Assessing Risk Flashcards
Strategy/Considerations in Engagement Planning
Analyze prelim Analytic procedures Assess Risk (timing, nature, extent) Objectives Factors (HR) Ident characteristics & scope (report type)
Prelim Engagement Planning (Program) Activities
QC & independence
Specialist
Document corrobative findings
Knowledge to accomplish objectives
Engagement Planning (Program)
Risk assessment & understanding entity enviroment
Engagement IC Elements (components)
Monitoring Risk Assessment Control Enviro Control activities Info & communication
Audit documented at
Strategy
Program/plan
Changes
Materiality
amount missing/misstated influences decision
‘Big enough to matter’
Materiality documented
F/S
Acct balance (performance)
Revisions
Material Levels
General - Equity 1%, Assets 2%, N/I 5-10%
Performance - % set lower than General
Lower risk uncorrected misst
Tolerance - $ amount determined by Auditor
If found and diff is below Tolerance, F/S not impacted
Engagement Pre-Conditions
Determine if Frameowork acceptable
Rep Letter
Date- Auditor's report Fair- F/S, I/C, Assumptions Immaterial errors Litigation discl Access No Mgmt fraud
Engagement Letter
Obj & Scope Responsibilities - Mgmt & Auditor Limitations- missing & misst ID framework Form & Content reference
Engagement docs requirements & considerations
Nature, timing & extent
Results & conclusions
Issues & evidence
Consider- Who performed & date
Who reviewed & date
Characteristics
Final Report Date workpaper issue
Workpapers not later than 60 days & maintain for 5 years
Dual Date Report
Responsible for specific events after fieldwork complete
Management Communication of audit
1) Overview- avoid details’
2) Address risks- Significant Def, Material Weekness, Substantive Risk
3) Opinion F/S- not effective I/C
Significant Deficiency
Material Weekness
Substantive Risk
I/C does not prevent/detect- correct misst
Control def- reasonable possibility of material misst
Intentional missapropriation- Audit cannot be performed
Component Auditor’s requirements
Independence Financial info Findings/opinion Signif risks Related parties Compliance if audit not restricted
Firm QC
Auditing, accounting & review svcs (meet prof standards) Human res Leadership Relevant ethics Accept & continue engagment Performance Monitoring
Assess Risk Material Misstatement
*Determines level of Detection Risk»_space; DR Determines nature, timing, extent
Identify
Magnitude
Relate
Consider liklihood of Material Misst
Fraud Types
Missapropriation
IC Override
Fraudulent F/S
Communication of Fraud
Govern- mgmt involved & material misst
Audit Comm- Disagree w/ Mgmt & Significant findings
1 Level Mgmt- Finding; No material misst
Outside Party- Subpheona
SEC client auditor change
Standards req
Auth communication w/ prior Auditor
Entity Risk levels
Internal- Governance Object/Strat Policies Finance struct Investment Nature ops
External- Industry & regulatory
Substance over Form
Substance- analytics & test of details
Form- test of controls
Internal Controls
process effected by Mgmt design that provide Reasonable Assurance about F/S, Ops & Compliance
Risk Assessment process
Inspect Inquire Observe Confirm Analyze Recalc
Required & Not Required Procedures
Not- Tests of controls Search Signif Def Suitability to prevent, detect, correct Req- Assess Control Risk below max Basis Understanding of I/C elements
Svc Organizational Report (SOC)
Type 1- Effective Control > Discl of Opinion
Type 2- Expectation of Controls > Sys & Design , Ops effectivness
IT Controls
General- IT sys parts
Application- IT sys tasks
GAAS underlying principle
Materiality & Audit Risk
Assess Risk
Nature
Timing
Extent
Specialist
Objective & scope
Client relationships
understanding of Auditor’s use
Analytical Proc Efficiency & Effectiveness factors
Nature
Plausibility & predictability
Availability & reliability
Precision
Compensating control
Lessens severity of deficiencies (significant & material)
Assessment of Control Risk
performed concurrently during audit w/ understanding of I/C
Assessed level of RMM determines
Level of Detection Risk >
Determine Assessed Risk (nature, timing, extent) of Audit proc >
Detect Material Misstatement
Incremental Audit Risk
Interim F/S- audit risk increases as time between tests and YE increases