P3 Express Notes

Notes
CIMA Paper P3
Performance Strategy
For exams in 2012
theexpgroup.com
CIMA P3 Performance Strategy
ExPress Notes
Contents
About ExPress Notes
1. 2. 3. 4. 5. Management Control Systems Risk and Internal Control Review and Audit of Control Systems Management of Financial Risk Risk and Control in Information Systems
3
7 11 24 27 48
Page | 2
2012 The ExP Group. Individuals may reproduce this material if it is for their own private study use only. Reproduction by any means for any other purpose is prohibited. These course materials are for educational purposes only and so are necessarily simplified and summarised. Always obtain expert advice on any specific issue. Refer to our full terms and conditions of use. No liability for damage arising from use of these notes will be accepted by the ExP Group.
theexpgroup.com
ExPress Notes
START About ExPress Notes

We are very pleased that you have downloaded a copy of our ExPress notes for this paper. We expect that you are keen to get on with the job in hand, so we will keep the introduction brief. First, we would like to draw your attention to the terms and conditions of usage. Its a condition of printing these notes that you agree to the terms and conditions of usage. These are available to view at www.theexpgroup.com. Essentially, we want to help people get through their exams. If you are a student for the CIMA exams and you are using these notes for yourself only, you will have no problems complying with our fair use policy. You will however need to get our written permission in advance if you want to use these notes as part of a training programme that you are delivering. WARNING! These notes are not designed to cover everything in the syllabus! They are designed to help you assimilate and understand the most important areas for the exam as quickly as possible. If you study from these notes only, you will not have covered everything that is in the CIMA syllabus and study guide for this paper. Components of an effective study system On ExP classroom courses, we provide people with the following learning materials: The ExPress notes for that paper The ExP recommended course notes / essential text or the ExPedite classroom course notes where we have published our own course notes for that paper The ExP recommended exam kit for that paper. In addition, we will recommend a study text / complete text from one of the CIMA official publishers, but we do not necessarily give this as part of a classroom course, as we think that it can sometimes slow people down and reduce the time that they are able to spend practising past questions.
ExP classroom course students will also have access to various online support materials, including: The unique ExP & Me e-portal, which amongst other things allows view again of the classroom course that was actually attended. ExPand, our online learning tool and questions and answers database
Everybody in the World has free access to CIMAs own database of past exam questions, answers, syllabus, study guide and examiners commentaries on past sittings. This can be
Page | 3
theexpgroup.com
ExPress Notes
an invaluable resource. You can find links to the most useful pages of the CIMA database that are relevant to your study on ExPand at www.theexpgroup.com.
How to get the most from these ExPress notes

For people on a classroom course, this is how we recommend that you use the suite of learning materials that we provide. This depends where you are in terms of your exam preparation for each paper.
Your stage in study for each paper Prior to study, e.g. deciding which optional papers to take These ExPress notes ExP recommended course notes, or ExPedite notes Dont use yet ExP recommended exam kit Dont use yet CIMA online past exams
Skim through the ExPress notes to get a feel for whats in the syllabus, the size of the paper and how much it appeals to you. Work through each chapter of the ExPress notes in detail before you then work through your course notes. Dont try to feel that you have to understand everything just get an idea for what you are about to study. Dont make any annotations on the ExPress notes at this stage.
Have a quick look at the two most recent real CIMA exam papers to get a feel for examiners style. Dont use at this stage.
At the start of the learning phase
Work through in detail. Review each chapter after class at least once. Make sure that you understand each area reasonably well, but also make sure that you can recall key definitions, concepts, approaches to exam questions, mnemonics, etc.
Nobody passes an exam by what they have studied we pass exams by being efficient in being able to prove what we know. In other words, you need to have effectively input the knowledge and be effective in the output of what you know. Exam practice is key to this. Try to do at least one past exam question on the learning phase for each major chapter.
Page | 4
theexpgroup.com
ExPress Notes
Your stage in study for each paper Practice phase
These ExPress notes
ExP recommended course notes, or ExPedite notes Avoid reading through your notes again. Try to focus on doing past exam questions first and then go back to your course notes/ ExPress notes if theres something in an answer that you dont understand.
ExP recommended exam kit This is your most important tool at this stage. You should aim to have worked through and understood at least two or three questions on each major area of the syllabus. You pass real exams by passing mock exams. Dont be tempted to fall into passive revision at this stage (e.g. reading notes or listening to CDs). Passive revision tends to be a waste of time. Dont touch it!
CIMA online past exams
Work through the ExPress notes again, this time annotating to explain bits that you think are easy and be brave enough to cross out the bits that you are confident youll remember without reviewing them.
Download the two most recent real exam questions and answers. Read through the technical articles written by the examiner. Read through the two most recent examiners reports in detail. Read through some other older ones. Try to see if there are any recurring criticism he/ she makes. You must avoid these! Do a final review of the two most recent examiners reports for the paper you will be taking tomorrow.
The night before the real exam
Read through the ExPress notes in full. Highlight the bits that you think are important but you think you are most likely to forget.
Unless there are specific bits that you feel you must revise, avoid looking at your course notes. Give up on any areas that you still dont understand. Its too late now. Avoid looking at them in detail, especially if the notes are very big. It will scare you.
At the door of the exam room before you go in.
Read quickly through the full set of ExPress notes, focusing on areas youve highlighted, key workings, approaches to exam questions, etc.
Leave at home.
Leave at home.
Page | 5
theexpgroup.com
ExPress Notes
Our ExPress notes fit into our portfolio of materials as follows:
Notes
Provide a base understanding of the most important areas of the syllabus only.
Notes
Provide a comprehensive coverage of the syllabus and accompany our face to face professional exam courses
Notes
Provide detailed coverage of particular technical areas and are used on our Professional Development and Executive Programmes.
To maximise your chances of success in the exam we recommend you visit www.theexpgroup.com where you will be able to access additional free resources to help you in your studies.
START About The ExP Group

Born with a desire to be the leading supplier of business training services, the ExP Group delivers courses through either one of its permanent centres or onsite at a variety of locations around the world. Our clients range from multinational household corporate names, through local companies to individuals furthering themselves through studying for one of the various professional exams or professional development courses. As well as courses for CIMA and other professional qualifications, our portfolio of expertise covers all areas of financial training ranging from introductory financial awareness courses for non financial staff to high level corporate finance and banking courses for senior executives. Our expert team has worked with many different audiences around the world ranging from graduate recruits through to senior board level positions. Full details about us can be found at www.theexpgroup.com and for any specific enquiries please contact us at info@theexpgroup.com.
Page | 6
theexpgroup.com
ExPress Notes
Chapter 1
Management Control Systems
START The Big Picture

This chapter addresses the evaluation of management control systems in the context of organizational objectives and structures.
KEY KNOWLEDGE The Purpose of Management Control Systems

Management control systems consist of formalized information-based procedures and techniques employed by managers in order to direct the activities of an organization toward pre-defined objectives. All management control systems address the following basic issues within an organization:
Page | 7
theexpgroup.com
ExPress Notes
Measuring activities both financial and non-financial based on relevant data provided by an effective management accounting system; Informing and supporting decisions relating to resource allocation; Providing communication to and motivating staff
The overall goal is to ensure that all efforts within the organization both individual and collective are defined and coordinated so that the objectives of the organization are fulfilled.
KEY KNOWLEDGE Achieving control within organizations

