AUD Flashcards

1
Q

What does TID stand for in the GAAS general standards?

A

Training, Independence, and Due professional care

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does PIE stand for in the standards of field work?

A

Planning and supervision, Internal Control, and Evidence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does GCDO stand for in the standards of reporting?

A

GAAP, Consistency, Disclosure, and Opinion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When is an adverse opinion rendered?

A

When a severe GAAP departure is present in the financial statements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the two main differences between the standards of attestation and the auditing standards?

A

The attestation standards and generally accepted auditing standards differ conceptually in two main areas: 1) the attestation standards provide a framework for the attest function beyond historical financial statements; and 2) the attestation standards provide for the growing number of attest services in which the practitioner expresses assurances in forms other than the positive opinion.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Formula for days sales in acc receivable?

A

Acc rec / credit sales per day.Credit sales per day = Total credit sales / 365.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Adj entry for wages at end of year that weren’t recorded:

A

DR: Operating expensesCR: Accrued wages payable(accrued liab)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Why would an auditor modify the auditor’s report based on the work of a specialist?

A

If there is a difference between the specialist’s valuation of an asset and the client’s.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

who should make up the audit committee?

A

members of the board or directors who are not officers or employees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what are the 3 general standards?

A

adequete training, independence of mental attitude, and due professional care

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

3 fieldwork standards?

A

adequete planning, understanding the entity and its internal control, sufficient and appropriate audit evidence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

the auditors judgment of the overall fairness of the financial statements is applied within the framework of?

A

generally accepted audit principles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what does the auditor primarily use to come up with materiality?

A

the prior year financial statements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

basics of independence concerning a close relative?

A

CR can have a financial interest in the audit client as long as the amount is immaterial to them. CR can work for the audit client as long as its not in accounting or financial reporting. CR can work for audit firm, and is not a covered member unless the person works on the engagement team or can influence the members of the engagement team or the audit itself

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

when planning a new audit, why would the auditor consider the methods used to process accounting information?

A

Because the methods influence the design of internal control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

who appoints the PCAOB?

A

SOX created the PCAOB and it is overseen by the SEC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

under securities act of 1934 what organizations are required to submit audited financial statements?

A

every company traded on national and over the counter exchanges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

primary purpose of establishing quality control procedures for deciding whether to accept a new client?

A

minimize likelihood of association with clients whose management lack integrity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

to succeed in legal action against the auditor, the client must be able to show that?

A

the CPA had duty to perform, the CPA breached the contract, the client suffered losses, and that there is a close causal connection between the auditor’s behavior and the damages suffered by the client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

detection risk?

A

risk that auditor concludes no material misstatement exists when there actually is one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

3 components of audit risk?

A

inherent risk, control risk, detection risk. They are multiplied together: .8 x .75 x .25 = .15 audit risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

if inherent risk is .8 and control risk is .2, what does the auditor do to lower audit risk?

A

increase and perform substantive testing to reduce detection risk to the point that it equals the acceptable level of audit risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

why are inherent risk and control risk different than detection risk?

A

inherent risk is the possibility of a material mistatement due to lack of human and system technology. Control risk is risk of material error that is not prevented or detected on a timely basis by the client’s internal controls. Detection risk is risk that the auditor misses a material error. Thus, inherent risk and control risk are functions of the client and its environment while detection risk is not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

the risk of material misstatement refers to:

