AUD 2 Flashcards
“The auditor is required to inform those charged with governance about significant errors discovered by the auditor and subsequently ___________ or ____________ by management
”
corrected or uncorrected
Which of the following matters in a financial statement audit is most appropriate to communicate with those charged with governance?
An overview of the planned scope and timing of the audit
A material weakness is a deficiency, or combination of deficiencies, such that there is a ___________ _____________ that a _______________ misstatement of the entity’s financial statements will not be prevented or detected/corrected.
reasonable possibility
material
An auditor’s communication of internal control related matters noted in an audit usually should be addressed to:
Management and those charged with governance
When communicating internal control related matters noted in a financial statement audit of a nonissuer, an auditor’s report issued on significant deficiencies should indicate that:
the purpose of the audit was to report on the f/s and not to provide assurance on internal control
What is the order from least risk to most risk for control related problems?
Control deficiency
significant deficiency
material weakness
The auditor ____ _______report the absence of significant deficiencies to those charged with governance or management.
May not
The “top-down approach” used during an audit of internal control over financial reporting begins by understanding the overall risks to internal control over financial reporting at the what level?
Financial statement level
Only _________ ____________ result in an adverse opinion on the effectiveness of internal control.
material weakness
In an engagement to audit the effectiveness of an entity’s internal control, the auditor must communicate what to management and those charged with governance?
Significant defiencies and material weaknesses
What does SSAE stand for and when are these used?
Statement on Standards for Attestation Engagements
Agreed upon procedures
Financial Forecast and projections
Pro forma f/s
Compliance attestations
Management’s discussion and analysis
Reporting on controls at a service organization
What does SSARS stand for?
Statements on Standards for Accounting and Review Services
The auditor’s primary concern with related party transaction is what?
That related party transaction are properly disclosed in accordance with GAAP
Analytical procedures can be use in the planning stage of an audit or when carrying out substantive test, when are they required?
Analytical procedures are required to be applied to some extent in planning and in the final review stage.
Who mails A/R confirmations to the customer of the client?
The auditor would mail this because it would make the audit evidence more reliable
Substantive Procedures vs. Controls
Substantive Procedures
Focus on checking the numbers.
Example: Verifying invoices to confirm revenue.
Controls
Focus on preventing or detecting mistakes.
Example: Approving purchases before payment is made.
An auditor concerned with the completeness of dividend income would most likely:
The auditor would likely choose a sample of companies in which the client owns stock, and review dividend record books (such as Moody’s) to determine whether such companies declared dividends during the year under audit.
What are three things to separate in regards to segregation of duties?
Authorization
Custody
Record keeping
Who are the people in charged with governance?
BOD
Audit Committee
What does Corroborate mean?
Corroborate means to confirm or support something with additional evidence or information.
What are the three things that are part of planning an audit in regards to internal controls?
Determining whether controls have been implemented
Understanding the design of controls
Documenting the understanding of internal control
What are the conditions for an auditor to accept and agreed-upon procedure engagement
(I AM SURE)
Independence of the practitioner
Agreement of the parties on what procedures are to be applied, the criteria to be used, etc.
The subject matter must be capable of consistent Measurement
The engaging party (client) takes responsibility for the Sufficiency of the designated procedures
Use of the report can be general or restricted to specified parties
The client (or in some cases a third party) is Responsible for the subject matter
Engagements to perform agreed-upon procedures on prospective financial statements must include a summary of significant assumptions used for the prospective financial statements
a type of attestation engagement in which a practitioner is engaged by a client to perform specific procedures on underlying subject matter or information.
agreed-upon procedures
Agreed-upon procedure engagements provide _________ assurance. Reviews provide ________________ assurance.
no
limited (negative)
What’s the difference between financial projections and financial forecasts?
Financial projections: used for limited use(restricts the use)
Financial forecasts: used for general use
An accountant’s compilation report on a financial forecast should include a statement that:
An accountant’s compilation report on a financial forecast should include a statement that there will usually be differences between forecasted and actual results.
A review of ___________________________________________________ provides limited assurance about the effect of a future or hypothetical event (in this case, a change in capitalization) by showing how it might have affected the historical financial statements if it had occurred at an earlier date.
pro forma financial information
When does an auditor reference the work of an audit specialist?
