Audit Flashcards
What is Management Responsible for in regards to the Financial Statements?
Preparation and Fair Presentation of Financial Statements in accordance with the Applicable Financial Reporting Framework
What is Management Responsible for in regards to Internal Control?
Internal Control Design, Implementation, Maintenance
What are the headings in the Audit Report for an Unmodified Opinion?
(TIM-AA) Title; Introduction; Management Responsibility; Auditor Responsibility; Audit Opinion
What are the headings in the Audit Report for an Modified Opinion?
(TIMA-BA) Title; Introduction; Management Responsibility; Auditor Responsibility; Basis for (Modified) Opinion; Audit Opinion
In an Unmodified Opinion with Emphasis-of-Matter / Other-Matter sections, what is the order of the headings?
(TIM-AA EMO) Title; Introduction; Management Responsibility; Auditor Responsibility; Audit Opinion; Emphasis-of-Matter; Other-Matter
What are the requirements for referencing a Component Auditor in the Audit Report?
Component Financial Statements must be prepared using same Financial Reporting Framework as the Group Financial Statements; Component Auditor must have performed audit in accordance with GAAS or PCAOB Standards.
What type of engagements follow SSARS (Statements on Standards for Accounting and Review Services)?
Compilations and reviews (of non-issuers) are governed by SSARS
What must the Group Engagement Partner do if they assume responsibility for the Component Auditor’s work?
Perform additional audit procedures; Be involved in Component Auditors work; Perform Risk Assessment procedures; Assess Risk of Material Misstatement
Which clients can have compilation engagements?
Non-SEC (non-public) registrants only.
What is a Compilation?
Accountant puts together financial statements with information PROVIDED BY MANAGEMENT. No opinion is expressed and no assurances are given. Independence is not required.
What disclosures are required for Compilation engagements?
Disclosures not necessary must state that they are not included
What type of assurance is given in a Review engagement?
Reviews give limited assurance.
What procedures are required for Review engagements?
Analytical procedures are required for reviews. Compare results to documented predictions.
What is a Review engagement?
Financial statements are presented with no opinion expressed- and limited assurances are given. Independence is required for a review engagement.
What is a Forecast?
A prospective financial statement that uses normal circumstances. General and limited use allowed.
What is a Projection?
A prospective financial statement using hypothetical situations. Only limited use by the client is allowed.
What are the requirements for Agreed Upon Procedures?
Independence is required; Only limited use by the client is allowed.
What disclosures are required for remote likelihood of losses?
No disclosure required.
What disclosure is required for a probable loss contingency?
Accrue if estimable. Emphasis-of-Matter paragraph if not estimable.
What disclosure is made if a loss contingency is reasonably possible?
Auditor assesses need for Emphasis-of-Matter paragraph based on loss likelihood.
How does a very material GAAP issue affect the Audit Report?
Adverse Opinion is issued. Emphasis-of-Matter paragraph is added after Opinion paragraph.
How is a gain contingency reported?
Gain contingencies are not reported.
How does an immaterial GAAP issue affect the audit opinion?
It doesn’t. Opinion is Unmodified.
How do GAS standards compare to GAAS?
GAS is more strict than GAAS.
What is required under the Single Audit Act?
An audit performed under governmental auditing standards (GAS).
Required for entities receiving federal assistance >/= $500k
A report on internal control over compliance is required (disclaims opinion)
What is Statistical Sampling?
Auditors use mathematical formulae (not judgment) to quantify risk, determine sample size, and evaluate sample results
What is Non-Statistical Sampling?
Auditors use judgment to estimate risk, determine sample size, and evaluate sample results
What are Substantive Procedures?
Tests of details and analytical review procedures to substantiate account balances
(Ex: Variables & PPS sampling)
What is Sampling Risk?
Risk that your sample isn’t representative of population
Can happen even if audit is done properly
Conclusion may have been different had entire population been tested
What is the risk of Incorrect Acceptance?
A risk of Substantive Testing - Auditor accepts a balance as fairly stated- when in fact it is not fairly stated
Hurts audit effectiveness
Wrong conclusion reached
Efficient but not effective
What type of sampling are Control Tests?
Attribute Sampling
What is Non-Sampling Risk?
