AUDIT 3 Flashcards
What is the difference between error and fraud?
State the auditor’s responsibility to detect errors and fraud.
Error is unintentional, fraud is intentional with the intent to deceive FS users by having misstatements or omissions.
The auditor must plan and perform the audit (using due care and professional skepticism) to provide reasonable assurance (not absolute) about whether the FS are free of material misstatement, whether due to errors or fraud.
Name two types of fraud.
- Fraudulent FR
2. Misappropriation of assets or defalcation
What fraud risk factors are generally present when fraud occurs?
These 3 conditions are typically present:
- Incentives/pressure
- Opportunity
- Rationalization/attitude
We identify these risk factors as a part of assessing risk of MM due to fraud.
When analyzing fraud risk, which four attributes should the auditor consider?
Type of risk, significance, likelihood, pervasiveness
Distinguish between the 3 types of MM
- Factual misstatements: There is no doubt it is wrong.
- Judgemental: Mgt. and the auditor have material differences on accounting estimates or the application of accounting principles.
- Projected misstatements: Represents the auditor’s best estimate of msistatements in populations, by projecting misstatements in an audit sample to the population from which the samples were drawn.
What is audit risk? List and define the two elements of audit risk.
Audit risk is the risk that the auditor may unknowingly fail to modify appropriately the opinion on FS that are materially misstated. It compromises:
- Risk of MM: The risk that the FS are wrong.
- Detection risk: Risk that the auditor will not detect a material misstatement that exists in a relevant assertion.
Provide some examples of factors that would increase inherent risk.
- Technological developments that make products obsolete
- A lack of working capital
- A decline in overall industry or economy
- High-Volume Transactions
- Complex transactions
- Amounts derived from estimates
2 components of risk of MM.
- Inherent risk: The susceptibility of a relevant assertion to a material misstatement assuming there are no related controls.
- Control Risk: The risk that a MM that could occur in a relevant assertion will not be prevented or detected (and corrected) on a timely basis by the entity’s internal control.
State the audit risk model, including the relationship of detection risk to substantive tests.
AR = RMM (IR x CR) x DR
There is an inverse relationship between RMM and DR. As the acceptable level of DR increases, the required assurance from substantive tests decreases. As the acceptable level of DR decreases, the assurance required from substantive testing must increase.
How may the auditor obtain more assurance from substantive procedures?
- Changing the nature of the substantive tests from less effective to more effective (reaching out directly to outside parties)
- Changing the extent (larger sample sizes)
- Changing the timing (Performing a year-end rather than interim)
What are the 3 ways an auditor should respond to assessed risk?
- An overall response, to address risk at the FS level.
- A response at the relevant assertion level
- A response to significant risks
What is a significant risk?
A significant risks is one that requires special audit consideration.
What are the documentation requirements surrounding the auditor’s assessment of risk?
- Discussion among the audit team
- Understanding of the entity and its environment, including its internal control.
- Assessment of the risks of MM
- Basis for the risk assessment
- Identified risks and related controls evaluated
What should be included in each step of the audit plan? (Casting our NET over the audit)
Set out the procedure in detail, specifying the nature, extent, and timing of the work to be performed and indicating a reference to the assertion under consideration.
How does the auditor’s assessment of the risk of MM affect substantive procedures?
- When it is high, it necessitates a greater level of assurance from substantive tests.
- When low, reduce the assurance required through substantive tests.
What are the two approaches an auditor may use to respond to identified risks at the relevant assertion level?
- Substantive approach: Only substantive tests are used, either because there are no effective controls, or because it would not be efficient to test the operating effectiveness of controls.
- Combined approach: Tests of the operating effectiveness of control and tests of substantive procedures are both used.
What are tests of controls performed in a financial statement audit?
When the auditor’s risk assessment is based on the assumption that controls are operating effectivelly OR when substantive procedures alone are insufficient, such as when there is a sig. amount of electronic processing.
What steps should the auditor perform in assessing and responding to risk?
- Obtain an understanding of the entity and its environment, including its internal control.
- Assess the risk of MM.
- Respond to the assessed level of risk by designing further audit procedures based on this assessment.
- Test internal controls to evaluate their operating effectiveness.
- Perform substantive tests.
- Evaluate the sufficiency and appropriateness of audit evidence obtained.
What are some common audit procedures related to contingencies, including pending litigation or possible future litigation?
- Obtaining and reviewing the response from a letter of inquiry to the client’s attorneys.
- Inquiring of management
- Reviewing minutes of meetings of stockholders, board of directors, and other executive members.
- Reviewing correspondence and invoices from lawyers.
- Reviewing contracts, loan agreements, leases, and correspondence from taxing authorities.
Define related parties.
These may include the reporting entity’s affiliates, principal owners, and management, as well as any members of their immediate families.
How can the auditor determine whether related parties existed?
- Evaluating the company’s procedures for identifying and accounting for related party transactions.
- Asking management
- Reviewing the reporting entity’s filings with the SEC
- Reviewing material transaction for related party evidence
- Reviewing prior year’s audit documentation or inquiring of the predecessor auditor.
What is the auditor’s primary concern with respect to related party transactions?
We are concerned with the proper disclosure of related party transactions in accordance with GAAP.
List the three types of audit procedures and tell why each is used.
- Risk assessment procedures: To obtain an understanding of the entity and its environment, including its internal control.
- Tests of controls: To evaluate the operating effectiveness of internal control in preventing or detecting material misstatements.
- Substantive procedures: To detect material misstatements in the financial statements.
When is audit evidence gathered during an audit?
When performing:
- Risk assessment procedures
- Tests of controls
- Substantive procedures
- Other audit procedures