A

the combination of inherent & control risk. Multiplying IR by CR results in the ‘risk of material misstatement’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
the level of detection risk is inversely related to:
the assurance provided by substantive tests. As the auditor performs substantive procedures he becomes more and more sure there are no material errors exist, and detection risk goes down
26
the audit program should be designed so that sufficient evidence is gathered to:
support the auditor's conclusions
27
Do most illegal acts affect the fin statements directly or indirectly?
indirectly.
28
if you uncover an illegal act at a public company, the auditor is required to notify:
the SEC
29
when auditor has reason to believe an illegal act has ocurred, he should do what?
consider accumulating additional evidence, inquire of management at a level above those who did the act, and consult with the client's legal counsel
30
what is lapping fraud?
you steal customer A's money, then you get customer B's money and apply it to A's account, then get C's money and apply it to B's account, and so on
31
what is kiting?
money is moved from one account to the other but in different time periods to inflate the amount being reported
32
does the PCAOB make auditing standards that must be followed by all CPAs?
it only makes auditing standards for public companies
33
is the PCAOB a gov agency?
no
34
what is an S-1 form?
a form that must be filed with the SEC whenever a company plans to issue new securities to the public
35
what is auditors responsibility for supplementary information such as segment info?
auditor should apply limited procedures to the required info and report deficiencies in or omission of such info
36
who creates auditing standards for private companies?
the AICPA
37
what is form 8-K?
the form filed with SEC to report a significant event
38
how long do you have to dispose of stock in a client if you inherited some unsolicited?
30 days
39
do operating leases and claims against clients for immaterial amounts impair indedpence?
no
40
are statements in the standards that include the word "should" mandatory?
they are considered presumptively mandatory- the auditor can depart from them if justification is documented
41
what is the completeness assertion concerned with?
determining that all transactions are recorded
42
in testing the existence assertion for an asset, the auditor normally works from the ______ to the _______
accounting records to the supporting evidence
43
according to SOX how long does a firm keep audit documentation?
have to keep it 7 years
44
what is the best place to put in writing the understanding between client and firm about what will take place during the audit?
the engagement letter
45
to see if checks are being issued for unauthorized purchases, the auditor would most likely select testing from the population of:
canceled checks
46
what does tracing shipping docs to sales invoices accomplish?
that all items shipments have been invoiced
47
most effective control over recorded purchases?
supporting forms such as purchases orders and receiving reports are independently compared for agreement
48
if trying to detect overstatement of sales, you start with the:
accounting records and trace to the source documents
49
what is pervasiveness?
the extent to which an exception affects different parts of the financial statements
50
difference between adverse opinion and disclaimer of opinion?
adverse opinion is stating that the financials do not fairly present the position of company in accordance to GAAP. Disclaimer of opinion is when a material uncertainty affects the financials
51
what paragraph explicitly states the auditors responsibility to express an opinion?
the opening paragraph of the standard audit report
52
when would a lack of independence cause a disclaimer of opinion?
in all cases
53
if the financials and/or footnotes fail to disclose information that is required by GAAP, what type of opinion is issued?
adverse or qualified. if qualified, an extra paragraph would be added that describes the nature of the missing info, and the opinion paragraph would have an extra sentence "except for the information discussed in previous paragraph"
54
on a public company audit, are the reports on the financial statements and internal controls issued separately or combined?
it can be either
55
what are the 2 situations which result in a qualified opinion?
1) when the statements are materially misstated due to one account balance or class of transaction that does not have a pervasive effect on the statements2)when the auditor is unable to obtain audit evidence regarding a particular account balance that does not pervasively affect the statementsEssentially either a single deviation from GAAP or a scope limitation. The report itself is very similar to an unqualified opinion but an extra paragraph is added to explain the qualification after the scope paragraph but before the opinion paragraph
56
how many paragraphs does a standard unqualified report have and what are they?
3. The introductory paragraph states the audit work performed and states the responsibility of the auditor and auditee in relation to the financial statements, the scope paragraph details the scope of the audit work, and the opinion paragraph simply states the unqualified opinion
57
when is an adverse opinion issued and how does the report change?
Adverse is the opposite of an unqualified opinion. It means that the financial statements as a whole are materially misstated and do not conform with GAAP. or the "differ pervasively" from GAAP. On the report, the scope paragraph is modified accordingly and an explanatory paragraph is added after the scope paragraph but before the opinion paragraph. In the opinion paragraph, the auditor specifically states that the statements are not in accordance with GAAP.
