Audit 5 Flashcards
if one out 4 out time sheet missing
would be a deficiency
Tell management
control risk ; moderate
of the 4 employees , 2 did not have signed code of conducts
defiency
tell management
moderate risk
assistant controller did not disclosed investment fv
signifcant weakness
high risk
talk to managment and governace
a/r recs not reconcile
material weakness
high risk
tell managment and board.
woud be an adverse opinion
An engagement to audit the internal control of nonissuer will generally
be more extensive in scope the assessment of control risk made during f/s audit
what is the responsibility of auditor in a nonissurer with multiple units on an integrated audit
he will test control over specific (sample) risk at business units that are material to the com. f/s. would not test all business risk
would an auditor obtain understanding of potential misstatements in an integrated audit using evaluation on IT risk and controls approaching other than the top down apporach
no. top down approach : f/s, level of control , during test on accounts and transactions, is a selected control for integrated audit not necessarlity for IT control
which of the following is not a role of the risk assessment in an integrated audit of non issuer
Does not conclude on the effectiveness of a given control. this happens after the risk assessment.
A cpa is auditing an issurer is he required to audit both i/c and f/s under pcaob
yes
when planning an audit of the effectiness of i/c in an integrative audit for non issurer what is he least likey to consider
evaluating the operating effectiveness on control . this is done after the planning stage
what condition is ncessary for an auditor to accept an engagement to audit and report on non issuerer ic over financial reporting
management must give a written assessment of effectiveness of i/c
is the scope , procedure and purpose test on controls in audit of i/c for non issuer compared to i/c for f/s different
yes. on all those catagories due to more exetnsive on NET auditi procedures.
in an audit of an issurer must both management and auditor must assess report on i/c
yes under pcaob
what is the top down apporach to select controls to test for integrated audit
Top down approach;
- evaluate the overall risks at the f/s level
- consideration of control at the enity level
- evaluation of accounts, disclosures and assertions for which there is a reasonable possibility of material misstatment.
would inadequate design of IT controls not an considered a material weakness
no. it is a designe deficiency weakness
ineffective oversight by governance , fraud committed by senior managment, an d audit id material misstatement are material weaknesses
if a auditor does not recieve written representation letter from management to acknowledge effective i/c would auditor consider
disclaimer due to scope limits with non letter and withdrawal
what are types of testing the design of effective controls and what are testing effecting ops. controls in integrated audit
testing the design of effective controls; inquiry, observation and inspections.
test of effective ops control ; recalculate and reproformance.
would an auditor obtain sufficient evidence to support an opinion about the effectiveness of each individual control or the overall control
the overall control
along with more evidence on greater risk of failure
unpredictable testing
id i/c deviations on the assessment of risk associated with the control
when a service accounting organization is part of the i/c for clients the auditor would
test entity relevant controls over the activities or service organization that the are operating effectively.
when will an auditor of an issuers issue a qualified opinion on i/c
neither scopes limitation of are for disclaimer in i/c
and material weaking are for adverse opinion in i/c
if enitty does not correct weakness and note it would not be cost beneficial the auditor would
disclaim an opinion of cost benefit statement by client.
when there is an interelationship between financial statement audit and i/c audit do auditor only consider material weakness in i/c
no. in both
A5 m2 mcqs; if a co. has took care the the i/c material weaknesses. what is required under SOX
the company must put in writing how it resolved weakness and if accounting was hired add there name in document.
will stock holders get a communciatio of material weakness by pcaob standards
no.
what are the communication protocal for auditors on i/c
communicate all deficiency in i/c to management, and significant deficientcy and material weakness to management and audit committee
is the auditor responsible for subsequent event after the report dates for integrated audit
no. but if subsequent event happen up to the date then he must inquire and take appropriate action.
Are attestation SSAE of a management assertion are the as a review SSARS
No.
what should and should not an auditor do when a subsequent event have before report date
should ; inquire of managment
examine documentation of the event
obtain written representatio letter from mangement on effecitveness of i/c
should not ‘ perform test of control specifically related to subsequent event.
does auditor i/c give an opinion of i/c and management assessment of of i/c
yes to i/c opinion.
no to managment assessment.
is there any restricted language in the report on control deficiency and material weakness
no restricted language.
A5-m3: what statement would best serve management assertions of consistency in a MD&A presentation
nonfinancial information data have been accurately derived from related financial record. MDA must same the same thing as financie reporting.
Is SSAE used in expert witness testifying and compiliation
No SSAE not use in testifying as far as comiling that is SSAR not SSAE.
when should accountant’s attest engagemetn report be restricted to specificed parties
When information is limited to number of aparties
whne reporting directly on subjet matter and a WRITTEN assertion has not been provided: no documention restrict user then.
When rporting on a AUP engagment
No restriicted
reporting on an asserton about the subject matter instead of reporting directly on the subject matter. there is no resticted requirment.
when is SSAE required
Providing assurance on a speciific financial information that is not audited f/s.
negative information can be used in an attestation on a
review of management assertion attestaion such as compiling ; SSAR