A3 - Risk, Evidence, and Sampling Flashcards
How is the overall audit risk lowered?
If the risk of material misstatement is too high (e.g, with regard of overstatement of revenue), the audit has no choice but to lower the detection risk, and with it, the overall audit risk is lowered by performing more substantive testing.
How is detection risk lowered?
If the risk of material misstatement is too high, you lower detection risk as follows:
1. N - Nature: substantive test rather than test of controls
2. E - Extent: More testing rather than less
3. T - Timing: Closer to year end
Increased emphasis on professional skepticism when gathering and evaluating audit evidence.
What risks does the auditor assesses?
- Inherent risk
- Control risk
What risk does the auditor make a decision to increase or decrease?
Detection risk
How is detection risk increased?
If the risk of material misstatement is below the maximum, you increase detection risk as follows:
1. Perform less substantive tests or perform them earlier in the year.
2. Test controls instead of substantiative tests
3. Perform testing earlier in the audit
How does inherent risk and control risk differ from detection risk?
- They exist independently of the audit of financial statements. The auditor cannot change them.
- Assessed by the auditor.
Why does the auditor assesses control risk?
Because it affects the level of detection risk that the auditor may accept.
How is Audit Risk (AR) computed?
Audit Risk (AR) (should be low) = Risk of material misstatement (RMM) (assessed by auditor) * Detection Risk (DR) (controlled by auditor)
How is Risk of material misstatement (RMM) computed?
Risk of material misstatement (RMM) = Inherent risk (IR) * Control risk (CR)
How are the components of audit risk assessed?
The components (e.g., inherent risk, control risk, detection risk) can be assessed as either quantitative (e.g., as a percentage) or nonquantitative (e.g., high, medium, low, etc.)
What is considered a judgmental misstatement?
Are differences arising from the judgement of management, including those concerning recognition, measurement, presentation, and disclosure of F/S (including selection of accounting policies considered unreasonable/inappropriate and estimates)
What is considered projected misstatement?
Auditor’s best estimate of misstatements in populations, involving the projections of misstatements identified in audit samples to the entire population from which the samples were drawn. Auditor’s improper judgement or estimate.
What factors represent a high inherent risk (CECH)?
C - Complex calculations
E - Estimates (Amounts derived from estimates)
C - Cash
H - High-volume transactions
What other factors specific to the entity and its environment may also increase inherent risk?
- Technology that renders a product obsolete
- A lack of working capital
- A decline in the overall industry or economy
What is control risk?
The risk that material misstatements that could occur in a relevant assertion will not be prevented or detected (and corrected) on a timely basis by the entity’s internal control.
When does the auditor assess control risk as high?
- There are no effective controls relative to the specific assertions
- The implemented controls are not operating effectively
- it would not be efficient to test the operating effectiveness of the controls.
What is audit risk?
It is the risk that the auditor may unknowingly fail to modify the opinion on financial statements that are materially misstated.
What is fraud risk?
The risk that misstatements will arise from fraudulent financial reporting or misappropriation of assets.
What would the auditor consider in an overall response to financial statement level risk?
- Communicate the audit team an increased need for professional skepticism
- Assign staff with more experience or specialized risk
- Increase the level of supervision
- Incorporate a greater level of unpredictability into the audit
- Make pervasive changes to the nature, extent, or timing of tests, such as shifting substantive procedures closer to period end.
What is a dual-purpose test?
It is a test of controls that is performed concurrently with a test of details on the same transaction. The test should be designed to achieve both objectives.
What is the purpose of the test of controls?
To evaluate the operating effectiveness of a control
What is the purpose of a test of details?
To support relevant assertions or to detect material misstatements.
How does the auditor performs the risk assessment to determine the effective operation of controls?
- Identifying specific controls relevant to specific assertions that are likely to prevent or detect material misstatements.
- Performing tests of such controls to evaluate their effectiveness.
How would the auditor validate segregation of duties?
The auditor will perform a test of segregation of duties by relying on inquiry and observation.
if an entity is being forced to discontinue operations in a foreign country, what would the auditor assume?
The auditor could assume that the client committed an act of noncompliance with laws and regulations in the foreign country.
What would the auditor do if the client refuses to accept an auditor’s report with a modified opinion due to noncompliance with law and regulation?
The auditor should withdraw from the engagement and notify those charged with governance in writing,
What would the auditor consider to identify related party transactions?
- Compensating balance arrangements (which may be maintained by or for related parties)
- Loan guarantees
- Unusual, nonrecurring transactions near year-end
- Transactions based on terms that differ significantly from market terms
- Nonmonetary exchanges.