58
What situations would result in a disclaimer of opinion?
When the auditor is not independent or there is a conflict of interest.When a limitation on scope is imposed by the client and the auditor cant gather sufficient audit evidence.When there is a substantial going concern issue.When there are significant uncertainties in the business of the client.
59
when an auditor selects one or a few transactions and follows them through the entire accounting process, he is doing what?
a walkthrough. A walkthrough combines observation, documentation, and inquiry. PCAOB Standard 2 requires at least one walkthrough per major class of transaction
60
which section of SOX requires mgmt to issue an internal control report?
Section 404 requires auditors to assess and report on the effectiveness of the internal control over financial reporting
61
what is the definition of incompatible functions?
those that place any person in a position to both perpetrate and conceal errors or irregularities in the normal course of their duties. well designed controls should separate the duties of authorization, record keeping and custody of assets
62
what is the primary purpose of the auditors consideration of internal controls?
to determine the nature, extent, and timing of audit tests to be applied
63
if the auditor finds a reportable condition in internal controls, who should they tell first?
the audit commitee
64
if after understanding the ICs the auditor decides to perform tests of controls, the auditor most likely decided that:
it would be efficient to perform tests of controls that would result in a reduction in planned substantive tests
65
what is the concept of reasonable assurance?
recognizes that the cost of internal controls should not exceed the benefits derived
66
7 factors of the control environment: (I see ham bone)
I- integrity and ethical valuesC- commitment to competenceH- human resource policies and practicesA- assignment of authority and responsibilityM- management's philosophy and operating styleB- board of directors or audit committee participationO- organization
67
even the best designed IC can fail due to:
human error, faulty judgement, collusion, management override
68
what are the five components of internal control? (clowns run cartels in mexico)
1) control environment2) risk assessment3) control activities4) information and communication5) monitoring
69
***What is the process of assessing risk in general?
You assess inherent risk and control risk to determine the amount of substantive testing that must be carried out to reduce detection risk to a level so that overall risk will still achieve an acceptably low level. Acceptable audit risk is not changed.
70
what is the audit risk formula?
inherent risk X control risk X detection risk = overall audit risk
71
the auditor uses the assessed level of control risk to determine the acceptable level of
detection risk for financial statement assertions
72
if auditor increases the level of control risk because controls are found to be ineffective, the auditor would most likely increase the
extent of tests of details
73
what do assertions about existence or occurrence deal with?
whether assets or liabilities exist at a given date and whether recorded transactions have occurred during a given period
74
when an auditor assesses control risk as low, he must:
identify specific policies and procedures that are likely to prevent or detect material misstatements, and he must perform tests of controls to evaluate the effectiveness of such policies and procedures. if the tests of controls result in the control risk being assessed as low, then the auditor may limit the extent of substantive testing
75
what does 'information and communication' refer to as far as internal control within an organization?
the ability of the accounting system to generate reliable info and convey it in a timely manner to the parties in the organization that need it
76
What are the 5 assertions about classes of transactions and events for the period?Alistair Overeem Cant Cut Corners
Accuracy- amounts and other data have been recorded appropriatelyOccurrence- transactions and events that have been recorded have occurredCompleteness- all transactions and events that should have been recorded have been recordedCutoff- transactions and events have been recorded in the correct accounting periodClassification- transactions and events have been recorded in the proper accounts
77
4 assertions about account balances at end of period?Even Cain Realizes Value
Existence- assets, liabilities, and equity interests existCompleteness- all assets, liabilities, and equity that should have been recorded have been recordedrights and obligations- the entity holds or controls the rights to assets, and liabilities are the obligations of the entityValuation and allocation- assets, liabilities, and equity interests are included in the financial statements at appropriate amounts and any resulting valuation or allocation adjustments are appropriately recorded
78
4 assertions about presentation and disclosure:Overeem Can't Complain Anymore
Occurrence & rights and obligations- disclosed events and transactions have occurred and pertain to the entityCompleteness- all disclosures that should have been included have been includedClassification and understandability- financial information is appropriately presented, described, and clearly expressedAccuracy and valuation- financial and other info are disclosed fairly and at appropriate amounts
