A5&A6 Flashcards
Auditor 必須 audit & report on Issuer 的 Internal control,
若 nonissuer 也要求 audit & report, management 必須提供
Written assessment 的 Effectiveness internal control
@2555
CEO & CFO 必須 certify 三項
According to the Sarbanes-Oxley Act 2002
Management internal control report
Annual F/R
Quarterly F/R
Audit committee 的 Financial expertise 是由 Board of directors 確認
@16255
Auditor is required to communicate ALL control deficiency in WRITING with ________ but not _________.
Required: Management
Not required:
Audit committee (issuer)
Charged in governance (nonissuer)
@4378&5613
Economic conditions, prior knowledge of internal control, complexity of operations and previously communicated deficiencies 在 audit 的哪個階段要 consider
Planning (involves developing an overall strategy for the scope and performance of engagement)
@3768
Financial projections are hypothetical (what if)
v.s.
Financial forecasts based on expected conditions
分別適用於
Restricted use
v.s.
General use
@A5M4
Examination v.s. Compilation
of prospective F/S
- 依據 ______ 原則
- 是否出具 opinion
✅Examination
1. SSAE
2. 是
Adverse: 未揭露 assumption 的 reasonable basis
Disclaim: limited scope
Qualified: not followed AICPA presentation guidelines
✅Compliance
1. SSARS
2. 否
@2561&4365
SOC 1
SOC 2
Type 1
Type 2
各為測試 ______ 的 report
SOC 1:
Internal control over F/R @ service organizations
SOC 2:
Internal control related to the Trust Service Criteria
Trust Service Criteria 有五項:
Security, Availability, Confidentiality, Privacy and Processing integrity
Type 1:
Design & Implementation
ONLY
Type 2:
Operating effectiveness
➕
Design & Implementation
@14530
哪種報告可以 provide the user auditor reduces the assessment of control risk
SOC 1 Type 2 report
@14639
Specific findings are presented 是 _______ 的關鍵字
Agreed-upon procedures engagement
AUP
@14532
Examination 是為了issue
An opinion
@14532
GAGAS defined 3 type of engagement
Financial audit
Attest engagement
Performance audit
@5153
Audit, Reviews and Compilations are defined by
GAAS
@5153
GAS 要求 the auditor issue a written report on ___________ in all audit, and must describe the ________ of the auditor’s testing of 🔑compliance with law and regulations and 🔑internal controls over financial reporting, and present the results of these tests
➕
Obtaining an understanding of internal control and _____________ of control risk
Internal control
Scope
Assessment
@3610&5509
Internal control -> compliance
沒有要求 report on fieldwork and procedure
🔑要記好
不是 Internal control over compliance
不是 Internal control 的 effectiveness
@6034
GAGAS 要 auditor report all ___________ & ___________ in internal contro
Significant deficiency
&
Material weakness
@17601
Single audit includes a compliance audit of federal awards is a basis for issuing additional reports related to m______ p______ and on internal control over ________
Major programs
Compliance
@17565