AGA GFMC - Examination 3: Governmental Financial Management and Control (GFMC)

ï‚· Why Include Permissible and Non-Permissible Investment Securities?

Aninvestment policyoutlines the guidelines and restrictions for managing an entity’s investments, ensuring compliance with laws and protecting public funds.

Listingpermissible(e.g., government bonds, treasury securities) andnon-permissibleinvestments ensures clarity about what the entity can and cannot invest in, helping to mitigate risk and maintain fiduciary responsibility.

ï‚· Why Other Options Are Incorrect:

A. Prices and performance of investment securities:This information is important for monitoring investments but does not belong in the policy itself.

C. Historical allocations of investment securities:Historical data informs decision-making but is not relevant to the rules governing investments.

D. Key and non-key investment security controls:While controls are critical, they are part of the implementation process, not the investment policy.

ï‚· References and Documents:

GAO Investment Policy Guidelines:Recommends specifying permissible investments to ensure fiduciary responsibility.

GFOA Best Practices in Investment Management:Emphasizes clear investment guidelines in the policy.

ï‚· Why Select the Lowest Qualified Bidder?

Procurement rules in government require selecting thelowest qualified bidderto ensure fairness, cost-efficiency, and compliance with procurement regulations.

If the mayor’s high school classmate’s company meets the qualification criteria and provides the lowest bid, there is no conflict of interest unless favoritism or improper influence is proven.

ï‚· Why Other Options Are Incorrect:

B. Second lowest priced qualified bidder:Selecting the second lowest bidder without justification violates the principle of fairness and cost-efficiency.

C. Third lowest bidder pending state disbarment:This vendor is not a qualified bidder due to pending disbarment.

D. Highest priced qualified bidder with the highest quality products:If quality specifications are already met by lower bidders, selecting the highest-priced bidder is unjustifiable.

ï‚· References and Documents:

Federal Acquisition Regulation (FAR):Requires selecting the lowest qualified bidder.

GAO Guide on Procurement Standards:Emphasizes fairness and cost-effectiveness in vendor selection.

Definition of Output Measures:

Output measures trackthe results of providing goods or services, such as the number of items produced or services delivered.

These measures focus onquantityrather than quality or outcomes.

Explanation of Answer Choices:

A. Activity measures: Incorrect. Activity measures refer to inputs or processes, not results.

B. Outcome measures: Incorrect. Outcome measures assess the impact or effectiveness of a program, not the quantity of goods/services provided.

C. Output measures: Correct. Output measures focus on results (e.g., number of services delivered).

D. Workload measures: Incorrect. Workload measures assess the volume of work performed but do not necessarily report on the results.

Service Efforts and Accomplishments (SEA) Reporting:

SEA reporting is designed to providenon-financial performance informationabout the efficiency and effectiveness of government programs.

It evaluates how well resources are being used to achieve desired outcomes, helping stakeholders assess program performance and accountability.

Explanation of Answer Choices:

A. Evaluation of the effects of changes in public policy: Incorrect. SEA reporting does not focus on policy changes but on program performance.

B. Assessment of financial condition and results of operations: Incorrect. This is the role of financial statements, not SEA reports.

C. Assessment of the accountability of the public administrators: Incorrect. While SEA reports indirectly support accountability, their main purpose is to assess program efficiency and effectiveness.

D. Evaluation of the efficiency and effectiveness of governmental programs: Correct. This is the primary focus of SEA reporting.

First Step in Assessing Compliance:

The first step in evaluating compliance is to develop acomprehensive inventoryof all applicable laws and regulations that the agency must follow.

This ensures the assessment process is thorough and based on a clear understanding of the regulatory environment.

Explanation of Answer Choices:

A. Review legal actions against the agency for noncompliance with laws and regulations: Important, but this comes later as part of identifying past compliance issues.

B. Contact the legislature to secure its views on any areas of regulatory noncompliance: Unnecessary for the initial step of compliance assessment.

C. Develop an inventory of the applicable laws and regulations: Correct. This is the foundational step to ensure all relevant requirements are included in the assessment.

