A3 - Risk, Evidence, and Sampling Flashcards
What happens when there is Fraud commited by an officer?
Fraud involving an officer should be reported to governance.
What happens if, after communicating the Fraud of an officer to governance, governance does not do anything about it?
The auditor should consider withdrawing from the engagement.
What is Fraud?
Fraud is an intentional act that results in a material misstatement in financial statements that are the subject of an audit.
What is Error?
Error is an unintentional misapplication of accounting principles relating to amounts, classification, manner of presentation, or disclosure.
What is the primary objective of the fraud brainstorming session?
The primary objective of the fraud brainstorming session is to assess the potential for material misstatement due to fraud.
What is an integrated audit?
An audit where two opinions are expressed:
- Opinion on the fairness of FS.
- Opinion on the operating effectiveness of controls.
When should the auditor consider the assessment of the risk of material statement?
During every stage of the audit.
What should the auditor consider during the overal review stage of the audit?
The auditor should consider whether the resuls of any of the audit procedures affect the assessment of the risk of material misstatement due to fraud.
What happens when an auditor expresses an unmodified opinion on FS that are materially misstated due to fraud?
Since fraud is so hard to detect, the auditor will be considered to have met his or her responsibility provided the audit was planned and performed appropriately, including a specific assessment of the rist of material misstatement due to fraud.
What are the three risk factors?
POA!
- Pressures/Incentives.
- Opportunity.
- Attitude/Rationalization.
What happens when the three risk factotrs are present in an audit?
The risk of material misstatement is greatest.
What happens when there is only one but less than three risk factors present in an audit?
One is enough to cause a risk of material misstatement due to fraud.
What is the most important factor concerning an auditor’s responsibility to detect errors and fraud?
The risk that mistakes, falsifications, and omissions may cause the FS to contain material misstatements.
What are the procedures that an auditor should follow to identify the risks of material misstatement due to fraud?
- Inquire of entity personnel regarding their views on fraud risk.
- Consider the results of Analytical Procedures.
- Evaluate Fraud Risk Factors.
What are the inquiries an auditor should make to personnel regarding their views on fraud risk?
- Identified or suspected instances of fraud.
- The process for identifying and responding to fraud riskm and controls established to address fraud risk.
- Communication of Management’s code of ethics.
- Whether management has communicated to governance about internal controls.
What are the conditions noted during fieldwork that may affect the auditor’s assessment of fraud risk?
- Discrepancies in the accounting records.
- Conflicting or missing evidential matter.
- Problematic relationship btwn auditor and mgmt.
- Objections by mgmt to the auditor meeting privately with the audit committee.
- Accounting policies that are inconsistent with industry practices.
- Frequent weird changes in accounting estimates.
- Tolerance of violations of the company’s code of conduct.
What are the 4 attributes of risk?
- Type of risk = Fraud in FS or misappropriation of assets?
- Significance of the risk = Material misstatement?
- Likelihood of the risk = Chances for fraud to happen.
- Pervasiveness of the risk = Does it affect FS as a whole or only some accounts, transactions etc?
What are the factors that should be considered when evaluating overall fraud risk?
- Whether the 3 fraud risk factors are present.
- Size, complexity, and ownership characteristics of the entity.
- Susceptibility of items to manipulation.
- How fraud can be perpetrated or concealed.
What should an auditor do when the audit evidence is not reliable?
The auditor should reevaluate the risk of fraud and design alternate tests for the related transactions.
What is the formula for Audit Risk?
Audit Risk = Risk of Material Misstatement * Detection Risk
What is the formula for Risk of Material Misstatement (RMM)?
RMM = Inherent Risk * Control Risk
What is Inherent Risk?
The susceptibility of a relevant assertion to a material misstatement, assuming that there are no related controls.
When is Inherent Risk high?
When an account is more likely to contain a material misstatement.
What are the assertions that have a high inherent risk?
- Complex calculations.
- Estimates.
- Cash
- High-volume transactions.
