GFMC Practice Questions

The primary purpose of assessing internal controls in federal entities is to support management in achieving the entity's objectives. As defined by the Government Accountability Office (GAO), one of the three fundamental objectives of internal control is to ensure the effectiveness and efficiency of operations. The assessment process, mandated by OMB Circular A-123, is a key management tool to evaluate how well the control system is functioning. This evaluation inherently involves identifying control weaknesses and process deficiencies, which directly leads to discovering opportunities to improve program performance and gain efficiencies.

A. Internal controls are designed to provide reasonable assurance, not an absolute confirmation or guarantee, that management objectives will be met.

C. Internal controls aim to mitigate the risk of fraud, waste, and abuse, but they cannot ensure or completely eliminate their occurrence.

D. Determining which laws and regulations apply to an entity is a legal and compliance function that precedes the design and assessment of internal controls.

1. U.S. Government Accountability Office (GAO). (2014). Standards for Internal Control in the Federal Government (GAO-14-704G, "Green Book").

Page 10, Section OV1.01: "An entity’s internal control system helps its management achieve its objectives. Management specifies objectives for the entity and then designs and implements an internal control system to provide reasonable assurance that the specified objectives are achieved. The three categories of objectives are operations, reporting, and compliance."

Page 10, Section OV1.02: "Operations objectives relate to the effectiveness and efficiency of an entity’s operations." This directly links internal control to gaining efficiencies.

2. Office of Management and Budget (OMB). (2016). Circular No. A-123, Management's Responsibility for Enterprise Risk Management and Internal Control.

Page 2, Section I, Purpose: "This Circular provides guidance to Federal managers on improving the accountability and effectiveness of Federal programs and operations by establishing, assessing, correcting, and reporting on internal control." This statement explicitly ties the assessment of internal control to improving program effectiveness, which includes efficiency.

The National Performance Management Advisory Commission (NPMAC) framework establishes a continuous cycle for improving government outcomes. A fundamental principle of this framework is the direct integration of performance measurement into the budget process. This linkage ensures that financial resources are allocated based on strategic priorities and expected results, effectively creating a performance-informed or performance-based budget. The framework's cycle explicitly connects planning, budgeting, execution, and measurement, making the budget the primary vehicle for translating performance goals into funded actions.

A. internal control plan: The framework's scope is broader, focusing on strategic management and resource allocation, not solely on internal control compliance.

B. financial statements: Performance data is typically non-financial and reported separately, not incorporated directly into the core financial statements.

C. audit procedures: Auditors may assess performance data, but the framework is a management tool for decision-making, not a set of audit protocols.

1. National Performance Management Advisory Commission. (2010). A Performance Management Framework for State and Local Government: From Measurement and Reporting to Management and Improving. The framework diagram on page 4, "Figure 1: The Performance Management Framework," explicitly includes "Budget" as a core component of the cycle, linking it directly to "Plan" and "Execute."

2. Government Finance Officers Association (GFOA). (2012). An Elected Official's Guide to Performance Measurement. This guide emphasizes, "The budget is the single most important policy document for a government... Linking performance information to the budget process is a powerful way to improve results" (p. 12), directly reflecting the NPMAC's principles.

3. Poister, T. H. (2010). The Future of Strategic Planning in the Public Sector: Linking Strategic Management and Performance. Public Administration Review, 70(s1), s246-s254. This peer-reviewed article discusses the evolution of performance management, noting the critical link between strategic plans and resource allocation through the budget process as a key to effectiveness (Section: "Linking Strategic Management and Performance"). https://doi.org/10.1111/j.1540-6210.2010.02274.x

A single audit, conducted under the provisions of 2 CFR Part 200 (Uniform Guidance), includes an audit of the entity's financial statements. The resulting auditor's report must express an opinion on whether these financial statements are presented fairly, in all material respects, in accordance with the applicable financial reporting framework. Generally Accepted Accounting Principles (GAAP) is the standard framework for U.S. entities. While governmental entities follow standards from the Governmental Accounting Standards Board (GASB) and non-profits follow the Financial Accounting Standards Board (FASB), both fall under the umbrella of GAAP. Therefore, GAAP is the most comprehensive and accurate answer.

A: Auditors provide reasonable assurance against material misstatement from fraud, not an absolute opinion that the financial statements are entirely "free from fraud."

C: This is too specific. Single audits also apply to not-for-profit organizations, which follow FASB standards, not GASB. GAAP encompasses both.

D: The Government Accountability Office (GAO) issues auditing standards (the Yellow Book), not the accounting principles used for preparing financial statements.