PECO = appropriate reliability of audit evidence
P = Personal knowledge (most reliable) - performs examination, inspection, or recalculation
E = External Source (e.g., bank confirmations, receivable confirmations)
C = Client Evidence (auditor’s consideration of data developed under an adequate system of internal controls)
O = Oral client evidence (less reliable)
RORI = Procedures used to test operating effectiveness of internal controls
R = Recalculation
O = Observation
R = Reperformance
I = Inquiry
What is considered auditor’s personal knowledge?
P = Personal knowledge (most reliable)
E
C
O
- Observation
- Examination
- Inspection
- recalculation
What is considered evidence from external sources?
P
E = External Source
C
O
- bank confirmation
- receivables confirmation
- Vendor invoice
What is considered evidence obtained from client?
P
E
C = Client Evidence
O
- Internal evidence in writing
- client prepared invoices and documents
- Purchase orders
- sales orders
- General ledger
- Management reports
- Shipping documents
- Receiving reports
If the auditor considers that the data is developed under a strong system of internal controls, the auditor would consider the data more reliable but less reliable than personal knowledge.
What is considered oral client evidence?
P
E
C
O = Oral client evidence (less reliable)
Client answering auditor’s inquiry. This inquiry would likely need to be corroborated by additional evidence.
What does the PCAOB states regarding relevance of audit evidence?
the PCAOB consider the following:
1. The design of the audit procedures to test assertions and understatements/overstatements
2. The timing of the audit procedures.
What is the purpose of substantive procedures?
They’re designed to detect material (dollar) misstatements of the F/S at the assertion level. Consist of:
1. Test of details applied to transactions, balances, and disclosures
2. Substantive analytical procedures.
How are analytical procedures performed by the auditor?
Analytical procedures are performed by first developing an expected amount and then compare it to the actual amount.
What is the best way to use analytical procedures as a substantiative test?
Analytical procedures need to be based on predictable relationships. Income statement accounts are more predictable than balance sheet accounts because represent transactions over a period of time (e.g., interest expense).
Are all income statement accounts predictable?
No, those income statement accounts with management discretion are less predictable (e.g., travel and entertainments expense).
What is inquiry?
Requesting information from knowledgeable parties both internally (e.g., managers and supervisors) and externally (e.g., attorneys and bankers)
What should the auditor consider when performing inquiry?
- Specific characteristics to whom the inquiry is directed (e.g., knowledge, objectivity, qualification, etc.)
- Ask appropriate questions
- Evaluate the response and take appropriate action (e.g., follow up with additional inquiry, modify planned audit procedures, etc.)
What is examination/inspection?
Auditor may inspect or examine records, documents, or tangible assets (either physically present or use of remote observation). documents may be internal or external.
What are the balance sheet assertions or assertions about account balances at year end (CARE)?
C - Completeness
A - Allocation and valuation
R - Rights and obligations
E - Existence
What are the income statement assertions (COCCA)?
C - Completeness
O - Occurrence
C - Cutoff
C - Classification - proper account
A - Accuracy and valuation - proper amount
When does the auditor apply reperformance?
Reperformance occurs when an auditor independently performs procedures or controls to ensure that the client performed them correctly.
When does the auditor apply recalculation?
An auditor recalculates to verify the mathematical accuracy of statements and schedules by adding down (footing), adding across (cross-footing), or recalculating amounts. It could be done manually or through the use of automated tools.
When are analytical procedures required to be completed in the audit?
Analytical procedures are required during planning to obtain an understanding of the entity’s business and final review to assist the auditor in the final review for reasonableness.
What steps the auditor uses to develop analytical procedures that are efficient and effective?
- Develop procedures to test assertions that address the risk of material misstatement in the F/S.
- Evaluate reliability of client’s data to develop expectations. Strong effective internal controls improve reliability.
- Develop an expectation of recorded amounts.
- Perform analytical procedures and compare results to the expectations.
- Investigate any significant differences by inquiring of management or performing other audit procedures.
What would the analytical procedures indicate if there is a mismatch or significant difference?
The mismatch or significant difference indicates either a material misstatement or the fact that the auditor’s expectations are flaw. If analytical procedures disclose unexpected differences, the auditor should consider the F/S to be misstated.
How is regression analysis applied for analytical procedures?
it is an advanced analytical technique that often uses data from prior period(s) to develop a model or predict future periods.
When is regression analysis best used?
It is best used for creating expectations based on several independent variables
What is the level of assurance that regression analysis can provide?
May provide a very high level of precision and may be used as the principal substantive procedure
What are advantages of using regression analysis?
- Provides an explicit, mathematical objective, and precise method for forming an expectation
- allows inclusion of a large number of independent variables
- Provides direct and quantitative measures of the precision of the expectation