AUD 3 Internal Control 10 - 5 Flashcards
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
An auditor performs the following procedures to obtain and apply an understanding of internal control to an audit:
Step 1 – Obtain an understanding of the design of all 5 components of the entity’s internal control (CRIME) through the performance of risk assessment procedures.
Step 2 – Document the understanding of Internal Control.
Step 3 – Assess Risk of Material Misstatement (RMM) which consists of inherent risk (IR) and control risk (CR).
RMM = IR × CR
Step 4 – Develop an audit strategy to either:
o (RELY?)
Perform tests of control (TofC) to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests): or
o (NOT Rely)
Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Step 5 – Reassess Risk of Material Misstatement and evaluate results.
o For controls for which tests of controls were performed, evaluate results to reassess RMM and determine if it is appropriate to modify the nature, timing, and extent of further audit procedures.
Step 6 – Document conclusions and determine the effect on the planned substantive procedures. At this point, the audit program needs to be developed or revised for further audit procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
An auditor performs the following procedures to obtain and apply an understanding of internal control to an audit:
Step 1 – Obtain an understanding of the design of all 5 components of the entity’s internal control (CRIME) through the performance of risk assessment procedures.
Step 2 – Document the understanding of Internal Control.
Step 3 – Assess Risk of Material Misstatement (RMM) which consists of inherent risk (IR) and control risk (CR).
RMM = IR × CR
Step 4 – Develop an audit strategy to either:
o (RELY?)
Perform tests of control (TofC) to determine if CR is below maximum, reducing RMM below the level of IR and allowing for the modification of the nature, timing, and extent of further audit procedures (sub tests): or
o (NOT Rely)
Decide NOT to perform tests of controls, assessing CR at the maximum level as if the control did not exist, and measuring RMM as being equal to IR.
Step 5 – Reassess Risk of Material Misstatement and evaluate results.
o For controls for which tests of controls were performed, evaluate results to reassess RMM and determine if it is appropriate to modify the nature, timing, and extent of further audit procedures.
Step 6 – Document conclusions and determine the effect on the planned substantive procedures. At this point, the audit program needs to be developed or revised for further audit procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 – Reassess Risk of Material Misstatement and evaluate results.
o For controls for which tests of controls were performed, evaluate results to reassess RMM and determine if it is appropriate to modify the nature, timing, and extent of further audit procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 – Reassess Risk of Material Misstatement and evaluate results.
o For controls for which tests of controls were performed, evaluate results to reassess RMM and determine if it is appropriate to modify the nature, timing, and extent of further audit procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will dete_____ whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to mo___y the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the re____s of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the t___s of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the sc___ of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is ne_____ary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If t___s of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as ex____ed, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be n_ need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the sc___ of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned subs_______ procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does n__ operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as ex____ed, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of subs_______ procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will incr____
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby dec____ing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing dete_____ risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase
(thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will incr_____ (thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase (thereby decreasing detection risk).
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase (thereby decreasing detection risk).
• Detection Risk (DR) tells you how much substantive testing to do
• Must do substantive testing
(adjust Audit Program for Substantive tests)
• AR / (IR × CR) = DR
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase (thereby decreasing detection risk).
• DR tells you how much substantive testing to do
• Must do substantive testing
(adjust Audit Program for Substantive tests)
• AR / (IR × CR) = DR
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
• Detection Risk (DR) tells you how much substantive testing to do
• Must do substantive testing
(adjust Audit Program for Substantive tests)
• AR / (IR × CR) = DR or AR = (IR × CR) x DR or DR = AR / (IR × CR)
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
Based on the results of the tests of controls the auditor will determine whether it is necessary to modify the scope of substantive procedures.
If tests of control reveal that the system operates as expected, there will generally be no need to change the scope of planned substantive procedures.
Conversely, if the system does not operate as effectively as expected, the scope of substantive procedures for the relevant assertions involved will increase (thereby decreasing detection risk).
• DR tells you how much substantive testing to do
• Must do substantive testing
(adjust Audit Program for Substantive tests)
• AR / (IR × CR) = DR
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
• Detection Risk (DR) tells you h__ mu__ substantive testing to do
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
• Detection Risk (DR) tells you how much substantive testing to do
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
• Detection Risk (DR) tells you how much subst_____ testing to do
Obtain an Understanding of the Entity’s Internal Control Structure (AU-C 315)
Step 5 –
5. Reassess RMM to Determine DR
• Detection Risk (DR) tells you how much substantive testing to do