An organization can influence desired behavior on the part of its staff through a number of instruments, including: Employment contracts; Internal policies and procedures; Discipline and incentive schemes; Performance appraisals/feedback; Reporting lines that are consistent with responsibilities and organizational objectives
KEY KNOWLEDGE Design of Management Control Systems

There are two schools of thought which address the design of management control systems: Contingency school: There is no single, universally-valid management control system; instead, the appropriate design depends on a number of factors relating to: Organizational objectives; Environment in which the organization operates; The organizations (internal) structure
This school is associated with the work done by David Otley.
Page | 8
theexpgroup.com
ExPress Notes
Institutional school: Reporting systems develop in response to norms that are internal to the organization and/or influenced by other organizations in the same industry (associated with di Maggio and Powell)
Business structure and management accounting/control Management accounting/control systems must be appropriate to the structure of the businesses they serve. The way in which a business is organized e.g. a functional, divisional or network form has implications for the way in which performance is managed and measured. Modern approaches to business structure are integrative in nature, as they explicitly take into account the linkages between people, operations, strategy and technology.
KEY KNOWLEDGE Achieving goal congruence within organizations

Management control systems should be consistent with encouraging managers to aim for common goals, which (a) should be consistent with organizations objectives and (b) should be specific, objective and verifiable. Goal congruence can be facilitated by organization based on responsibility centres, which: Assign responsibility (obligation to perform) for activities to be performed within the responsibility centre; Delegate authority to direct and exact performance of assigned activities; Establish duty to report performance and accountability for failure to meet obligation; Evaluate performance (with consequent feed-back ensuring controllability of the responsibility system)
Page | 9
theexpgroup.com
ExPress Notes
This applies to all types of organizations, whether centralized or decentralized, an irrespective of levels within the organization: Cost centres: Responsible for current expenses only; Revenue centres: Responsible for revenues, but not current expenses other than marketing expenses; Profit centres: Responsible for revenues and current expenses Investment centres: Responsible for revenues, current expenses and capital expenditure
KEY KNOWLEDGE Cost of Quality

There are four elements to learn:

Internal Failure Costs: Defects discovered before delivery (to the customer); External Failure Costs: Defects which reach the customer; Prevention Costs: Design, training and other efforts made to prevent defects from occurring n the first place; Appraisal Costs: Verification and control efforts to ensure that quality is achieved in products and services
Page | 10
theexpgroup.com
ExPress Notes
Chapter 2
Risk and Internal Control

This chapter addresses the variety of risks facing an organization and the risk management strategy and internal controls that exist in response to those risks. It is useful to start with CIMAs definition of Risk Management: the process of understanding and managing the risks that the organization is inevitably subject to in attempting to achieve its corporate objectives. (CIMA Official Terminology)
KEY KNOWLEDGE Types of Risks

Risk management at the enterprise level addresses all risks affecting a company. These can be classified as follows (diagram on next page):
Page | 11
theexpgroup.com
ExPress Notes
Enterprise Risk
Operational risk
Process risk People risk Systems risk Event risk Business risk Operational (or Operating) Risk
Financial risk
Credit risk Market (price) risk Gearing risk
One may view this category as including all risks that can arise in the course of operating a business, though by definition they are clearly distinguished from financial risks. It will be seen that the list of risks presented below can be expanded and sub-divided according to a particular companys specific circumstances. Process Risk This relates to the processes within a business and evaluates them from the standpoint of pure risks, as well as (a) economy, (b) efficiency and (c) effectiveness. People Risk All risks connected to human resources, including quality and sufficiency of staff, and issues of recruitment, training, compensation, honesty and morale. There is an important link to corporate culture and explicit and implicit attitudes displayed by management; i.e. how they cultivate risk awareness, or encourage profits with(out) regard to the methods employed in achieving them. Systems Risk Information systems and communications in the broadest sense of the term, including IT hard/software, capacity, reliability (back-up) and policies relating to accuracy, access (passwords) and data integrity.
Page | 12
theexpgroup.com
ExPress Notes
Event/Hazard Risk Risk of losses resulting from single events that may have a high or low impact. Natural disasters and human actions, whether intentional (terrorism) or not (accidents), fall within this category. Some companies may include fraud in this category though fraud and malfeasance are also clearly the result of the actions of people (see people risk). Business Risk This is a broad category with indistinct boundaries, but it generally covers risks to a companys ability to generate returns from its ordinary operations, including its strategy, business model, competitive position, political/legal environment (including regulatory/ compliance/ intellectual property), products, marketing, clients and reputation. Process, people and systems risks can be seen as being mainly internal in nature; the other risks are generally seen as being external.
KEY KNOWLEDGE International operations

The challenge presented by international operations can be analyzed using the above categories; such operations add complexity to a companys operations since they confront it with differing: Cultural norms Political stability Efficiency and honesty of the judicial system Regulatory enforcement
Just to name a few!
Page | 13
theexpgroup.com
ExPress Notes
KEY KNOWLEDGE
Key risk concepts

There are several key concepts relating to risk: Probability: measures the likelihood that a certain event will occur; Severity (or impact): quantifies the loss which results if the undesired outcome occurs; Exposure: Is the degree to which one is confronted by the particular type of risk The above factors can be combined into a quantification of the risk of loss by multiplying the financial consequences if the undesired event occurs by the probability factor: Risk = Probability x Severity x Exposure Note: This can be condensed to Risk = Probability x Financial consequences This is essentially the application of the expected value technique to risk. Volatility: refers to the variability or the spread of all likely outcomes of an uncertain factor to which a business is exposed. Statistically, volatility is measured by standard deviation.
Risk Mapping
KEY KNOWLEDGE
Severity
High
Detect/Monitor
Prevent source)
(at
Low control Low
Monitor
Low Likelihood
High
Page | 14
theexpgroup.com
ExPress Notes
Risk Response Strategy

It is managements responsibility to adopt a risk response strategy, which results from the specific identification and assessment of each type of risk facing the organization. The responses can come under one of the four following (generic) headings: (1) Avoid: Discontinuing (or not starting) an activity that causes unacceptable risks; (2) Reduce (or prevent): Taking (internal) action to reduce the risk; (3) Insure (transfer or share): Transferring the risk to a 3rd party (such as an insurer) or sharing the risk with a partner; (4) Accept (or retain): the risk is considered small and it is not worth the effort to protect against it.
KEY KNOWLEDGE
Refer back to the risk map: One could chart the above risk responses as a progression from upper right (High Severity/High Likelihood = Avoidance) to the lower left (Low Severity/Low Likelihood = Acceptance).
KEY KNOWLEDGE
Risk & Corporate Objectives

Achieving a clear and explicit articulation of corporate objectives, and the connection to risk appetite/acceptance, is the duty of senior management. This perspective begins at the most senior corporate strategy and policy-making level, where strategic objectives are established. This is a top-down process. Following from the establishment of corporate objectives, a companys business strategy can be seen, among other purposes, as reconciling corporate objectives with the level of risk accepted in pursuing strategic and financial goals.
Page | 15
theexpgroup.com
ExPress Notes
These elements are tied together by the culture of the organization (incl. attitudes to risk) and its management control and other systems. Objectives (strategy)
Culture & Systems Risks Returns(Rewards)
KEY KNOWLEDGE
Risk Management Processes

