AUD deck Flashcards
What is Management Responsible for in regards to the Financial Statements?
Preparation and Fair Presentation of Financial Statements in accordance with the Applicable Financial Reporting Framework
What is Management Responsible for in regards to Internal Control?
Internal Control Design, Implementation, Maintenance
What are the 4 paragraphs in the Audit Report for an Unmodified Opinion?
Introduction
Management’s Responsibility for the F/S
Auditor’s Responsibility
Opinion
What are the 5 paragraphs in the Audit Report for an Modified Opinion?
Introduction
Management’s Responsibility for F/S
Auditor’s Responsibility
Basis for (Modified) Opinion
(Modified) Opinion
In an Unmodified Opinion with Emphasis-of-Matter / Other-Matter sections, what is the order of the paragraphs?
Introduction
Management’s Responsibility for the F/S
Auditor’s Responsibility
Opinion
Emphasis-of-Matter
Other-Matter
What is Audit Sampling?
Taking part of a population- subjecting it to audit procedures- projecting results to a population
What are the characteristics of Statistical Sampling?
Based on formulas
Helps find an appropriate audit sample
Helps evaluate evidence obtained
Helps evaluate results and quantify Sampling Risk
What are the characteristics of Non-Statistical Sampling?
Based on human decision
Equally acceptable as Statistical Sampling
What are the characteristics of Substantive Tests?
Variables sampling
Probability proportionate to size sampling
What type of sampling are Control Tests?
Attribute Sampling
What is Sampling Risk?
Risk that your sample isn’t representative of population
Can happen even if audit is done properly
What is the risk of assessing Control Risk too high?
A risk of Control Testing - Auditor works to make Control Risk lower
More substantive tests - Sample overstates Control Risk- Leads to an under-reliance on internal control- over-testing- and overall audit inefficiency
Audit ends up being effective (correct result)- but you do more work
What is the risk of assessing Control Risk too low?
A risk of Control Testing - Complement to Confidence Level
Inverse relationship to Sample Size
Higher accepted risk of assessing Control Risk too low = Smaller Sample
Lower accepted risk of assessing Control Risk too low = Larger Sample
What are the risks if the auditor concludes controls are operating effectively based on the sample and Control Risk is set too low?
Leads to higher Detection Risk - Fewer substantive tests
Sample understates Control Risk
This error leads to over-reliance on internal control- under-testing- and overall audit ineffectiveness.
Does NOT necessarily mean that the Financial Statements are materially misstated - it does mean that if there is one- you are less likely to find it
What is the risk of Incorrect Acceptance?
A risk of Substantive Testing - Auditor accepts a balance as fairly stated- when in fact it is not fairly stated
Hurts audit effectiveness
Wrong conclusion reached
Efficient- but not effective
What is the risk of Incorrect Rejection?
A risk of Substantive Testing - Auditor rejects balance as fairly stated when in fact it is fairly stated
Hurts audit efficiency
Wrong recommendations given
Effective- but not efficient
What is Non-Sampling Risk?
Risk of human (auditor) missing an error
Also called exception- error or deviation.
How does Sampling Risk compare to Non-Sampling Risk?
Sampling Risk deals with the chance that your audit sample is flawed
Non-Sampling risk deals with the chance that your human decisions/conclusions are flawed
What is Attribute Sampling?
Looking at Control Procedures - Were invoices approved when paid?
Errors are stated in terms of %- not dollar amounts
For example- 5 invoices out of 100 were not properly paid. Error rate is 5%
Hint: If you see Error Rate on the Exam- they are referring to Attribute Sampling.
How do you determine if Control Procedures are operating properly or not operating properly?
Control Procedures are either operating properly or they are not operating properly - based on Error Rate and the tolerance you have for errors
What is the Tolerable Rate?
Error rate in population that you are willing to accept/tolerate
Inverse relationship to Sample Size
Higher Tolerable Rate = Smaller Sample
Lower Tolerable Rate = Larger Sample
If you’re willing to accept a higher probability that errors exist- there is less pressure on the sample
What is the Expected Population Error Rate?
What Error Rate are you expecting? - Judgment call- based on experience
Direct relationship to Sample Size
More errors = Larger Sample
Less errors = Smaller Sample
What is the basic premise of Attribute Sampling?
Attribute in the sample gives information about the entire audit population
Used to estimate Internal Control error rate
For what is the Expected Population Deviation (error) Rate used?
Used to determine initial level of Control Risk
What is the Allowable Risk of Over-reliance?
Risk of Assessing Control Risk too low
Gives you the Sampling Risk
When is Attribute sampling used?
