AUD - Assessing Risk and Developing a Planned Response Flashcards
Purpose of an audit
The auditor’s primary role is to provide an impartial (independent) report on the reliability of management’s financial statements
The purpose of an audit is to provide financial statement users w/an opinion by the auditor on whether the financial statements are presented fairly, in all material respects, in accordance w/the applicable financial reporting framework.
A firm must have annual inspections by the PCAOB only if
it conducts more than 100 audits of public companies
The audit partner in charge of an audit of a public company may only
Perform that role for 5 consecutive years
6 Elements of Quality Control
- Leadership responsibilities for quality within the firm (policies/procedures should promote an internal culture that emphasizes commitment to quality)
- Relevant ethical requirements (policies/procedures should address the independence of personnel as necessary)
- Acceptance and continuance of client relationships and specific engagements (policies/procedures should carefully assess the risks associated w/each engagement)
- Human resources (policies/procedures should address important personnel issues)
- Engagement performance (policies/procedures should focus on compliance w/all applicable firm and professional standards and regulatory requirements)
- Monitoring (policies/procedures should provide an ongoing assessment of the adequacy of the system of quality control)
The Statement on Auditing Standards (SASs) constitute GAAS and must
be followed by auditors when AICPA auditing standards are applicable
Engagement partner
The person in the firm who is responsible for:
- audit engagement and its performance
- auditor’s report
Overview of the audit process
- Engagement planning (decide whether to accept the engagement, perform risk assessment, write an audit plan)
- Internal Control Considerations (Obtain an understanding of internal control for planning purposes as required)
- Substantive Audit Procedures (Evidence gathering procedures whose purpose is to detect material misstatements, if there are any)
- Reporting (Conclusions are expressed in writing)
Under Title II of the Sarbanes-Oxley Act, the auditor of an issuer cannot legally perform…
internal audit outsourcing services
Compilation
When the CPA is engaged simply to assemble into financial statement format the financial records of a private company and issue a compilation report without expressing any degree of assurance on the reliability of those statements
Preparation engagement
When the CPA is engaged to prepare the financial statements of a private company w/out expressing any form of assurance
Review
When the CPA is engaged to provide a lower level of assurance (relative to that of an audit) on financial statements of a private company by performing limited procedures…
5 primary responsibilities of the PCAOB
- Registration of public accounting firms
- Inspections of registered public accounting firms (PCAOB is directed to conduct a continuous program of inspections that assess compliance w/SOA, PCAOB rules, SEC rules and all applicable professional standards)
- Standard setting
- Enforcement
- Funding
Preconditions for an audit
The use by management of an acceptable financial reporting framework in the preparation of the financial statements and the agreement of management to the premise on which an audit is conducted
In other words, mgmt is responsible for the fair presentation of financial statements and the design/implementation of effective internal control over financial reporting
Analytical Procedures
Evaluations of financial information through analysis of plausible relationships among both financial and nonfinancial data
Audit Data Analytics (ADAs)
Analysis of patterns, IDing anomalies, and extracting other useful info in data underlying/related to the subject matter of an audit through analysis, modelling etc -> this is all for the purpose of planning or performing the audit
5 step process applicable to using ADAs
- Plan the ADA
- Access and prepare the data for purposes of the ADA
- Consider the relevance and reliability of the data used
- Perform the ADA
- Evaluate the results and decide whether the purpose and specific objectives have been achieved
Notable Item
An item that has 1 or more characteristics that, for the relevant assertions, may do the following:
- Be indicative of a risk of material misstatement that (i) was not previously IDed (a new risk) or (ii) is higher than originally assessed by the auditor
- Provide info that is useful in designing or tailoring procedures to address risks of material misstatement
test of controls
A test of control describes any auditing procedure used to evaluate a company’s internal controls. The aim of tests of control in auditing is to determine whether these internal controls are sufficient to detect or prevent risks of material misstatements.
control risk
Control risk is the risk that a misstatement due to error or fraud that could occur in an assertion and that could be material, individually or in combination with other misstatements, will not be prevented or detected on a timely basis by the company’s internal control.