What is Control Risk?
The risk that a material misstatement that could occur in a relevant assertion will not be prevented or detected o an timely basis by the entity’s internal control.
When is Inherent Risk high?
When:
- There are no effective controls relative to the specific assertion.
- The implemented controls are not operating effectively.
- It would not be efficient to test the operating effectiveness of controls.
What is Detection Risk?
The risk that the auditor will not detect a material misstatement that exists in a relevant assertion.
Some detection risk will always exist as the auditor does not review 100% of things.
What makes Inherent and Control Risk different from Detection Risk?
Inherent risk always exist, and can’t be changed by the auditor.
How does the auditor show in the auditor’s report that there is audit risk?
With the sentence: “Auditor obtains reasonable assurance (NOT ABSOLUTE) about whether the FS are free of material misstatement”.
What is Audit Risk?
The risk that the auditor may unknowingly fail to appropriately modify the opinion on FS that are materially misstated.
What is a Material Misstatement?
An omission or misstatement of accounting information important enough that the judgement of someone relying on the info would have been influenced by it.
What are types of misstatements?
- Factual Misstatements.
- Judgemental Misstatements.
- Projected Misstatements.
What is a Factual Misstatement?
A misstatement about which there is no doubt.
What is a Judgemental Misstatement?
Differences arising from the judgements of management related to accounting estimates or inappropriate application of accounting policies.
What is a Projected Misstatement?
The auditor’s best estimate of misstatements in populations, based on the auditor’s projection of the audit sample to the entire population.
What is the ultimate purpose of assessing control risk?
To contribute to the auditor’s evaluation of the risk that material misstatements exist in the FS.
What is the assessed level of control risk useful for?
To determine the risk of material misstatement, which also determines the acceptable level of detection risk for FS assertions.
What is the relationship between the acceptable level of detection and the assurance provided by substantive tests?
They are inversely related. If acceptable level of detection risk decreases, assurance required from substantive tests increases.
What should you do when your assessment of risk is judgmental?
Perform more substantive tests.
What is the relationship between assessed risk of material misstatement and the allowed detection risk?
They are inversely related. If assessed risk of material misstatement increases, allowed detection risk decreases.
What are the relationships between risks?
RMM Inc –>Detection risk Dec –> Substantive Test Inc
Inherent Inc –>Detection risk Dec –> Substantive Test Inc
Control Inc –>Detection risk Dec –> Substantive Test Inc
What happens when controls are proven to be ineffective?
Extent of tests of details must increase.
What happens when controls are made during interim periods?
Detection risk increases.
Interim = Increase
YE = Decrease
When are tests of operating controls performed?
When the auditor’s risk assessment is based on the assumption that controls are operating effectively or when substantive testing alone is not enough.
What are the three elements of further audit procedures?
NET!
- Nature = Purpose and type of audit procedure.
- Extent = Quantity of audit procedure to be performed.
- Timing = Whether performed at interim or at YE.
What are the procedures used to test operating effectiveness of internal controls?
- Recalculation.
- Observation.
- Reperformance.
- Inquiry.
When would an auditor should not to perform substantive tests or tests of controls?
When doing so is inefficient.
What tests are performed after the auditor has assessed risk?
Test of details of transactions are used to detect material misstatements in the FS after the auditor has assessed risk.
What are the Substantive Procedures?
- Verification.
- Analytical procedures.
- Confirmation.
What should the auditor do when his risk assessment is based on the effective operation of controls?
The auditor should:
- Identify specific internal controls relevant to specific assertions.
- Perform tests of such controls to evaluate their effectiveness.
Why does the auditor decide to perform tests of controls?
Because, after obtaining an understanding of the entity and its environment, the auditor’s risk assessment is based on the effective operation of controls.
What are the parts to understanding internal control?
- Ascertaining whether internal controls have been inplemented.
- Considering factors that affect the risk of material misstatement.
- Identifying the types of potential misstatements that can occur.