AUD 5 - Integrated Audits, Attestation, Compliance, etc Flashcards
What is an attest engagement?
In an attest engagement, a practitioner is engaged to issue or does issue an examination, a review, or an agreed-upon procedures report on subject matter (or an assertion about the subject matter for examinations or reviews) that is the responsibility of another party.
Also, the practitioner must state a conclusion about the subject matter (or the assertion) in relation to the criteria against which the subject matter was evaluated in the report.
Difference between an attestation review is similar to a review of financial statements under the AICPA’s SSARSs?
In a financial statement review, the independent practitioner provides limited assurance about whether any material modifications should be made to the financial statements for them to be in accordance with the financial reporting framework (e.g., GAAP).
In an attestation review, the practitioner provides limited assurance about whether any material modifications should be made to subject matter for it to conform to specific criteria.
In an audit of an issuer, the auditor must provide an opinion on?
- The financial statements; and,
- The effectiveness of internal control
In an audit of an issuer, does management or the auditor must assess and report on internal control?
both management and the auditor MUST assess and report on IC
What types of controls are considered to be entity level controls?
Entity level controls are:
- the control environment
- the risk assessment process
- policies over risk management practices
A report on an issuer’s integrated audit conducted in accordance with AICPA standards?
no it is not, an issuer’s integrated audit is conducted in accordance of the standards of the PCAOB
When should an auditor of an issuer render a qualified opinion on internal control?
- When there is a scope limitation
- When there is a material weakness in internal control
neither, when there is a scope limitation, the auditor should either disclaim or withdraw; when there is a material weakness the auditor is required to issue an adverse opinion
What are examples of an attest engagment?
Examination reports, a review report, an agreed upon procedures report; these are subject to the Statements on Standards for Attestation Engagements (SSAE)
What standards are the following subjected to:
- Audit Engagements
- Preparation, compilation, and review engagements
- Attest Engagements
- Audit Engagements - subject to Statements on Auditing Standards (SAS) for non issuers, PCAOB standards for issuers
- Preparation, compilation, and review engagements - Statement on standards for accounting and review services (SSARS)
- Attest Engagements - Statements on Standards for Attestation Engagements (SSAE)
What should agreed upon proceeds (AUPs) contain?
a list of the procedures performed and a summary of findings
Does an auditor need to be independent for an AUP and a compiliation report?
they need to be independent for an AUP but they do not need to be independent for a compiliation
What does an examination of a financial forecast by an auditor involve?
- Evaluating the preparation of the prospective financial statements
- Evaluating the support of the underlying assumptions
- Evaluating the presentation of the prospective financial statements in conformity with AICPA guidelines, and
- Issuing an examination report
Can financial projections and financial forecast be distributed to all stockholders?
a financial projection would be inappropriate if distributed to all stockholders as they are only for limited use. A financial forecast would be appropriate as they are for general use
What is a SOC 1 report?
The SOC 1 report addresses the internal controls of a service organization and the effect those controls may have on a user entity’s financial statements.
What is the difference between a SOC 1 type 1 report vs Type 2?
A Type 1 report describes the procedures and controls that have been installed, while a Type 2 report provides evidence about how those controls have been operated over a period of time.
A Type 1 report attests to the suitability of the controls being used, while a Type 2 report contains an opinion regarding the operating effectiveness of those controls over the audit period.
A Type 1 report describes procedures and controls as of a specific point in time, while a Type 2 report covers how the controls have been operating during the audit period.