CA ANZ Core 2: Risk, Technology and AI study guide
CA ANZ Core 2: Risk, Technology and AI · Work through your exam, one topic at a time.
Core 2: Risk, Technology and AI is a module within the CA ANZ Chartered Accountants Program - the practical, work-integrated pathway candidates complete on the way to full membership. It sits at the point where technical accounting meets the operational realities of running an organisation: how risk is identified, quantified and governed, how information systems and controls actually behave under pressure, and how data and emerging technologies such as artificial intelligence reshape the evidence an accountant relies on. The CA ANZ Core 2: Risk, Technology and AI study guide has 6 sections and about 2,208 words.
01Risk Management Concepts, Frameworks and Risk Assessment
Risk is the effect of uncertainty on objectives - it is not synonymous with loss. Candidates must know two dominant frameworks: ISO 31000 (scope/context → risk identification → analysis → evaluation → treatment → monitoring and review, with communication and consultation throughout) and COSO ERM , organised around governance and culture, strategy and objective-setting, performance, review and revision, and information/communication/reporting.
371 words, about 2 min02Governance, Ethics and Professional Obligations in a Technology-Enabled Environment
Governance is the system by which an entity is directed and controlled. Candidates must understand tone at the top , board and audit-committee oversight of technology and cyber risk, delegation of authority, and the three lines model .
374 words, about 2 min03Information Systems, IT General Controls and Cybersecurity
IT general controls (ITGCs) support the reliable functioning of applications and automated controls. The standard groupings are: access management (provisioning, de-provisioning, privileged access, periodic user access reviews, authentication), change management (authorisation, testing, segregation of development from production, emergency changes), IT operations (job scheduling, backup and restoration, incident management), and program development/acquisition.
339 words, about 2 min04Data Analytics, Data Quality and Decision Support
Analytics maturity runs descriptive (what happened), diagnostic (why), predictive (what is likely) and prescriptive (what should be done). Techniques include profiling, duplicate and gap testing, trend and ratio analysis, benchmarking, regression and classification, and visualisation dashboards.
367 words, about 2 min05Artificial Intelligence and Emerging Technologies
Know the main learning paradigms: supervised (labelled training data, classification/regression), unsupervised (clustering, anomaly detection) and reinforcement (reward-driven agents). Models are developed on training data, tuned on validation data and judged on unseen test data.
357 words, about 2 min06Internal Control, Assurance and Responses to Risk
Internal control is a process designed to provide reasonable - not absolute - assurance over operations, reporting and compliance. The COSO Internal Control framework has five components: control environment, risk assessment, control activities, information and communication, and monitoring activities.
400 words, about 2 min