79
why is it best to have "blind" invoices received by the receiving department?
to make sure the receiving dep counts the incoming merchandise so that they only pay for what they received
80
what is the purpose of purchase cutoff testing?
to determine that items actually received in inventory have been included in the proper period
81
what is an integrated test facility?
it puts fake transactions in with real transactions which are processed together without client employees knowing it
82
a person who mails signed checks can also:
cancel the supporting documents
83
an effective control over purchases would be to have the purchasing department authorized to:
purchase, but not initiate purchases
84
an increased extent of tests of controls is most likely to occur when:
controls appear to be effective so that the preliminary control risk assessment is low. this is because auditor can then do less substantive testing.
85
are significant deficiencies and material weaknesses supposed to be relayed orally or written to those charged with governance?
AU 325 says that sig def and material weaknesses in a public company must be communicated in writing to the audit committee of the board of directors
86
when should control deficiencies be reported?
either during the audit or after the audit's completion, within 60 days of the report release date
87
management must disclose material weaknesses in internal control if the weakness exists:
at the end of the year
88
what are the 2 types of control deficiency?
design and operations. design means its poorly designed, while operations means the people performing their tasks are doing them deficiently
89
what is ratio estimation used for?
to measure the total estimated error amount within a population
90
there is an inverse relationship between sample size and:
tolerable error. as the tolerable error decreases the sample size would increase
91
what is sampling risk?
the risk that the sample chosen doesn't accurately represent the population
92
How is the allowance for sampling risk calculated?
It's the difference between the upper limit and the deviation rate of the sample.
93
what are embedded audit modules?
coded into the clients system to collect data for the auditor
94
purpose of test data approach?
test data is entered with a known outcome into client's system to see if it produces same result
95
under the PCAOB standards, a scope limitation related to internal controls over financial reporting should result in:
a disclaimer of opinion.
96
if a control deficiency is discovered, what is the next step?
determine if it is a material weakness by gathering additional evidence
97
what opinion is rendered if there is one or more material weakness in internal control over fin reporting?
an adverse opinion
98
"if this statement is not correct... give details of difference directly to our auditors
acc rec confirmation
99
"in our opinion, these statements audited by us comply in all material respects"
comfort letter to underwriters
100
"no claims that OUR lawyer..."
management rep letter
101
"which raises substantial doubt about its ability to continue as a going concrern"
auditors report
102
CPA is associated with the financial statements, but is NOT independent
Compilation report
103
providing NEGATIVE assurance on a company's financials
review report
104
material departure from GAAP but NOT materially misstated
qualified report for GAAP departure
105
What does TID stand for in the GAAS general standards?
Training, Independence, and Due professional care
106
What does PIE stand for in the standards of field work?
Planning and supervision, Internal Control, and Evidence
107
What does GCDO stand for in the standards of reporting?
GAAP, Consistency, Disclosure, and Opinion
108
When is an adverse opinion rendered?
When a severe GAAP departure is present in the financial statements.
109
What are the two main differences between the standards of attestation and the auditing standards?
The attestation standards and generally accepted auditing standards differ conceptually in two main areas: 1) the attestation standards provide a framework for the attest function beyond historical financial statements; and 2) the attestation standards provide for the growing number of attest services in which the practitioner expresses assurances in forms other than the positive opinion.
110
Formula for days sales in acc receivable?
Acc rec / credit sales per day.Credit sales per day = Total credit sales / 365.
111
Adj entry for wages at end of year that weren't recorded:
DR: Operating expensesCR: Accrued wages payable(accrued liab)
112
Why would an auditor modify the auditor's report based on the work of a specialist?
If there is a difference between the specialist's valuation of an asset and the client's.
113
who should make up the audit committee?
members of the board or directors who are not officers or employees
114
what are the 3 general standards?
adequete training, independence of mental attitude, and due professional care
115
3 fieldwork standards?
adequete planning, understanding the entity and its internal control, sufficient and appropriate audit evidence
116
the auditors judgment of the overall fairness of the financial statements is applied within the framework of?
generally accepted audit principles
117
what does the auditor primarily use to come up with materiality?
the prior year financial statements
118
basics of independence concerning a close relative?