Risk of human (auditor) missing an error
What is Attribute Sampling?
Statistical sampling method used to estimate the rate of occurrence of a specific characteristic or attribute in a population
What is Variables Sampling?
Testing for a dollar amount
Value in sample gives information about value in entire population.
What is the risk of Incorrect Rejection?
A risk of Substantive Testing - Auditor rejects balance as fairly stated when in fact it is fairly stated
Hurts audit efficiency
Wrong recommendations given
Effective- but not efficient
What are the characteristics of Probability Proportionate to Size (PPS) sampling?
Sampling unit is an individual dollar amount. Once a dollar is selected the entire account containing that dollar is audited
Does NOT use Standard Deviation
Larger or more valuable items get picked more often as part of the sample
How does Probability Proportionate to Size (PPS) sampling compare to Classic Variables sampling?
PPS:
Easier to use- Results in a stratified (homogenous) sample- Results in a smaller sample size to audit- Easy to design
Classic Variables Sampling:
Easy to expand sample size- Selecting zero and negative balances easy
What is Allowance for Sampling Risk?
The amount that you add to the Sampling Error Rate to get some cushion for your sample. (gets you to the Upper Deviation rate)
As high as you think the population error rate could go based on experience.
What is Systematic Sampling?
Every Nth item of a population is selected
Population needs to be randomly ordered
Primary advantage is that population doesn’t require pre-numbering
What is Sequential Sampling?
Also called Stop or Go sampling
Allows auditor to stop an audit test if results have become clear
What functions are used in conjunction with Classic Variable Sampling?
Mean Per Unit = Sample Average x Number in Population
Stratification - Decreases effect of variance in population and reduces sample size
What is Projected Misstatement?
Misstatement found in sample - have to project it to remainder of population
What factors affect sample size?
Tolerable rate for error - Inverse relationship with sample size
Risk of assessing Control Risk too low - Inverse relationship with sample size
Expected population error rate - Direct relationship with sample size
Population size does NOT affect the sample size - as population is larger- sample size doesn’t grow.
After a Sampling Plan is developed- what are the steps in sampling?
Perform the Sampling Plan
Evaluate Results
Document Results
What is Discovery Sampling?
Audit is testing an area that is so crucial that zero population errors can be tolerated
Any phony employees on payroll?
What is the primary duty of an auditor?
To provide users of financial information with REASONABLE ASSURANCE that the financial statements are not materially misstated.
What is the auditor’s responsibility for detecting theft or fraud?
Auditors are not responsible for detecting theft or fraud.
Instead- they are responsible for providing REASONABLE ASSURANCE that the financial statements are not materially misstated.
How is Audit Risk calculated?
Inherent Risk x Control Risk x Detection Risk
Describe Control Risk
Risk that material misstatement will not be detected by the entity’s internal control
Exists independently of the audit
Describe Inherent Risk.
The susceptibility of an assertion to material misstatement (human error)
Exists independently of the audit
Describe Detection Risk.
Risk that the auditor will not detect a material misstatement
Auditor CAN control
Do testing at year-end
Increase substantive testing
Run more effective tests
When should an auditor be hired in relation to the balance sheet date for optimum audit planning and efficiency?
The earlier the auditor is hired- the better for audit planning and efficiency.
When can audit procedures be performed at interim dates?
If Control Risk for the accounts and/or transactions is low- audit procedures can be performed at interim dates.
The auditor then reviews changes in the balances at year-end.
What is the auditor’s responsibility with respect to fraud and illegal acts?
Assess the RISK that such things will lead to material misstatements
Design the audit to provide reasonable assurance against fraud- illegal acts that directly and materially affect the financial statements
Report ALL management fraud to the audit committee (minor fraud by low-level employees not reported to committee)
Perform required inquiries and procedures (management inquiries- analytical procedures- discussions with audit personnel about fraud)
What are the three factors that affect/influence fraud?
Rationalization
Incentive
Opportunity
(RIO)
When can an auditor accept an engagement offered after the year is already closed?
The auditor can take the engagement if they are able to overcome the limitations of the engagement.
How can analytical procedures be performed in audit planning?
The auditor can compare actual versus forecasted numbers.
What must an auditor have in order to discuss issues relating to a predecessor auditor’s work?
