Audit 3 Flashcards
M1 Fraud Risk
With respect to fraud, the auditor should perform the following procedures called DORE. this is a during the pre audit meeting -Discuss fraud risk with engagement personnel Auditors are required to have a discussion of the potential material misstatement that may result from fraud. the cpa engagment team have will a fraud brainwashing meeting related to upcoming audit of client. things discussed: auditors must have a professional skepticism, which means having a questioning mind and critically analyzing evidence. auditors must remember that fraud is possible in every client and that critical evaluation of evidence is necessary. -Obtain information to identify specific fraud risks. Auditors are required to inquire of entity personnel regarding their view of fraud risk. Ask question such as *does mnmgt have knowledge of fraud *aware of any fraud alledged * Id fraud risk or any specific fraud risk * does mangmt give its view on business practices and fraud to emplyees * program prevent,fraud governance *does governacet have knowledge of fraud *aware of any fraud alledged * Id fraud risk or any specific fraud risk * does govenr oversign * program prevent,fraud * high turnover *history violation *new revenue standards something new = high risk -Assess fraud Risk and develop an appropriate response There is a presumption in every audit that two risks exists: 1. Improper revenue recognition 2. Management override of controls Response with specific audit procedures: Accounts identified as potential fraud risks should have the , nature, extent and timing altered accordingly. *for example, even tough the new revenue standards was considered not to impair the financial stability of the entity, *it is still important to obtain more persuasive evidence (i.e. evaluate more selections) to determine whether the new standard has been implemented correctly. *implementation of new standard may provide an opportunity to committ and conceal fraudulent activities. Perfect environment for fraud risks 1.Pressure/incentives 2. rationalizaton/attitude 3. opportunity Reponse to improper revenue recognittion *required analytical procedures on revenue during the planning to help identify improper revenue recognition. *review accounting estimates for bias *review accounting JEs and other adjustments to the financials *request that client provide all je done throughout the year *review for unusual JEs. such as dr. FA anc cr. inventory of sales charges to RE noncash a/r credits near y-e that are reverse at beg ye. - Evaluate audit evidence regarding fraud *s/b aleart for fraud throughout the entire audit *analytical procedures will be performed at the end of the audit. be alert of any new indications of fraud risk that were not previously Id. these new risks s/s discussed with the entire engagement team and this may result in teh need to perform additional procedures.
Who should a audit bring to the the attention immaterial fraud
upper level managment.
If audit brings fraud matters to the attention of governance and governance refuse to take action due to the immateriality. auditor should reconsidered reliance placed on the
managment rep letter: should considered the act in noncompliance with laws and regulation to other aspects of the audit about the reliability of the rep letter.
If a auditor gave an unmodified opinion on a audit that had material misstatement due to fraud is he correct
yes. as long as he met the responsibility of audit planning and performed the audit appropriately in specific risk assessment. of fraud.
Is it the auditor responsibilty to disclose fraud to third partys
no
what are the characteristics of heightening auditors concern for risk of material misstatement due to fraud
-management had frequent disputes with aduitors on accounting mattes. -over complex organization structure involving unusual lines of authority
are fraud evaluation of accounting est.and application of accouting principles hard to detect
yes. because they involved a high degree of management judgement and subjectiveness.
would lack of independent check be considered a way to missappropriate assests
yes.
would managment interested n maintaining high earnings be considered a fraud risk factor
yes. due to pressure and bonuses
what would be considered the highest risk of material missstatement arising from the missappropriation of assest
a larger number of bearer bonds on hand: not registered and no records kept on hand of owners or transactions. usually use in laundering, tax evasion, and concealed business transactions.
what conversation should be discussed about material misstatement on fraud with the engagment team
audit documention. the risk of material misstatement should be an on going conversaton and not stop at planning.
If an auditor is given a photo copy of an invoice that is not the invoice in question by the client staff due to it was lost. what should the auditor do
reevaluate the risk of fraud and design alternate testing for the related transaction because it was not reliable.
If an auditor id. risk of material misstatement due to fraud of inventory, he will and will not
will: designing appropriate audit procedures: observe count and be unannounced; request inventory be counted at a date close to the end of reporting period; assigning more experience personnel to the engagement. will not: request managment observe inventory.
If a client is growing and the admin staff is lean what is factor would the audit test
Opportunity: expansion of co.= more opportunties for fraud. Other risk factor rational. attitude incentive /presssure Not a risk factor: inadequate orgnization structure
what are the 4 id. and attribution of risk
-types of risk: does it involve fradulent or missappropriation -significance- can it lead to material misstatement -likelihood- how likely is the risk to happen -Pervassive- does it effect f/s as a whole or specific amount, transaction or assertions.
