The policies and procedures helping to ensure that management directives are executed and actions are taken to address risks to achievement of objectives are best described as
A. Risk assessments.
B. Control environments
C. Control activities.
D. Monitoring activities.
Answer (C) is correct.
REQUIRED: The definition of control activities.
DISCUSSION: The COSO model for internal control describes control activities as the policies and procedures helping to ensure that management directives are executed and actions are taken to address risks to achievement of objectives.
Answer (A) is incorrect. Risk assessment identifies and analyzes external or internal risks to achievement of the objectives at the activity level as well as the entity level.
Answer (B) is incorrect. The control environment reflects the attitude and actions of the board and management regarding the significance of control within the organization.
Answer (D) is incorrect. Monitoring is a process that assesses the quality of the system's performance over time.