Certified Internal Auditor (CIA) Part 3 - New Syllabus

Explore how the chief audit executive establishes internal audit policies and procedures, including the internal audit charter, strategic and annual plans, and the required internal audit manual for standards compliance.

The internal audit charter establishes independence, defines scope and mission, and guarantees unfettered access, including direct contact with the audit committee, board, regulator, and shareholders.

Study how to create annual and strategic internal audit plans from a three-year risk assessment to cover significant organizational risks, using a risk-based approach to define yearly work and resources.

Learn to report internal audits to senior management and the board, covering purpose, authority, responsibility, performance, ethics, conformance, and a mandatory self-assessment of risk control effectiveness and risk responses.

Implement directive controls with policies, processes, and templates to guide risk assessment. Provide mentoring, support professional development, enforce time recording, and apply detective, corrective, and monitoring controls.

Coordinate with internal and external assurance providers to minimize duplication, share information, and broaden independent assurance across the three lines of defense.

Use assurance maps to visually link risks, risk owners, and departments to controls and audit coverage. Assess residual risk ratings and internal and external assurance across significant risks.

Apply a risk-based internal audit planning approach using risk assessment and professional judgment to identify, prioritize, and translate strategic risks into an annual audit plan with audit committee input.

See how a long-term strategic plan guides the annual internal audit plan by aligning audit objectives with business objectives and ensuring comprehensive risk coverage.

Develop a risk-based internal audit plan from an annual risk assessment, grounded in the audit universe, with mandatory consultations with senior management and the board and approved consulting engagements.

Examine how audit approaches evolve with risk management maturity, shifting from control- and process-based methods to risk-based and enterprise risk management auditing, including reliance on internal assurance and hybrid approach.

Develop and maintain a mandatory quality assurance and improvement program, including internal ongoing monitoring, self-assessments, and external assessments by a qualified assessor to ensure audit effectiveness and compliance with standards.

Explore the balanced scorecard for internal audit, framing key performance indicators (KPIs) across financial, customer, processes, and learning and growth to measure budget, satisfaction, cost savings, and impact of recommendations.

Establish internal audit KPIs by defining what would make internal audit effective, identifying stakeholders, and monitoring and reporting effectiveness and efficiency to senior management and the board.

Communicate engagement results and monitor the implementation status of internal audit recommendations. Explain the acceptance of risk and conduct a confirmation meeting to verify the audit report with stakeholders.

Internal auditors confirm findings with clients and corroborate at multiple levels from junior accountant to chief financial officer, while separating recommendations from action plans to ensure accurate, clear communication.

Learn to communicate interim progress and recommendations with accuracy, objectivity, clarity, conciseness, completeness, and timeliness, and connect findings to root causes and risk remediation.

Master smart recommendations by making them specific, measurable, achievable, relevant, and time-based, and learn to design lean audit reports with purpose, scope, findings, recommendations, action plans, deadlines, and ownership.

Internal auditors escalate risk findings across management levels to the board, where acceptance of risk and risk appetite determine whether actions mitigate the risk or the risk is tolerated.

Monitor progress by assessing engagement outcomes and following up on internal audit recommendations to verify risk mitigation with evidence.

Establish a follow-up process to monitor the adequacy, effectiveness, and timeliness of management's corrective actions after a control weakness; define internal audit involvement and board reporting.

Explore how organizations plan their strategy, measure performance, and structure to achieve objectives, and examine the role of data analytics in internal auditing for stakeholder value.

Strategic objectives define long-term outcomes that increase stakeholder value, guided by board and management through strategic planning and multiyear plans; vision and mission statements clarify direction and purpose.

Examine competitive strategies such as cost leadership, differentiation, and focus, and see how first-to-market advantage and supplier synergies create market power while avoiding the middle ground.

Identify the strategic considerations that enable a firm to compete in a market, including technological structure, process maturity, business environment, labor, and supply chain, along with client and stakeholder dynamics.

