AUD 1 Audit Standards & Engagement Planning 2 Flashcards
The auditor’s responsibilities for the detection of material misstatements due to fraud are met through the performance of various steps during different phases of the audit.
Standards require the auditor to perform:
The auditors are responsible to detect material misstatements due to fraud.
Standards require the auditor to perform the following:
- Understand the nature and characteristics of fraud
- Hold a “brainstorming” session with engagement staff to discuss the risks of material misstatements due to fraud.
- The auditor is required to obtain the information needed to identify risks of material misstatement due to fraud.
- The auditor will also evaluate the results of analytical procedures performed in the planning of the audit, consider the identified fraud risk factors and whatever other information is available to the auditor.
Provide examples of the “brainstorming” session with engagement staff to discuss the risks of material misstatements due to fraud:
Auditors hold a “brainstorming” session with engagement staff to discuss the risks of material misstatements due to fraud:
• How and where financial statements might be susceptible to fraud, how management could perpetrate and conceal fraudulent financial statements, and how assets could be misappropriated; and
• Consider known internal and external factors affecting Motivation (Incentives /pressures) for fraud, Opportunities and a culture or environment that enables management or others to Rationalize committing fraud.
o Exercise Professional Skepticism.
The auditor is required to obtain the information needed to identify risks of material misstatement due to fraud.
Examples:
The auditor is required to obtain the information needed to identify risks of material misstatement due to fraud:
- Inquiry of management and others about knowledge or suspicion of fraud, management’s understanding of the risk of fraud, and programs and controls established to mitigate risks.
- Evaluation of results of analytical procedures performed in the planning of the audit.
- Consideration of fraud risk factors, which are events or conditions that create reasons or motivation to commit fraud, the opportunity to commit fraud, or the attitudes that allow the rationalization of committing fraud.
- Consider other information
The auditor will evaluate the results of analytical procedures performed in the planning of the audit, consider the identified fraud risk factors and whatever other information is available to the auditor.
Examples:
Standards require the auditor to perform the following:
The auditor will evaluate the results of analytical procedures performed in the planning of the audit, consider the identified fraud risk factors and whatever other information is available to the auditor.
On that basis, the auditor will Identify risks that may result in a material misstatement to the financial statements due to fraud:
- Information gathered is evaluated considering size, complexity, and ownership attributes of entity.
- Information is evaluated as to pervasiveness of fraud risk factors, whether they affect the financial statements as a whole or specific account balances or classes of transactions and related assertions.
• The auditor applies professional judgment in the consideration of:
▪ Whether the type of risk indicates misappropriation of assets or fraudulent financial reporting.
▪ Whether the risk is of sufficient magnitude to cause a material misstatement.
▪ The likelihood that the risk will result in a material misstatement.
The auditors are responsible to detect material misstatements due to ____.
Standards require the auditor to perform:
The auditors are responsible to detect material misstatements due to fraud.
Standards require the auditor to perform the following:
- Understand the nature and characteristics of fraud
- Hold a “brainstorming” session with engagement staff
- Obtain the information needed to identify risks of material misstatement due to fraud.
- Evaluate the results of analytical procedures performed in the planning of the audit
- Identified factors that represent the risks of material misstatement and evaluate those risks in light of the entity’s internal controls.
- Determine the nature, timing, and extent of substantive procedures needed to respond to the results of the assessments.
- Evaluate the audit evidence obtained.
- Communicate knowledge or suspicion of fraud to management and governance on a timely basis.
- Document the consideration of fraud
One of the most common ways in which financial statements are fraudulently misstated is through the overstatement of _______.
One of the most common ways in which financial statements are fraudulently misstated is through the overstatement of revenue.
As a result, the auditor is required to presume that revenue recognition represents a risk of material misstatement.
The auditor recognizes that, due to the potential of management override of controls, there would not necessarily be evidence of specific risks of material misstatement due to fraud.
One of the most common ways in which financial statements are fraudulently misstated is through the overstatement of revenue.
As a result, the auditor is required to presume that revenue _________ represents a risk of material misstatement.
The auditor is required to presume that revenue recognition represents a risk of material misstatement.
The auditor recognizes that, due to the potential of management override of controls, there would not necessarily be _________ of specific risks of material misstatement due to fraud.
The auditor recognizes that, due to the potential of management override of controls, there would not necessarily be evidence of specific risks of material misstatement due to fraud.
The auditor will determine the nature, timing, and extent of substantive procedures needed to respond to the results of the fraud risk assessments.
