A2 - Internal Control Flashcards
When obtaining an understanding of an entity’s internal controls, an auditor should concentrate on the substance of the controls rather than their form because:
Management may establish appropriate procedures but not enforce compliance with them.
What component (element) of an entity’s internal control includes the development of personnel manuals documenting employee promotion and training policies?
Control environment
An auditor uses the knowledge provided by the understanding of internal control and the final assessed risk of material misstatement primarily to determine the nature, timing, and extent of the:
Substantive tests
The ultimate purpose of assessing control risk is to contribute to the auditor’s evaluation of the:
Risk that material misstatements exist in the financial statements.
Internal control is relevant to:
An entire entity, an entity’s operating units, and an entity’s business functions.
An auditor’s primary considerations in evaluating controls is whether specific controls:
Affect financial statement assertions.
Inherent limitations of internal control include:
Collusion, human error, and management override.
In obtaining an understanding of the entity and its environment, including its internal control, an auditor is required to obtain knowledge about the:
Design of relevant internal controls pertaining to financial reporting in each of the five internal control components.
The auditor IS NOT required to determine whether internal controls are operating effectively, as part of their obtaining an understanding.
An auditor should obtain sufficient knowledge of an entity’s information system relevant to financial reporting to understand the:
Process used to prepare significant accounting estimates.
An advantage of using systems flowcharts to document internal information is that :
Flowcharts provide a visual depiction of clients’ activities.
When a service organization provides services that affect the initiation, execution, processing, or reporting of a user company’s transactions, those services are:
Considered to be part of the user company’s information system.