CR can have a financial interest in the audit client as long as the amount is immaterial to them. CR can work for the audit client as long as its not in accounting or financial reporting. CR can work for audit firm, and is not a covered member unless the person works on the engagement team or can influence the members of the engagement team or the audit itself
119
when planning a new audit, why would the auditor consider the methods used to process accounting information?
Because the methods influence the design of internal control
120
who appoints the PCAOB?
SOX created the PCAOB and it is overseen by the SEC
121
under securities act of 1934 what organizations are required to submit audited financial statements?
every company traded on national and over the counter exchanges
122
primary purpose of establishing quality control procedures for deciding whether to accept a new client?
minimize likelihood of association with clients whose management lack integrity
123
to succeed in legal action against the auditor, the client must be able to show that?
the CPA had duty to perform, the CPA breached the contract, the client suffered losses, and that there is a close causal connection between the auditor's behavior and the damages suffered by the client
124
detection risk?
risk that auditor concludes no material misstatement exists when there actually is one
125
3 components of audit risk?
inherent risk, control risk, detection risk. They are multiplied together: .8 x .75 x .25 = .15 audit risk
126
if inherent risk is .8 and control risk is .2, what does the auditor do to lower audit risk?
increase and perform substantive testing to reduce detection risk to the point that it equals the acceptable level of audit risk
127
why are inherent risk and control risk different than detection risk?
inherent risk is the possibility of a material mistatement due to lack of human and system technology. Control risk is risk of material error that is not prevented or detected on a timely basis by the client's internal controls. Detection risk is risk that the auditor misses a material error. Thus, inherent risk and control risk are functions of the client and its environment while detection risk is not
128
the risk of material misstatement refers to:
the combination of inherent & control risk. Multiplying IR by CR results in the 'risk of material misstatement'
129
the level of detection risk is inversely related to:
the assurance provided by substantive tests. As the auditor performs substantive procedures he becomes more and more sure there are no material errors exist, and detection risk goes down
130
the audit program should be designed so that sufficient evidence is gathered to:
support the auditor's conclusions
131
Do most illegal acts affect the fin statements directly or indirectly?
indirectly.
132
if you uncover an illegal act at a public company, the auditor is required to notify:
the SEC
133
when auditor has reason to believe an illegal act has ocurred, he should do what?
consider accumulating additional evidence, inquire of management at a level above those who did the act, and consult with the client's legal counsel
134
what is lapping fraud?
you steal customer A's money, then you get customer B's money and apply it to A's account, then get C's money and apply it to B's account, and so on
135
what is kiting?
money is moved from one account to the other but in different time periods to inflate the amount being reported
136
does the PCAOB make auditing standards that must be followed by all CPAs?
it only makes auditing standards for public companies
137
is the PCAOB a gov agency?
no
138
what is an S-1 form?
a form that must be filed with the SEC whenever a company plans to issue new securities to the public
139
what is auditors responsibility for supplementary information such as segment info?
auditor should apply limited procedures to the required info and report deficiencies in or omission of such info
140
who creates auditing standards for private companies?
the AICPA
141
what is form 8-K?
the form filed with SEC to report a significant event
142
how long do you have to dispose of stock in a client if you inherited some unsolicited?
30 days
143
do operating leases and claims against clients for immaterial amounts impair indedpence?
no
144
are statements in the standards that include the word "should" mandatory?
they are considered presumptively mandatory- the auditor can depart from them if justification is documented
145
what is the completeness assertion concerned with?
determining that all transactions are recorded
146
in testing the existence assertion for an asset, the auditor normally works from the ______ to the _______
accounting records to the supporting evidence
147
according to SOX how long does a firm keep audit documentation?
have to keep it 7 years
148
what is the best place to put in writing the understanding between client and firm about what will take place during the audit?
the engagement letter
149
to see if checks are being issued for unauthorized purchases, the auditor would most likely select testing from the population of:
canceled checks
150
what does tracing shipping docs to sales invoices accomplish?
that all items shipments have been invoiced
151
most effective control over recorded purchases?
supporting forms such as purchases orders and receiving reports are independently compared for agreement
152
if trying to detect overstatement of sales, you start with the:
accounting records and trace to the source documents
153
what is pervasiveness?
the extent to which an exception affects different parts of the financial statements
154
difference between adverse opinion and disclaimer of opinion?