In the event an audit specialist is used for an audit, and the auditor issues a modified opinion due to the specialist’s findings, then the auditor’s specialist may be referenced in the report with prior permission from the specialist.
reports are primarily aimed at the internal control over financial reporting (ICFR). They are designed for entities (like service organizations) that provide services that could impact their clients’ financial statements.
SOC 1 (Service Organization Control 1)
: Evaluates the suitability of the design of controls at a specific point in time.
Type I SOC 1 report
Assesses the effectiveness of those controls over a period, usually 6 to 12 months.
SOC 1 Type II report
reports focus on controls related to security, availability, processing integrity, confidentiality, and privacy of a system. These are based on the Trust Services Criteria.
SOC 2 Engagements
Reports on the fairness of the presentation of management’s description of the system and the suitability of the design of controls.
Type I SOC 2 report
Provides the same as Type I and evaluates the operating effectiveness of these controls over a certain period.
Type II SOC 2 report
What does SOC stand for?
Service Organization control
Who are the parties in the SOC questions?
Service organization(provides service)
service auditor
User (uses the service of the service organization, like sales or payroll processing)
User auditor
In order for an auditor to issue a report on a client’s compliance in connection with a financial statement audit, the auditor must have audited the client’s financial statements and expressed an ____________ or ___________ opinion. The auditor may only issue ____________ assurance on compliance in this situation.
unmodified
qualified
negative
Statements on Auditing Standards (SAS) require the final audit documentation file to be assembled by the auditor within _______ days following the report release date.
60
The PCAOB rules, which apply to issuers only, require that audit documentation be complete within _______ days following the report release date.
45
occurs when a necessary control is missing or when an existing control does not achieve the desired objective.
control deficiency in design
occurs when a properly designed control does not operate as designed, or is performed by an inappropriate person.
control deficiency in operation
What’s the difference between pro forma and projected financial statements?
Pro Forma: Focuses on “what-if” events (e.g., merger impact). It’s scenario-based.
Projected: Focuses on expected future performance based on current plans and trends. It’s forecast-based.
indicates that the requirement must be followed in all cases where the requirement is relevant, except in rare circumstances in which auditors and audit organizations determine it is necessary to depart from the ______________________________________
presumptively mandatory requirement(should be followed)
indicates that the requirement must be followed in all cases where the requirement is relevant. Generally accepted government auditing standards use the word “must” to indicate
unconditional requirement
Government Auditing Standards published by the United States Government Accountability Office define standards associated with the following types of engagements:
Financial audits
attest engagements
performance audits
When auditing an entity’s financial statements in accordance with Government Auditing Standards (the Yellow Book), an auditor is required to report on:
Report on Internal Control
Compliance with Provisions of laws, regulations, contracts, grant agreements, and federal awards
Government auditing standards require a written report on internal control when?
in every audit
While conducting an audit in accordance with Government Auditing Standards (the Yellow Book), an auditor determines that fraud has been committed in one of the client’s government contracts. The auditor reports the fraud to the client’s audit committee, which takes no action to report the fraud to appropriate parties. To which of the following entities is the auditor required to report this situation?
The counterparty to the contract
When testing controls sometimes the actual misstatement rate could be _________ than the control deviation rate.
different
If a change in accounting principle, such as a change in accounting for inventory, does not have a material effect on the financial statements in the current year but the change is expected to have a material effect in later years, the auditor is not required to recognize the change in the auditor’s report in the current year. How should this change the auditor’s opinion?
Therefore, the auditor should issue an unmodified opinion and does not need to describe the change in an emphasis-of-matter paragraph or other matter paragraph
expands the auditor’s responsibilities to include procedures designed to test and report on compliance matters having a direct and material effect on major federal award programs.
2 CFR 200 single audit
2 CFR 200 single audit allows auditors to use ______________________________ to determine major grants.
a risk-based approach
Under the single audit act, how is materiality determined?
materiality is determined separately for each major federal financial assistance program.
What are the three key words to know when SSARS are used?
Statement on standards for accounting and review services
Prepare f/s
Compile f/s
Review f/s