Explore how key performance indicators and metrics quantify performance to guide resource allocation, identify risks, and improve conformance with the Institute of Internal Auditors standards.

The balanced scorecard groups key indicators into four perspectives—financial, customers, processes, and learning and growth—and can be adapted to internal audit with metrics like actual versus budgeted costs.

Explore leading, coincident, and lagging indicators by defining each type, linking trigger events to consequences, and analyzing examples like building permits, sales figures, and unemployment.

Explain KPI targets with internal thresholds and external targets, showing a measured KPI and policy-driven actions to avoid breaching regulatory levels, as in banking capital measures.

Learn a four-step approach to developing KPIs for internal audit that ties measures to what makes the function effective, identifies key stakeholders, and monitors results.

Learn how productivity rises by improving quality or quantity with the same resources, or by reducing resources, through balancing effectiveness, economy, and efficiency in internal audits.

Explore organizational behavior, the study of how people interact in groups and in an organization's culture, and see how individuals' behavior shapes workplace dynamics for internal auditors.

Define motivation as the process that initiates and sustains goal-oriented behaviors, and distinguish intrinsic motivation as internally driven from extrinsic motivation, with examples like salary, recognition, and promotion.

Explore Maslow's hierarchy of needs and the theories of motivation, from physiological needs to self-actualization, and see how meeting these needs motivates employees in organizations.

Apply Herzberg's motivation-hygiene theory to separate hygiene factors from motivators in the workplace. Identify how policy, supervision, work conditions, and salary prevent dissatisfaction, while growth and recognition boost satisfaction.

Explore McGregor's Theory X and Theory Y to compare management approaches, where X assumes dislike of work and close supervision, and Y assumes intrinsic motivation and participative management.

Locke and Latham's goal setting theory asserts that difficult, specific goals raise performance when clear instructions guide action; employee participation exchanges information and motivates effort toward organizational objectives.

Explore Skinner's reinforcement theory and how behavior changes through positive reinforcement, negative reinforcement, extinction, and punishment. Learn practical examples of rewarding or removing consequences to shape behavior.

Learn Skinner's reinforcement theory and how negative reinforcement strengthens behavior by removing undesirable consequences. The caption clarifies that negative reinforcement rewards by eliminating negative outcomes.

Explore how organizational structure and culture influence behavior and governance, and how a supportive structure and culture shape values, social responsibility, and governance effectiveness.

Reinforce an organization's culture by aligning ethics with education, providing resources, removing barriers like bonuses, and cultivating a participative culture with strong tone at the top.

Explore the big five traits theory, detailing extroversion, agreeableness, conscientiousness, neuroticism, and openness. See how these traits influence behavior and why creative internal auditors matter.

Explore how the Myers-Briggs type indicators describe personality types and how different traits, assessed by questionnaires, influence communication, problem solving, and team dynamics in internal audit.

Design jobs to boost overall performance and employee well-being by applying enlargement, rotation, and enrichment—providing more interesting tasks, greater variety, and growth opportunities.

Distinguish leadership from management by comparing vision and strategy with planning and monitoring, and highlight how leadership inspires teams, manages risk, and drives organizational objectives.

Explore management control techniques along an autocratic to participative spectrum, including coercing, controlling information, assigning responsibilities, establishing accountability, measuring performance, and delegating authority and empowering teams.

Explore the five bases of power from French and Raven, including legitimate, coercive, expert, referent, and reward power, with examples from rank, threats, expertise, admiration, and rewards.

Explore the Blake and McKenzie leadership grid, examining how concern for people and production shapes styles from authority-compliance to team management, and why the ideal is team management.

Explore centralized versus decentralized organizational structures within the control environment, highlighting decision concentration, economies of scale, flexibility, communication, local adaptation, and risks of reduced oversight.

Explore department totalization through functional, divisional, and matrix structures, highlighting how function-based specialization, cross-unit communication, and reporting lines affect internal audit independence and accountability.

Build a risk inventory for the sales process within a CIA Part 3 audit, detailing governance, targets, marketing practices, data protection, and invoicing controls.