1. U.S. Office of Management and Budget (OMB). (2014). 2 CFR Part 200 - Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. In §200.515, "Audit reporting," paragraph (a) explicitly states, "The auditor's report must... include an opinion (or disclaimer of opinion) as to whether the financial statements are presented fairly in all material respects in accordance with generally accepted accounting principles..."

2. U.S. Government Accountability Office (GAO). (2018). Government Auditing Standards (GAO-18-568G). Chapter 4, "Standards for Financial Audits," paragraph 4.16, states, "The report on the financial statements provides the auditor’s opinion or disclaimer of opinion on whether the financial statements are presented fairly in all material respects in conformity with the applicable financial reporting framework." The document consistently refers to GAAP as the primary example of such a framework for U.S. entities.

The Government Performance and Results Act (GPRA) of 1993, as amended by the GPRA Modernization Act of 2010 (GPRAMA), establishes a framework for performance management in the U.S. federal government. This framework mandates three core components for agencies:

1. A multi-year Strategic Plan.

2. An Annual Performance Plan (APP) that sets performance goals for the upcoming fiscal year.

3. An Annual Performance Report (APR) that evaluates the agency's success in meeting the goals outlined in the APP. This report is crucial for accountability and demonstrating results to Congress and the public.

A. A five-year performance plan is incorrect. The performance plan is required annually, while the strategic plan covers a multi-year period (at least four years under GPRAMA).

C. A SEA report is not a specified requirement under the GPRA framework. The primary reporting documents are the strategic plan, annual performance plan, and annual performance report.

D. The prior year's audited financial report is mandated by the Chief Financial Officers (CFO) Act of 1990, not GPRA, although agencies often integrate these reports.

1. U.S. Office of Management and Budget (OMB). (2023). Circular No. A-11: Preparation, Submission, and Execution of the Budget. Section 230.5 explicitly states the requirement for an Annual Performance Report, which details "the actual level of performance achieved in the fiscal year that just closed compared to the performance goals established for that year in the Annual Performance Plan."

2. U.S. Government Accountability Office (GAO). (2017, July). MANAGING FOR RESULTS: OMB's and Agencies' Efforts to Implement the GPRA Modernization Act (GAO-17-618). Page 4 summarizes the Act's requirements, stating, "GPRAMA requires agencies to develop strategic plans, annual performance plans, and annual performance reports."

3. Public Law 103-62. (1993). Government Performance and Results Act of 1993. Section 4, which amends Title 31 of the U.S. Code, adds § 306, "Agency performance reporting," establishing the requirement for an annual report on program performance for the previous fiscal year.

An outcome measure evaluates the results, effects, or accomplishments of a program, focusing on its impact on the target population or condition. The "percentage of disaster claims paid on time" is an outcome measure because it assesses the quality and effectiveness of the service provided. It directly measures how well the program is achieving its intended purpose of delivering timely aid to victims, which is a desired result from the public's perspective. This contrasts with output measures, which merely quantify the volume of work performed without assessing its quality or impact.

A. This is an input or workload measure. It quantifies the demand placed on a program, not the results or effectiveness of the program's response.

B. This is an output measure. It counts the number of activities completed (reviews) but does not assess the result or impact of those reviews on environmental quality.

C. This is an output measure. It counts the number of students who completed a program, not the ultimate benefit or success they gained from their education (e.g., employment rates).

1. U.S. Government Accountability Office (GAO). (1996, June). Executive Guide: Effectively Implementing the Government Performance and Results Act. GAO/GGD-96-118. On page 16, outcome measures are defined as assessing "the actual results, effects, or impacts of a program" and are contrasted with output measures which "tabulate...the products and services delivered." The timeliness of a payment directly reflects the program's effect on the recipient.

2. Governmental Accounting Standards Board (GASB). (1994, April). Concepts Statement No. 2: Service Efforts and Accomplishments Reporting. Paragraph 53 defines outcome measures as those that "measure the extent to which results are achieved and the extent to which services have an impact on the public." The timely payment of claims is a direct measure of the service's impact.

3. Association of Government Accountants (AGA). (2023). CGFM Examination 3 Study Guide: Governmental Accounting, Financial Reporting and Budgeting. Chapter 13, Managerial and Cost Accounting. The guide distinguishes between outputs (the quantity of services provided) and outcomes (the results of those services). Measures of service quality and timeliness are presented as key components of outcome-based performance measurement.

Pay.gov is a centralized platform operated by the U.S. Department of the Treasury's Bureau of the Fiscal Service. It allows federal agencies to accept electronic payments from the public. Its core function is to receive and process payments (e.g., credit/debit card, ACH) and associated remittance information on behalf of various agencies, then consolidate and transmit the data and funds. This service of processing receivables and remittance data from a centralized point is the defining characteristic of an electronic lockbox. It accelerates the collection and availability of funds and streamlines the reconciliation of payments for participating agencies.

