CMA P1 Summary
CMA P1 Summary
ﻟﻤﻨﻬﺞ
ﻣﺼﺪر اﻟﻤﺤﺘﻮى اﻟﻤﻠﻒ ﻣﻌﻤﻮل mindmaps 23 Pages اﻟﻤﻠﻒ ﻳﺤﺘﻮي ﺗﻘﺮﻳﺒﺎ ﻋﻠﻰ
ﻋﻠﻰ ﺷﻜﻞ ﺧﺮاﺋﻂ ذﻫﻨﻴﺔ - size A3 ﻛﻞ
ﻋﻤﻼﻗﺔ اﻟﺘﻌﺮﻳﻔﺎت ✿
اﻟﻘﻮاﻧﻴﻦ /اﻟﻤﻌﺎدﻻت ✿
اﻟﻜﻠﻤﺎت اﻷﺳﺎﺳﻴﺔ ✿
اﻟﻤﻘﺎرﻧﺎت ✿
وأﻛﺜﺮ ✿
90% 10% اﺗﻤﻨﻰ ﺗﻄﺒﻌﻪ ﻣﻠﻮن A3 ﻟﻮ ﻃﺒﻌﺘﻪ ﻋﻠﻰ ورق A4
ﻣﻘﺎس وﻣﺘﺴﺘﺮﺧﺼﺶ
ﻟﺨﺼﺘﻪ ﺑﻨﻔﺴﻲ ﺑﻌﺾ اﻟﺠﺪاول ﻣﻦ ﺻﻔﺤﺔ ﻣﻌﻠﺶ ﺣﺘﺘﻜﻠﻒ ﺷﻮﻳﻪ ﻳﺒﻘﻰ ﺑﺘﻀﻴﻊ وﻗﺘﻚ 😀
وﻣﻜﺘﻮب ﻋﻠﻰ اﻟﻜﻴﺒﻮرد Typing وﻓﻴﺪﻳﻮﻫﺎت أﺳﺘﺎذﻧﺎ اﻟﻐﺎﻟﻲ ﻃﺎرق
اﻋﺘﻤﺎدا ﻋﻠﻰ اﻟﻤﺬاﻛﺮة واﻟﻜﻠﻤﺎت ﻧﻌﻴﻢ
اﻷﺳﺎﺳﻴﺔ ﻓﻲ اﻟﻤﻨﻬﺞ وأﺗﻤﻨﻰ اﻧﻪ ﻳﻜﻮن ﻣﻮاﻓﻖ ﻋﻠﻰ ﻧﺸﺮ
اﻋﺪاد اﻟﻄﺎﻟﺐ /أﻧﺲ اﻟﻤﻐﺮﺑﻲ
اﻟﻤﻠﻒ ﻋﻠﻰ ﺻﻔﺤﺘﻪ ﻋﺸﺎن ﻳﺴﺘﻔﻴﺪ
أﺗﻤﻨﻰ اﻧﻪ ﻣﻴﻜﻮﻧﺶ ﻓﻴﻪ اﻧﺘﻬﺎك اﻟﻜﻞ وﺗﻌﻢ اﻟﻔﺎﺋﺪة ﻟﻠﺠﻤﻴﻊ
ﺣﻘﻮق ﻣﻠﻜﻴﺔ ﻷﺣﺪ
Short term (3 months or less from first Acquired) / Highly liquid (cash/checking/saving accounts)
Cash & Cash equivalents Not Cash (Certificate of deposits CDs) / Money
market funds / Legally restricted deposits )
Inventory formulas
Cost flow
Inventory
1. perpetual Cost = Total cost of purchase ÷ number of purchased units
3. Average Costs
2. Periodic : Cost = (Beginning costs + Purchases) ÷ (Beginning units + Purchased units)
4. Specific identification
Inventory count
MACRS Tables
Fixed
Recording
Assets
1) Asset Tax purpose:
Keywords - Ignore Salvage value when
Valuation calculating dep for Tax purpose
- use Half-year convention for
the (acquision & disposal) years
Depreciation
for Tax purpose,
3 Ctgries 1. Straight
do not deduct
/ ways Line
salvale value
3. Sum-of-years-digits (Accelerated)
4. Units of Production
Compare:
1. Recover Carrying amount >
Invest- -ability Test total undiscoutned
ments cashflows
Impairment 2 Steps:
2. Recognize Imp Loss
Disposal impariment = Carrying value
Investment
in Equity loss - current fair value
Securities
Depreciation for Tax purposes
Initial Recording
.
.
.
.
.