Evaluate procurement risk by examining policies, confidentiality controls, authorization practices, and tender processes to prevent noncompetitive bids, fraud, and conflicts of interest.

Clarify the project management lifecycle as planning and organizing resources to move a task toward completion, including tendering an offer as a project, and differentiate it from ongoing activities.

Describe the project management lifecycle pain curve, with early planning effort, a learning curve reducing risk, then scope creep, gold plating, and emergencies that extend duration and internal audits.

Explore the project management lifecycle curve from conception and planning to execution and monitoring and control, highlighting leadership involvement and risk assessment in internal audit planning.

Explore the project management triangle, where changing one constraint—scope, cost, time, or quality—forces changes in the others. See how increasing cost can raise quality, while shortening time can lower it.

Examine Gantt charts and project network analysis to visualize activities, durations, overlaps, and schedules across conception, planning, execution, monitoring and control, using the critical path method to identify slack time.

Master the theory of constraints, identify bottlenecks that limit output, and increase capacity at the constraint while balancing cost, quality, time, and scope as new constraints emerge.

Explore PERT and CPM using fast tracking and crashing to shorten project duration, with practical audit reporting examples and resource optimization within network analysis.

Identify core contract elements, including mutual agreement, consideration, and competent parties. Explain the mutual right to remedy breach, lawful subject matter, and the role of implied terms.

Identify and verify contract elements in external relationships, including proposals, offers comparison, timelines, payment terms, IP protection, termination, audit rights, cost sharing, compliance, performance metrics, and project reporting.

Discover common contract pricing forms, from fixed price agreements to cost reimbursement, price per unit, and joint venture contracts, with real-world examples like travel costs and shared expenses.

Identify the firm fixed price contract as the pricing form used when adequate competition exists, enabling identification of performance uncertainties and reasonable cost estimates with a price agreed upfront.

Explore data analytics as a new CIA field, focusing on gathering and analyzing data to extract insights for decision making from databases and Excel tables.

Examine data governance as processes, roles, policies, standards, and metrics that ensure efficient use of information to meet objectives, and define information security governance as the system directing information security.

Explore the challenges of big data and data analytics, focusing on the V's—volume, velocity, variety, variability, veracity, and visualization, and how they shape value and real-time decision making for organizations.

Explore the velocity of data from billions of devices and learn how the increasing speed of data availability shapes analytics and big data challenges.

The most significant challenge to cybersecurity audits is the variety of devices and data types, as more device types increase complexity and create risks hidden from standard auditing.

Explore descriptive data analytics, including aggregation, summarization, and comparison across sources, to monitor operations, assess risk responses, and support data discovery and policy compliance.

Diagnostic data analytics interprets past performance to determine what happened and why, using trend analysis, data mining, and noting that correlation is not causation to identify root causes.

Explore predictive data analytics that forecast future performance and events by extrapolating current trends with known future changes, using statistical models and machine learning to identify correlations.

Explore prescriptive data analytics, building on descriptive, diagnostic, and predictive analytics to recommend actions, assess options, and quantify impacts on future opportunities and risks.

Determine objectives of the data analytics program and what value data should provide. Obtain, cleanse, and normalize data to reduce errors, then analyze and present results with graphs and visualizations.

Explore how data analytics enhances internal audit through specialty applications like compliance checks, error and fraud detection, operational performance monitoring, and text and network analysis, with real-world examples.

Explore how operational performance analytics helps internal auditors identify and improve key performance indicators (KPIs) for functional units, distinguishing it from compliance, fraud detection, and internal control analysis uses.

Identify specialty data analytics in internal audit; text analysis is the only true specialty among compliance, error detection, fraud detection, operational performance, and network analysis, while prescriptive analysis is not.

Protect information by mitigating risks and preventing unauthorized or inappropriate access, while applying physical and information security controls and addressing data protection, privacy, and emerging cyber risks.

