Credit Union Management School (CMS) Year 3 Practice Test

Tone at the top is about the ethical climate and leadership values set by senior management. This sets the tone for everything that follows in an internal control system: it shapes expectations, behavior, and accountability, guiding how risk is perceived and how controls are designed, implemented, and enforced. When leaders demonstrate integrity, consistently communicate policy, and back up ethical standards with actions and resources, employees are more likely to follow suit, support control activities, and report issues. That cultural foundation is what underpins an effective control environment and influences all other control components. The other options miss this behavioral and cultural dimension. An IT security framework is a technical layer of controls; day-to-day operations describe processes rather than the ethical climate that governs them; the budgeting process concerns planning and resource allocation, not the leadership-driven tone that governs how controls are treated across the organization.