There exist a number of risk management models. Since they have similar objectives, they will resemble each other in their process steps. From a generic point of view, these embrace:
Risk identification and awareness

At the policy level, this involves the need to define explicitly the organisations risk appetite (the types and levels of risks it is willing to tolerate). There is also a need to agree common definitions of risks. One can refer to this a common language of risk or risk glossary. There is an effort to inventory risks; this means categorizing risks, including an understanding of their causes and degree of impact.
Risk management and assessment

This is concerned with methods and techniques used to evaluate risks, including methodologies to prioritize risks (risk-ranking) and to quantify them.
Page | 16
theexpgroup.com
ExPress Notes
Risk response and control

Risk response means effective action-taking to ensure that the identified risks are addressed in conformity with policy. This requires an assignment of responsibilities to individuals -- who does what.
Risk monitoring and reporting
A system of monitoring the ERM process, including periodic evaluations as to whether the system is accomplishing its purpose, is indispensable. The costs of maintaining the system must be outweighed by the benefits. Management is accountable to shareholders, and other stakeholders, by a system of periodic reporting.
KEY KNOWLEDGE
CIMA Risk Management Cycle
The student is advised to refer also to CIMAs Risk Management Cycle (contained in CIMA publication Fraud Risk Management: A Guide to Good Practice): www.cimaglobal.com
The student might also refer to COSO (Committee of Sponsoring Organisations of the Treadway Commission) which addresses Enterprise Risk Management (ERM) through its eight Components and four Objectives categories. The Components are: Internal environment Objective setting Event identification Risk assessment Risk response Control activities
Page | 17
theexpgroup.com
ExPress Notes
Information and communication Monitoring
The Objectives address: Strategy Operations Financial Reporting Compliance
KEY KNOWLEDGE
ERM Implementation
Defining Enterprise Risk Management (ERM) in conceptual terms is merely the first step. Moving from theory to practical implementation begins with: 1. The Board of Directors explicit responsibility for risk management oversight This may be accompanied by the establishment of a Risk Committee at the board level, or including the responsibility within the scope of the Audit Committee; 2. Creation of a risk management team under the leadership of a senior-level executive (Chief Risk Officer, CRO, or VP Risk) with a reporting line into the Board The real test of the effectiveness of a risk management process is measured by the degree to which: 3. The methods and norms of ERM are successfully disseminated throughout the organization. Effective implementation requires important commitments at all levels of the organization, manifested by: Clear written policies and procedures; Staff training;
Page | 18
theexpgroup.com
ExPress Notes
Disciplinary steps for violations; Constant management reinforcement (both in word and deed)
Internal Control
KEY KNOWLEDGE
The IIA (Institute of Internal Auditors) have provided the following useful definition: An internal control is any action taken by management to enhance the likelihood that established objectives and goals will be achieved. Management plans, organises and directs the performance of sufficient actions to provide reasonable assurance that objectives and goals will be achieved. Thus, control is the result of proper planning, organising and directing by management. The internal control function should be regarded as a process designed to provide reasonable (not absolute) assurance that the company is in a position to achieve its objectives; it should be integral to a companys operations, not an external imposition. Responsibilities include: Safeguarding of corporate assets; Checking the accuracy and reliability of corporate accounting data; Promoting operational efficiency; Ensuring adherence to accounting and financial control policies
KEY KNOWLEDGE
COSO Internal Controls

A widely-used framework of internal control in the USA is the COSO Internal Control Integrated Framework, which consists of five components: Control Environment setting the tone at the top; Risk Assessment - identification risks (to the achievement of objectives); Information and Communication internal data flow (timely, relevant, etc.); Control Activities - the policies and procedures; Monitoring verification processes to assess the quality/effectiveness of internal controls
Page | 19
theexpgroup.com
ExPress Notes
KEY KNOWLEDGE
Types of Controls
Corporate controls = general policy statements, established core culture and overall monitoring procedures, corporate governance Management controls = planning and performance monitoring Business process controls = authorisation limits and reconciliation Transaction controls include = accuracy and completeness checks
You may use the mnemonic SOAPSPAM to generate ideas for types of control: Segregation of duties Organisational controls (eg set authority limits) Authorisation Physical Supervision Personnel, eg background checks Arithmetical and reconciliations Management the tone from the top, including existence of an internal audit department.
KEY KNOWLEDGE
Features of a good system

Essential features of any good system of internal control As a useful aide memoire when asked to evaluate a described system of internal control within a question scenario, you could make use of the mnemonic PCRAM. Plan of organisation Custody procedures Recording procedures Authorisation procedures Management supervision
Page | 20
theexpgroup.com
ExPress Notes
KEY KNOWLEDGE
The Turnbull Report

The UK Turnbull report gives us a useful summary of the main purposes of an internal control system, by stating that internal control consists of the policies, processes, tasks, behaviour and other aspects of a company that taken together: Facilitate its effective and efficient operation by enabling it to respond to significant business, operational, financial, compliance and other risks to achieving the companys objectives. This includes safeguarding the assets from inappropriate use or from loss and fraud and ensuring that liabilities are identified and managed. Help to ensure the quality of internal and external reporting. Help ensure compliance with applicable laws and regulation, and also with internal policies with respect to conduct of business.
The Turnbull committee recognised that while a sound internal control system cannot eliminate poor judgment in decision-making, it may minimize that risk to a significant degree. Further, the committee stated: Reviewing the effectiveness of internal controls is an essential part of the board's responsibilities; at the same time, Management is accountable to the board for monitoring the system of internal control and for providing assurance to the board that it has done so. The board is responsible for the disclosures on internal control in the company's annual report and accounts.
KEY KNOWLEDGE
Corporate Governance
There is an close connection between corporate governance and risk management: in order to fulfill its corporate governance role faithfully, the directors of the company have to ensure that there is in place at the company a robust system of internal controls and risk management systems. There are several models of corporate governance:
Page | 21
theexpgroup.com
ExPress Notes
Shareholder-based models: typical of the US and the UK; and Stakeholder-based: common on the Continent (Europe) and Japan
KEY KNOWLEDGE
Sarbanes Oxley (US)

In the US, Sarbanes-Oxley is Federal legislation dating from 2002 that prescribes corporate governance principles for publicly-quoted US corporations. It seeks to safeguard the economic interests of the shareholders, by promoting an active market where corporate control can change hands in an effort to promote the most efficient allocation of economic resources.
KEY KNOWLEDGE
Combined Code (UK)

In the UK, this is a set of principles of good corporate governance which sets forth a code of best practice aimed at companies listed on the London Stock Exchange. It is overseen by a body called the Financial Reporting Council. The Combined Code on Corporate Governance is the result of the collective efforts of numerous commissions formed in the UK to study and make recommendations on the subject (e.g. Cadbury, Greenbury and Hampel) and incorporates conclusions from the following committees: Turnbull: Guidance on internal control (as described earlier); Smith: Guidance on audit committees; Higgs: Suggestions for good practice
Some key features of the Combined Code include: Comply or explain: Deviations from the Code may be justified in particular circumstances; Board Composition: At least half the Board (excluding the chairman) should be independent non-executive directors; Separation of Chairman and CEO roles: These should not be exercised by the same individual;
Page | 22
theexpgroup.com
ExPress Notes
Non-Executive Directors duties: Include scrutinise the performance of management and satisfy themselves that financial controls and systems of risk management are robust and defensible; Executive remuneration: remuneration; No director should be involved in deciding his or her own
Audit Committee: At least three members, all be independent non-executive directors; Audit Committee role: Oversee the effectiveness of internal controls and to liaise with the internal and external auditors.
KEY KNOWLEDGE
Internal Audit
The role of the internal audit is to make sure that the companys internal controls are appropriate and working properly. Internal auditors are employees and report to management. However, they can also have a reporting line to the Audit committee of the board, so that their professional independence is not compromised.
KEY KNOWLEDGE
CIMA Ethical Guidelines