Confidentiality restricts access to authorized individuals. Data integrity means completeness, accuracy, and consistency, with error checking to verify these properties, and data availability ensures timely access, even with local mirrors.

explore information technology general controls that apply to all systems, including governance, operations, backups and testing, change controls, and security, with emphasis on BCP, disaster recovery, and ISO 27001 governance.

Explore segregation of duties in IT teams to prevent errors and fraud by separating access to assets from changing asset records, with production data, systems development, and validation considerations.

Evaluate access setups for production data and programs, emphasizing segregation of duties and that application programmers should not update production data or programs and must submit changes via the change control unit.

Identify physical security threats—from hazards like fire and floods to unauthorized access and human error—and apply controls such as biometric access, security personnel, fire alarms, and disaster recovery tests.

A data center physical security audit recommends biometric authentication for workers and supplementary iris recognition. Avoid replacing the current system, and note password verification is not biometric.

Identify physical design considerations for data centers, such as uninterruptible power supply, surge protection, location, environment, and backup and emergency systems.

Explore identity access management, detailing how policies and technologies ensure the right users have appropriate access, how logical access controls identify authorized users, and how privileged accounts require two-person validation.

Assess access and authorization risks, including inappropriate employee access to confidential information, supplier or client data exposure, malicious software installation, and data modification or theft.

Explore identity access management by provisioning, terminating access, and enforcing segregation of duties. Remove obsolete rights, apply IAM administration and auditing, and enforce strong passwords to deter brute force attacks.

Learn how passwords should be fresh, unique, and not shared, and explore two factor authentication as a stronger defense using a password plus a biometric control such as a thumbprint.

Roll matrices define standard access rights by job responsibility across ERP, SAP, and Salesforce. Assign roles with read or write access and limit auditors to none or read during audits.

Analyzes how to improve access control across 36 systems for 5,000 employees, concluding that implementing role matrices by job category provides standard, controlled provisioning and reduces improper access.

A supervisor should use standard role matrices by job responsibility, supported by system access documentation and knowledge of employees' duties, to approve appropriate access requests.

Explore various information security controls, including encryption, firewalls, intrusion detection, antivirus software, biometric authentication, user behavior analytics, honeypots, data loss prevention, machine learning threat detection, and cloud security.

Explore encryption, which converts data into an unreadable coded form to prevent unauthorized access, and its link to logical access controls and confidential codes for privileged accounts.

Firewalls combine hardware and software to route traffic, block unauthorized communications, and often sit before web servers, with multi-tiered or inward-facing layers to protect internal data.

Examine data privacy and protection, defining personal identifying information and data subject rights under GDPR, and explain how data use, access, and deletion must be controlled and acknowledged.

Auditors assess an organization's data protection framework, verifying clear collection purposes, explicit consent where required, restricted retention and use, third-party disclosure, secure data handling, and compliance monitoring and complaints resolution.

Identify the greatest risk to personal data as insider risk from an organization's own employees, including collusion, and emphasize how insiders pose the highest threat within a data protection framework.

Explore the bring your own device trend and its information security, privacy, and compliance risks across personal phones, tablets, and laptops.

An internal auditor reviews the BYOD policy to assess the adequacy of security protections and patch updates as the primary control objective in a GDPR-influenced environment.

This lecture clarifies internal auditor's data privacy role, highlighting assurance that privacy laws are communicated to responsible parties, while surveys, training, and privacy test script validation procedures remain implementation tasks.

Explore the asset, threat, and vulnerability triangle to assess information security risks by evaluating asset value, vulnerabilities, and threats.

Define cybersecurity as protecting information through prevention, detection, and response to attacks, and examine malware as software that damages, disrupts, or gains unauthorized access, with Stuxnet as a notable example.

Explore the ecosystem of cybersecurity threats, from viruses and worms to ransomware and trojans. Learn how social engineering, phishing, insider threats, and data diddling enable attackers to compromise systems.

Identify how a worm reproduces itself and distinguishes it from a virus by copying itself across a network.

