Which statement defines a Control Deficiency?

Which statement defines a Control Deficiency?

• A. A deficiency that prevents management from achieving any objective
• B. A control does not allow management to achieve control objectives or address related risks
• C. A deficiency that only affects efficiency
• D. A deficiency that is promptly resolved

Answer: (B)

A control deficiency arises when the design or operation of a control isn’t able to meet its intended purpose. If the control isn’t capable of preventing or detecting misstatements on a timely basis, or isn’t effective at addressing the risks that relate to its objectives, that’s a deficiency. The statement that best captures this idea is that the control does not allow management to achieve control objectives or address related risks. Control objectives relate to reliable financial reporting, safeguarding assets, and compliance, and the risks are the potential misstatements or losses those objectives aim to prevent. Why the other ideas don’t fit: saying the deficiency prevents management from achieving any objective overstates the issue—the deficiency is about failing to meet its specific control objectives and address related risks, not every objective. A deficiency that only affects efficiency ignores the core focus on reliability of financial reporting and risk prevention. A deficiency that is promptly resolved describes a remedy, not the existence of the deficiency itself. So the best answer describes a shortcoming in the control’s ability to meet its objectives or address the associated risks.

A control deficiency arises when the design or operation of a control isn’t able to meet its intended purpose. If the control isn’t capable of preventing or detecting misstatements on a timely basis, or isn’t effective at addressing the risks that relate to its objectives, that’s a deficiency.

The statement that best captures this idea is that the control does not allow management to achieve control objectives or address related risks. Control objectives relate to reliable financial reporting, safeguarding assets, and compliance, and the risks are the potential misstatements or losses those objectives aim to prevent.

Why the other ideas don’t fit: saying the deficiency prevents management from achieving any objective overstates the issue—the deficiency is about failing to meet its specific control objectives and address related risks, not every objective. A deficiency that only affects efficiency ignores the core focus on reliability of financial reporting and risk prevention. A deficiency that is promptly resolved describes a remedy, not the existence of the deficiency itself.

So the best answer describes a shortcoming in the control’s ability to meet its objectives or address the associated risks.