The student is expected to be fully familiar with CIMA Ethical Guidelines which can be accessed via: www.cimaglobal.com
Page | 23
theexpgroup.com
ExPress Notes
Chapter 3
Review and Audit of Control Systems
KEY TERMINOLOGY Internal Auditing

The IIA defines internal auditing as follows: Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organisations operations. It helps an organisation accomplish its objectives by bringing a systematic disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes.
Page | 24
theexpgroup.com
ExPress Notes
KEY KNOWLEDGE Internal vs. External Auditing

FUNDAMENTAL DIFFERENCES BETWEEN INTERNAL AND EXTERNAL AUDITORS Both internal auditors and external auditors will have a major interest in the effectiveness of a companys internal control systems. Both are assurance providers and as such will make use of similar techniques and procedures. The external auditor should approach internal audit as any other aspect of internal control before placing any reliance upon the work of internal audit to perhaps reduce the level of some of their own testing. Key factors to consider in assessing the potential reliability of the work of internal audit will include such matters as: Qualifications Experience Quality of audit documentation Independence Management response to internal auditor recommendations
Effective co-operation between the two sets of auditors can help to avoid unnecessary duplication of effort, with a consequent benefit of time and cost savings. However, it is important for the external auditor to always be aware of certain fundamental differences as indicated below: SCOPE APPROACH RESPONSIBILITY INTERNAL AUDITOR MANAGEMENT MANAGEMENT MANAGEMENT EXTERNAL AUDITOR ISAs + REGULATIONS ISAs + REGULATIONS SHAREHOLDERS
NB under Corporate Governance provisions, the head of internal audit should be appointed by and report to the Audit Committee. The Audit Committee should also be responsible for determining the nature and scope of the work of internal audit.
KEY KNOWLEDGE Areas of Focus
Page | 25
theexpgroup.com
ExPress Notes
TYPICAL AREAS OF INTERNAL AUDIT INVOLVEMENT These would include, but not be restricted to the following (any of which you need to be prepared to write briefly about): VFM audits (the 3 Es) IT audit Financial audit Operational audit
KEY KNOWLEDGE Audit Steps

Steps in auditors consideration and approach to internal control systems 1. 2. 3. 4. Ascertain details of systems (interview, ICQs, etc). Record details of systems (narrative notes, flowcharts, etc). Confirm details of systems (walk through test). Evaluate the client systems. If system is assessed as being sound then proceed to step 5. If system is assessed as being inherently weak, then there is no purpose to carrying out tests of control in that area. Such weaknesses should be discussed with management and documented in an internal report. In this area of the activity it will then be necessary to design and carry out an extended programme of substantive testing. 5. Test the systems (tests of control). 6. Assess the results of tests of control. If tests of control confirm that the system is working satisfactorily then proceed to step 6. If tests of control reveal that a system evaluated as being sound in theory is not working satisfactorily in practice then proceed as in step 4 where system was evaluated as being inherently weak. 7. Design and carry out limited programme of substantive testing.
Page | 26
theexpgroup.com
ExPress Notes
Chapter 4
Management of Financial Risk

This section is a summary of sources and mitigation of financial risk associated with international operations and also trading of financial instruments.
KEY KNOWLEDGE Political Risk

Political risk factors can be identified as part of an overall PESTEL analysis:
Page | 27
theexpgroup.com
ExPress Notes
PESTEL Analysis An analysis of the external macro environment. The organisation is unlikely to be able to influence these factors but it should have an awareness of the issues. Political - global, national and local changes and trends. Taxation policies. Relationships between certain countries. Economic - global, regional and local issues. Exchange rates. Link to topical issues such as global recession, current interest rates for funding. Social - changes in behavior and expectations in society. Demographics, lifestyle. Technological - changes including hardware, software, e-issues, materials and services. Global communications. Legal - changes and predicted changes to regional (e.g. EU) and national legislation. Regulatory bodies. Changes to employment law. Environmental what are the environmental considerations such as recycling, pollution, attitude of the media, customers, etc.
KEY KNOWLEDGE Interest Rate Risk

Interest rate risk This refers to the risk of loss (or profit) from a change in interest rates on interest ratebearing assets and liabilities. Interest rate gap exposure The risk of interest-bearing assets and liabilities having different periods and re-set dates, so that a rise or fall in interest rates causes their values to change to differing degrees; the result is a gain or loss on the net position. Basis risk The risk of the prices of interest-bearing assets and liabilities not moving in line with each other over time; this can occur when imperfect hedges are employed.
Page | 28
theexpgroup.com
ExPress Notes
KEY KNOWLEDGE Managing Interest Rate Risk

There are various methods used to manage interest rate risk: (a) Matching and smoothing: This is the process of matching assets and liabilities with similar interest rate conditions (fixed/floating) so as to smooth, or minimize, the impact of rate fluctuation; (b) Asset and liability management (ALM): This is the active management of interest rate risk by actively adjusting the combination of the fixed/floating interest rate profile of a firm, using also external hedging instruments to this end; (c) Forward rate agreements (FRA): A contract which allows buyers and sellers to fix an interest rate in advance for a specified currency, amount and settlement date.
KEY KNOWLEDGE Forward Rate Agreements

(months)
0 1 2 3 4 5
Period of uncertainty (2 months) 3%
<<<<<<<<<<< Loan period >>>>>>>>>> (3 months) 5%
A borrower planning to take a loan in 2 months (see diagram) can buy an FRA today (t=0) to protect against a rise in rates. The FRA contract rate is agreed at e.g. 3% (t=0). This becomes an 2x5 FRA at a price of 3% (2x5 means 2-by-5 and refers to the 2 and 3 month periods shown in the diagram above) If rates rise to e.g. 5% when the loan is taken (t=2), then the borrower gets 2% (53);
Page | 29
theexpgroup.com
ExPress Notes
If rates had dropped below 3% at t=2, then the borrower would have paid the difference
Other derivatives exist to hedge interest rate risk:
KEY KNOWLEDGE Interest Rate Futures