Identify phishing as a social engineering cyber threat that deceives recipients via email to reveal sensitive data, such as passwords or financial information, by impersonating a trusted source.

Apply elimination to see that viruses and worms spread by themselves, while Trojans, a type of Trojan horse, use social engineering to appear harmless.

Explain how malicious programs replicate themselves, distinguishing viruses from worms that replicate without external action, and describe Trojan horse and backdoor as other threats.

Identify and inventory information assets to protect, including internal data and policies, then implement information technology governance controls such as incident management, post-mortems, training, background checks, and standard security configurations.

Enforce the principle of least privilege for application access, monitor privileged accounts with access management software, and implement robust patch, update, and antivirus controls.

Apply technical infrastructure controls and establish baseline performance for systems, networks, and resources. Monitor unusual traffic, implement change controls, ensure tested backup and recovery, and inventory assets to identify vulnerabilities.

Audit external connection controls to restrict downloads and block access to known malicious websites, or permit only authorized sites; monitor remote access with encryption and firewalls.

Verify third party information security through SLA monitoring, SOC reports, insurance clauses, explicit security arrangements, and ensure prompt response and remediation with ongoing risk monitoring and service level monitoring.

Identify illicit software use as a cybersecurity control, covering piracy, license breaches, and clock manipulation. Evaluate risks from extensions, jailbreaking, and improper installations, and verify compliance across devices.

Explore how insider threat endangers information systems and how buy-in insider threat programs with access restrictions, awareness training, and background checks mitigate risk and prevent collusion bypassing segregation of duties.

Enforce password control procedures to block unauthorized access from store terminals and deter insider threats that could trigger fictitious orders, protecting distribution patterns.

Data classification policies ensure consistent application of security controls to protect customer data. They define security levels, reference ISO terminology, and tie protection to privacy laws and regulations.

Establish governance over cybersecurity with a board-level committee that sets risk appetite and resources, builds a tone at the top, and oversees remedial actions through policies and procedures.

Explore ISO 27001's governance framework, risk assessment, and actions to address residual risk, and see how IIA guides and internal audit support cybersecurity risk management.

Explore the three lines of defense in cybersecurity: first line managing risks, second line providing independent oversight, and third line delivering internal audit assurance on residual risk.

Prioritize the detection and reporting systems audit as the best internal audit type for cybersecurity assurance, ensuring timely risk reporting and action.

Explore the layers model of IT management, external connections, and technical infrastructure, and how these layers support business applications, with governance, staffing, policies and procedures, and disaster recovery planning.

Explore the systems development life cycle, from planning and analysis to design, programming, testing, and deployment, with emphasis on end-user involvement, customization, and continual refinements.

Internal audit assesses feasibility in the systems analysis phase and validates information security controls aligned with ISO 27001. It verifies initial objectives and supports controls design across the SDLC.

Compare key systems development methods, including waterfall, spiral, rapid development, and agile, highlighting phased versus iterative approaches, risk management, testing, and continuous improvement.

The waterfall method enforces sign-offs at the end of each stage, improving control and reducing wasted resources, but its inflexibility can extend deadlines.

The spiral method uses an iterative approach to learning, continuously improving future processes. It involves developing objectives, identifying and assessing risk, reviewing results, and iterating to refine solutions.

Rapid development emphasizes flexibility and parallel work, using brainstorming and workshops to run multiple prototypes simultaneously, shortening time by starting testing and manufacturing earlier—as seen in COVID vaccine development.

Embrace the agile method by iterating development and testing in parallel, prioritizing customer needs and collaboration over rigid processes, documentation, and contracts, and adapting to change.

Identify why internal audit should avoid participating in the systems development process, notably when the risk-based audit plan shows the project is low risk and resources can be redirected.

Explore diverse application testing methods across alpha, pilot, beta, and user acceptance phases, and assess load, throughput, regression, security, sociability, and system testing.

Explore software testing concepts including beta testing, throughput testing, load testing, and systems testing, and validate interfaces with all systems to detect inner communication bugs.