Ex: (new technology
1) determined life (finite) amortized
Exclusive granted in US for usually 20 years
Amortization
2) no determinable life (indefinite) Not amortized, only tested regulary
Amortized at the shorter of (Economic life), or (Legal life)
Intangible
assets 1. Patents Purchased patent -> historical costs -> to be amortized
Internal generated -> only Registration & legal fees are
2. Tradename/Trademarks capitalized / amortized (R&D is expensed)
3. Copyrights (Ex. publisher) Effective of life + 70 years
if Succeed -> costs are capitalized/amortized
4. Franchises Defending patent
if failed -> all costs should be expensed (and
legally
patent to written off)
5. Goodwill (only purchased) Impairment 3 Steps 1. Qualitative 2. Quantitative 3. Test/Compare
1) Assurance Type
Warranties
1. Ownership transfer
2) Service Type
2. Option to purchase
3. major part of remaining eco life (75% or more) at least ONE criteria Finance
4. present value equal or greater than fair value (90% or more)
5. No alternative use to the lessor
in BS/Notes: Finance & Operating Leases must NOT be presented together in same 2) Valuation
of Liabilities
in Cashflow: Fianance lease (Principle is Financing Activities) & (interests are Operating)
Deferred tax Expense if position worsens: Deferred tax Benefit if position imporves: Accounting for
Df. tax Assets gets Smaller/ tax Liability gets Bigger Df. tax Assets gets bigger/ tax Liability gets smaller income Tax
(Deferred Tax)
Single Period of creation & single period of reversal
1. Municipal Bond Interest (Tax exempted)
Multiple periods of Reveersal & Constant future tax rate
2. Diviends-Received Deduction
3. Exp incurred for earning tax-exempt income Permanent
4. Life insurance expense is not deductible Differences:
& same time proceeds are not taxable
5. Exp incurred as result of violating the law
Recognition,
Additional-paid-in-Capital (APIC) Contributed
Capital
Measurment,
Liquidating dividends -> reduce APIC
Rights of Common Shareholders Valuation
Voting
with Par value Common
& Disclosure
Dividends if declared
without Par value
Preemptive
Distribution or residual assets (in liquidation) Common Shareholdors called Residual owners
3 Classifications
Small stock dividends (less than 20-20%) -> Fair Value. / Large Stock dividends -> Par value Stock dividends
1. Past Transactions / 2. Presently owned by the company / 3. Future benefit to/sacrific by the company Assets / Libailities 1. Balance Sheet
Unusual Gains & Losses (inventory damage / restructuring charge)
Include all company transactions Except for transx made with the owners Discontinued Operations
Other 2. Income
items Statement
Net income goes to Retained Earnings / Comp income is a line in the Equity section Intra-period Tax Allocation
Derivative instruments
Cash received/paid,
interest paid,
interest received & dividened received,
Paid to government for taxes/fines Cash / Cash equivalents / Restricted cash Concepts
Operation
Payment for interest on zero-coupon debt
activities Cash inflows & Outflows presented separately SCF Preparation
instruments
Paid for asset retirement obligation Steps
Paid for operating/variable lease 1. Eliminate noncash (depreciation ... )
Purchase/sale of trading securities 2. Eliminate Investing & Financing activities (subtract gains & add losses ..)
Primary purpose: explain to (financial capital providers) how the org creates value overtime
is the Process of creating OUTPUTS that are more valuable than the INPUTS
Value is created for the Org (profits) & for the others (stakeholder - society)
Diffenitions
The ability of an Org to create value for (itself), is dependednt on the value it creates to (others)
/Keywords
Value is created when the benefit derived from its use of capitals is Greater than the capitals used
Value Creation Integrated
Value is maintained through (Continuous impr - Superior quality - Superior service - Customer satisfaction) Reporting
6 capitals /External environment / Org's mission & vision / Governance
(IR)
graphic elements
/Business model / Business activities lead to outcomes / The outcomes / Performance
Well-educated labor force (+Positive externality) the effects on capitals that are not
Pollution emitted by factories (Negative externality) owned by the Org or Externalities
Integrated Report should include
1- The external env 2- The resources & relationships used by the Org
3- How the Org interacts with the external enviroment & the capitals insight. about :
to create value over short/med/long term
1. Org overview & external environment /2. Governance /3. Business model / 4. Risks & opportunities
The Content of Integrated Report
/5. Stratey & resource allocation /6. Performance /7. Outlook /8. Basis of presentation
A concise communication about the org's Strategy, Governance, Performance & Prospects
integrated report
lead to value creation in short/med & long term
A process on integrated thinking results in a periodic integrated report about value creation integrated reporting Relationships
Active consideration of the relationship between Operating, functional and Capitals. Integrated thinking
integrated thinking
leads to integrated decision making & actions that consider the creation value over short/med /long term
1. Financial /2. Physical /3. Intellectual /4. Human /5. Social /6. Natual The 6 Capitals
A set of actions by mngmt to increase the performance
Strategy
Operational plan (short-term) / Tactical plan ( intermediate )
is formulation of strategies
Strategic Planning
keywords
purpose is to guide the company 1. Organization Structure, 2. Control Structure, 3. Organization Culture
Differentation / Cost SWOT 4 Superiors - collection & evaluation of external & internal forces
Situation
The systematic - that can affect the organization’s performance & choice of strategies
Reason to be Mission Analysis
- assessing the organization’s current & future SWOT (Strn, Wkn, Oprt, Thrt)
- Motivate employees - Drive the strategies Vision 1. PEST Analysis Political, Economical, Social, Technological
Mission,
Culture Values
Vision - Strengths & weakness of competitors - Demographics & need of the market
Objectives are the 1. Precise & measurable Values - Strategies to improve the comp’s position
Goals Determine - Impediments to the company’s entering
steps to the Goals 2. Crucial (important issues)
Competitive - Barriers can erect to limit competitors’s ability to erode the comp’s
3. Limited goals & Goals
- Effectiveness Analysis place Then, developing a strategic plan
4. Challenging (realistic)
- Efficiency 5. When to be achieved (deadline) ● Define the competitors ●Analyzing competitors’ strengths & weakness
(Similar to Competitive
● Analyzing company internal strengths & weakness
1. risk for entry of competitors SWOT) analysis
● Analyzing Customer needs & wants ● Studying impediments to the market
2. Rivalry established companies ﻣﻨﺎﻓﺴﺔ Other includes:
for both Company & Competitor ● Develop a strategic plan
3. Bargaining power of Buyers 5 Forces - (Michael Porter) Planning
4. Bargaining power of Suppliers Tools
2. Contingency Planning Planning a company does to External contingencies
5. Substitutes to the industry products & Scenario Planning prepare for possible events. Internal contingencies
External
- Industry, - Country, - Macro-environment 3 environments 5.
