AUD 3 Internal Control 15 - 5 Service Organizations Flashcards

1
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Det______ that the date of a type 1 report,

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the d___ of a type 1 report,

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 re____,
or the period covered by a type 2 report

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the pe____ covered by a type 2 report

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 re____

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period co___ed by a type 2 report
is appropriate for the auditor’s needs

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report
is appropriate for the auditor’s needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report
is ap________ for the auditor’s needs

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report
is appropriate for the auditor’s needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report
is appropriate for the auditor’s n__ds

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report
is appropriate for the auditor’s needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Service Organizations

To r__y upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report
is appropriate for the auditor’s needs

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine that the date of a type 1 report,
or the period covered by a type 2 report
is appropriate for the auditor’s needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor sh___d:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control;
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control;
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Eva______ whether the evidence provided by the report
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evi______ provided by the report

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the re____

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence pr____ed by the report
is appropriate and sufficient

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is app_______ and sufficient

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and suf_______

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the pur____ of obtaining an understanding of the user’s internal control;

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an understanding of the user’s internal control;

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of ob____ing an understanding of the user’s internal control;

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an understanding of the user’s internal control;

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an un_______ing of the user’s internal control;

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an understanding of the user’s internal control;

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an understanding of the u___’s internal control;

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an understanding of the user’s internal control;

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an understanding of the user’s internal con____;

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Evaluate whether the evidence provided by the report
is appropriate and sufficient
for the purpose of obtaining an understanding of the user’s internal control;

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Det_____ if the user entity has developed controls
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the u___ entity has developed controls
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has dev____ed controls

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed con____s
that are complementary to those of the service organization

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are com_______tary to those of the service organization

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the ser____ organization

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that ad___ss risks of material misstatement

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address r___s of material misstatement

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material miss________

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to rel_____ assertions

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant assertions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement re___ing to relevant assertions in the user’s financial statements.

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant assertions in the user’s financial statements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant as_______s in the user’s financial statements.

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant assertions in the user’s financial statements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant assertions in the user’s fin_______ statements.

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant assertions in the user’s financial statements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant assertions in the u___’s financial statements.

A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

• Determine if the user entity has developed controls
that are complementary to those of the service organization
that address risks of material misstatement relating to relevant assertions in the user’s financial statements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Service Organizations

To rely up__ a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Service Organizations

To rely upon a t___ 1 or t___ 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Service Organizations

To rely upon a type 1 or type 2 re____, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • De________ that the d___ of a t___ 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Det_______ that the date of a type 1 report, or the pe____ co___ed by a t___ 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is ap________ for the auditor’s n__ds;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Eva______ whether the evi______ provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence pr____ed by the re____ is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appr_______ and suff______ for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the pu______ of ob____ing an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an und______ing of the user’s int_____ control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Det_______ if the u___entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has de_____ed con____s that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are com_________ry to those of the ser____ organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that a______ss ri__s of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of ma______ miss_______ relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement re____ing to rel______ assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant as_______s in the us__’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial sta_______s.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Service Organizations

To rely upon a type 1 or type 2 report, the a_______ should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Service Organizations

When the au_____ of the user entity intends to rely on the controls at the service organization,

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Service Organizations

When the auditor of the u___ entity intends to rely on the controls at the service organization,

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Service Organizations

When the auditor of the user entity intends to r__y on the controls at the service organization,

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Service Organizations

When the auditor of the user entity intends to rely on the con____s at the service organization,

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the ser____ organization,

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to t___s of controls,

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of con____s,

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be acco______ed by:

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Ob____ing and reading a type 2 report

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Obtaining and reading a type 2 report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Obtaining and r____ing a type 2 report

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Obtaining and reading a type 2 report

68
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Obtaining and reading a t___ 2 report

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Obtaining and reading a type 2 report

69
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Obtaining and reading a type 2 re____

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Obtaining and reading a type 2 report

70
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • A____ing tests of controls at the service organization;
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization;
71
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying t___s of controls at the service organization;
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization;
72
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Applying tests of con____s at the service organization;

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Applying tests of controls at the service organization;

73
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Applying tests of controls at the ser____ organization;

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Applying tests of controls at the service organization;

74
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Applying tests of controls at the service organization; or
  • U___ng another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
75
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Applying tests of controls at the service organization; or
  • Using another au_____ to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
76
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using ano____ auditor to perform tests of control at the service organization.

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform tests of control at the service organization.

77
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to per____ tests of control at the service organization.

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform tests of control at the service organization.

78
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform t____ of control at the service organization.

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform tests of control at the service organization.

79
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform tests of con____ at the service organization.

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform tests of control at the service organization.

80
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform tests of control at the ser____ organization.

A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

• Using another auditor to perform tests of control at the service organization.

81
Q

Service Organizations

When the auditor of the user e____ty intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
82
Q

Service Organizations

When the auditor of the user entity in____s to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
83
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be su_____ed to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
84
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Ob____ing and r____ing a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
85
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a t___ 2 re____;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
86
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Ap___ing t___s of con____s at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
87
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the ser____ orga_______; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
88
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • U___g ano____ auditor to perform tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
89
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another au_____ to per____ tests of control at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
90
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform t___s of co_____ at the service organization.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
91
Q

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the ser____ organi_______.
A

Service Organizations

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls,
which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
92
Q

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls, which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
A

Service Organizations

To rely upon a type 1 or type 2 report, the auditor should:

  • Determine that the date of a type 1 report, or the period covered by a type 2 report is appropriate for the auditor’s needs;
  • Evaluate whether the evidence provided by the report is appropriate and sufficient for the purpose of obtaining an understanding of the user’s internal control; and
  • Determine if the user entity has developed controls that are complementary to those of the service organization that address risks of material misstatement relating to relevant assertions in the user’s financial statements.