An interest rate future is a contract based on an underlying interest rate instrument which permits interest rates to be fixed in advance of the day on which they would take effect. Interest rate futures can be bought and sold on organised exchanges and can be classified according to the term of the underlying asset, i.e. short-term interest rate futures and longterm interest rate futures (or bond futures). Short-term interest rate futures are based on underlying assets taking the form of notional money market deposits or instruments such as US Treasury bills of standard amount and specified term.
Examples of 3-month instruments include: Instrument Standard (notional) deposit amount 3-month Eurodollar USD 1 million 3-month Sterling GBP 500,000 3-month Euro EUR 1 million 3-month Euroswiss CHF 1 million 90-day US Treasury bill USD 1 million
Price quotation of Interest Rate Futures The price of an interest rate futures contract reflects the value of the underlying instrument traded in advance, i.e. before the underlying instrument takes effect (or when interest starts accruing). The prices are quoted as a discount from a par value of 100.
Page | 30
theexpgroup.com
ExPress Notes
A price of 92.00, for example, reflects an interest rate for an underlying deposit of 8% per annum (100 - 92.00 = 8.00). The higher the interest rate is, the larger the discount from the par value of 100, and therefore the lower the price of the future will be. (This is similar to how bond prices move, i.e. inversely to movements in interest rates.) Prices are quoted to one hundredth of 1%, or 0.01%; a price of 93.70, for example, reflects an interest rate of 6.30% (100 - 93.70). The price of a future can move up or down by increments of at least 0.01 (0.01%, which is the equivalent of one basis point, also called a tick). Purchase of an interest rate future Technically, the buyer of an interest rate future is buying a future money market deposit or placement (the underlying instrument) and is fixing in advance the interest rate (and, in effect, the stream of interest income) to be received. Settlement Date The settlement date of the future corresponds to the day on which the underlying instrument would begin, i.e. the deposit or placement takes effect. Market Price Dynamics As mentioned above, the value of a futures contract behaves similarly to a bond: if interest rates go up, then the value of the futures contract will decline, since the future (fixed) stream of interest income will have a lower value. The buyer of such a futures contract will incur a loss on the contract.
EXAMPLE
At the end of August, a dealer buys one 3-month Eurodollar interest rate futures contract which settles at the end of September. The market price of the contract is 93.50 (reflecting an interest rate of 6.50%). The futures contract has a daily quoted price, reflecting the
Page | 31
theexpgroup.com
ExPress Notes
market rate, and must be settled any time until the end of September, at which time the future expires (and the notional placement would commence). If interest rates fall to 5.00% in the middle of September, the futures price would rise to 95.00. The dealer could sell the future at this price. Alternatively, he could continue holding the future until the settlement date, at which point he would have to sell the future at the governing market price. If by settlement, interest rates had risen to 5.50%, then the dealer would obtain a price of 94.50. At the prices mentioned (above) the dealers net gain/loss would be: Sale at 95.00: 150 tick gain Sale at 94.50: 100 tick gain
The value of a tick for a 3-month Eurodollar contract is USD 25 (.01% x 1m x 3/12) The value of a tick for a 3-month Sterling contract is GBP 12.50 (.01% x 0.5m x 3/12) Use of Interest rate futures Interest rate futures allow buyers and sellers to: Hedge a position, i.e. protect themselves against a change in interest rates by fixing rates in advance of an intended transaction (depositors or borrowers); Take a position, i.e. to benefit from a change in interest rates, provided rates move in a favourable direction.
Hedging -- The Borrowers perspective The borrowers underlying position is cash short; if the price of cash (the interest rate) rises, then the borrower loses. The appropriate hedge transaction is one in which a rise in interest rates will result in a profit. Appropriate hedging strategy for a borrower: Sell futures.
Hedging -- The Depositors perspective The appropriate hedging strategy for a depositor: Buy futures.
Page | 32
theexpgroup.com
ExPress Notes
Other Features and Terminology

Settlement dates All contracts have a defined starting date when trading can begin, and a last day when trading ceases (and open positions must be closed). These dates are defined in advance by the respective exchange (these are publicized on their websites). Contracts carry the name of the month in which they settle. A June contract on the 3-month Euro, for example, can be bought and sold on a daily basis until two business days before the third Wednesday of the month on the London International Financial Futures Exchange (LIFFE). Positions: Open/Closed/Squared This follows the general definition: An open position exists if the buyer (or seller) is long (or short) a financial instrument (or instruments, on a net basis). A position is closed if the long or short position is eliminated by making an off-setting sale or purchase of instruments.
Settlement Terms All short terms interest rate futures contracts are settled by cash, i.e. the difference between the originally agreed price and the price at the time of closing the contract. Note: Long term (bond) futures are settled by physical delivery of the instrument, i.e. the seller delivers the bond to the buyer at the previously agreed price. Initial, maintenance and variation margins Before trading on an exchange, market participants are required to make a deposit (initial margin) to cover trading losses. On a daily basis, the potential gain or loss on the trading position is calculated and potential losses are counted against the margin. The amount of the margin may not fall below a minimum level (called the maintenance margin). Fluctuations in the level of required margin is referred to as variation margin.
Page | 33
theexpgroup.com
ExPress Notes
KEY KNOWLEDGE Interest Rate Swaps

An interest rate swap is an agreement between two counterparties to exchange streams of interest payments with different bases (see next paragraph). The interest payments are based on an agreed amount of a notional principal and for a specified period of time. An interest rate swap allows a company to change a fixed rate into floating rate (and vice versa) on a loan without altering the loan contract itself. If a borrower has a floating (variable) rate debt and expects interest rates to rise, it can avoid this rise by swapping its floating rate commitment into fixed rate. Interest Rate Bases The interest payments on long-term borrowings and investments may be set on different bases, e.g. either at a fixed rate or at a variable (or floating) rate. In the case of floating rate loans, the interest rate is normally defined in the loan contract by specifying a predetermined spread (reflecting the credit risk) over a benchmark interest rate, such as LIBOR. Companies borrowing for medium and long terms (i.e. more than one year, but more typically in a 3 to 7 year period) need to determine the cheapest way to find the necessary funding. Interest rate swaps provide flexibility to companies seeking to secure the best deal terms by entering into an exchange of one set of interest payments for another.
EXAMPLE
Two companies X and Y require financing in the same currency and for identical maturities. Their borrowing terms for fixed and floating rates are shown below:
Company
X Y
Fixed rate
5.7 6.0
Floating rate
3 month Libor + 10 3 month Libor + 20
Page | 34
theexpgroup.com
ExPress Notes
If X is looking for floating rate finance and Y fixed rate, then each could achieve the following borrowing terms via a swap: X: LIBOR p.a.; and Y: 5.90 % p.a. The above terms share benefits equally between the two companies (10 b.p. each) and no bank fees are assumed.
KEY KNOWLEDGE Interest Rate Options

Interest Rate Guarantees Interest rate guarantees form another category of derivatives which allow market participants to profit (or lose!), or alternatively, to hedge against, movements in interest rates. They operate on the basis of the classic options mechanism. These are bilateral (OTC) contracts giving the buyer the right to buy or to sell specificallydefined Forward Rate Agreements (FRA) by an expiry date corresponding to the FRA settlement date. The borrower using an option to hedge avoids higher interest rates, but benefits from lower rates. An option allows you to having your cake and eat it. A borrowers option is a call option hedging against rising interest rates; A lender will buy a put option; Position takers, as opposed to hedgers, can act on their respective views on the market: those believing that rates will go up will buy a Call while those acting on the belief in a decline will buy a Put.
The above options are essentially short-term instruments. Interest rate guarantees can also be arranged for longer terms, for example to hedge medium-term borrowings and deposits (referred to as caps and floors).
Page | 35
theexpgroup.com
ExPress Notes
Exchange-traded interest rate options These contracts are structured as options to buy or sell interest rate futures contracts as the underlying asset. The value of the option is therefore based on the futures price, which in turn is based on the movement in interest rates (e.g. LIBOR). A company planning to borrow GBP can protect themselves against a rise in interest rates by buying put options (which gives the right to sell GBP interest rate futures) at a strike price reflecting the maximum rate to be paid (excluding the loan margin).
KEY KNOWLEDGE Foreign Exchange Risk

