A4: Audit Evidence Flashcards
Sufficient Appropriate Evidence
- cost/difficulty not valid basis to omit procedure when no alternative tests
- sufficiency: quantity; risk of misstatement and quality of evidence
- appropriateness: quality; reliable and relevant to particular assertion
Hierarchy of Evidence (Reliability)
A – Auditor’s direct knowledge (observation, examination, inspection, recalculation)
E – External evidence (independent sources)
I – Internal evidence (more reliable when strong internal controls)
O – Oral evidence
Analytical Procedures
- required in planning: understand entity, determine areas needing attention in audit
- required in final review: reasonableness of account balances
- substantive analytical procedures not required: to obtain supporting evidence about management’s assertions
Substantive Analytical Procedures
- more useful for income statement accounts (more predictable relationships); less useful for accounts with management discretion
- documentation requirements: auditor’s expectation, factors consideration in making expectation, results of comparison, add’l procedures performed in response to differences, results of add’l procedures
Directional Testing
Vouch – test for existence/occurrence (risk of overstatements: revenues/assets)
Trace – test for completeness (risk of understatements: expenses/liabilities)
Confirmations
- direct written response to auditor from 3rd party
- auditor must control the entire process
- oral responses are not confirmations
- confirm accuracy of email/fax responses
- positive (agree or disagree w/ confirm) or negative (only respond if disagree)
- nonresponse: add’l confirm requests, add’l audit procedures
- mgt refuses confirms: consider why, impacts on RMM/fraud risk/NET of audit procedures
Types of Audit Procedures
F – Foot (add down), crossfoot (add across), recalculation (recomputed amounts)
I – Inquiry (request info from internal and external parties)
V – Vouching (support for amounts in records and books; existence/occurrence assertions)
E – Examination/inspection (examine records/ documents/assets; ‘scan’; usually existence)
C – Confirmation (inquiry by auditor seeking written representations from third parties)
A – Analytical Procedures (includes ‘scanning’ if looking for unusual amounts in books)
R – Reperformance (re-perform client’s procedure or control)
R – Reconciliation (compare amounts in independent sources; existence/valuation)
O – Observation (watch process performed by others)
T – Tracing (trace from source documents to books/records; completeness)
C – Cutoff review (review of year-end transactions; esp inventory/cash/purchases/ sales/accruals)
A – Audit related accounts simultaneously
R – Representation letter
S – Subsequent events review
Relevant Assertions
Balances (CVER): Completeness, Valuation allocation and accuracy, Existence and occurrence, Rights and obligations (assets → existence, liabilities → completeness)
Transactions (COVEU): Completeness, cutoff, Valuation allocation and accuracy, Existence and occurrence, Understandability and classification (revenue → occurrence; expenses → completeness)
Disclosure (CVRU): Completeness, Valuation allocation and accuracy, Rights and obligations and occurrence, Understandability and classification
Assertions → Audit Procedures
Completeness → Tracing, Analytical review, Observation
CutOff → Cutoff procedures
Valuation Allocation and Accuracy → Inspection of docs, Footing, Recalculation, Reconciliation
Existence and occurrence → Confirmation, Observation/Inspection/Examination, Vouching
Rights and obligations → Inspection of docs
Understandability and classification → Inspection of docs, Review of disclosures, Inquiry of mgt
Revenue Cycle Risks
- presume high risk of material misstatement
- fraud risks around revenue/cash
- concern w/ overstatement of assets/revenue
Revenue Cycle – Internal Controls
- Sales: sales dept receives order & preps sale order, credit approval by credit dept (valuation), shipping dept preps bill of lading, billing dept preps sales invoice & matches against shipping docs/sales order, acct dept records sale & receivable
- A/R: independent reconciliations of general ledger & A/R subsidiary ledger, aging schedule sent to credit dept for collection program, A/R write-offs authorized by treasurer, credit memos for returns prepped by someone who doesn’t collect $ on A/R
- Cash Receipts: mail received by one w/o access to A/R books, listed in detail before cash sent to cashier, cashier preps deposit summary before sending to bank, acct matches remittance from customer/cash listing/deposit summary before entering in records, bank lockbox ideal safeguard
A/R Confirmations
- evidence about existence, and rights
- positive confirms: best when large $ amounts, expect errors/disputes, weak internal controls
- blank confirms provide greater assurance, but may have lower response rates
- negative confirms: low risk, large number of small balance accounts, expect customer attention
- nonresponses: add’l confirms, ask client to follow up, alternative procedures
Expenditure Cycle Risks
-biggest concern is understatement of expenses and liabilities
Expenditure Cycle – Internal Controls
- Purchases: approved purchase requisition from dept needing good, purchasing dept places order/gets competitive bids/preps purchase order, purchase order sent to receiving dept (best to omit quantity, blind copy, forces dept to count goods) which accepts goods/forwards to requesting dept/ sends receiving report to acct dept
- A/P: acct dept matches purchase order/ receiving report/vendor invoice/requisition and records goods and payable, approved matched invoice for payment
- Cash: approved voucher packet sent to treasurer, treasurer signs/mails checks and cancels supporting docs, paid vouchers returned to acct dept
Auditing Expenditure Cycle
- search for unrecorded liabilities: test for A/P completeness, look at payments made after year-end and examine supporting docs for unrecorded payables
- A/P confirms not required, may be used when weak controls (usually focus on vendors w/ zero or small balances)
Cash Cycle Risks
Lapping: today’s cash receipts covers yesterday’s theft; auditor inspects date check deposited vs. when receivable credited; bank lock box best safeguard
Kiting: cash recorded in 2 bank accounts at once; auditor views bank transfer schedule; indicated when date check received by bank precedes date disbursement recorded
Bank Confirmations and Reconciliations
- primary tests for existence/completeness/ valuation of ending cash balances
- confirms verify cash balances, loans, contingent liabilities, pledged collateral, guarantee or security arrangements
- reconciliation: match balance per books to general ledger, match confirm balance to reconciliation balance, match outstanding checks/deposits to cutoff bank statement
Inventory Cycle Risks
- risk of inventory overstatement (vouch), risk of COGS understatement (trace)
- reconcile inventory and COGS
Inventory Cycle – Internal Controls
-segregation of duties: purchasing (approved purchase orders prepped and sent to acct and receiving), receiving (verify items received, prep receiving report, delivery goods to warehouse), warehouse (custodian for verified goods received), shipping (shipment of goods after authorization – sales order approved by credit dept)