Explore database terminology and relational structures, focusing on tables like the customer table, unique identifiers such as customer number, and records with fields like address and zip code.

Explore relational databases by linking a customer table to sales and goods tables via a unique identifier, illustrating attributes, entities, and one-to-many relationships without data replication.

Explore how software and application controls are embedded in applications, covering input data validation, processing and integrity checks, and output controls, plus audit trails to log changes.

The lecture explains common business applications, including CRM systems like Salesforce and ERP solutions like SAP, which tie accounting, production, inventory, sales, and governance risk and compliance.

Map the IT reporting structure from the CEO to the CIO, detailing operations, technical support, application development, data administration, and IT security, with CSO reporting to the board.

Explore the COBIT IT control framework for the governance and management of enterprise IT from ISACA. Consider the CSA certification as a next step after CIA for ISO 27001 audits.

Explore COBIT principles that create value for stakeholders, ensure end-to-end coverage of the organization, align with ISO standards, enable holistic governance through interrelated enablers, and separate governance from management.

Explore the client-server model, where servers provide processing power and storage to multiple devices, and learn how networks, VPNs, intranets, gateways, routers, firewalls, and mainframes enable secure, scalable infrastructure.

Explore how business continuity and disaster recovery planning ensure an organization sustains products and services after a disruption, with disaster recovery focusing on it and incident response.

Highlight how a thorough recovery plan enhances business continuity and disaster recovery planning to resume operations quickly after contingencies and interruptions.

Explore data backup and recovery controls, including daily, weekly, and monthly retention using sun, son, father, and grandfather backups; offsite and cloud backups; change-based updates; and recovery testing.

Explore the concepts and principles of financial and management accounting, including budgeting, transfer pricing, costing systems, and internal versus external reporting for strategic financial decision making.

Explore the qualities of financial information under GAAP, including relevance, neutrality, representational faithfulness, verifiability, reliability, comparability, and consistency.

Explains dual-entry accounting, where every transaction records a debit and a credit, and shows how debits increase assets, expenses, or dividends while credits increase revenue, capital, retained earnings, or liabilities.

Practice dual-entry accounting by determining whether entries increase or decrease assets, liabilities, capital, dividends, retained earnings, revenues, and expenses using a chart.

Compare cash-basis and accrual-basis accounting by showing revenue recognized when cash is received versus when earned, and apply the matching principle to two-year contracts with annual cutoffs.

Explore the main financial statements—income statement, statement of shareholders' equity, cash flow statement, and statement of financial position—covering revenue, expenses, cash flows, and assets equal liabilities and equity.

Explore the core financial statement assertions that ensure completeness, existence, accuracy, valuation, rights and obligations, and presentation. Learn how auditors and management verify disclosures and economic reality.

Learn how revenue recognition uses the point of sale recognition method, recognizing revenue at delivery to prevent overstatement or understatement, with cash collection occurring later.

Explore the installment sales method for revenue recognition, where revenue is recognized at delivery up to cost of goods sold, and the remaining profit is recognized when cash is collected.

Explore the cost recovery method for revenue recognition when collection is uncertain after delivery. Revenue is recognized only after cash collections exceed the cost of goods or services sold.

Apply the completed contract method to revenue recognition by delaying all revenues and gross profits until project completion, used when percentage of completion cannot be estimated.

Apply the percentage of completion method to recognize revenue based on the percent of total costs completed, not cash, across the project's three-year timeline.

Learn how straight line depreciation spreads the cost of a fixed asset over multiple years for tax and reporting purposes, by dividing the asset's cost by the number of years.

Learn how the activity method depreciation estimates expense by units produced, using the proportion of actual units to total expected units, illustrated with a $10,000 machine.

Explain accelerated depreciation as a legal tax benefit that uses a factor, such as 1.5, to front-load deductions over five years, with options ending at year six or full expensing.

Apply the sum-of-the-year's-digits depreciation method using the remaining years over the total as the factor; e.g., five over fifteen equals one third, yielding 33% of 10,000 (333.33) in year one.