Foreign exchange risk occurs when a company is potentially affected by changes in foreign exchange rates. Companies with assets, liabilities, revenues or expenses denominated in currencies different fro its home currency is exposed to foreign exchange risk.
KEY KNOWLEDGE Types of foreign exchange risk

There are three categories of foreign exchange risk: (i) Transaction risk: This refers to the foreign exchange risks relating to the purchase or sale of goods in foreign currencies, or the borrowing or investing of foreign currencies. Assuming that the risk has not been neutralized through hedging (to be discussed), then an actual risk of loss exists in cash terms to the company. Economic risk: Economic risk refers to the long-term impact of foreign exchange rate movements on the international competitiveness of a company. Economic exposure can be viewed as strategic in nature, while transaction exposure has a tactical character.
(ii)
Page | 36
theexpgroup.com
ExPress Notes
(iii)
Translation risk: This is the impact of changing exchange rates on the reporting of assets and liabilities within a group containing one or more foreign subsidiaries. Losses here are not necessarily realized in cash, but are reported as accounting losses due to exchange rate differences.
KEY KNOWLEDGE Foreign Exchange Risk - Illustration

Assume a company wins a law suit that will bring a guaranteed payment of GBP 1m in 6 months. The company is now LONG GBP 1m. If the GBP depreciates, the company will suffer a foreign exchange loss. To mitigate this risk, the company can sell GBP forward with maturity (value date) in 6 months. Banks will provide forward quotations. The forward contract entered into with the bank is known as an Over-the-Counter (OTC) contract, which takes the form of a bilateral transaction between two counterparties.
KEY KNOWLEDGE Long and Short Positions

A long position is the equivalent of having an asset in a given currency. If the price of that currency goes down, then the holder of the currency makes a loss. A short position is the equivalent of having a liability in a given currency. If the price of that currency goes down, then the holder of the short position makes a gain.
KEY KNOWLEDGE Forward (Swap) Points

Another way of quoting the forward (mentioned earlier) is by calculating the forward (or swap) points:
Page | 37
theexpgroup.com
ExPress Notes
GBPUSD Spot 6-month Fwd points
1.4800 1.4810 1.4583 1.4620 217 -190
The forward (fwd) points (or pips) are the difference between the spot and forward prices and are expressed as an adjustment to the spot price: GBPUSD Spot 6 mo Fwd points 1.4800 1.4810 217 -190
The forward points are the points by which the spot has to be adjusted to derive the forward rate When the points decline, from left to right, then they are deducted from the spot rate When the points increase, from left to right, then they are added to the spot rate The currency with the higher level of interest rates trades at a lower price (relative to the other currency) in the forward market.
KEY KNOWLEDGE Managing Foreign Currency Risk

There are a number of methods by which a company can protect (hedge) itself against adverse movement in exchange rates. (a) Currency of invoice: A firm can invoice in its home currency, thus avoiding forex risk altogether; (b) Netting and matching: A firm can systematically match and offset foreign currency payables and receivables when planning its forex purchase and sales; also identifying a liability (such as a cost) denominated in the same currency as an asset. (c) Leading and lagging: Timing the receipts and payments of foreign currencies so as to collect depreciating currencies more quickly and to slow payments of such currencies;
Page | 38
theexpgroup.com
ExPress Notes
(d) Forward exchange contracts: Buying and selling currencies on a forward basis with banks; (e) Money market hedging: See example below; (f) Asset and liability management: Firms can actively adjust their assets and liabilities according to the currencies in which they are denominated so as to limit forex risk.
KEY KNOWLEDGE Hedging

Hedging refers to the transaction by which a company or individual effectively mitigates (eliminates) their currency risk, i.e. eliminates a long or short position by neutralizing (squaring) that position. In the cases described earlier, the company had the opportunity to hedge its foreign exchange risks by use of the money market and/or the forward market. Money market hedge A firm will receive GBP 1m in 6 months. It fears a decline in the value of the GBP. Spot rate: GBPUSD 1.4800 10 GBP 6-month interest rates: 4 7/8 - 5 % p.a. USD 6-month rates: 2 - 2 % p.a. 1. 2. 3. 4. Borrow GBP 975,610 for 6 months at 5%; Sell GBP 975,610 and buy USD at 1.4800 (= USD 1,443,903); Place USD 1,443,903 for 6 months at 2%; At maturity, receive GBP 1m and repay the loan of GBP 1m (principal plus interest). Net position in GBP: 0; 5. Receive USD maturing deposit (USD 1,458,342)
The net result is that GBP has been sold in advance for USD at GBPUSD 1.4583. Using the same market data as above, a money market hedge can be constructed for a company paying GBP 1m in 6 months: 1. Borrow USD 1,445,760 for 6 months at 2%; 2. Sell USD 1,445,760 and buy GBP 976,205 in the spot market; 3. Deposit GBP for 6 months at 4 7/8%;
Page | 39
theexpgroup.com
ExPress Notes
4. At maturity, repay USD 1,462,025 and receive GBP 1,000,000 Conclusion: The (implied) GBPUSD 6-month forward is 1.4620 Other types of derivatives include:
KEY KNOWLEDGE Currency Futures

These are contracts, transacted over an exchange, representing a standard amount of currency which can be bought or sold with a specified future settlement (delivery) date, at a rate expressed in another currency. Settlement is guaranteed by the exchange, which acts as counterparty. Some exchanges are: Chicago Mercantile Exchange Euronext LIFFE Tokyo Financial Exchange
Futures compared to Forwards Buying, on 15 May, one contract of June EUR futures (against USD) at the market price of 1.4300 is the economic equivalent of buying EUR 100,000 against USD at a forward rate of 1.4300 as quoted by a bank on 15 May (trade date) for value (settlement) date in June corresponding to the future contract settlement date above. On the final day of trading a futures contract (2 working days before settlement date) the futures price will be the same as the corresponding spot rate. Futures used for hedging purposes Illustration Take the company expecting to receive GBP 1m after 6 months. The company now has a third possibility to hedge itself against a declining GBP: It can sell GBP futures. To hedges its GBP 1m long position using futures, consideration must be given to:
Page | 40
theexpgroup.com
ExPress Notes
Settlement date: The appropriate futures contract will not settle before the expected date of receipt of the currency inflow (GBP 1m); in other words, the future contract must cover the entire period of risk. No. of contracts: This is determined by dividing the amount to be hedged (in the above example, GBP 1m) by the standard size of a GBP contract (GBP 62,500); therefore, in the above case, 16 contracts will be sold. Closing out of the futures contract When the expected receipt of GBP 1m takes place, then the futures contract will have served its purpose and the futures position must be closed, or squared.
EXAMPLE
Assume GBP 1m was expected in August and the company hedged this exposure by selling 16 contracts of the September GBPUSD futures at a rate of 1.4585. Assume further that on the day (in August) that the GBP 1m is actually received: GBPUSD spot rate: September GBP futures: 1.4050 1.3980
Companys position at settlement date The GBP has depreciated against the USD. When received, the GBP 1m is sold at spot 1.4050 (proceeds are USD 1,405,000); The futures position is closed out by buying back (closing out) the 16 contracts at 1.3980: 16 contracts sold at 1.4585 = USD 1,458,500
16 contracts bought at 1.3980 = USD 1,398,000 Profit on futures = USD 60,500
The companys net receipt in selling GBP 1m is USD 1,465,500. Tick value In the example above, the smallest price movement in the GBP futures contract is either +/0.0001 USD per GBP. This smallest increment (up or down) is called a tick and is valued at USD 6.25 (GBP 62,500 x USD 0.0001).
Page | 41
theexpgroup.com
ExPress Notes
Counterparty Risks/Margin Requirements These risks are excluded by the exchange where currency futures are traded, as the exchange requires that all clients deposit in advance a cash amount known as margin to cover losses. Market (Price) risk When a client buys or sells a future, his position is subsequently marked-to-market on a daily basis and potential losses must be covered by the client by providing additional margin.
Settlement risk This is usually excluded for currency futures by cash settlement of the difference. Basis Risk This refers to situation where a hedge does not fit (or exactly offset the risk of) the underlying situation. This can occur due to a mismatch in maturities.
KEY KNOWLEDGE Currency Swaps