When the auditor of the user entity intends to rely on the controls at the service organization,

they must be subjected to tests of controls, which may be accomplished by:

  • Obtaining and reading a type 2 report;
  • Applying tests of controls at the service organization; or
  • Using another auditor to perform tests of control at the service organization.
93
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
94
Q

Service Organizations

If the au_____’s test of controls consists of obtaining and reading a type 2 report,

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

95
Q

Service Organizations

If the auditor’s t___ of controls consists of obtaining and reading a type 2 report,

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

96
Q

Service Organizations

If the auditor’s test of con____s consists of obtaining and reading a type 2 report,

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

97
Q

Service Organizations

If the auditor’s test of controls consists of o_____ing and reading a type 2 report,

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

98
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and ____ing a type 2 report,

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

99
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a t___ 2 report,

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

100
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 re____,

the auditor will evaluate the report to determine:

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

101
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will eva______ the report to determine:

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

102
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the re____ to determine:

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

103
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to dete_____:

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

104
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether it is f__ an appropriate period

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether it is for an appropriate period

105
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether it is for an app________ period

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether it is for an appropriate period

106
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether it is for an appropriate pe____

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether it is for an appropriate period

107
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are com________ry controls at the user entity
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity
108
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary con____s at the user entity
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity
109
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the u__r entity identified by the service organization
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization
110
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity id____ied by the service organization

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization

111
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the ser____ organization

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization

112
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as ad______ing risks of material misstatement

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

113
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing ri__s of material misstatement

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

114
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of ma______ misstatement

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

115
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, de_______ing if those controls have been designed and implemented and applying tests of controls to them;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

116
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those con____s have been designed and implemented and applying tests of controls to them;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

117
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been de____ed and implemented and applying tests of controls to them;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

118
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and imp_______ed and applying tests of controls to them;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

119
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and a___ying tests of controls to them;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

120
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying t___s of controls to them;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

121
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of con____s to them;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

122
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

• If the t___ period covered by tests of controls is adequate and evaluating the length of time since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

123
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

• If the time pe____ covered by tests of controls is adequate and evaluating the length of time since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement

and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

124
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period co___ed by tests of controls is adequate and evaluating the length of time since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

125
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by t___s of controls is adequate and evaluating the length of time since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

126
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is ade_____ and evaluating the length of time since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

127
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and ev_____ing the length of time since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

128
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the l____th of time since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

129
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of t___ since testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

130
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time si___ testing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

131
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since t___ing;

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• If the time period covered by tests of controls is adequate and evaluating the length of time since testing;

132
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether t___s of controls performed by the service auditor provide sufficient appropriate audit evidence
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence
133
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of con____s performed by the service auditor provide sufficient appropriate audit evidence
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence
134
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls per____ed by the service auditor provide sufficient appropriate audit evidence

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence

135
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the ser____ auditor provide sufficient appropriate audit evidence

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence

136
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service au_____ provide sufficient appropriate audit evidence

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence

137
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor pro____ sufficient appropriate audit evidence

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence

138
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide suff_______ appropriate audit evidence

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence

139
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient app________ audit evidence

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence

140
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate a____ evidence

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence

141
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evid______ to support the user auditor’s risk assessment.

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.

142
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to sup____ the user auditor’s risk assessment.

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.

143
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the u___ auditor’s risk assessment.

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.

144
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s r___ assessment.

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.

145
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk asse_______.

A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

• Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.

146
Q

Service Organizations

If the au_____’s t___ of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
147
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will ev_______ the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
148
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to deter____:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
149
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appr_______ pe____;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
150
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary con____s at the u___ entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
151
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the ser____ organization as ad______sing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
152
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, det______ing if those con____s have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
153
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been de____ed and im________ed and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
154
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and ap___ing t___s of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
155
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the t___ pe____ covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
156
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period co___ed by t___s of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
157
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of con____s is ade______ and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
158
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and ev______ing the l___th of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
159
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of t___ since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
160
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of t___ since t___ing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
161
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether t___s of con____s performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
162
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor pro___ sufficient appr_______ audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
163
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide suff______ appropriate audit evi_______ to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
164
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to sup____ the us__ auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
165
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s r__k ass________.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
166
Q

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 re____,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.
A

Service Organizations

If the auditor’s test of controls consists of obtaining and reading a type 2 report,

the auditor will evaluate the report to determine:

  • Whether it is for an appropriate period;
  • Whether there are complementary controls at the user entity identified by the service organization as addressing risks of material misstatement and, if so, determining if those controls have been designed and implemented and applying tests of controls to them;
  • If the time period covered by tests of controls is adequate and evaluating the length of time since testing; and
  • Whether tests of controls performed by the service auditor provide sufficient appropriate audit evidence to support the user auditor’s risk assessment.