Explore lessee lease methods, including operating leases and capital (financing) leases under IAS 17. Criteria include ownership transfer, discounted purchase option, 75% useful life, and 90% present value.

Explore lessor lease methods, including operating, direct financing, leveraged, and sales type leases, and how IFRS standards emphasize substance over form when the asset title does not transfer.

Explore how ratio analysis computes and interprets liquidity, leverage, profitability, ROI, asset management, and valuation ratios, focusing on how these relationships work for CIA part 3 rather than memorizing formulas.

Explore debt and leverage ratios, including operating leverage and fixed versus variable costs, and examine how financial leverage, debt ratio, debt-to-equity ratio, and CVP analysis affect revenue, return, and risk.

Explore liquidity ratios, including the current ratio and quick ratio, comparing current assets (cash, inventory, marketable securities, accounts receivable) to current liabilities (accounts payable and other short-term obligations).

Calculate liquidity ratios by comparing current assets to current liabilities and using cash for the quick ratio, illustrating a current ratio of 0.5 and a quick ratio of 0.3.

Understand net working capital by calculating current assets minus current liabilities, assuming accounts receivable are paid on time, accounts payable not delayed, and marketable securities change.

Explore profitability ratios by analyzing gross profit margin, operating profit margin, and net profit margin, highlighting how the cost of goods sold, taxes, and interest affect net earnings.

Analyze how return on assets (ROA) measures a firm's ability to convert assets into net income using the average total assets across two periods.

Analyze the price to earnings ratio, defined as stock price divided by earnings per share, and explain how a high or low pe ratio signals growth expectations or potential overvaluation.

Assess book value per common share as the proportion each share would receive of common shareholders' equity in liquidation, noting its backward-looking, older nature compared to earnings.

Explore dividend payout ratio and dividend yield as key investment valuation ratios. Learn how payout signals dividend reliability and yield links dividends to market price for income-focused and growth investors.

Analyze accounts receivable turnover, DSO, and accounts payable turnover (DPO). Explore inventory turnover and fixed asset turnover, and explain the cash conversion cycle DIO + DSO − DPO.

Examine capital structure and budgeting through the master budget, detailing operating budgets for ongoing operations, capital budgets for large projects, and financial budgets linking uses and sources of funds.

Explore the time value of money and present value by showing how an 8% stock market return doubles a dollar roughly every nine years.

This lecture explains net present value and internal rate of return, illustrating how discount rates affect the present values of cash flows and the discount rate that makes NPV zero.

Determine the payback period by tracking cumulative cash flows without discounting, showing repayment occurs in the fourth month of the fourth year.

Compute the accounting rate of return (IRR), a percentage of return relative to the initial investment, using estimated increases in annual operating income and example calculations.

Identify responsibility centers as units within an organization, cost centers that control costs, profit or revenue centers that boost revenues while managing costs, and investment centers that oversee capital budgeting.

Explore cost accounting concepts through a shoe workshop example, defining cost objects and cost drivers, and distinguishing direct and indirect costs like leather, workshop, and staff expenses.

Explore cost accounting terminology and identify actual costs shown in financial statements. Distinguish incremental costs, opportunity costs, and sunk costs to guide decisions between alternatives.

Explore how cost-volume-profit analysis links variable and fixed costs to profit. Understand contribution margin as net sales minus variable costs, and break-even when it covers fixed costs.

Compare managerial costing systems: absorption costing allocates fixed and variable costs to inventory and to cost of goods sold, while variable costing treats fixed overhead as a period cost.

Explore cost accumulation and allocation systems, comparing actual, normal, and standard costing, and distinguish job costing for unique projects from process costing for mass production, including overhead allocation.

Identify activities and assign costs to cost pools using resource cost drivers, then allocate costs to cost objects like red and blue bikes based on activity drivers.

Match costing methods to production environments: job order costing for auto repair, process costing for mass production like oil refining, and operations costing for clothing or drug manufacturing.