Examples:
The auditor will determine the nature, timing, and extent of substantive procedures needed to respond to the results of the fraud risk assessments.
o The auditor may change the overall way the audit is conducted.
o The auditor may change
the (N) nature of procedures to obtain more reliable evidence;
the (T) timing of procedures, such as by performing tests of balances closer to the balance sheet date; or
the (E) extent of procedures to obtain more evidence to derive more conclusive results.
o The auditor should perform procedures in recognition of the risk of management override of controls. The auditor may:
▪ Examine journal entries and other adjustments;
▪ Review accounting estimates for bias; or
▪ Evaluate the business rationale for significant unusual transactions.
The auditor will evaluate the audit evidence obtained. In accumulating the evidence, the risk of material misstatement due to fraud is assessed throughout the audit.
The auditor will:
The auditor will then evaluate the audit evidence obtained. The auditor will:
o Evaluate results of analytical procedures performed as substantive tests or as part of overall review for indications of risks of material misstatement not identified previously;
o Evaluate accumulated results of procedures at or near date of auditor’s report; and
o Consider if identified misstatements may be indicative of fraud.
▪ Even if not material, the auditor should consider the implications.
▪ If material, or potentially material, the auditor should attempt to obtain additional evidence, consider the implication on other aspects of the audit, discuss the matter with the appropriate level of management, and consider suggesting that the client consult legal counsel.
o When risk is very high, the auditor may consider withdrawing from the engagement taking into account:
▪ Implications about the integrity of management; and
▪ The level of cooperation from governance.
The auditor is required to Communicate knowledge or suspicion of _____ to management and governance on a timely basis.
The auditor is required to Communicate knowledge or suspicion of fraud to management and governance on a timely basis.
o Any evidence of the existence of fraud should be communicated to management.
o Fraud involving senior management and fraud resulting in a material misstatement should be communicated to those charged with governance.
▪ Discuss with an appropriate level of management at least ONE level above those involved.
o Risks that have internal control implications should be communicated if they represent significant deficiencies or material weaknesses in internal control.
o Disclosure to third parties may be appropriate:
▪ To comply with legal or regulatory requirements;
▪ To a successor auditor when responding to inquiries;
▪ To respond to a subpoena; or
▪ To a funding agency when required of an entity receiving governmental financial assistance
The auditor is required to document the consideration of fraud, including:
The auditor is required to document the consideration of fraud, including:
o The brainstorming session;
o Procedures performed to obtain information used to identify risks of material misstatement due to fraud;
o Identified risks of material misstatement;
o Reasons revenue recognition was not considered a fraud risk factor, if appropriate;
o Results of procedures performed in response to risk of management override of controls;
o Other factors drawing the auditor to the conclusion that additional procedures were required; and
o The nature of communication about fraud.
The auditors are responsible to detect material misstatements due to fraud.
Standards require the auditor to perform:
The auditors are responsible to detect material misstatements due to fraud.
Standards require the auditor to perform the following:
- Understand the nature and characteristics of fraud
- Hold a “brainstorming” session with engagement staff
- Obtain the information needed to identify risks of material misstatement due to fraud.
- Evaluate the results of analytical procedures performed in the planning of the audit
- Identified factors that represent the risks of material misstatement and evaluate those risks in light of the entity’s internal controls.
- Determine the nature, timing, and extent of substantive procedures needed to respond to the results of the assessments.
- Evaluate the audit evidence obtained.
- Communicate knowledge or suspicion of fraud to management and governance on a timely basis.
- Document the consideration of fraud
The auditor should pay special attention to ____ risk factors that increase the probability of fraudulent financial reporting or defalcation.
The auditor should pay special attention to fraud risk factors that increase the probability of fraudulent financial reporting or defalcation.
Analysis of fraud risk factors provides only a general indication as to the existence of a material misstatement.
The auditor must specifically assess fraud risk by _____ing and evaluating fraud risk factors.
The auditor must specifically assess fraud risk by identifying and evaluating fraud risk factors.
The employees Motivation (Incentives/Pressures), Opportunities, and Attitudes/Rationalizations as they relate to the different categories.
If the auditor determines the financial statements are materially misstated, they should propose adjustments to the client.
If the client fails to make these adjustments, the auditor will issue a qualified or ______ opinion on the financial statements due to the departure from GAAP.
If the client fails to make these adjustments, the auditor will issue a qualified or adverse opinion on the financial statements due to the departure from GAAP.
If the auditor is unable to obtain sufficient appropriate evidence to determine if errors or fraud have material effects on the financial statements, the auditor will issue a qualified opinion or ________ due to the scope limitation.
If the auditor is unable to obtain sufficient appropriate evidence to determine if errors or fraud have material effects on the financial statements, the auditor will issue a qualified opinion or disclaimer due to the scope limitation.
The auditor should pay attention to the way the client handles information about fraud.
If management fails to take action against the responsible party and doesn’t move to limit the risk of a repeat of errors and fraud causing material misstatement, the auditor must consider the implications as it relates to management’s ______ and may have to withdraw from the engagement.