D. Request a compliance review from the agency's chief legal officer: Incorrect. While legal advice may be helpful, it is not the starting point for compliance assessment.

Definition of a Repurchase Agreement (Repo):A repurchase agreement is a short-term financial transaction where one party sells securities to another with an agreement to repurchase them at a later date for a specified price, which includes interest. It functions as a secured loan.

Transaction Description:

The state transfers cash to a broker.

The broker provides securities as collateral and agrees to repay the cash plus interest in exchange for the return of the same securities.This arrangement matches the definition of arepurchase agreement.

Explanation of Answer Choices:

A. Arbitrage agreement: Arbitrage involves exploiting price differences in markets, unrelated to this transaction.

B. Repurchase agreement: Correct, as it fits the definition.

C. Mutual buy-sell agreement: This involves agreements to buy and sell assets, unrelated to this financial transaction.

D. Reverse repurchase agreement: Incorrect, as the state would be the borrower, not the lender, in a reverse repo.

Definition of the Condition in an Audit Finding:

The "condition" describes the actual state observed during the audit. It highlights what occurred in practice, serving as the factual basis for the finding.

In this case, the condition is theabsence of receiptsfor multiple credit card purchases.

Explanation of Answer Choices:

A. We identified multiple credit card purchases without receipts to support them: Correct. This is the observed issue (condition).

B. Government policy requires a cardholder to submit receipts for all purchases: This is the "criteria," which defines the standard or rule being audited against.

C. Finance Department personnel did not regularly review purchases to ensure compliance: This is the "cause," explaining why the condition occurred.

D. We recommend that the government implements a timely review of all credit card purchases: This is the "recommendation," not the condition.

ï‚· What Is a Risk Profile?

Arisk profileis the formal listing and assessment of an agency's top risks. It identifies the risks that could significantly impact an organization’s ability to achieve its objectives and prioritizes them based on factors like likelihood and impact.

ï‚· Why Is the Risk Profile Important?

The risk profile helps management focus on the most critical risks and allocate resources to address them effectively. It is a core element of enterprise risk management frameworks (e.g., COSO ERM).

In the federal government,OMB Circular A-123requires agencies to maintain a risk profile as part of their internal control and risk management processes.

ï‚· Why Other Options Are Incorrect:

B. Risk Management Plan:This is broader and includes strategies for mitigating and monitoring risks, not just listing and assessing them.

C. Risk Assessment:This is a process used to identify and evaluate risks but does not specifically refer to the formal listing of risks.

D. Risk Register:While similar to a risk profile, a risk register typically includes more granular details, such as specific control measures, responsibilities, and timelines.

ï‚· References and Documents:

OMB Circular A-123:Requires federal agencies to develop a risk profile as part of their risk management framework.

COSO ERM Framework (2017):Describes the risk profile as a tool for managing enterprise-wide risks.

ï‚· What Is Internal Control Evaluation?

Internal control evaluation is the process of assessing an organization’s internal controls to ensure they are adequate and effective in mitigating risks, ensuring compliance, and achieving objectives.

ï‚· Why Is Identifying Potential Risks the First Step?

The entire purpose of internal controls is to mitigate risks. Therefore, before evaluating the controls, you need to identify the risks they are meant to address.

Once risks are identified, the organization can evaluate whether the existing controls are adequate and effective in mitigating those risks.

This approach aligns with risk-based frameworks like theCOSO Internal Control Framework, which emphasizes risk identification as the foundation for effective controls.

ï‚· Why Other Options Are Incorrect:

A. Identifying the effectiveness of management activities:This is part of control evaluation but occurs after risks and controls are identified.

B. Assessing the adequacy of controls:Controls cannot be assessed until the risks they address are identified.

C. Documenting how transactions or events are processed:While this step is important, it comes later in the process, after risks and controls are identified.

ï‚· References and Documents:

COSO Internal Control Framework:Identifies risk assessment as the foundation for designing and evaluating controls.

GAO Standards for Internal Control (Green Book):Highlights risk identification as the first step in the control process.