Attribute sampling is only useful when there is documented evidence (an audit trail) to test
Use when the existence of an error needs to be verified or debunked
What is Classic Variable Sampling?
Testing for a dollar amount
Value in sample gives information about value in entire population.
What functions are used in conjunction with Classic Variable Sampling?
Mean Per Unit = Sample Average x Number in Population
Stratification - Decreases effect of variance in population and reduces sample size
What are the characteristics of Probability Proportionate to Size (PPS) sampling?
A form of Variable Sampling
Does NOT use Standard Deviation
Auditor focuses on a dollar amount
Larger or more valuable items get picked more often as part of the sample
What is Projected Misstatement?
Misstatement found in sample - have to project it to remainder of population
How does Probability Proportionate to Size (PPS) sampling compare to Classic Variables sampling?
PPS:
Easier to use- Results in a stratified (homogenous) sample- Results in a smaller sample size to audit- Easy to design
Classic Variables Sampling:
Easy to expand sample size- Selecting zero and negative balances easy
What factors affect sample size?
Tolerable rate for error - Inverse relationship with sample size
Risk of assessing Control Risk too low - Inverse relationship with sample size
Expected population error rate - Direct relationship with sample size
Population size does NOT affect the sample size - as population is larger- sample size doesn’t grow.
What is the formula for Audit Sampling?
SER + ASR < TER
SER = Sample Error Rate
ASR = Allowance for Sampling Risk
TER = Tolerable Error Rate
What is Allowance for Sampling Risk?
The amount that you add to the Sampling Error Rate to get some cushion for your sample.
As high as you think the population error rate could go based on experience.
What is the Tolerable Error Rate?
The amount of error rate that you can accept - If population error rate is less than TER- then accept the Control as effective
If population error rate is more than TER- do more testing to get SER lower or conclude control isn’t effective. Do more substantive testing
What are the steps to develop a sampling plan?
Determine Test Objective - for example- have sales shipments been billed?
Define Population and Deviation - take a sample of shipping document- trace forward to see if billed
Determine Sample Size based on tolerable rate for error- risk of assessing Control Risk too low- and expected population error rate.
Select Sampling Technique
After a Sampling Plan is developed- what are the steps in sampling?
Perform the Sampling Plan
Evaluate Results
Document Results
What is Systematic Sampling?
Every certain # of a population is selected
Population needs to be randomly ordered
Primary advantage is that population doesn’t require pre-numbering
What is Sequential Sampling?
Also called Stop or Go sampling
Each audit step determines the next step
What is Discovery Sampling?
Audit is testing an area that is so crucial that zero population errors can be tolerated
Any phony employees on payroll?
How does Block Sampling compare to other sampling methods?
Easy to implement- but is the worst method of sampling.
What is the primary duty of an auditor?
To provide users of financial information with REASONABLE ASSURANCE that the financial statements are not materially misstated.
What is the auditor’s responsibility for detecting theft or fraud?
Auditors are not responsible for detecting theft or fraud.
Instead- they are responsible for providing REASONABLE ASSURANCE that the financial statements are not materially misstated.
When should an auditor be hired in relation to the balance sheet date for optimum audit planning and efficiency?
The earlier the auditor is hired- the better for audit planning and efficiency.
When can audit procedures be performed at interim dates?
If Control Risk for the accounts and/or transactions is low- audit procedures can be performed at interim dates.
The auditor then reviews changes in the balances at year-end.
When can an auditor accept an engagement offered after the year is already closed?
The auditor can take the engagement if they are able to overcome the limitations of the engagement.
For what does an auditor use professional skepticism?
To plan the scope of the audit
To plan the objectives of the audit
How can analytical procedures be performed in audit planning?
The auditor can compare actual versus forecasted numbers.
What must an auditor have in order to discuss issues relating to a predecessor auditor’s work?
If issues relating to predecessor auditor’s work on previous Financial Statements come up during the current audit- Auditor must have client’s permission to discuss the issue.
What questions must an auditor ask with respect to procedures carried out by assistants?
Were they adequately performed? (Review the working papers)
Are the results consistent with the audit report?
How is audit strategy mapped out?
Auditor determines what the reporting objectives are.
Auditor determines the scope of the audit.
What are the foundations of Generally Accepted Audit Standards (GAAS)?
Materiality and Audit Risk
What are the General Standards for auditing?
Training and Proficiency (Education and Audit Experience)
Independence
Due Professional Care
(TIP)
Describe the key components of maintaining auditor independence.
