A3 - Risk, Evidence, and Sampling Flashcards
During an audit, the auditor should maintain an attitude of:
- Professional skepticism
- Which includes a questioning mind and a critical assessment of audit evidence
The auditor’s responsibility is to plan and perform the audit to obtain:
- Reasonable assurance about whether the FS are free of material misstatement, whether caused by error or fraud
- This includes a specific assessment of the RMM due to fraud
The disclosure of fraudulent activities to parties other than the client’s senior management and those charged with governance is:
- NOT ordinarily part of the auditor’s responsibility
Inquiries the auditor should make to identify the RMM due to fraud:
- How management has communicated to those charged with governance regarding IC and how it functions to prevent, deter or detect MM due to fraud
- How management communicates to employees its views on acceptable business practices
- Whether there are any particular business segments for which a risk of fraud may exist
- Whether management is aware of any allegations of fraud
The auditor should consider implications of an act of noncompliance with laws and regulations in relation to other aspects of the audit, particularly:
- The reliability of the management representation letter (representations of management)
Lack of ownership identification on the entity’s fixed assets would heighten:
- An auditor’s concern about the RMM arising from the misappropriation of assets
If evidence is not reliable, the auditor should:
- Reevaluate the risk of fraud and design alternate tests
What attributes should be considered in the process of identifying client risks that may result in a MM due to fraud?
- Type of risk
- Significance of the risk
- Likelihood of the risk
- Pervasiveness of the risk
How does inherent risk and control risk differ from detection risk?
- They exist independently of the audit
Judgmental misstatement:
- Differences arising from judgments of management and the auditor
Factual misstatement:
- Misstatements about which there is no doubt
Projected Misstatement:
- The auditor’s best estimate of misstatements in populations, involving the projection of misstatements identified in audit samples to the entire population
Control risk:
- Risk that a material misstatement that could occur in a relevant assertion will not be prevented or detected (and corrected) on a timely basis by the entity’s internal control
The ultimate purpose of assessing control risk is to contribute to the auditor’s evaluation of the:
- Risk that material misstatements exist in the financial statements
The auditor assesses control risk because it:
- Affects the level of detection risk that the auditor may accept
- To obtain an understanding of internal control
To determine the assessed RMM, the auditor:
- Uses the assessed level of control risk along with the assessed level of inherent risk
- This affects the acceptable level of detection risk for FS asserstions
If the assessed level of fraud risk is high, the auditor should attempt to reduce:
- Detection risk
- This helps ensure that the auditor will obtain reasonable assurance about whether the FS are free of material misstatement caused by fraud
Audit risk is comprised of:
- The risk of material misstatement and detection risk
Audit risk:
The risk that the auditor may unknowingly fail to modify appropriately the opinion of the FS that are materially misstated
Fraud risk:
- The risk that misstatements will arise from fraudulent financial reporting or misappropriation of assets
Detection risk:
- The risk that the audit procedures implemented will not detect a misstatement that exists in a relevant assertion
- This is not assessed, but rather controlled by the auditor through the level of testing performed
Inherent Risk:
- The susceptibility of a FS assertion to a material misstatement assuming there are no related controls
Regardless of the assessed level of control risk, an auditor would perform some:
- Substantive tests to restrict detection risk for significant transaction classes
In an audit of FS, substantive procedures:
- Will always be necessary for all relevant assertions related to material transaction classes
If an auditor assesses control risk at the maximum level:
- Document the assessment and make decisions to potentially perform more substantive procedures
The acceptable level of detection risk is INVERSELY related to the:
- Assurance provided by substantive tests (perform more tests/change extent of tests)
- Risk of material misstatements (IR x CR)
- Increasing the assessed level of control risk would increase the:
- Extent of test of details
What is always necessary in a FS audit:
- Analytical procedures
- Risk assessment procedures
When are tests of operating effectiveness in controls performed?
- Only when the auditor’s risk assessment is based on the assumption that controls are operating effectively
When substantive procedures alone are insufficient
An auditor may decide not to perform tests of controls after performing risk assessment procedures because:
- The time required to perform tests of controls would be greater than the reduction in time spent on substantive testing
In assessing control risk, an auditor would perform:
- Inquiry
- Inspection
- Observation
- Reperformance
When risk assessment is based on the effective operations of controls, an audit will involve:
- Identifying specific internal controls relevant to specific assertions
An auditor should design tests of details to ensure that evidence supports:
- the planned level of assurance at the relevant assertion level
Auditor should consider when determining the appropriate extent of testing controls:
- Frequency of performance of control during the period
- Length of time auditor wishes to rely on control
- Relevance and reliability of evidence obtained
- Extent to which other tests provide evidence about the same assertion
- Extent auditor wishes to rely on operating effectiveness on the control to reduce substantive procedures
- Expected deviation rate from the control