If management fails to take action against the responsible party and doesn’t move to limit the risk of a repeat of errors and fraud causing material misstatement, the auditor must consider the implications as it relates to management’s integrity and may have to withdraw from the engagement.
The auditor also must withdraw if the client refuses to accept an audit report that has been modified due to errors or fraud on the financial statements.
Fraud Risk Factors Examples
Misstatements Arising from Fraudulent Financial Reporting
- (Motivation) Incentives/Pressure
- Opportunities
- Attitudes/Rationalizations
Fraud Risk Factors Examples
Misstatements Arising from Fraudulent Financial Reporting
• (Motivation) Incentives/Pressure
- Threats to financial stability or profitability
- Pressure to meet requirements or expectations of third-party excessive
- Threats to personal financial situations of management or directors
- Excessive pressure by management or governance to meet financial targets
• Opportunities
- Opportunities due to the nature of the entity or industry
- Management not monitored effectively
- Organizational structure complex or unstable
- Deficiencies in internal control
• Attitudes/Rationalizations
1. Factors allowing governance, management, or employees to engage in fraudulent activities
Fraud Risk Factors Examples
Misstatements Arising from Misappropriation of Assets
- (Motivation) Incentives/Pressure
- Opportunities
- Attitudes/Rationalizations
Fraud Risk Factors Examples
Misstatements Arising from Misappropriation of Assets
• (Motivation) Incentives/Pressure
- Pressure created by personal financial obligations of management or employees with access to assets
- Adverse relationship between the entity and employees with access to assets
• Opportunities
- Assets particularly susceptible due to characteristics or circumstances
- Inadequate internal controls over assets, including inadequate
• Attitudes/Rationalizations
1. Attitudes or behavior of those with access to assets susceptible to misappropriation
Misstatements Arising from Fraudulent Financial Reporting
• (Motivation) Incentives/Pressure
- Threats to financial stability or profitability
- Pressure to meet requirements or expectations of third-party excessive
- Threats to personal financial situations of management or directors
- Excessive pressure by management or governance to meet financial targets
Misstatements Arising from Fraudulent Financial Reporting
• (Motivation) Incentives/Pressure
- Threats to financial stability or profitability
• Decline in margins along with high degree of competition or sales saturation
• High vulnerability to rapid changes (e.g., technology, product obsolescence, interest rates)
• Declines in customer demand and business failures in industry or economy
• Threat of bankruptcy, foreclosure, or takeover due to operating losses
• Recurring negative cash flows from operations along with reported earnings and growth
• Rapid growth or unusual profitability, especially when compared to others
• New accounting, statutory, or regulatory requirements - Pressure to meet requirements or expectations of third-party excessive
• Creditors or analysts have profitability or trend expectations, particularly if aggressive
• Need for additional debt or equity to remain competitive
• Difficulty in meeting exchange listing requirements or debt covenants
• Potential adverse effect of poor financial results on pending transactions - Threats to personal financial situations of management or directors
• Significant financial interests in the entity
• Compensation largely contingent on financial results
• Personal guarantees of entity debts - Excessive pressure by management or governance to meet financial targets
Misstatements Arising from Fraudulent Financial Reporting
• Opportunities
- Opportunities due to the nature of the entity or industry
- Management not monitored effectively
- Organizational structure complex or unstable
- Deficiencies in internal control
Misstatements Arising from Fraudulent Financial Reporting
• Opportunities
- Opportunities due to the nature of the entity or industry
• Significant related-party transactions not in the ordinary course of business
• Entity has ability to dictate terms or conditions to suppliers or customers, which could result in inappropriate transactions)
• Accounts based on significant estimates involving subjective judgments or uncertainties
• Significant, unusual, or highly complex transactions, especially near period end
• Significant international operations across with differing business environments and cultures
• Significant bank accounts or operations in tax haven jurisdictions - Management not monitored effectively
• Management dominated by a single person or small group without compensating controls
• Ineffective oversight by governance - Organizational structure complex or unstable
• Difficulty in determining organization or individuals with controlling interest in entity
• Overly complex structure
• High turnover of senior management, counsel, or board members - Deficiencies in internal control
• Inadequate monitoring of controls
• Ineffective accounting, internal audit, or information technology staff; or high turnover
• Accounting and information systems that are not effective
Misstatements Arising from Fraudulent Financial Reporting
• Attitudes/Rationalizations
1. Factors allowing governance, management, or employees to engage in fraudulent activities
Misstatements Arising from Fraudulent Financial Reporting
• Attitudes/Rationalizations
- Factors allowing governance, management, or employees to engage in fraudulent activities
• Ethical standards not effectively communicated, implemented, supported, or enforced
• Nonfinancial management inappropriately participate in selecting accounting principles or determining estimates
