risk responses have been developed to address inhe..." Tag: Visual edit
• 12:4712:47, 15 August 2026 diff hist +5 7.02 No edit summary Tag: Visual edit
• 12:4612:46, 15 August 2026 diff hist +164 7.02 No edit summary
• 12:4612:46, 15 August 2026 diff hist +1,084 N 7.02 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.02''' - Management identifies risks throughout the entity on a periodic and ongoing basis to provide a basis for analyzing risks. Risk is the possibility that an event will occur and adversely affect the achievement of objectives. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk..." Tag: Visual edit
• 12:4412:44, 15 August 2026 diff hist +6 7.01 No edit summary Tag: Visual edit
• 12:4312:43, 15 August 2026 diff hist +164 7.01 No edit summary
• 12:4312:43, 15 August 2026 diff hist +438 N 7.01 Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.01''' - Management should identify, analyze, and respond to risks related to achieving the defined objectives. '''Green Book Attribute Categories for Principle 7''' The following attributes contribute to the design, implementation, and operating effectiveness of this principle: * Identify Risks * Analyze Risks * Respond to Risks" Tag: Visual edit