(A5, S2) Internal Control Communications Flashcards
What factors should an auditor consider when making a judgment about whether a control deficiency is a significant deficiency?
- The likelihood that a control will fail to prevent or detect a misstatement.
- The magnitude of the misstatement that could result from the deficiency.
Because timely communication may be important, the auditor may choose to communicate significant deficiencies during the course of the audit rather than after the audit is concluded.
True or False?
True.
What types of matters considered to be a significant deficiency in internal control would an auditor consider communicating to management and those charged with governance?
Evidence of a lack of objectivity by those responsible for accounting decisions.
This is because it can result in financial statements that are biased rather than presented fairly.
Any report issued on significant deficiencies or material weaknesses should include what 3 points?
- indicate that the purpose of the audit was to report on the financial statements and not to provide an opinion on internal control
- include the definition of a material weakness and, if applicable, significant deficiency
- include a restriction on the use of the report
In reporting on a nonissuer’s internal control over financial reporting, and auditor should include a paragraph that describes the:
Inherent limitations of any internal control, errors or fraud may occur and not be detected.
(Only when reporting on internal control, not when part of audit on financial statements).
What conditions are necessary for an auditor to accept an engagement to audit and report on a nonissuer’s internal control over financial reporting?
- Management must present its written assessment about the effectiveness of internal control
- Not necessary for previous engagement experience to complete the audit.
The report is appropriate for general distribution.
When does a control deficiency exist?
When deficiencies are not detected within a timely period by employees in the normal course of performing their assigned functions.
What is a material weakness?
A deficiency, or combination of deficiencies, such that there is a reasonable possibility that a material misstatement of the entity’s financial statements will not be prevented or detected/corrected.
It is management’s responsibility to assess and report on internal control, but the auditor is also required to assess and report on internal control. (For issuers)
True or False?
True.
What will result in an adverse opinion of the effectiveness of the internal control?
Material weaknesses but not significant deficiencies.
The auditor is required to communicate significant deficiencies each year, regardless of whether the deficiency has a material effect on the auditor’s assessment of control risk or the deficiency is considered a material weakness.
True or False?
True.
What action should an auditor take in response to discovering a deviation from the prescribed control procedure?
Make inquiries to understand the potential consequences of the deviation.
The auditor is required to obtain an understanding of each of the five components of internal control, including the control environment and the (accounting) information system.
True or False?
True.
An engagement to audit the internal control of a nonissuer will generally:
Be more extensive in scope than the assessment of control risk made during a financial statement audit.
What are some of the roles of risk assessment in an integrated audit of a nonissuer?
- Selecting controls to test
- Determining significant accounts and relevant assertions
- Determining evidence necessary to conclude on the effectiveness of a given control