adverse opinion is stating that the financials do not fairly present the position of company in accordance to GAAP. Disclaimer of opinion is when a material uncertainty affects the financials
155
what paragraph explicitly states the auditors responsibility to express an opinion?
the opening paragraph of the standard audit report
156
when would a lack of independence cause a disclaimer of opinion?
in all cases
157
if the financials and/or footnotes fail to disclose information that is required by GAAP, what type of opinion is issued?
adverse or qualified. if qualified, an extra paragraph would be added that describes the nature of the missing info, and the opinion paragraph would have an extra sentence "except for the information discussed in previous paragraph"
158
on a public company audit, are the reports on the financial statements and internal controls issued separately or combined?
it can be either
159
what are the 2 situations which result in a qualified opinion?
1) when the statements are materially misstated due to one account balance or class of transaction that does not have a pervasive effect on the statements2)when the auditor is unable to obtain audit evidence regarding a particular account balance that does not pervasively affect the statementsEssentially either a single deviation from GAAP or a scope limitation. The report itself is very similar to an unqualified opinion but an extra paragraph is added to explain the qualification after the scope paragraph but before the opinion paragraph
160
how many paragraphs does a standard unqualified report have and what are they?
3. The introductory paragraph states the audit work performed and states the responsibility of the auditor and auditee in relation to the financial statements, the scope paragraph details the scope of the audit work, and the opinion paragraph simply states the unqualified opinion
161
when is an adverse opinion issued and how does the report change?
Adverse is the opposite of an unqualified opinion. It means that the financial statements as a whole are materially misstated and do not conform with GAAP. or the "differ pervasively" from GAAP. On the report, the scope paragraph is modified accordingly and an explanatory paragraph is added after the scope paragraph but before the opinion paragraph. In the opinion paragraph, the auditor specifically states that the statements are not in accordance with GAAP.
162
What situations would result in a disclaimer of opinion?
When the auditor is not independent or there is a conflict of interest.When a limitation on scope is imposed by the client and the auditor cant gather sufficient audit evidence.When there is a substantial going concern issue.When there are significant uncertainties in the business of the client.
163
when an auditor selects one or a few transactions and follows them through the entire accounting process, he is doing what?
a walkthrough. A walkthrough combines observation, documentation, and inquiry. PCAOB Standard 2 requires at least one walkthrough per major class of transaction
164
which section of SOX requires mgmt to issue an internal control report?
Section 404 requires auditors to assess and report on the effectiveness of the internal control over financial reporting
165
what is the definition of incompatible functions?
those that place any person in a position to both perpetrate and conceal errors or irregularities in the normal course of their duties. well designed controls should separate the duties of authorization, record keeping and custody of assets
166
what is the primary purpose of the auditors consideration of internal controls?
to determine the nature, extent, and timing of audit tests to be applied
167
if the auditor finds a reportable condition in internal controls, who should they tell first?
the audit commitee
168
if after understanding the ICs the auditor decides to perform tests of controls, the auditor most likely decided that:
it would be efficient to perform tests of controls that would result in a reduction in planned substantive tests
169
what is the concept of reasonable assurance?
recognizes that the cost of internal controls should not exceed the benefits derived
170
7 factors of the control environment: (I see ham bone)
I- integrity and ethical valuesC- commitment to competenceH- human resource policies and practicesA- assignment of authority and responsibilityM- management's philosophy and operating styleB- board of directors or audit committee participationO- organization
171
even the best designed IC can fail due to:
human error, faulty judgement, collusion, management override
172
what are the five components of internal control? (clowns run cartels in mexico)
1) control environment2) risk assessment3) control activities4) information and communication5) monitoring
173
***What is the process of assessing risk in general?
You assess inherent risk and control risk to determine the amount of substantive testing that must be carried out to reduce detection risk to a level so that overall risk will still achieve an acceptably low level. Acceptable audit risk is not changed.
174
what is the audit risk formula?
inherent risk X control risk X detection risk = overall audit risk
175
the auditor uses the assessed level of control risk to determine the acceptable level of
detection risk for financial statement assertions
176
if auditor increases the level of control risk because controls are found to be ineffective, the auditor would most likely increase the
extent of tests of details
177
what do assertions about existence or occurrence deal with?
whether assets or liabilities exist at a given date and whether recorded transactions have occurred during a given period
178