Utility (U) – Costs (C) = Created Value
Developing &
Utility (U) – Price (P) = Consumer Surplus
Utility & Profitability Implementation
1- Barriers to imitation
Durability of
2- Capability of competitors to imitate
Competitive Advantage
3- Dynamism of the industry environment
BCG Boston Consulting Group
1. Inertia 1. Growth-Share Matrix
2. prior strategic commitments
3. Icarus paradox
Internal analysis SWOT Analysis Strategic
To avoid Planning
1. Focus on all 4 generic building blocks (GBB)
superiors (efficioncy - quality - innv - respn)
Failure Process
2. continuous improvements & learning Several
3. benchmarking Tactics
4. overcome the internal forces of inertia
withing the organization
● Ongoing processes. ● Integrated throughout the organization
Characteristics ● All former assumptions should be challenged ● Long-term in nature
of Successful ● Employees at all levels should have input ● Communicated clearly and often to everyone
3. Strategic Plans ● The success of the strategy lies in its execution
Internal ● An opportunity to develop a shared vision (joint-ownership among the staff)
Functional Level
(( 4 Superiors )) 1. Efficiency, 2. Quality, 3. Innovation, 4. Responsiveness to customers
Strategy
1. Customers’ needs - & - what needs are to be satisfied
3 Set of
2. What products - & - to which customers group
Decisions
3. How customer needs are to be satisfied using the company’s distinctive competencies
Business Level
Strategy
4.
Formulating 4 Generic Competitive Strategies
Global
1. Global standardization, 2. Localization, 3. Transnational, 4. International
Strategy
Corporate Level 1. Horizontal integration, 2. Vertical integration, 3. Strategic alliance, 4. Strategic outsourcing,
Strategy 5. Diversification
Goal Congruence Defined as: Aligning the Goals of Two or more groups
Advantage 1. Coordination & Communication 2. Measuring Performance 3. Motivations for managers & employees 4. Efficiently
of Budget allocation the resources 5. Controlling operations 6. Check on progress toward objectivs
Charactesristics Start with Plan - Management Support - Perople whos responsible for delivering - (should have input) -
of / Successful Motivational - Accurate & expected future events - Flexible (allow changes) - Not be rigid (force actions
Budgeting without mgmt review) - Coordinated among divisions - Budget's time match the Purpose (usually 1 year)
Concepts
Budget Participants Participative (Involve individuals) / Autoritative (By Mngmt) / Consultative (Mngmt 1st ask for input)
2 relate to (what Plant Can Supply) 1. Theoretical (ideal) 2. Practical (currently attainable)
Output Level
2 relate to (the demand) 1. Master budget capacity 2. Normal capacity
Benefits Nnumerical & quantitative - It's used to forecast the fixed & variable portions of costs.
Benefits &
Limitations of 1. Historical data is required.
Regression Analysis Limitations
2. it will not work if there are changes in the environment after the data was collected.
3. If independent variable was not appropriate, the resulting forecast will be invalid.
4. The conclusions are valid only for the range covered.
average for All 2. Total Time Total time = Time required for first lot × (2 × LC)n
3. Forecasting units Produced for all Total Time ÷ No of units = Average time per lot
Techniques 3. Total Time Total Time for 8 units (-) Total Time for 4 units
- Only applicable in a situation in which experience leads to improvement (labor intensive tasks).
- Assume that the learning curve rate is constant, when in reality it probably is not.
Limitations
- Assume that all increases in productivity are due to the learning process, when there may be other factors
causing the productivity increase.
Calculate: Each of the possible outcomes (x) the likelihood (probability) of that outcome occurring.
All of the results are then added together to determine the (Expected value)
Classical method
Expected Value Methods of assigning Probability Relative frequency method
Subjective method
- Both (Variance σ2) & (Standard Deviation σ) give us the variability of the
Variance &
possible values in a probability distribution
Standard Deviation
- Both measure the diversity of the possible outcomes.
the Goal of & Result of the Budgeting Process.
Annual Master (Static) Budget
Compilation of all separate (Operational) and (Financial) budget schedules.
- Makes the evaluation process better After the actual Production level is known Flexible Budget
Continuous
Adv. Budget for next period always available, Up-to-date, Managers pay more attention
(Rolling) Budget
Incremental Budget
is a process that goes on throughout the year.
Budget Cycle
accountants assist managers in investigating the variances from the plan
Manufacturing OH Budget
Projected increase in assets = (Assets that increase with increase in Projected increase
sales ÷ Sales during the past year) x Expected change in sales in Assets Forecasting
for Planning
Projected increase in spontaneous liabilities
= (Liabilities that increase spontaneously when sales increase Increase in Spontaneous
÷ Sales during the past year ) Liabilities
x Expected change in sales
Management
Efficiency
1. Cost &
Variance
Measures
((Unfavorable: inadequate maintenance, unmotivated,
inexperienced, underskilled workers))
Overhead B. OH - Applied OH
Flexible Budget
variances FMOH V
Variances ((Unfavorable: only due to Production budgeted, or due to lower
demand or supply (production stoppage))
Actual (-) A. OH (-)
Actual - Flexible
Applied / B. Applied
Allowed Production
Efficient
Volume
(No much
control)
Master / Static
Budget
Variance
Actual - Static
(Operatign
Income Only 3 Greens above
variance) Level 3 are
Level 2
the Total OH Flexible
Effectivness budget variances
(Controllable
Level 1
Variance)
Contribution
Margin IS
Major Factors: 1. Goal Congruence 2. The Capacity 3. Legal requirements Traceable FC : that can be assigned to particular segment ((Cause & Effect) (ABC)
Transfer Pricing (6) Objectives
The Best price decision is the most motivation for both Seller &
1. Promote Goal Congruence (overall company goals) Challenge
Buyer managers (Market /or Negoiated) are the best
2. Segmental performance evaluation (help senior managers for evaluation) Decision maker