Is there a presumption that risk exist
yes. There is a presumption in every audit that two risks exists: 1. Improper revenue recognition 2. Management override of controls
A3 M1 Sim 1 Type of fraud and fraud factors
Types of fraud Fraudulent financial reporting: misrepresenting or lying of the facts: 2-If management ignores competative market where company inventory is obsolete but management does not adjust sales inf financials. Misappropriation of assets: stealing/theft: 3- payroll manager cuts payroll check of ghost employees 4- If a Inventory manager is soley responsbile for purchase inventory and has oral agreement for a 8% sales commission and he purchase inventory above market. Fraud factors: Incentive/pressure: competition, achieve target 2- market competion would cause pressure to due obsolete inventory Attitudes/rationalization:an excuse why you deserve something 3- Payroll upset because his salary to lown 4- No segregation of duties. Inventory manager is sole authorizer of purchasing. Opportunity: try to find a way to committ fraud due to lack of i/c. management override Audit procedure to detect misstatement due to fraud: 2-use inventory turnover ratio to see how long to convert inventory to sales 3- observe distribution of payroll checks. 4- review prices of simular products
A3 M1 Sim 2: Identify Fraud Risk Factors
- Significant bank account in tax-haven jurisdiction for which there are no clear business justification: Opportunity for fraudulent fin. Reporting. (not stealing) 5. Large amount of cash on hand or processed: opportunity and misappropriation of assets 6. ineffective BOD or audit committee over internal control: opportunity and fraudulent fin. Reporting. No specific asset discuss to believe misappropriation. 7. inadequate physical safeguard over cash, investment and inventory: opportunity and misappropriate 8. New account, statury or regulatory requirement: incentive/ pressure. Fraud fin. reporting 9. Excessive interest by management in maintaining or increasing the entity’s stock price: rationale/attitudes fraudulent fin. Reporting. Management is excessive on entitys stock price is a attitude and fraudulent fin. Reporting. 10.Management has significant financial interest in the entity: incentive/pressure fraudulent fin. Reporting 11. inadequate monitoring of controls, including automated controls and controls over interim financial reporting: opportunity and fraudulent financial rep. 12. Management failing to correct know significant defeciencies on a timely basis: rationale.attitude and fraudulent fin. Reporting.
MCQs: A3 m2: an auditor assess control risk to
along with inherent risk to determine the level of detection risk need by auditor.
inherent risk helps an auditor evaluate
the suscepbility of f/s assertions to a material misstatement assuming there are no related control
When an auditor increases the assessed level of control risk because certain control activities were determined to be ineffective , what would the auditor most likely increase.
an auditor would increase control risk would be a decrease detection risk due to increasing extent of detail in control risk.
As detection risk increase would have an audit changes it
timing (net) from y-e to interim date due to increase reduce control and inherent risk.
if assess levels of fraud risk is high, than auditor should attempt to reduce detection risk. is that true
yes. because of control and inherent risks are high this mean high audit procedures on nature, extent and timing will then lead to lower detection because we have hiring risk procedures in place
if substantive testing is done before balance sheet date this means
internal control were done in a period of interim date due to less risk of f/s. if more risk than y-e.
inherent and control risks different from detect risk due to
inherent and control and independent of f/s where as detection is related to audit procedures and can be change at auditor
When control risk is assessed at max level then
the assessment should be documented and auditor should make decision on perform more substantive procedures
Which of the following as RMM increase Detection descrease and Substantive procedures increase
correct
Audit risk is recognized on audit standard as
The auditor obtains reasonable assurance about whether the f/s are free of material misstatments
As the acceptable level of detection risk decrease substantive test increase
true
What is a definition of control risk
the risk that a material misstatement will not be prevented or detected on a timely basis by the clients i/c
engagement of control risk on mDA
risk that material misstateement in the mda presentation will not be prevented i a timely manner.
if audit team conclude high risk on inventory who should they do
review client control procedures over safegaurding assets and perform inventory count at the last day of the current year.
which of the follwing types of risk increase when auditor performs analytic audit procedures of financial statement accounts at interim date
high detection because interim suggest low inherent and control risk
which of the following matters relating to entitys ops would likely be considered a inherent risk
entering into derivitives because they would be considered hedges.
Detection risks differ from control and inherent due to
detection is part of audit procedure and can be changed at auditors descretion.
would a low level of control risk offset a high level of inherent risk
yes. because they are multiplied together to make up Rmm
A3 m3 Risks at the Assertion level
- 12-31- y1: risk high= more work = less detection = more substance testing = net: more testing for year 1= nature when due to interim rollfwd was wrong. tested 25 a/r balance= extent - at year end = time. Year 2 12-31-y2: low risk = low work = more detection = more sustance testing on NET low interim test at 9/30/ y2 and will rollfwd the 12/31/y2 because tested at interim 9/30/y2. 2. If risks assertion levels are the same for yr 1 and yr 2 then do the same confirm testing 30, sames y-e 12/31 an same roll fwd or no rollfwd procedures. 3. 12/31/y1 low risk and high risk at 12/31/y2 confirm by sampling 15 yr1. for yr 2 sample 30 high risk = more work = low detection= more subtance testing of NET at 12/31/ year 2. no rollfwd because testing at year end 12/31/y2.