A company can use swaps to borrow a foreign currency without foreign exchange risk by fixing the exchange rate corresponding to the maturity date of the loan.
Swaps (long-term)
EXAMPLE
A US company is looking to expand in Japan and seeks finance of Yen 950m. It can borrow at the following fixed rates: USD 5.0% and JPY 3.0%. A Japanese company is seeking to buy an American company and seeks USD 10m of financing. It can borrow at the following fixed rates: USD 5.4% and JPY 2.5%. The current spot rate is USDJPY 95.00
Page | 42
theexpgroup.com
ExPress Notes
A fixed for fixed currency swap for 5 years would look like this: 1. 2. 3. 4. 5. The US company borrows the USD 10m (on behalf of the Japanese company); The Japanese company borrows Yen 950m (on behalf of the US company); The companies swap the principal amounts at the beginning at spot (USDJPY 95.00); During the 5 years, each company pays the others loan interest; At maturity, after 5 years, the companies re-swap the principal amounts at the original swap rate (95.00).
The savings of each party are the difference between what each would have had to pay on its own and what was effectively paid: The US company saves JPY 4.75m p.a. (950m x (3% - 2.5%)); The Japanese company saves USD 40,000 p.a. (10m x (5.4% - 5%))
Remember: Forwards, Futures and Swaps are obligations!
KEY KNOWLEDGE Currency Options

The right to buy or sell a currency at an agreed price set in advance (called the strike price). Calls A call option on EUR (vs. USD) at 1.4000 guarantees a holder (of the option) the right to buy EUR at USD 1.4000. If, at the end of the option period, the market price is EURUSD 1.5000, then the holder will exercise the option and buy the EUR at 1.4000 (profit is USD 0.10); If the market price had been EURUSD 1.3500, then the holder can buy EUR at 1.35 (market) and let the option lapse (expire unused). Puts In the example above, the firm receiving GBP 1m could have bought an option to sell GBP.
Page | 43
theexpgroup.com
ExPress Notes
KEY KNOWLEDGE Black-Scholes Formula

The Black-Scholes option pricing formula is core to this part of the syllabus. The formula is based on 5 principal drivers of value, several of which have appeared in the preceding examples: a) Underlying asset: the subject of the option; the asset on which its value is based; b) exercise price: the price at which the option buyer has the right to buy the underlying asset; c) time to expiry: the validity period of the option (expressed as a fraction of a year); d) volatility: the variability of the price of the underlying asset (standard deviation); e) risk-free rate: the continuously compounded annual rate of interest in practical terms, this means that USD 1 invested for one year in a riskless asset will equal er (where e is 2.7128 the base of natural logarithms) Dynamics: The moving parts of the formula When using the formula, an intuitive grasp of the following is essential: Increases in the: Underlying asset value Exercise price Time to expiry Volatility Risk-free rate value Results in an: Increase in the Call value Decrease in the Call value Increase in the Call value Increase in the Call value Increase in the Call value & & & & & Decrease in the Put
Increase in the Put value Increase in the Put value Increase in the Put value Decrease in the Put
KEY KNOWLEDGE Causes of Forex and Interest Rate fluctuations

Balance of Payments A measure of the payments flow in and out of a country relative to the rest of the world. If the country spends more than it earns, then its currency will come under pressure to devalue relative to foreign currencies.
Page | 44
theexpgroup.com
ExPress Notes
Purchasing power parity (PPP) The exchange rate at which the same good in two countries are priced at the same level. Interest rate parity theory (IRP) The theory (and mechanism) by which forward foreign exchange rates reflect the differences in interest rates of two currencies.
KEY KNOWLEDGE Four-Way Equivalence

This model ties together four concepts: (i) (ii) (iii) (iv) PPP (as above); Fisher formula (the link between real and nominal interest rates); IRP (as above); Expectations: all relevant information is reflected in market prices.
The Fisher formula is: 1+Nominal rate = (1+Real rate) x (1+Expected inflation rate). A countrys exchange rate will adjust to offset the inflationary impact on prices. The four theories (above) combine consistently to explain foreign exchange rates (spot and forward) and the link to interest rates. Exchange rate forecasting Using purchasing power parity:
The Big Mac costs USD 3.57 in the US and EUR 3.31 in Europe. PPP suggests that the EURUSD should be 1.08 (3.57/3.31). Any rate above (below) this means that the EUR is over (under)-valued. Using interest rate parity:
EURUSD spot rate is 1.3300; the EUR 1 year interest rate is 4% p.a.; the USD 1 year rate is 2% p.a.
Page | 45
theexpgroup.com
ExPress Notes
The implied EURUSD 1-year forward rate will be: 1.33 x (1.02/1.04) = 1.3044. Interest rates These are the prices borrowers and investors pay, resp. receive, for funds in the money and capital markets. Interest rate curves are normally upwardly sloping, showing that rates are higher the longer the maturity date. The difference in rates along the maturity curve can be explained by the:
1) Expectations theory: Investors expect higher interest rates in the future, if only to
offset inflation;
2) Liquidity preference: investors have to be compensated for not having the use of
their money now;

3) Market segmentation: The market for debt is divided into different maturity ranges
meeting different investor preferences. Borrowers can move between these different markets for their funding.
KEY KNOWLEDGE IAS 39

