CMFO Internal Control and Auditing Practice Exam

The oversight body should oversee the entity's internal control system because governance bodies are responsible for ensuring controls are adequate and effective. Management runs day-to-day operations and implements control activities, but the board or audit committee sets expectations, reviews control environments, and monitors performance to ensure risks are managed and objectives are achieved. This separation supports accountability and independence, and it helps ensure that controls remain aligned with the entity’s goals and risk tolerance by regularly examining internal control reports, internal audit findings, and significant control deficiencies.

Declaring it not for the oversight body would weaken governance, while terms like partially true or not sure add ambiguity to a clear governance responsibility.