3. it should motivate each profit center manager should consider:
Maximum price (for Buying dep) is Market Price
4. It should preserve autonomy (freedom for decision) among managers
Lowest price (for Seller/Production Dep) is either
5. it should meet legal & external reporting requirements Max &
Variable Cost -> if Excess Capacity
6. it shoud be easy to apply (understandable / not-complicated) Lowest
/or Variable + Lost opportunity (lost contribution margin) if Full Capacity
VC + OC ≤ Transfer Price ≤ Market Price
the most effected if we use market-based price is the Market-price will lead to the greatest good behavior for the company 1. Market Price
Profit Centre ((also called - Revenue Centre)) in the long-term (Monitor & Control any Bad Behaviors) (Arm-Lenth)
2. Cost of (Production) + (Opportunity Cost / Lost contribution) Setting the Transfer
transfer
works well if selling dep has excess capacity 3. Variable Costs pricing
price
4. Fulll Cost
if Actual costs -> Huge risk for the company as whole when Production center has Cost of Prudutction (defined in contract) + Fixed Dollar
(intermediate
8 mehtods
No Motivation to control the costs -> so better to use Standard costs amount (lump sum) or/ % of Costs (markup percentage)
5. Cost plus product)
are they able to decide to buy/sell it internally or externally? / Consider Quality & Delivery time 6. Negotiated Price
easy, simple & might serve the Goal congruence - /De-Motivation 7. Arbitrary pricing (impose by top mng)
Sellers - high price / Buyers - Low price (both Centers are profitable & happy)
8. Dual-rate
Not Actual results - High Risk - Against overall Goal Congruence
Difficulties :
Long term process, Balance
difficult to compare ScoreCard
Huge data,
No specific measure to quanitify
(DM Used* + DL Used + MOH applied = Manufacturing costs ) + Beginning WIP − Ending WIP = C.O.G.M
Cost Management
Terminology Beginning Finished inventory + Purchases for a reseller /or C.O.G.M for a manufacturer − Ending Finished inventory = C.O.G.S
Purpose
Cost
Classification
Note: period costs may allocated to production for INTERNAL decision (for pricing)
Outlay (explicit cost) / Opportunity costs (implicit costs) (Note: Economic costs = implicit + implicity costs
Rework , Scrap & Waste Rework (related to finished goods) & Scrap /Waste (related to Raw materials)
Value adding / non-value adding costs (process analysis) (affect quantitiy, quality & responsiveness )
1) Supply Not Used Theoretical (ideal) (bigger capacity gave wrong allocation rate per unit
denominator
Currently attainable (practical) capacity
Capacity level concepts Best for pricing decision
= theorectical capacity - idle time & downtime
Levels
Best for current performance evaluation (Master budget capacity)
2) Demand denominator
level concepts Best for long (Required for (GAAP), Normal capacity
term planning OH standard costs, Average of master capacity
- if balance is IMMATERIAL
-> to Only C.O.G.S
- if balance is MATERIAL
-> to
1- WIP,
2- Finished Goods
3- C.O.G.S
3 main
measurement
systems
Differ in what rate is used to allocate
DM, DL
& OH application rate
& OH allocation base
Meas-
urment
2) Cost
Accum-
ulation
Systems
Mass Production, homogeneous
Step 1:
.
.
.
.
.
.
Process
. Costing
Accumulation
(just standard OH allocaton) Customized, Unique, heterogeneous Job Order Costing
different materials (job costing) + conversion (DL & MOH) similar (process) Operation Costing (combination)
3 catergories:
Life Cycle
1) upstream costs Costing
2) Manufacturing costs
3) Downstream costs
(Plant-Wide range)
Over/under applied Traditional SINGLE Rate
(Peanut-butter-costing) Volume
(Cause & effect relationship) base
Traditional Deparmental Rate
Terms: 1. Cost object /2. Cost driver (Structural / Executional)
Activity Based
Types: Value adding / Non-value adding Costing (ABC) Allocation
Categories: 1. Unit-level 2. Batch-level 3.
Product=sustaining 4. Facility-sustaining Normal (product cost) / Abnormal (period exp) Accounting for Spoilage
too optimistic (many units- low MOH per unit) too pessimistic (less units / high MOH per unit) if the Company is
Divided into:
Operational
ABM Activity Based
Management
& ABM
Strategic
ABM
less risk & great results Process analysis : Incremental & Constant Changes
high risk
Process Reengineering:
Steps : 1. identify what we do better
/ Fundmential Changes Process Analysis
2. determine what process uses for value products
/ radical Section D
Priority : 1. process is most dysfunctional / dramatic 5) Business 15%
2. greatest impact on customers / heavy blasting Process
3. most feasible
Cost
Improvement
Management
1. Best in class levels 2. Best practice analysis 2 Types
Benchmarking
IN ORDER : 1. Identify Cretical Success Factors the Processes / (mix-skills team)
2 Do best practice analysis & document it / Steps
3. identify improvements areas
design, supplier evaluation, training, ... Prevention costs
Conformance costs
inspection, testing Appriasal costs Cost of
Quality Analysis
we findout (rework, scrap ...) Internal (Before shipped) Non-Conformances * Exam *
customer findout (warranty, ...) External (after Shipped) costs (failure costs )
Spells out the rules & procedures to be followed in making decisions for the corporation
Governance 1. it's regulate the relationships among the various Participants & Stakeholders (int & externally)
is important : 2. Goal & Objective
Agency Shareholder & Managers (their agents) may have different Goals
Problem Governance specifies the distribution of Rights & Responsibilites between Shareholder & Managers
Keywords
(Internal Control + Risk Management) are part of Corporate Goverenance
Relationship between (Internal Control - Risk Mng - Corp Governance) is InterRelated - InterConnected
Source of Corp Governance 1. Corporate charter (articles of incrprn) 2. Board of Directors 3. CEO 4. Audit Committee
Incorprators: -Sign docs Directors: Complete structure, Elect officers, Select Bank, Comply with other
- Elect Directors -Resign states, Adopt bylaws / Contractors / Shares / Stock Subrciptions / Seal (stamp)
1. Corp
Governance Who's responsible? Joint responsibility - of the board - of directors & management.