Auditor must be independent in fact and appearance
Honesty
No direct financial interest
No indirect material financial interest
Describe Due Professional Care
Technical abilities mirror those held by peers in the profession Follow GAAS Standards Obtain a Reasonable Level of Assurance Maintain Reasonable Level of Skepticism Supervise Audit Staff Review judgment at every level
List the Standards of Field Work
Planning and Supervision
Internal Control
Evidence
(PIE)
List the Standards of Reporting
Consistency
Disclosures
Opinion
GAAP
(CDOG)
What should an auditor do prior to accepting an audit engagement?
Review the previous financial statements
Speak to third parties
Contact predecessor auditor to evaluate whether engagement should be accepted (must have client permission)
What questions should be asked by an auditor prior to taking an engagement?
Note: must have permission of client to contact predecessor auditor (no permission = no engagement)
Why the Auditor Change?
Any Serious Discussions with Audit Committee?
How is Management Integrity? Disagreements?
How was Internal Control?
Understand Industry or Be Willing to Learn
Consider Scope Limitation - Limited evidence available = no engagement
What should be included in an audit engagement agreement?
Note: must be written
Objectives of Engagement
Limitations of Engagement
Responsibilities of Management - Provide written assertions
Responsibilities of Auditor - Limited error/fraud responsibility
Expectations of Access to Records
Financial Statements (and Disclosures) are Management’s Responsibility
Compliance with Laws
Internal Control
What is management’s responsibility with respect to the financial statements?
Management is responsible for financial statements and adequacy of disclosures.
Presentation & Disclosure Existence (Tests Overstatements) Rights & Obligations Completeness (Tests Understatements) Valuation & Allocation
What is the purpose of the Audit Committee?
Responsible for Hiring Auditor
Oversees Internal Control
Must Agree with Auditor on: Responsibility of the Parties- Audit Fee- Timing of the Audit- Audit Plan
Acts as Liaison Between Auditor and the Board
Auditor Communicates Concerns about: Internal Control Deficiencies- Errors- Fraud- Illegal Activities
How is Audit Risk calculated?
Inherent Risk x Control Risk x Detection Risk
Risk that material mistakes- errors- omissions- or fraud will result in an inaccurate audit report
Based on Auditor Judgment
Measured in both Qualitative and Quantitative
Describe Control Risk
Risk that internal control will not detect error or fraud
Auditor cannot control this.
Describe Inherent Risk.
Which transactions have a higher level of risk?
Auditor cannot control
Describe Detection Risk.
Will the auditor fail to detect a material misstatement?
Auditor CAN control
Do testing at year-end
Increase substantive testing
Run more effective tests
What responses should an auditor take based on different levels of acceptable detection risk (DR)? What type of tests should be performed?
Less Acceptable DR = Run More Substantive Tests
More Acceptable DR = Run Less Substantive Tests
More Substantive Tests (DR down) = Less Audit Risk; (AR = IR x CR x DR)
Less Substantive Tests (DR up) = More Audit Risk; (AR = IR x CR x DR)
What are quantitative measurements versus non-quantitative measurements with respect to risk?
Quantitative Measurements - Inherent- Control- and Detection Risk can all be measured in terms of percentages
Non-Quantitative Measurements - Inherent- Control- and Detection Risk can all be measured in terms of acceptable ranges
Whose responsibility is it to FIND and PREVENT fraud?
It is Management’s responsibility.
What is the auditor’s responsibility with respect to fraud and illegal acts?
Assess the RISK that such things will lead to material misstatements
Design the audit to provide reasonable assurance against fraud- illegal acts that directly and materially affect the financial statements
Report ALL management fraud to the audit committee (minor fraud by low-level employees not reported to committee)
Perform required inquiries and procedures (management inquiries- analytical procedures- discussions with audit personnel about fraud)
What are the three factors that affect/influence fraud?
Fraud is born out of:
Rationalization
Incentive
Opportunity
(RIO)
What is the difference between fraud and errors?
Errors are unintentional- fraud is intentional.
What red flags may indicate higher risk in an audit?
Management compensation tied to stock
Aggressive financial forecasting
Former auditor disagreed with Management
Records not available for audit
Current audit procedures may need to be reconsidered if red flags exist.
Describe the characteristics of a Fraud Risk Factor.
Has been observed in similar situations
Does NOT necessarily mean that there is a material weakness in internal control
Leads to an auditor taking action
What does an examination of internal control accomplish with respect to illegal acts?
Internal control analysis can result in the conclusion that IC is weak- but probably won’t identify illegal acts