A3 - Risk, Evidence, and Sampling Flashcards
Two types of fraud risk:
fraudulent financial reporting and misappropriation of assets
fraudulent financial reporting?
intentional misstatements or omission of amounts and disclosures in the FS with the intent to deceive the user
misappropriation of assets?
theft of an entity’s assets
Three fraud risk factors:
- incentive/pressures exist when there is a reason to commit fraud
- opportunity to commit fraud exists due to lack of effective controls
- Rationalization/attitude associated with attempting to justify fraudulent behavior
Management’s responsibility with respect to fraud:
to design and implement programs and controls to prevent, detect, and deter fraud
Auditor’s responsibility with respect to fraud:
to obtain reasonable assurance about whether the FS are free from material misstatement
(T/F) When there is an indication of fraud, the auditor should communicate this with the appropriate level of management at least one level above the parties involved.
T
(T/F) Fraud that causes material misstatement or involves senior management should be reported to the audit committee/those charged with governance
T
(T/F) Complete documentation of the auditor’s fraud risk assessment and response is required
T
Audit risk?
risk that the FS are materially misstated (RMM), but the opinion is not appropriately modified (DR)
Misstatements can occur due to:
unintentional errors or intentional fraud
Three types of misstatements:
- factual misstatements
- judgmental misstatements
- projected misstatements
The risk of material misstatement (RMM) is composed of two risks that must be assessed by the auditor:
Inherent risk (IR) and control risk (CR)
Inherent risk (IR)
susceptibility of a relevant assertion to a material misstatement, assuming no related controls
inherent risk is high if the account is more likely to contain a material misstatement
High inherent risk examples:
- high volume transactions
- amounts derived from estimates
- cash
- technology that renders a product obsolete
- a lack of working capital
- a decline in the overall industry or economy
control risk (CR)
risk that a material misstatement that could occur in a relevant assertion will not be prevented or detected and corrected on a timely basis by the entity’s internal control
control risk is high if:
- there are no effective controls relative to the specific assertion
- the implemented controls are not operating effectively
- it would not be efficient to test the operating effectiveness of controls