Purpose To advance the current dialogue & to Continue to promote investors & FS users
B. Specific
Select & Oversee Mngmt, Capital structure, initiate Fundamental Changes, Declare Dividends, Bylaws
O. responsibilities
D.
Governing (setting Policies) / Fiduciary (act on behalf of all
Duties
stockholders) / Loyality (Disclosure & not to usurp opportunities)
min 3 members / min 1 member shud be Financial Expert / All are financially literate /
Requirements
5 yrs after employment
Audit
Cmmtt Select&supervise Ext Auditor / review IC & Int Auditor / link between
Respnsbltes
(mngmt, ext auditor & int auditor) / review FS
2 Reports must provide 1) Openion if the FS (present fairly, in conformity with GAAP).
for Publicly traded Companies 2) how effectively is internal control (wkns) over financial reporting
Under PCAOB, Ext auditor must issue a report on IC (if company is Publicly traded)
4
1) Unqualified Yes - Correct - Fairly represent
Categories 2) Qualified Almost - some exceptions or notes
of External 3) Adverse Not even close
4.External Auditor 4) Disclaimer No idea - no openion
openions
Auditor
Biggest Risk 1. Inherent risk -> there is a mistake (bcuz of complex)
3 risks (Steps) of a
PCAOB Audit Risk if Opinion is 2. Control risk -> Client IC doesn't detect the mistake
Financial Report mistake
Adt Stndrds incorrect 3. Detection risk -> Auditor doesn't detect the mistake
is an Independent, Objective Assurance &Consulting activity, Designed to Add Value & Improve the Operations. it help
to achive Objectives by (Systematic, Disciplined) approach to Evaluate &Improve Effectviness of Risk, Control &
Internal
Governance
Auditing
must have Orgnizational Independence IA activity established by its Charter Focus in Efficiency & Effectivness
Purpose : Company Ongoing effected (accomplished) Reasonable Assurance Must be
achieve its Objectives Porcess by people No Guarantee Flexible
COSO is a Process, Effected by an entity’s Board of Directors, Management, & other Personnel, Designed to Provide ((Reasonable Assurance))
of IC - regarding the achievement of objectives relating to ORC ((Operations, Reporting, & Compliance ))
Who's interested Investors, Management, Ext Auditors, Legislative & Regulatory, Customers
Components
Internal Control the forms (permission & authorization)
3) Control
Control ** CRIME ** Activities
10. Activites that mitigating risks to objectives
Control implmeneted ➤ Benefit ➤ Cost of the Control 11. Controls over Technology
12. Establish procedures put Policies into Action
1) Authorization
1. Independent check & verficiations : involve 2 conditions
2) Completeness
(No involvement of assets custody - Unconnected original transactions)
3) Accuracy
7 transx 4) Validity
2. Compensation Controls (when not able to apply previous activities)
Control 5) Physical safeguards & Security Activities
3.Sequential pre-numbered forms
4. Specific docs flow
6) Error handling
Objectives 7) Segregation of Duties (Authrztn,
5. Safeguarding
6. Fraud (intentional, involves collusion)
Recording (shud have), Physical
7. Segregation
Custody (Actually have), Reconciliation)
Limitations No absolute Assruance / Human judgement / human errors (Breakdown) / Mgmt may override / Collusion (get Together)
Whole Company Responsibility
Foreign Corrupt
✓ Intentioned of Corrupt Pymnt (done or not) (1977)
1) Anti-bribery provision
Practices Act
✓ all companies
2 Laws / (FCPA)
proper Accounting Records is mandatory Provisions
2) Internal control provision
(or Accounting Provision)
Only Publicly Traded SEC
Applies to All publicly-held companies in the U.S., all of their divisions, & all of their wholly-owned subsidiaries.
1. Errors in system Design 2. Errors in data Transmission 3. data can be Stolen (internet)
Threats of IS 4. data & programs can be Damaged 5. programs can be altered by dis-honest employee
6. viruses, Trojan horses & worms (crash or stolen or damage) 7. Physical facilities can be damaged
Based 1. Report of the Committee of Sponsoring Org (COSO - Internal Control - Integrated Framework)
Guidlines on 2. Control Objectives for Information & related Technology (COBIT) - authored by the IT Governance Institute
2 Docs - published by the Information Systems Audit & Control Foundation (ISACF)
1. Org & Operation of computer facility (inc. Segregation of duties - Most important)
2. General Operating procedures (inc. written manuals)
3. Equipment & hardware controls (inc. Backups)
1. General 4. Access Control (inc. Physical access & Paswords)
Control Segregation of Basic Responsibilites / Functions / Duties : Authorzation - Record keeping - Assets
custody / System Analysts (design) NOT to be Programmer / Programmer NOT to access Live data /
Operators (users) NOT modify the program / users NOT to access physical assets / Authorized only can Call
Vendors support
(IS) Observation ctrl (Before entry) / Transcription ctrl - entered correctly / Tests (after)
Rollback processing used to prevent any transactions being written to disk until they are complete
Consistent processing each transaction has access to all the files and data that it needs to be processed
InConsistent processing
Unrecoverable Tranx Any failure during processing (Ex: power), Tranx are only Partially Processed
1. Approve development projects 2. Assign resources 3. Ensure that required sys dev are aligned with
Steering Org Strategic Plan
Committee
Changes should be initiated by End User & authorized by Mngmt or Steering Committee
8 stages of the
3. System 1) Objectives 2) Investigation & feasibility study 3) Analysis 4) Conceptual Design 5) Physical
development
Development Design 6) Development & testing 7) Implementation & conversion 8) Operations & maintenance
process
control
1. Changes should be made to a (Working Copy) of the program
2. Should be (Tested)
Steps of IS
3. Testing must be with (incorrect data)
development
4. Changed programe code should be (stored in Secure library) during the testing
5. Unauthorized changes can be detected by (Code Comparison)
5. Logical 1. Authentication User & pass 1.Difficult to guess 2. Ideally 3. Force password change periodically
Controls 2. Authorization A. Users can only access programs/data necessary to their job duties B. view data not change
- Not testing input & output
- Not every possible
1. Test data approach Limitations:
- Separate from live data
- Specific time
Testing Generalized Audit Software (GAS) ACL-IDEA help to retrieve information from computerized files
Comp System Control Audit Review File (SCARF)
Embedded Audit Routines
Systems or Sample Audit Review File (SARF)
Extended Record (Tag specific tranx -> extend - put in a Record file)
Auditing
within the Snapshot Debugging technique
System
Tracing To verify that Int Control are Executed (reveal Unexcuted code)
Mapping Special Software - determine if Program Contorl Statements (in source langauge) are Executed
Threats to IS Viruses, Worm , Trojan horses (no-replicate), Virus hoax, Logic bombs, Backdoors
Virus : Replicate themselves. alters the way that a computer operates. Damage programs, Delete files,
or reformat HDD
Worm : program that replicates itself from system to system without the use of any host file.