Auditor’s specialist
an individual or organization possessing expertise in a field other than accounting or auditing, whose work in that field is used by the auditor to assist the auditor in obtaining sufficient appropriate audit evidence
Management’s specialist
an individual or organization possessing expertise in a field other than accounting or auditing, whose work in that field is used by the entity to assist the entity in preparing the financial statements
“Those Charged with Governance”
The persons or organization(s) w/responsibility for overseeing the strategic direction of the entity and the obligations related to the accountability of the entity
The auditor’s objectives are to…
- communicate to the audit committee the auditor’s responsibilities regarding the audit and establish an understanding of the terms of the audit engagement w/the audit committee
- obtain information from the audit committee relevant to the audit
- Communicate to the audit committee info about the strategy ad timing of the audit
- PRovide the audit committee w/timely observations about the audits that are significant
critical accounting estimate
an accounting estimate where:
- the nature of the estimate is material due to the levels of subjectivity and judgment necessary to account for highly uncertain matters
- the impact of the estimate on financial condition or operating performance is material
critical accounting policies and practices
a company’s accounting policies and practices that are both most important to the portrayal of the co
When performing Tests of Controls…
Select a sample of transactions and verify that the control procedures of interest were performed on the transactions in the sample which usually requires that the control procedure be documented as it is performed
Wholy substantive audit (also known as substantive audit procedures)
This entails no reliance on internal control (which means the same thing as assessing control risk at the max level)
In other words, the auditor plans to meet the audit risk objectives by performing only substantive audit procedures w/out any expectation about the operating effectiveness of internal control
No Tests of Control would be performed
4 main phases in evaluating internal control
- Obtain an understanding of internal control
- Make a preliminary evaluation about the reliance on internal controls (consider the adequacy of internal control and cost benefit issues)
- Perform the appropriate tests of control if reliance is planned
- Re-evaluate that reliance based on results of the tests of control
Internal control
a process (effected by those charged w/governance, management, and other personnel) that is designed to provide reasonable assurance about the achievement of the entity’s objectives w/regard to the reliability of financial reporting, effectiveness, and compliance w/applicable laws and regulations
Negative/limited assurance
Negative assurance is a confirmation from an auditor that certain facts are accurate because there is no evidence to the contrary. When positive assurance (the proof of facts) is not applicable, negative assurance is used. The purpose of negative assurance is to confirm that no fraud or violations have been found.
**Note, negative/limited assuance is used in reviews
“Nothing came to my attention that makes me believe that there is a misstatement”
Postive assurance
Positive assurance is the affirmation that a Certified Public Accountant believes a something to be true or correct.
**When you do audits, you do positive assurance
E.g. Issuing an opinion that the financial statements are presented fairly in conformity with U.S. GAAP is an example of a CPA providing positive assurance.
Initial audits
Initial audit refers to when the prior year’s financial statements have been audited by a different auditor (referred to as the predecessor auditor)
Q: What if the auditor believes that the financial statements covered by the predecessor’s report require revision?
A: The auditor should try to arrange a 3way meeting involving himself, the predecssor, and entity mgmt. If mgmt refuses to meet to discuss issues related to the appropriateness of previously issued financial statements, the auditor should consider those matters in deciding whether to accept the engagement.
Materiality in auditing
Materiality in auditing = an understanding of what’s important in financial reporting based on the auditor’s perception of the users’ needs
The determination of materiality involves both quantitative (the relative magnitude of the items in question) and qualitative (the surrounding circumstances)
audit risk
The risk that the auditor expresses an inappropriate audit opinion when the financial statements are materially misstated
Risk of material misstatement
The risk that the financial misstatements are materially misstated prior to the audit
3 components of audit risk
- inherent risk
- control risk
- detection risk
Audit risk = inherent risk x control risk x detection risk
inherent risk
the probability that a material misstatement would occur in the paticular audit area in the absence of any internal control policies/procedures
control risk
The probability that a material misstatement that occurred in the 1st place wouldn’t be detected and corrected by internal controls that are applicable
Detection risk
The probability that a material misstatement that wasn’t prevented/detected and corrected by internal control wasn’t detected by the auditor’s substantive audit procedures
The essence of the auditor’s responsibility is to…
obtain reasonable assurance that the financial statements are free from material misstatement, whether caused by fraud or error
The auditor should always document any identified or suspected noncompliance
Unmodified opinion
Unmodified opinion = unqualified opinion
In other words, auditor believes that the financial statements are presented fairly in all material respects
Specialist
AICPA and PCAOB have similar definitions: a specialistis a person (or firm) possessing special skill or knowledge in a particular field other than accounting or auditing
Those Charged with Governance
The people or organizations w/responsibility for overseeing the strategic direction of the entity and the obligations related to the accountability of the entity (encompasses the term “BoD” or “audit committee” used elsewhere in the auditing standards)
Mgmt: The person/people w/executive responsibility for the conduct of the entity’s opreations
Matters required to be communicated w/Those Charged with Governance
- The auditor’s responsibilities under GAAS
- The planned scope and timing of the audit
- Significant findings from the audit
- Uncorrected misstatements
- Other matters
Audit committee
A committee established by and among the BoD of a company for the purpose of overseeing the accounting and financial reporting processes of the company and audits of the financial statements of the company
If no such committee exists within the company, then the BoD is the audit committee in that situation
Critical accounting estimate
An accounting estimate where
- the nature of the estimate is material due to the levels of subjectivity and judgment necessary to account for highly uncertain matters or the susceptibility of such matters to change and
- the impact of estimate on financial conditions or operating performance is material
Critical Accounting policies and practices
A company’s accounting policies and practices that are both most important to the portrayal of the company’s financial conditions and results, and require mgmt’s most difficult, subjective, or complex judgments, often as a result of the need to make estimates about the effects of matters that are inherently uncertain
Internal control consists of 5 interrelated components
- Control environment (policies/procedures taht determine th eoverall control of the entity, “tone at the top”)
- Risk assessment - The policies and procedures involving the IDing, priortiziation, and analysis of relevant risks as a basis for managing those risks
- Information and communication systems
- Control activities - authorization, segregation of duties, performance reviews, info processing, and physical controls
- Monitoring - The policies/procedures involving the ongoing assessment of the quality of internal control effectiveness over time