An audit client sells 15 to 20 units annually. and a large part of sales are done in the last month of fiscal year with no material change in 5 yrs. what approach would auditor use on audit proceduring concerning timing
audit should inspect sells in the last month of the fiscal year and review sales contracts to determine if sales posted the proper period.
After performing risk assessments procedures, auditor decides not to test controls. he most likely decide to
because it is ineffecient to perform test control. time spent in substance testing (risk assessment ) is greater than risk control.
in assessing control risk an auditor would use what techniques
-inquiry of appropriate entity personnel -inspection of documents and reports indicating performance of p&p -observation of applications of p&p -reperformance of appl. of p&p
when auditors risk assessment is based on effective ops, auditor is most likely involved
iD specific i/c relevant to specific assertion of account bal. specific transaction or disclosures
What must an auditor have understanding of i/c and what he should not have understanding
must have i/c understanding; -id types of potential misstatement that can occur -factors that can affect RMM -ascertain whether i/c have been implemented -test control effect i/c
not required i/c understanding; -operating effectiveness of i/c this is evaluated later for those controls on which auditors plan rely
What is a risk assessment on control and what is not
Risk assessment of control -test of control activities p&p -understanding of accounting system and control envornment -evaluate the effectiveness of i/c with test controls
not risk assessment of control; perform test on detail transactions to detect material misstatement;
would an auditor perform substantive tests on accounts that have very little activity from year to year
no. he perform test before b/s date or at interim date.
if there are numerous trans of equipment during the year that auditors plan to asses as control low risk. what is he usually performing
Test of control at low risk = low work = high detect = low subtance test. test controls and limited test of current year transactions.
evidence auditor would gather on i/c ops would be
clients records on documenting the use of EDP programs
example of substance NET testing
letters of representation of corroborating inventory pricing ,attorneys responses to auditor inquires, confirming and verifying a/r account balances
if performing substan test will take less time than performing contest would auditor do it
yes. want to be effecient and move to substan test.
if an environment that is highly automated but is impracticle and impossible to reduce detection ; high risk = more work what is the alternative to reach low detections
perform test controls to support lower level of assessed control risk.
what is not trues about performing test controls to support lower level control risk
inquiry alone will support conclusion of test control risk. not true
performing test of controls involves
auditors risk assessment is based on the effectiveness of operation of controls and seeing if they are highly effective
is the external auditors personnel with appropriate levels of capabilities and competence a factor in handling increase risk on clients audit
yes.
what is the objective of detail trans performed in a test of controls
to evaluate whether i/c operated effectively test controls= operated effectively
if client failed to maintain copies of procedure manual what should auditor do
Document the understanding of i/c to get an understanding of risk
what is and is not required as documentation under GAAS
what is; - written audit plan procedures -client engagement summarizing timing and detail of audit plan -indication that accounting record agree with reconcile f/s not required’ =basis for auditors decision not to perform test of controls and obtaining understanding of i/c
Before applying principal substantive tests to the detail of accounts at an interim data prior to b/s date, auditor should;
consider whether the amounts of the y-e balances selected for interim testing are reasonably predictable.
if substantive test for acct id no exceptions, the auditor would not perform account y-e test on the
test of details for the entire year. less work less risk
which are necessary for f/s audit
analytical procedures risk assessment procedures nET not needed test of the ops effectivenet
if an auditor would use substantive testing to evaluate specific relevant assertion and find that operating test controls are not effective would just use substantive
yes.
auditor design of details to ensure sufficient audit evidence to support
the auditors plan level of assurance at the relevant assertation level.
providing more supervision of an audit to assess risks of material misstatement in f/s is example of
an overall response to assess material misstatement
what would effect an auditors consideration of clients i/c and what would not
would; nET -extent to which test provide evidence about assertion -expected deviation rate from control ; nature -how frequent the control is performed; time not : the amount of time to budget to complete in engagement.
what is the best way to obtain audit evidence of segregation of duties
to observe employee doing their jobs.
why would an auditor explain why is reducing test for detail
analytic procedures have revealed no ususal or unexpected results.
an auditor may decide not to test control related to cetrtain assertions because
he believe evaluating the effective on controls is inefficient
what would not represent a significant risks requiring special consideration
different accounting principles used than industry competitors
what is an inaccurate statement as it relates to significant risk
the impact of controls is a perceived risk i that is a deciding level of significance