• History of violations of securities or other laws
• Management has excessive interest in maintaining or increasing stock price
• Aggressive or unrealistic forecasts provided to analysts and others
• Management fails to correct significant deficiencies on a timely basis
• Management interested in minimizing earnings for tax reasons
• Recurring use of materiality by management in attempts to justify marginal or inappropriate accounting
• Strained relationship with current or predecessor auditor
Misstatements Arising from Misappropriation of Assets
• (Motivation) Incentives/Pressure
- Pressure created by personal financial obligations of management or employees with access to assets
- Adverse relationship between the entity and employees with access to assets
Misstatements Arising from Misappropriation of Assets
• (Motivation) Incentives/Pressure
- Pressure created by personal financial obligations of management or employees with access to assets
- Adverse relationship between the entity and employees with access to assets
• Known or anticipated layoffs
• Changes to compensation or benefit plans
• Promotions, compensation, or other rewards inconsistent with expectations
Misstatements Arising from Misappropriation of Assets
• Opportunities
- Assets particularly susceptible due to characteristics or circumstances
- Inadequate internal controls over assets, including inadequate
Misstatements Arising from Misappropriation of Assets
• Opportunities
- Assets particularly susceptible due to characteristics or circumstances
• Large amounts of cash processed or on hand
• Inventories consisting of small, high-value, or high-demand items
• Assets easily convertible such as bearer bonds, diamonds, or computer chips
• Fixed assets that are small or marketable - Inadequate internal controls over assets, including inadequate
• Segregation of duties
• Monitoring of employees with access to assets
• Recordkeeping for assets
• System for authorizing or approving transactions
• Physical safeguarding of assets
• Reconciliation of assets
• Documentation of transactions, such as credits for merchandise returns
• No requirement for mandatory vacations for key employees
• Management understanding of information technology (IT) to properly oversee IT staff
• Controls over access to automated records
Misstatements Arising from Misappropriation of Assets
• Attitudes/Rationalizations
- Attitudes or behavior of those with access to assets susceptible to misappropriation
Misstatements Arising from Misappropriation of Assets
• Attitudes/Rationalizations
- Attitudes or behavior of those with access to assets susceptible to misappropriation
• Disregard for need for monitoring or reducing risks
• Disregard for internal control
• Behavior indicating displeasure or dissatisfaction with company or its treatment of employees
• Changes in behavior or lifestyle that indicate assets may have been misappropriated
A CPA firm must establish a system of _____ control designed to provide it with reasonable assurance that the firm and its personnel comply with professional standards and applicable regulatory and legal requirements, and that the firm or engagement partners issue reports that are appropriate in the circumstances.
A CPA firm must establish a system of quality control designed to provide it with reasonable assurance that the firm and its personnel comply with professional standards and applicable regulatory and legal requirements, and that the firm or engagement partners issue reports that are appropriate in the circumstances.
SQCS (Statements on Quality Control Standards), issued by the Auditing Standards Board (ASB), apply to an accounting and auditing practice.
- A practice that performs audit, attestation, compilation, review, and other services for which standards have been set.
- Only applies to engagements governed by standards set by the __________________ (ASB) or the Accounting and _____ Services Committee (ARSC) of the AICPA.
• Only applies to engagements governed by standards set by the Auditing Standards Board (ASB) or the Accounting and Review Services Committee (ARSC) of the AICPA.
Quality control standards complement those that are applied primarily at the individual level.
Each CPA firm is different:
The specific procedures depend on the ____ of the firm, the _____ of the practice, the organizational structure and cost-benefit considerations.
Quality control standards complement those that are applied primarily at the individual level (such as the Code of Professional Conduct).
Each CPA firm is different:
The specific procedures depend on the size of the firm, the nature of the practice, the organizational structure and cost-benefit considerations.
Each CPA firm is different:
The specific procedures depend on the size of the firm, the nature of the practice, the _____________ structure and ____ - benefit considerations.
Each CPA firm is different:
The specific procedures depend on the size of the firm, the nature of the practice, the organizational structure and cost-benefit considerations.
The 6 Elements of Quality control include:
HEAL-ME
The 6 Elements of Quality control:
(HEAL-ME)
- H = Human Resources (Personnel management)
- E = Ethical Requirements – (Independence)
- A = Acceptance and continuance of client relationships and specific engagements
- L = Leadership responsibilities for quality within the firm (“tone at the top”)
- M = Monitoring
- E = Engagement performance
The 6 Elements of Quality control:
(HEAL-ME)
• H____ R________
The firm should establish policies and procedures for effective hiring, development, assignment, and advancement of staff.
The 6 Elements of Quality control:
(HEAL-ME)
• Human Resources (Personnel management)
The firm should establish policies and procedures for effective hiring, development, assignment, and advancement of staff.