The objective of this Standard is to establish principles for recognising and measuring financial assets, financial liabilities and some contracts to buy or sell non-financial items.
Held-to-maturity financial assets When used... When have the ability and positive intention to hold a security to its stated maturity date. Investment in corporate bonds or government bonds. be Ordinary shares, as no maturity date. Nothing can be HTMFA if the entity has reclassified any investment out of HTMFA in the Loans and receivables When have loaned a third party money (to a maturity date) or have an amount receivable (eg trade receivables). Originated loan to a third party (eg a bank lending a loan to a homebuyer). -
Example....
Example that cant categorised this way
Page | 46
theexpgroup.com
CIMA P3 Performance Strategy preceding two years. Initial recognised value Year-end valuation method Cost paid, transaction costs. including Initial cash advanced, plus transaction costs. Amortised cost, less impairments. Impaired value estimated using revised cash flows, discounted at the original discount rate when the investment was purchased. Profit or loss
ExPress Notes
Amortised cost, less impairments. Impaired value estimated using revised cash flows, discounted at the original discount rate when the investment was purchased. Profit or loss
Gains or losses reported in...
Financial asset or liability held at fair value through profit or loss When used... Almost anything can be categorised as FVPL at its initial recognition (notably not debt issued by the entity itself). Securities held for trading will be classified as FVPL. Shares held for trading. be Cash paid to acquire. Transaction costs immediately written off to profit or loss. Fair value. Best achievable market price, not deducting anticipated selling costs (though at the lower end of the bid ask spread). Profit or loss
Available-for-sale financial assets A catch-all category. Anything not in either of the other categories will be AFSFA. Typically, where investor stands ready to sell the security but has no immediate plans to. Shares held for intermediate term investment. Cash paid to acquire. Transaction costs added to initial value of investment. Fair value. Best achievable market price, not deducting anticipated selling costs (though at the lower end of the bid ask spread). Initially gain or loss reported in equity until sold, when the gain or loss is recycled (ie reported again) in profit.
Example.... Example that cant categorised this way Initial recognised value
Year-end valuation method
Gains or losses reported in...
Page | 47
theexpgroup.com
ExPress Notes
Chapter 5
Risk and Control in Information Systems
START Key Terminology
The basic requirements for an effective system of internal control do not of course change simply because a computer is brought into the business environment. However, computers bring with them their own additional control considerations. Specifically, internal control in a computer environment is normally considered under two main headings: 1. General Controls These relate to the environment within which computer systems are developed, operated and maintained. They will therefore be relevant to all
Page | 48
theexpgroup.com
ExPress Notes
applications. They are often sub-divided into administration controls and systems development controls. They may be either manual or programmed. 2. Application Controls These relate to those activities which have been computerised and are concerned with the completeness and accuracy of the processing of authorised data and the maintenance of computer files. As with general controls, they may be either manual or programmed. Essential features of any good system of internal control in a computer environment To help you in learning some of the important practical aspects of internal control systems in a computer environment we can again perhaps make use of a series of mnemonics.
GENERAL CONTROLS ADMINISTRATION CONTROLS (DOFF) Division of duties and responsibilities eg. between IT and user department staff Operator controls eg. use of passwords File controls eg. regular file back-ups Fire precautions and standby arrangements eg. contingency planning
GENERAL CONTROLS SYSTEMS DEVELOPMENT CONTROLS (CAST) Conversion procedures eg. parallel running Authorisation, acceptance and amendment procedures eg. sign off procedures Standardisation eg. use of SSADM Testing eg program logic checks
APPLICATION CONTROLS (IPOF) Input controls eg. data verification by means of double-keying Processing controls eg. data validation by means of check digit Output controls eg. actioning of error reports File maintenance controls eg. checking amendments to standing data
Page | 49
theexpgroup.com
ExPress Notes
Alternative audit approaches There are generally 3 main alternative approaches to the audit of a computerised accounting system:
1. Auditing around the computer Here the concentration of audit effort is on the inputs to and outputs from the clients computer system. 2. Auditing through the computer Making use of CAATs, principally: Test data Audit software eg. selection of data for further testing 3. Auditing within the computer Making use of embedded audit facilities such as: ITF Integrated Test Facility SCARF Systems Control and Review File
KEY KNOWLEDGE Investment in IT

The larger the organisation and more complex the business processes are, the more important the IT system becomes and, therefore, more critical the decisions regarding investment in IT. There are three key questions which need being properly answered before such decisions being taken: What are the critical physical characteristics that the new IT system must have in order to adequately support the business both now and in the future?, How much is the true total cost of installing and running the new IT system over its life cycle?, and What are the key measures that management need to take in order to monitor IT investment and IT costs?
Page | 50
theexpgroup.com
ExPress Notes
1. Critical physical characteristics of the IT system The IT specialists assisting management in taking the IT investment decision should determine systems capacity and scalability requirements. 2. Total cost of IT systems ownership (TCO) The cost components are: Capital cost of hardware & software Operating cost of hardware & software 3. IT cost monitoring tools IT cost control is facilitated by existence of: Centralised IT acquisition policies Standardisation of IT hardware and software resources across the organisation, A system of tracking IT resources and configuration changes.
KEY KNOWLEDGE Outsourcing IT

Outsourcing IT services means entering into a contract with an outside supplier to provide IT services. A company may elect to do so for several reasons: Being (usually) a non-core activity, IT may be cheaper to outsource than to maintain it in-house; An external supplier (specialized in IT services) is likely to have more up-to-date solutions and applications than if the company tries to develop (and retain) such skills in-house.
On the other hand, there are risks connected to out-sourcing: Dependence on the supplier and supplier performance (system failure); Breach of data confidentiality (banks would be particularly sensitive to this); Limits on the degree of possible system customization
(end of ExPress Notes)
Page | 51
theexpgroup.com

P3 Express Notes

Încărcat de

Informații document

Descriere originală:

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

P3 Express Notes

Încărcat de

Drepturi de autor:

Formate disponibile

Notes

CIMA P3 Performance Strategy

CIMA P3 Performance Strategy

START About ExPress Notes

CIMA P3 Performance Strategy

How to get the most from these ExPress notes

At the start of the learning phase

CIMA P3 Performance Strategy

Your stage in study for each paper Practice phase

These ExPress notes

CIMA online past exams

The night before the real exam

At the door of the exam room before you go in.

CIMA P3 Performance Strategy

Our ExPress notes fit into our portfolio of materials as follows:

START About The ExP Group

CIMA P3 Performance Strategy

Management Control Systems

START The Big Picture

KEY KNOWLEDGE The Purpose of Management Control Systems

CIMA P3 Performance Strategy

KEY KNOWLEDGE Achieving control within organizations

KEY KNOWLEDGE Design of Management Control Systems

This school is associated with the work done by David Otley.

CIMA P3 Performance Strategy

KEY KNOWLEDGE Achieving goal congruence within organizations

CIMA P3 Performance Strategy

KEY KNOWLEDGE Cost of Quality

CIMA P3 Performance Strategy

Risk and Internal Control

START The Big Picture

KEY KNOWLEDGE Types of Risks

CIMA P3 Performance Strategy

CIMA P3 Performance Strategy

KEY KNOWLEDGE International operations

Just to name a few!

CIMA P3 Performance Strategy

Key risk concepts

Low control Low

CIMA P3 Performance Strategy

Risk Response Strategy

Risk & Corporate Objectives

CIMA P3 Performance Strategy

Culture & Systems Risks Returns(Rewards)

Risk Management Processes

Risk identification and awareness

Risk management and assessment

CIMA P3 Performance Strategy

Risk response and control

Risk monitoring and reporting

CIMA Risk Management Cycle

CIMA P3 Performance Strategy

Information and communication Monitoring

The Objectives address: Strategy Operations Financial Reporting Compliance

CIMA P3 Performance Strategy

COSO Internal Controls

CIMA P3 Performance Strategy

Features of a good system

CIMA P3 Performance Strategy

The Turnbull Report

CIMA P3 Performance Strategy

Sarbanes Oxley (US)

Combined Code (UK)