6 Study and Evaluation of Internal Control Flashcards
C6
Entity’s System (Component) of Internal Control
CRIME
Control Environment
- level of commitment of TOP Mgmt. and BODs
-includes HR policies and practice relative to training, orientation, evaluating, handbook, employee background, etc
Risk Assessment Process
- Mgmt identification and assessment of risks (business risks)
-Mgmt point of view (business risks)
Information system and communication
-Means of recording transactions and communication responsibilities
-In short, ito yung accounting system
- e.g. SAP, Oracle, Quickbooks
Monitor the system of Internal Control
-assessment of IC performance
-internal auditors
Existing Control Activities
-controls policies and procedures that help ensure mgmt’s directives are carried out
C6
Segregation of Duties
The following functions should be performed by different employees:
I CARE
Independent checks or internal audits
Cutody of Assets
Autorization of Transactions
Recording or Transactions
Execution of Transactions
Note: CAR is minimum
C5
Notes:
*When obtaining an understanding, the auditor focuses on the design and implementation and NOT on effectiveness
*The effectiveness of the controls is evaluated during tests of controls since procedures performed are not sufficient to test the controls
Oks
C6
Specific procedures to Understanding Internal Controls and Test Controls
IRIO
Inquiry
Reperformance
Inspection
Observation
C6
One of the components of Internal Control is Control Activities.
What are the types of Control Activities?
PRAVS - New Categories
Physical or Logical Controls
-Security of assets
-
Reconciliations
-Compare 2 or more elements
Authorization and approvals
Verifications
Segregation of duties (CAR)
C6
Auditing standards require the auditor to obtain an understanding of the client’s internal control structure
For every audit
C6
This internal control component is the foundation for all other components. It sets the tone of the
organization, provides discipline and structure, and influences the control consciousness of employees
Control environment
C6
The policies and procedures that help ensure that management directives are carried out are referred to as
the
Control activities
C6
Which of the following is not one of the specific control procedures that are relevant to financial statement
audit?
a. Performance reviews
c. Segregation of duties
b. Physical controls
d. Monitoring
d. Monitoring - Components to
C6
Reperformance is also known as
Walktrhough
Concept of blind PO?
PO na binigay ni Puchasing Dept kay Receiving Dept (which nakalagay lang ay description and date of receive - no number of units). Para pag na receive na, mapoforce si receiving dept na bilangain yung mga na nareceive na items
C6
The scope of substantive procedures as compared to the scope of tests of controls generally vary
Inversely
C6
Concept of TOC vs. ST?
TOC
-Internal Controls
-Processes
ST
-Amounts
-Figures
C6
Answering complex Test of Controls and Substantive Testing questions Technique:
Ilatag mo muna yung pinaka objective, then check mo yung mga choices kung may effect
C6
1. Explain concept of Control Deficiency
- Provide two types of Control Deficiency
- term if mahina ang controls
2.
A. Material Weakness (Severe)
B. Significant Deficiency (Less Severe)
-Both are required by PSA to report to BOD or Audit Committee
-Sometimes, nagbibigay din ng recomm si exteranl auditor kay mgmt. thru Management Letter (but hndi to required by PSA only to communicate)