A. a zero-balance account.

This is a disbursement account used for payment control by maintaining a zero balance, which is functionally the opposite of a collections platform like Pay.gov.

B. a concentration system.

This refers to the process of pooling funds from multiple depository accounts into a central account, a cash management step that occurs after initial collection.

D. a data warehouse system.

This is a system for storing and analyzing large volumes of historical data for reporting and business intelligence, not for processing real-time financial transactions.

1. U.S. Department of the Treasury, Bureau of the Fiscal Service. (n.d.). Treasury Financial Manual, Volume I, Part 5, Chapter 5000: Using Electronic Funds Transfer (EFT). In Section 5030, Pay.gov is described as a "Fiscal Service-provided collection program" that allows agencies to accept online payments, which aligns with the function of an electronic lockbox service.

2. U.S. Department of the Treasury, Bureau of the Fiscal Service. (2021, April). Pay.gov Program Overview. This document describes Pay.gov as a "centralized platform" that provides "a complete solution for collecting revenue electronically," including processing payment transactions and remittance data, which are the primary functions of an electronic lockbox.

3. Association of Government Accountants (AGA). (2017). CGFM Examination 2 Study Guide: Governmental Accounting, Financial Reporting and Budgeting. Chapter 4, "Cash and Investment Management," defines a lockbox system as a method to accelerate the collection of cash receipts. Pay.gov is the federal government's electronic implementation of this concept.

Control risk is the risk that a material misstatement that could occur in an assertion will not be prevented, or detected and corrected, on a timely basis by the entity's internal control. By its very definition, this risk is a direct function of the effectiveness of an organization's internal control structure. If internal controls are well-designed and operating effectively, control risk is assessed as low. Conversely, if controls are weak or non-existent, control risk is assessed as high. The auditor's assessment of control risk directly influences the nature, timing, and extent of further audit procedures.

A. inherent risk: This is the susceptibility of an assertion to a material misstatement, assuming there are no related controls. It exists independently of the audit or internal controls.

C. detection risk: This is the risk that the auditor's own procedures will fail to detect a material misstatement. It is controlled by the auditor, not the organization's internal controls.

D. audit risk: This is the overall risk of issuing an incorrect audit opinion. While influenced by control risk, it is a composite of inherent, control, and detection risks.

1. AICPA. (2021). AU-C Section 200: Overall Objectives of the Independent Auditor and the Conduct of an Audit in Accordance with Generally Accepted Auditing Standards. In Professional Standards. Paragraph .14 defines control risk as "The risk that a misstatement that could occur in an assertion about a class of transaction, account balance, or disclosure and that could be material, either individually or when aggregated with other misstatements, will not be prevented, or detected and corrected, on a timely basis by the entity’s internal control."

2. U.S. Government Accountability Office (GAO). (2018). Government Auditing Standards (GAGAS). GAO-18-568G. Chapter 7, Paragraph 7.23, discusses the components of audit risk, stating that the risk of material misstatement is the combination of inherent risk and control risk at the assertion level.

3. MIT OpenCourseWare. (2002). 15.973: Leader to Leader. Session 7: Auditing and Corporate Governance. The lecture notes explain the audit risk model (AR = IR x CR x DR) and define Control Risk (CR) as the risk that the client's internal controls will fail to prevent or detect a material error. This directly links control risk to the internal control system's effectiveness.

The Annual Comprehensive Financial Report (ACFR) is the official, audited annual report for a state or local government. It is prepared in accordance with Generally Accepted Accounting Principles (GAAP) as promulgated by the Governmental Accounting Standards Board (GASB). The ACFR's financial section contains the complete set of basic financial statements, which includes the Statement of Net Position (reporting assets, deferred outflows, liabilities, deferred inflows, and net position) and the Statement of Cash Flows (for proprietary funds). Therefore, it is the single best and most authoritative source for comprehensive annual liability and cash flow data.

A. PAR: The Performance and Accountability Report (PAR) is a reporting requirement primarily for U.S. federal government agencies, not the standard comprehensive report for a state.

C. Appropriations bill: This is a legislative budget document that authorizes future spending; it does not report on historical financial results, liabilities, or actual cash flows.

D. Statement of activities: This is only one of the financial statements contained within the ACFR. It reports revenues and expenses but does not detail year-end liabilities or cash flows.

1. Governmental Accounting Standards Board (GASB). Statement No. 34 of the Governmental Accounting Standards Board: Basic Financial Statements—and Management’s Discussion and Analysis—for State and Local Governments. (June 1999). Paragraph 6 outlines the required basic financial statements, including the Statement of Net Position and Statement of Cash Flows, which are presented within the ACFR.