A hot site: - Equipment similar to the one used regularly - Must be fully operational -
DR planning immediately available.
(Contingency)
A cold site: - all of the needed Equipment can be installed - Equipment &
telecommunications are not immediately available.
A warm site: - has the Equipment & necessary data & communications links installed -
Does not have live data
Supply
Chain &
AIS
Add Value by providing accurate and timely information so that all of the value chain activities can be performed efficiently and effectively
Master files : permanent info (G/L account numbers / History or Customer account No / Historical data for each customer)
Elements of
AIS Automated Transaction files : used to update master files Remember (Transaction Codes)
AIS
Block Codes : numbers for accounts in GL chart of accounts
Modules : Special journals are used for specific kinds of transx & in a computerized system
Output of 1. Should include a date or dates 2. Should be consistent over time 3. Should be in convenient format
Automated AIS (info that is easy to identify / Summary reports for financial totals / Comparative reports (Related numbers)
AIS Tranx • Revenue to cash cycle. • Purchasing & expenditures cycle. (FOB shipping point) • Production cycle.
Cycles
• HR & payroll cycle. • Financing cycle. • Fixed asset cycle • General ledger & Reporting systems.
Financial Reporting Sys (External) (BS, IS, Stt of Cash flows, Stt of Comprehensive income & Changes in Equity) + (Trial Balance / GL)
Management Reporting Sys (Internal) Cost Accounting systems (Profitability) Reporting Systems ✦ & (Responsibility) Reporting System
Collection of Related data-files, Combined in 1 Location, to eliminate Redundancy, Used by different apps, Accessed by multiple users
Primary Key a data Field in a record differentiate one record from other Foreign Key Connect record to other record
DB
3 Cardinalities / Relationship types / Relationship models 1. One-to-one / 2. One-to-many / 3. Many-to-many
1. DBMS used to Create database, maintain it, safeguard it, make it available for apps & inquiries.
4 DBMS Primary Functions 1.DB development 2.DB maintenance 3.DB interrogation (Querly lang /SQL) 4.App development
Sys Components:
• Production planning. determining (what raw materials - when - how much). • Logistics, both inbound (materials
management) & outbound (distribution). • Accounting & finance. • HR • Sales, distribution, & order management.
(IS)
Features 1. Integration. 2. Centralized database. 3. Usually require business process reengineering.
Extended ERP Sys ✦Systems interface with Customers & Suppliers through Supply Chain Management app✦Give them access to internal info
✦ Business re-engineering ✦ Converting data can be time-consuming & costly ✦ if done incorrectly result for (inaccurate info) ✦
Training employees disrupts existing workflows ✦ Unsuccessful ERP transition can result in system-wide failures (so financial losses)
Dis-
✦ Customers who r inconvenienced by the implementation may leave ✦ It is critical that it be completely functional & completely
advantages
understood by all employees before it “goes live” ✦ No opportunities are available to “work out the bugs” or “learn the ropes” when the
business relies on the one system ✦ Ongoing costs after implementation (hardware - maintenance - upgrade)
ERP To be 1) Be free of errors 2) Be uniformly defined 3) Cover a longer time span than the company’s transactions sys to
Data
sys useful enable Historical Research 4) Allow users to write Queries that can draw info from several/different areas of the DB
Warehouse
Data subsection of a (Data Warehouse) ✦ provides users with Analytical Capabilities for a restricted set of data ✦ (Sensitive Data Security)
Mart
3 Types 1. Dependent 2. Independent 3. Hybrid
✦ Un-Structured ✦ NoSQL
Data
Lake SQL can be used as a query language with a NoSQL database management system, but
SQL is not the main query language used because its usage is limited to structured data.
EPM KPIs, Balance Scorecards, Strategy Maps EPM software can be on premises or it can be deployed as Software as a Service (SaaS) “Cloud”
sys
✦ Reports comparing actual performance to goals ✦ Reports on attainment of KPIs by department.
CPM
Capabilities ✦ Balanced scorecards, strategy maps, and other management tools ✦ Creating & revising forecasts and performing modeling
BPM
✦ Generating dashboards presenting current information (customized)
is Quality Control for Data is a Process that helps better manage & control Org data assets
All of the means by which businesses are directed and controlled (rules,
regulations, processes, customs, policies, procedures, institutions & laws) Data Gov.
