AUD 3 Internal Control 10 - 4 Flashcards
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
An auditor performs the following procedures to obtain and apply an understanding of internal control to an audit:
Step 1 – Obtain an understanding of the design of all 5 components of the entity’s internal control (CRIME) through the performance of risk assessment procedures.
Step 2 – Document the understanding of Internal Control.
Step 3 – Assess Risk of Material Misstatement (RMM) which consists of inherent risk (IR) and control risk (CR).
RMM = IR × CR
Step 4 – Develop an audit strategy to either:
o (RELY?)
Perform tests of control (TofC) to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests): or
o (NOT Rely)
Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Step 5 – Reassess Risk of Material Misstatement and evaluate results.
o For controls for which tests of controls were performed, evaluate results to reassess RMM and determine if it is appropriate to modify the nature, timing, and extent of further audit procedures.
Step 6 – Document conclusions and determine the effect on the planned substantive procedures. At this point, the audit program needs to be developed or revised for further audit procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
An auditor performs the following procedures to obtain and apply an understanding of internal control to an audit:
Step 1 – Obtain an understanding of the design of all 5 components of the entity’s internal control (CRIME) through the performance of risk assessment procedures.
Step 2 – Document the understanding of Internal Control.
Step 3 – Assess Risk of Material Misstatement (RMM) which consists of inherent risk (IR) and control risk (CR).
RMM = IR × CR
Step 4 – Develop an audit strategy to either:
o (RELY?)
Perform tests of control (TofC) to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests): or
o (NOT Rely)
Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Step 5 – Reassess Risk of Material Misstatement and evaluate results.
o For controls for which tests of controls were performed, evaluate results to reassess RMM and determine if it is appropriate to modify the nature, timing, and extent of further audit procedures.
Step 6 – Document conclusions and determine the effect on the planned substantive procedures. At this point, the audit program needs to be developed or revised for further audit procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 – Develop an audit strategy to either:
o (RELY?) Perform tests of control (TofC) to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests): or o (NOT Rely) Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 – Develop an audit strategy to either:
o (RELY?) Perform tests of control (TofC) to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests): or o (NOT Rely) Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Str_______)
Develop an audit strategy to either:
• Perform tests of control to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide not to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Develop an audit strategy to either:
• Perform tests of control to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide not to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Develop an audit strategy to either:
• Perform t___s of co_____ to determine if CR is below maximum,
Reducing RMM below the level of IR and
Allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide NOT to perform t___s of con____s,
Assessing CR at the maximum level as if the control did not exist, and
Measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Develop an audit strategy to either:
• Perform tests of control to determine if CR is below maximum,
Reducing RMM below the level of IR and
Allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide not to perform tests of controls,
Assessing CR at the maximum level as if the control did not exist, and
Measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Develop an audit strategy to either:
• Perform tests of control to determine if CR is below maximum,
Re___ing RMM be___ the level of IR and
Allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide not to perform tests of controls,
Assessing CR at the maximum level as if the control did not exist, and
Measuring RMM as being eq___ to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Develop an audit strategy to either:
• Perform tests of control to determine if CR is below maximum,
Reducing RMM below the level of IR and
Allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide not to perform tests of controls,
Assessing CR at the maximum level as if the control did not exist, and
Measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
An auditor performs the following procedures to obtain and apply an understanding of internal control to an audit:
Step 4 – Develop an audit strategy to either:
o (RELY?) Perform tests of control (TofC) to determine if CR is below maximum, CR < 100% or CR < 1.0 RMM = IR x CR reducing RMM below the level of IR RMM < IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
o (NOT Rely) Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, CR = 100% or CR = 1.0 RMM = IR x CR RMM = IR x 1.0 RMM = IR and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
An auditor performs the following procedures to obtain and apply an understanding of internal control to an audit:
Step 4 – Develop an audit strategy to either:
o (RELY?) Perform tests of control (TofC) to determine if CR is below maximum, CR < 100% or CR < 1.0 RMM = IR x CR reducing RMM below the level of IR RMM < IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
o (NOT Rely) Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, CR = 100% or CR = 1.0 RMM = IR x CR RMM = IR x 1.0 RMM = IR and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Develop an audit strategy to either:
• Perform tests of control to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide not to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Develop an audit strategy to either:
• Perform tests of control to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests):
or
• Decide not to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effe________ss of the design and operation of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the de____ and operation of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and ope_______ of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a co_____ (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the subs_______?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must con_____ how the control was applied, the consistency with which it was applied and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider how the control was applied, the consistency with which it was applied and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
h__ the control was applied,
the consistency with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the con_______cy with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by wh__ it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was ap___ed,
the consistency with which it was ap___ed
and by whom it was ap___ed.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor m___ consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Tests of co_____s generally consist of 4 types of procedures (RIIO).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
To test the effectiveness of the design and operation of a control (what is the substance?).
The auditor must consider
how the control was applied,
the consistency with which it was applied
and by whom it was applied.
Tests of controls generally consist of 4 types of procedures (RIIO).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of pro______s (RIIO).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o T___ing the Cycles for ARCC’s by doing RIIO
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o Testing the Cycles for ARCC’s by doing RIIO
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o Testing the Cy___s for ARCC’s by doing RIIO
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o Testing the Cycles for ARCC’s by doing RIIO
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o Testing the Cycles for ARCC’s by doing RIIO
There are 4 Procedures for t___ing controls (RIIO).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o Testing the Cycles for ARCC’s by doing RIIO
There are 4 Procedures for testing controls (RIIO).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o Testing the Cycles for ARCC’s by doing RIIO
There are 4 Pro______es for testing controls (RIIO).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 4 –
4. Tests of Controls (Develop an Audit Strategy)
Tests of controls generally consist of 4 types of procedures (RIIO).
o Testing the Cycles for ARCC’s by doing RIIO
There are 4 Procedures for testing controls (RIIO).