2. Government Finance Officers Association (GFOA). Certificate of Achievement for Excellence in Financial Reporting Program. The GFOA, which sets best practices, defines the ACFR as the primary report containing the financial statements, notes, and other essential information. The program's checklist explicitly requires the Statement of Net Position and Statement of Cash Flows within the ACFR's financial section.

3. Carl Vinson Institute of Government, University of Georgia. Financial Management for Georgia's Local Governments, 3rd Edition. (2013). Chapter 10, "Financial Reporting," page 189, states, "The most important component of the ACFR is the financial section, which contains the independent auditor’s report, management’s discussion and analysis (MD&A), the basic financial statements, and the notes to the financial statements." This confirms the ACFR as the container for the required statements.

Benford's Digital Analysis is a statistical technique used to identify anomalies in numerical datasets. The principle, known as Benford's Law, states that in many naturally occurring sets of numbers, the first digit is more likely to be small (e.g., '1' appears about 30% of the time) than large. Auditors apply this law to financial data like payment amounts. A significant deviation from the expected distribution, such as a higher-than-expected frequency of payments starting with the digit '3', is a red flag. This anomaly suggests that the data may have been manipulated, for instance, by creating fraudulent payments just below a specific approval threshold, warranting further investigation for potential fraud.

B. This is a potential indicator of favoritism or bid-rigging, but it would be identified through vendor concentration or transaction volume analysis, not by analyzing the digits within the contract amounts.

C. This represents a conflict of interest and is a significant fraud risk. However, it is identified through relationship disclosures and ethics reviews, not through a numerical, digit-based analysis like Benford's Law.

D. Receiving kickbacks is a fraudulent act. Benford's analysis cannot directly detect the act itself; it can only detect anomalies in the associated financial data (e.g., inflated invoices) that might result from the scheme.

1. U.S. Government Accountability Office (GAO). (2020). A Framework for Managing Fraud Risks in Federal Programs (GAO-15-593SP). In the section on "Data Analytics and Fraud Risk," the use of techniques like Benford's Law is described to identify anomalies and outliers in large data sets that may indicate fraud. A spike in numbers starting with a specific digit is a classic example.

2. Nigrini, M. J. (2012). Benford's Law: Applications for Forensic Accounting, Auditing, and Fraud Detection. John Wiley & Sons. Chapter 4, "The Theory and Practice of Benford's Law," explains that deviations from the expected digit frequencies, such as an excess of numbers starting with '3', can indicate fabricated numbers or payments designed to circumvent internal controls.

3. Durtschi, C., Hillison, W., & Pacini, C. (2004). The effective use of Benford's law to assist in detecting fraud in accounting data. Journal of Forensic Accounting, V(1), 17-34. This paper details how Benford's Law is applied to datasets like accounts payable to find "unusual duplications or patterns of transactions" (p. 18), such as a cluster of payments with the same leading digits.

Regression analysis is a statistical method used to model and analyze the relationship between a dependent variable (in this case, sales tax revenue) and one or more independent variables (population growth, housing, employment). By establishing a mathematical equation that describes this relationship, a CGFM can use current or projected data for the independent variables to estimate or forecast the dependent variable. This makes it the ideal tool for the scenario described, where the goal is to predict revenue based on specific economic indicators.

B. a cash flow analysis: This method tracks the movement of cash within an entity for liquidity and solvency assessment, not for forecasting revenue based on external economic factors.

C. a payback analysis: This is a capital budgeting technique used to determine the time required to recover an investment's initial cost, which is unrelated to revenue estimation.

D. flow charting: This is a graphical tool for visualizing a process or workflow; it is not a quantitative technique for statistical forecasting or estimation.

1. AGA. (2023). CGFM Examination 2 Study Guide: Governmental Accounting, Financial Reporting and Budgeting. Chapter 6, "Analytical Methods," discusses various techniques for financial analysis and forecasting. It identifies regression analysis as a key quantitative method for forecasting revenues by relating them to economic variables like population and employment.

2. Mikesell, J. L. (2018). Fiscal administration: Analysis and applications for the public sector (10th ed.). In Chapter 13, "Revenue Forecasting," Mikesell explains that multiple regression is a standard and powerful method used by governments to forecast revenues. The text details how independent variables (e.g., population, personal income, employment) are used to predict a dependent variable (e.g., sales tax collections) (pp. 455-458).

3. Franklin, A. L. (2009). "Revenue Forecasting." In Handbook of Public Financial Management, edited by J. R. Bartle, 221-241. CRC Press. This academic text, used in public administration programs, explicitly describes regression analysis as a causal or econometric method for revenue forecasting. It states, "Regression analysis is used to estimate the relationship between a dependent variable (the revenue source) and one or more independent variables (the economic variables that influence the revenue source)" (p. 229).