A process, effected by an entity's board of directors, management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may effect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives: a) IT governaince b) risk assessment c) enterprise risk management d) internal control Control goals of the operations system include all of the following except: a) Update completeness b) Efficient employment of resources c) Effectiveness of operations d) Security of resources The following provides an excerpt of a narrative describing a process within Loggins Company: Customers send orders by mail to the sales order department, where sales order clerks open the orders and review the orders for accuracy. For each order, the clerks enter the customer number and the computer displays the customer record. The clerk confirms that the information on the screen matches the information on the customer order before inputting the order. The control plan "Populate input screens with master data" is: a) Present b) Missing Approvals, authorizations, verifications, reconciliations, reviews of operating performance, security procedures, and segregation of duties are examples of: a) control activities/plans b) monitoring c) risk assessment d) event identification Who is legally responsible for establishing and maintaining an adequate system of internal control? a) management b) investors . c) the SEC d) PCAOB e) The United States Congress