If issues relating to predecessor auditor’s work on previous Financial Statements come up during the current audit- Auditor must have client’s permission to discuss the issue.
What questions must an auditor ask with respect to procedures carried out by assistants?
Were they adequately performed? (Review the working papers)
Are the results consistent with the audit report?
Describe the key components of maintaining auditor independence.
Auditor must be independent in fact and appearance
Honesty
No direct financial interest
No indirect material financial interest
Describe Due Professional Care
Technical abilities mirror those held by peers in the profession
Follow GAAS Standards
Obtain a Reasonable Level of Assurance
Maintain Reasonable Level of Skepticism
Supervise Audit Staff
Review judgment at every level
What should an auditor do prior to accepting an audit engagement?
Review the previous financial statements
Speak to third parties
Contact predecessor auditor to evaluate whether engagement should be accepted (must have client permission)
What type of assurance is provided by Review services?
Reviews provide NEGATIVE (limited) assurance.
What questions should be asked by an auditor prior to taking an engagement?
Note: must have permission of client to contact predecessor auditor (no permission = no engagement)
Why the Auditor Change?
Any Serious Discussions with Audit Committee?
How is Management Integrity? Disagreements?
How was Internal Control?
Understand Industry or Be Willing to Learn
Consider Scope Limitation - Limited evidence available = no engagement
What should be included in an audit engagement agreement?
Note: must be written
Objectives of Engagement
Limitations of Engagement
Responsibilities of Management - Provide written assertions
Responsibilities of Auditor - Limited error/fraud responsibility
Expectations of Access to Records
Financial Statements (and Disclosures) are Management’s Responsibility
Compliance with Laws
Internal Control
What is management’s responsibility with respect to the financial statements?
Management is responsible for financial statements and adequacy of disclosures.
Presentation & Disclosure
Existence (Tests Overstatements)
Rights & Obligations
Completeness (Tests Understatements)
Valuation & Allocation
What is the purpose of the Audit Committee?
Responsible for Hiring Auditor
Oversees Internal Control
Must Agree with Auditor on: Responsibility of the Parties- Audit Fee- Timing of the Audit- Audit Plan
Acts as Liaison Between Auditor and the Board
Auditor Communicates Concerns about: Internal Control Deficiencies- Errors- Fraud- Illegal Activities
What responses should an auditor take based on different levels of acceptable detection risk (DR)? What type of tests should be performed?
Less Acceptable DR = Run More Substantive Tests
More Acceptable DR = Run Less Substantive Tests
More Substantive Tests (DR down) = Less Audit Risk; (AR = IR x CR x DR)
Less Substantive Tests (DR up) = More Audit Risk; (AR = IR x CR x DR)
Whose responsibility is it to FIND and PREVENT fraud?
It is Management’s responsibility.
What is the difference between fraud and errors?
Errors are unintentional- fraud is intentional.
What red flags may indicate higher risk in an audit?
Management compensation tied to stock
Aggressive financial forecasting
Former auditor disagreed with Management
Records not available for audit
Current audit procedures may need to be reconsidered if red flags exist.
What is the purpose of adjusting audit procedures in light of fraud risk factors identified during an audit?
Strives to make audit engagement procedures less patterned and predictable
Re-evaluates management’s application of accounting procedures
Finds and assigns audit personnel with relevant skills in this area
What was the effect of the SOX Act of 2002?
Created PCAOB
Designates Officer responsibility for internal control
Must disclose significant internal control weaknesses to auditor and audit committee
Must disclose any level of fraud discovered by employees with internal control responsibilities
What is the Hierarchy of Authoritative Literature?
- Statements on Auditing Standards (SAS)
- Auditing Interpretations- AICPA Guides & SOPs
- Industry Articles (no authority)
What quality control activities are undertaken by CPA firms with audit practices?
Firm Leadership exhibits quality and leads by example and sets the tone for the organization
Firm should Monitor and document that its policies and procedures are being followed
Firm should have Relevant Ethical Requirements
Acceptance and continuance of client engagements should continue to be evaluated for client integrity- auditor competency- and legality
Firm should have competent and ethical personnel
Firm engagements are performed- supervised- and reviewed in accordance with professional standards and regulations.