Audit Flashcards
T or F: The purpose of audit is to identify fraud.
F
Information risk
The risk that users and shareholders do not have the same information as managers.
Three levels of assurance/nonassurance
Assurance: most expensive.
Review: less expensive, faster, lower level of confidence.
Notice to Reader (NTR): 0 assurance. Done for CRA/bookkeeping but not accepted by banks.
Examples of audit of information other than the financial statements.
- mall stores may be audited if their rent is based on revenues.
- condo corporations
- more detailed level of materiality
Examples of audits for non financial information
- effectiveness of internal controls
- audit of controls of service organization
- compliance
- IT
- greehouse gas emissions
Who is responsible for the preparation of financial statements: auditor or management?
Management.
Who is responsible for the design, implementation, and maintenance of internal controls: auditor or management?
Management.
Auditors’ personal responsibilities (3)
- Professional competence and due care (education, experience)
- Compliance with ethical and independence requirements
- Professional skepticism and professional judgement
Auditors’ performance responsibilities
- Adequate planning and supervision
- Determining and applying materiality levels
- Identify and assess risks of material misstatement
- Obtain sufficient and appropriate evidence
- Reporting
Ethics vs. Professional Ethics
Ethics: moral principles/values (personal)
Professional ethics: morally permissible standards the profession has defined
CPA Code of Professional Conduct: Relevant section 200 rules
201: Maintenance of good reputation of the profession
202: Integrity, due care, objectivity
203: Professional competence
204: Indpendence
205: False and misleading documents and oral representations
206: Compliance with professional standards
208: Confidentiality of information
210: Conflicts of interest
211: Duty to report breaches of the CPA code
214: Fee quotations and billings
215: Contingent fees
217: Advertising, solicitation, endorsements
218: Retention of documentation and working papers
CPA Professional Conduct: Relevant section 300 rules
302: Communication with predecessor
303: Provision of client information
2 Types of Independence required
Independence in fact, independence in appearance
Threats to independence (5)
- Self-interest
- Advocacy
- Intimidation
- Self-review
- Familiarity
True or false: when a threat to independence is identified, the auditor must immediately be removed from the client’s case.
False. First, try to reduce or resolve the threat before withdrawing. Eg. Can the auditor sell their shares before conducting the audit?
Safeguards to independence created by the profession, legislation, or securities regulation
Education and training
Periodic rotation of senior members on the engagement
Safeguards to independence provided by the audit client
Qualified, independent audit committee
Corporate governance policies
Corporate policies and ethical codes
Safeguards to independence available within the audit firm’s procedures
Tone at the top
Firm policies and procedures
Rotation of senior personnel
Required consultation
True or False: CPA Canada sets the rules for auditing
False. PROVINCIAL self-regulating CPA boards.
Business failure vs. audit failure
Business failure: business cannot repay debts, perhaps due to poor mgmt, shift in demand, economic factors.
Audit failure: auditor issues an incorrect audit opinion.
Expectation gap
The difference between what users expect from the audit and what the audit actually provides.
Examples of incorrect expectations by users of an audit, which create an expectation gap.
- Auditors should accept primary responsibility for fin stmts.
- Auditors certify the fin. stmts.
- A clean opinion guarantees the accuracy of fin stmts.
- Auditors perform 100% verification.
- Auditors should give early warning about possible business failure
- Auditors are supposed to detect fraud.
3 Audit evidence decisions
NATURE: Which audit procedures to use?
EXTENT: Which items to select for testing?
TIMING: When to perform the procedures?
3 Categories of audit procedures
RISK ASSESSMENT: risk of material misstatement
TEST OF CONTROLS: evaluate effectiveness
SUBSTANTIVE: tests of details & analytical procedures
3 Characteristics of persuasive evidence
APPROPRIATE: relevant & reliable
SUFFICIENT
TIMELY
6 factors of evidence reliability
Evidence obtained directly by the auditor
Independence of source
Qualifications of source
Consistency from multiple sources
Effectiveness of client’s internal controls
Degree of objectivity