Includes
spells out the rules and procedures to be followed in making decisions
➤ Data availability, usability, integrity, security, privacy, integration ➤ System availability, System maintenance Data Gov
➤ Compliance with regulations, ➤ Roles & responsibilities, ➤ Data flows (internal & external) Manages
✿ Identify Roles ✿ provide a Benchmark ✿ Higher Likelihood of implementing Effective Governance &
Benefits
Controls ✿ Break down Objectives & Activities into Groups ✿ Regulatory Compliance
COBIT® 5 was introduced in 2012 - COBIT® is now known simply by its acronym.56
➤ Stakeholder needs r considered. Conditions & options r evaluated. in order to determine balanced, agreed objectives COBIT's
➤ Prioritization & decision-making are used to set direction. purpose of
➤ Performance & compliance are monitored in terms of the direction & objectives. Govrnnce
Plan, Build, Run, & Monitor Activities, in accordance with the Direction set by the body responsible for Governance purpose of
(such as the board of directors) - in order to achieve the Enterprise Objectives management
Data Capture / Maintenance / Synthesis / Usage / Analytics / Publication / Archival / Purging Data LifeCycle Life
Cycle
Federal, state, & local document retention requirements / Requirements of the Sarbanes- 4 Factors in Establishing a
of
Oxley Act of 2002 / Statute of limitations information / Accessibility / Records of records Records Management Policy
data
Access, change, or destroy data, interrupt business operations, or, as with Ransomware / Extortion Cyper Attacks
process or methods of protecting Internet-connected networks, devices, or data from Attacks
Cyper Security
Copyright infringement / Denial of Service (DOS) / Buffer overflow attacks /
Password attacks / Phishing / Malware / Ransomware / “Pay-per-click” abuse
Risks Controls
against
Encryption / Ethical Hackers (intrusion, penetration, vulnerability testing) / Advanced Firewalls Defenses
Security
✿ Something you know (password)
✿ Something you are (fingerprint) 3 Strategies breaches
✿ Something you have (security card) Logical
2 independent actions before your access is granted Two Factors Identification Also 2 types of
Access Controls
Walls & fences / Locked gates / Manned guard posts / Cameras / Dogs / Alarm
Physical
systems / Smoke detectors & fire suppression systems
➤ Objectives (needs) ➤ Investigation & Feasibility Study of Alternative Solutions (options) System
➤ System Analysis ➤ Conceptual desing (initial) ➤ Physical design (workflow, controls..) Development
➤ Development & Testing ➤ System implementation & Conversion ➤ Operations & Maintenance life cycle
to determine the specific way the process is being accomplished from beg to end Purpose
Buseinss
info to monitor Efficiency & Productivity, locate Weakness, pinpoint potential Improvments Provides
Process
1. Determine the Process to be analyze 2. Collect Process Information 3. Map the process Analysis
5 Steps
4. Analyze the process (cost & benefits) 5. Determine potential improvements
Communicate with other allows automation (without Not part of the Org's Frees-up
apps/software/systems changing Existing Systems) IT infrastructure Employees
Creating Intelligent Machines (especially comp), that can Simulate Human intelligence
Def.
processes (Picture Recognition)
Sets of step-by-step instructions that a computer can execute to perform a task. uses Algorithms
Some AI applications can learn from data & self-correct, according to the instructions given
1. Weak (or Narrow) AI : Can simulate Human Cognitive funcitons, but it is not Conscious
2 Categroies
2. Strong (or Artificial General Intelligence) (only in theory & not in reality)
will transform what accountants do (repetitive tasks) will not replace accountants AI & Accounting
is a model for Enabling Ubiquitous, Convenient, On-demand network access to a Shared Pool of configurable computing
Def.
resources - that can be Rapidly Provisioned &Released with Minimal Management effort or service provider interaction
SaaS Capability to use provider's app running on a cloud infrast. (minimum Control)
PaaS Capability to deploy onto the cloud infras (platform) (customer create/acquire apps using the supported lang)
Cloud IaaS Capability to provision processing, storage, networks & other fundamental comp resources
Comp- ➤ User pay only what they use (scalable) (decrease / increase)
○ if no internet, operations stop ○ Quality of Service need to be Monitored ○ Loss of data Control (security concerns)
○ Overseas Language barrier / time-zone problems ○ Customizations are limited ○ Timing for automatic backups
Limitations
(morning/night) ○ Cloud cannot overcome weak internal control (IC) ○ Data Governance (D.G) must be structured to
cover the Cloud inheren risks ○ Expected Cost saving many not materialize
♥ is a Public Record of Transactions in Chronological order ♥ A way for one Internet user to transfer a
(Unique Piece of Digital Property) to another Internet user ♥ Transfer is Guaranteed to be Safe & Secure
♥ Everyone knows that the transfer has taken place, &nobody can challenge the legitimacy of the transfer
node powerful Comp running software that keeps the BkCh running by particiapting in the rely of info
miners nodes (Comp's) on the BkCh that group outstanding tranx into blocks & add them to the BkCh
A database held by each node in a network & each node updates the database independently
Distributed
Block ledger Records are independently constructed &passed around the network by the various nodes (UnCenterlized)
Chain
Hashing Taking an (Input) string & giving an (Output) using a hasing Alogrithm
(BkCh)
is a Record in a BkCh that contains & confirms many waiting transactions
Block Each block has a (1) the details of the transactions in the block (2) the hash of the information in the block just preceding it
header that contains (3) a “nonce” (4) the hash of the information in the block,
nonce random String of charac that is appended to the tranx (before the block is hashed (to verify the block)
is a set of Promises, specified in digital form, including protocols within which the parties perform
on these promises
translating the terms &conditions of a traditional Agreement into a Computational code written
is created by
by BlockChain developers in a programming language
Executing of SC after it is uploaded to a BlockChain, Validity is checked & required Steps are enabled
Good Governance is important (Ongoing attemtnion & required actions & revisions)
○ Operation is only as smart as the info it receives & the Comp code that directs it (prog & setup properly)
Limitations ○ Existing laws & regulations apply to all Cont's Equally ○ Could introduce operational, technical & cyberSecurity risk
○ Subject to fraud & manipulation (damage code)
Process of Gathering & Analysing data - to produce Meaningful Information - can be used to aid in Decisions Def.
