AUD 5.1 - Integrated Audit Procedures Flashcards
Who is required to perform an integrated audit yearly?
Large accelerated filers that are issuers
Large accelerated filers are considered:
Has a worldwide market value of outstanding common equity held by non affiliates of $700M or more
An accelerated filer is considered:
An issuer with a worldwide market value of outstanding common equity held by non affiliates of $75M or more but less than $700M
Who governs the audit and report of a nonissuers internal control over financial reporting that is integrated with a financial statement audit?
SAS 130
What is the objective in an audit of internal control?
To express an opinion on he effectiveness of the entity’s internal control over financial reporting
An entity’s internal controls cannot be considered effective if:
One or more material weaknesses exist
Section 404 of the sarbanes-oxley act of 2002 requires each issuers annual report to contain an internal control report that:
States managements responsibility
And
Contains an assessment of the effectiveness of the internal control structure and procedures for financial reporting
An audit of internal control can only be performed for nonissuers if management does what?
- Accepts responsibility for the effectiveness of internal controls
- Evaluates the effectiveness of the internal control
- Supports its assessment about the effectiveness of internal control with evidence
- Provides written assessment about the effectiveness of the entity’s internal controls
An auditor for issuers and nonissuers should obtain a written representation letter from management in which management:
- Acknowledges its responsibility for establishing and maintaining effective internal control
- Assesses their internal control as of a specified date
- That management didn’t rely on the auditors prcedures for their assessment
- Disclosed all deficiencies in design and operation
- Describes fraud resulting in material misstatement or involved senior management
- Significant changes to internal control after the “as of” date of the report
Failure to obtain a written representation will result in?
A withdrawn or disclaimer (but usually withdrawal)
This approach is used in selecting controls to test. The auditor would evaluate overall risk at the financial statement level, consider controls at the entity level, and then focus on accounts, disclosures, and assertions for which there is a reasonable possibility of material misstatement ;
Top down approach
Entity level controls include controls related to:
The control environment
Management override
The company’s risk assessment process
Centralized processing
Monitoring the results of operations
Monitoring other controls
Period end financial reporting
Policies that address significant business on troll and risk management practices
The auditor should test controls that are:
Important in addressing the risk of material misstatement
In an integrated audit, the auditor should evaluate the components of ICFR and determine whether the components are:
Present and functioning in design, implementation, and operation
AND
Operating together in an integrated manner
Components of internal control over financial reporting (ICFR) are:
Control environment
Risk assessment
Information and communication systems
Monitoring
Existing control activities