when an auditor assesses control risk as low, he must:
identify specific policies and procedures that are likely to prevent or detect material misstatements, and he must perform tests of controls to evaluate the effectiveness of such policies and procedures. if the tests of controls result in the control risk being assessed as low, then the auditor may limit the extent of substantive testing
179
what does 'information and communication' refer to as far as internal control within an organization?
the ability of the accounting system to generate reliable info and convey it in a timely manner to the parties in the organization that need it
180
What are the 5 assertions about classes of transactions and events for the period?Alistair Overeem Cant Cut Corners
Accuracy- amounts and other data have been recorded appropriatelyOccurrence- transactions and events that have been recorded have occurredCompleteness- all transactions and events that should have been recorded have been recordedCutoff- transactions and events have been recorded in the correct accounting periodClassification- transactions and events have been recorded in the proper accounts
181
4 assertions about account balances at end of period?Even Cain Realizes Value
Existence- assets, liabilities, and equity interests existCompleteness- all assets, liabilities, and equity that should have been recorded have been recordedrights and obligations- the entity holds or controls the rights to assets, and liabilities are the obligations of the entityValuation and allocation- assets, liabilities, and equity interests are included in the financial statements at appropriate amounts and any resulting valuation or allocation adjustments are appropriately recorded
182
4 assertions about presentation and disclosure:Overeem Can't Complain Anymore
Occurrence & rights and obligations- disclosed events and transactions have occurred and pertain to the entityCompleteness- all disclosures that should have been included have been includedClassification and understandability- financial information is appropriately presented, described, and clearly expressedAccuracy and valuation- financial and other info are disclosed fairly and at appropriate amounts
183
why is it best to have "blind" invoices received by the receiving department?
to make sure the receiving dep counts the incoming merchandise so that they only pay for what they received
184
what is the purpose of purchase cutoff testing?
to determine that items actually received in inventory have been included in the proper period
185
what is an integrated test facility?
it puts fake transactions in with real transactions which are processed together without client employees knowing it
186
a person who mails signed checks can also:
cancel the supporting documents
187
an effective control over purchases would be to have the purchasing department authorized to:
purchase, but not initiate purchases
188
an increased extent of tests of controls is most likely to occur when:
controls appear to be effective so that the preliminary control risk assessment is low. this is because auditor can then do less substantive testing.
189
are significant deficiencies and material weaknesses supposed to be relayed orally or written to those charged with governance?
AU 325 says that sig def and material weaknesses in a public company must be communicated in writing to the audit committee of the board of directors
190
when should control deficiencies be reported?
either during the audit or after the audit's completion, within 60 days of the report release date
191
management must disclose material weaknesses in internal control if the weakness exists:
at the end of the year
192
what are the 2 types of control deficiency?
design and operations. design means its poorly designed, while operations means the people performing their tasks are doing them deficiently
193
what is ratio estimation used for?
to measure the total estimated error amount within a population
194
there is an inverse relationship between sample size and:
tolerable error. as the tolerable error decreases the sample size would increase
195
what is sampling risk?
the risk that the sample chosen doesn't accurately represent the population
196
How is the allowance for sampling risk calculated?
It's the difference between the upper limit and the deviation rate of the sample.
197
what are embedded audit modules?
coded into the clients system to collect data for the auditor
198
purpose of test data approach?
test data is entered with a known outcome into client's system to see if it produces same result
199
under the PCAOB standards, a scope limitation related to internal controls over financial reporting should result in:
a disclaimer of opinion.
200
if a control deficiency is discovered, what is the next step?
determine if it is a material weakness by gathering additional evidence
201
what opinion is rendered if there is one or more material weakness in internal control over fin reporting?
an adverse opinion
202
"if this statement is not correct... give details of difference directly to our auditors
acc rec confirmation
203
"in our opinion, these statements audited by us comply in all material respects"
comfort letter to underwriters
204
"no claims that OUR lawyer..."
management rep letter
205
"which raises substantial doubt about its ability to continue as a going concrern"
auditors report
206
CPA is associated with the financial statements, but is NOT independent
Compilation report
207
providing NEGATIVE assurance on a company's financials
review report
208
material departure from GAAP but NOT materially misstated
qualified report for GAAP departure