1. DeScriptive (what happened) / 2. Diagnostic ( why )
4 Types
3. PreDictive (what's likely to happen) / 4. PreScriptive (what need to happen)
Combination of (Architectures & Analytical Tools, Data Base, Apps) - Enable access to Data & Prediction
Data (raw /facts) - Info (Data Processed & Analyzed) - Knowledge (understanding)
Data to Action
- Insight (deep & clear) - Decisions (recommendations) - Action (implemented)
Vast DB, Too large to be analyzed using standard software, require New Technologies (Data Analytics) Business
intelligence
1. Structured data 2. Unstructured data (ex: emails) 3. Semi-Structured data 3 Categories Big
Data
1. Volume (amount) 2. Velocity (flow rate) (speed) 3. Variety (forms)
4V's attributes
4. Veracity (accuracy) 5. Variability 6. Value
Data & Data Science are is a field of study & analysis that uses Algorithms & processes
Complmenetary Assets to extract (Hidden knowledge) & insights from data
Data
Science
to use both Structured & Unstructured data to extract info that can be used to
Objective
develop knowledge & insights for forecasting & strategic decision making
Use of Statistical Techniques to search large Data to Extract & Analyze data - in order to Discover
Previously Unknown useful Patterns, Trends & Relationships - used to make Decisions & Prediction
uses Specialized Computational methods derived from the fields of Statistics, Machine learning, & Artificial intelligence
in Data mining, the Context of Words & info must be Considered Context
Ability to predict /assign a label to a “new” observation based on a model built from past experience
Generalization
Data Mining invovles Generalization of Patterns from a Data Set 4. Data
Classification (who) / Prediction (amount) / Association rules (related Analytics
use in Predictive
items) / Online recommendation systems / Data reduction (groups) / Clustering
Analysis
(groups) / Dimension reduction / Data Exploration / Data Visualization
are systems that can recognize patterns in Data - & use the patterns to make predictions using New Data Data
mining
Neural networks derive their knowledge from their own data by
sifting through the data &recognizing patterns Neural
Network
Results of Neural Networks Predictions (output) becomes (input) for the next iteration model
a weakness of neural networks & occurs when the model fits the training data
perfectly, but does not generalize well & does not do a good job of predicting
Overfitting Data
Underfitting happens - the model is too simple - it will not be flexible enough in
learning from the data
Poor Data quality / Data in multiple locations / Biases are amplified in evaluating data /
Analyzed data displays correlations, not prove Causation / Ethical issues, such as privacy / Challenges
Data Security / Growing volume of unstructred data
used to store data from all sources and is a good way to store data when unstructured data is included Data Lake
aims to provide better understanding of data & predictions by showing
Def.
the data in a visual way than simply in a table Data
Scatter plot / Dot plot / Bar chart / Pie chart / Line chart / Bubble chart / Histogram / Boxplot Common
visualization
Measure the Extent to which an Effect has Historically been the result of a specific Cause
If relationship between Cause & Effect is sufficiently Strong, regression analysis using
historical data can be used for Decisions &Predictions
line A formalization, one would fit a trend line through the graphed data just by looking at it
of
best use a ruler &move it up & down, changing the angle, until it appears the differences
fit between the points &the line drawn with the straight edge have been minimized
Multiple regression more than one independent V is known to impact a dependent V & Each independent
analysis Variable can be expressed numerically ŷ = b₂x₂ + b₄x₄ + …
1. Correlation num measure that expresses both the Direction (positive /or negative) &the
coefficient (R) Strength of the linear association between 2 variables (R is between −1 & +1 )
Rep the average distance that the observed values fall from the regression line
2. standard
Correlation Error how wrong the regression model is on average, using units of the
Analysis dependent variable (y) ( ŷ = a + bx + e )
Analytic
the % of the total variation in the dependent variable (y) that can be
tools (4 statistics 3. Coefficient of
explained by variations in the independent variable (x), as depicted
calcultns) determination (R²)
by the regression line. ((Reliability)) ((R² is between 0 and 1))
measures the degree to which the independent variable has a valid (Long-
4. T- term relationship) with the dependent variable
statistics
for the independent variable used in a simple regression analysis T should be > 2
Goodness A measure of how close the (Actual values used) in a (Statistical model) are to the expected
of fit (predicted) values in the model
the Range we expect a Certain % of the items from a sample to fall in. it's used in Regression
Confidence Analysis to describe the Uncertainty amount caused by the (Sample) method used
interval ((mostly Confidence interval is 95%))
Limitations ☻ Require Historical data ☻ use of Historical data is Questionable - if still relevant & useful? ☻
of Reg Results depends on choice of the indpdnt V ☻Statstical relationships maybe valid for 1 sample
Analysis
Sensitivity Analysis determine how much prediction will change if (One) input is changed
known as
used to determine which input parameter is most important
(“What-if”) for achieving accurate predictions
Monte Carlo determine how much Prediction will change if Multiple variables changed
Sensitive Simulation used to develop an expected value when the situation is complex
analysis
Analysis & the values cannot be expected to behave predictably
Benefits of Sens √ Idetnify most Critical Variables √ Simulate is flexible (wide variety) √ Both
& Simu analysis are easily understood √ Many sim models can be impl without Speical Softwre
Results can be ambiguous when inputs used are themselves predictions ☻ Variables
Limitations to be interrelated ☻ Simu is not an Optimization technique ☻ No Guarantee for best
Performance ☻ Only as accurate as model used ☻ Noway to Test the accuracy
☻ Big Data is used to find Correlations (May not be the Causes to each other)
☻ if Wrong Questions are asked to find Correlation, Insights will be meaningless
Limitates of ☻Failure to take all relevant Variables can lead to inaccurate predictions
Data Anaylsis ☻ Data braches are a risk of using Big Data ☻ Customer Privace issues & Risk of misuse
☻ Cost of Data Analytics tools & Training ☻ Selction of the Right Data Analytics is Difficult