Audit and Assurance Deck Flashcards
What are the threats to independence and objectivity?
Self-interest, Self-review, Management, Advocacy, Intimidation, Familiarity
What are the four steps of assurance?
Acceptance, planning, evidence, conclusion and reporting.
What are the steps of acceptance in assurance?
Law, Ethics, Risk analysis, Resources.
What are the steps of Planning in assurance?
Understand the entity, Materiality, Analytical procedures, Risk assessment
Why might receivables go up?
Generous payment, significantly grown, bad debt.
What are the steps of evidence in assurance?
Address risks, obtain sufficient and appropriate evidence, to support opinion.
What are the steps of Conclusion and reporting in Assurance?
Completion tasks, Report opinion, Other reporting.
What is a good layout for audit reporting questions?
What is the problem. How serious, What opinion would you give, what is the impact on report?
When are things material?
By size or by nature.
What can you use as a base for materiality?
Revenue, Profit before tax, gross assets.
What would be materiality if using revenue?
0.5 - 1%
What would be materiality if using profit before tax?
5 - 10%
What would be materiality when using gross assets?
1 - 2%
What things are material by nature?
Related party transactions, Anything that impacts a key point in accounts (e.g. changes from profit to loss), Misleading disclosure.
In exam, the material limits?
Don’t really exist, if bigger than 0.5, 5 or 1 for relevant area then material.
When talking about the problem for an audit?
Comment on things like misstatement, lack of evidence, uncertainty.
When talking about the seriousness of a problem in audit?
Talk about materiality guidelines, consider if material by nature?
The audit committee is?
A subsection of the board of directors
The auditor should ensure that those charged with governance are provided with the engagement letter which includes:
The form communications will take, appropriate contact persons, explanation that only matters that come to auditors attention will be communicated.
The responsibility of the auditor is to?
Form an opinion.
Matters to be communicated by auditor are?
Responsibilities of auditor, overview of scope, significant findings, for listed clients - factors relating to independence.
Matters relating to independence to be communicated for listed clients are?
Confirmation the audit team have complied with ethics, details of safeguards applied, declaration of matters that may have bearing on independence (disclosure of non audit fees)
Effective communication is?
Timely, appropriate extent form and frequency, fulfils expectations, includes management comments, repeats unresolved or relevant previous year comments, disclaimer for third partied (not to rely on us).
An auditors report will also include?
A cover letter and appendix setting out deficiencies, consequences and recommendations.
Set out your comments on internal controls deficiencies?
In a table, One column for consequences and one for recommendations.
Consequences of deficiencies may be:
Risk of non-compliance with laws and regulations, penalties on timing. cost to business, cash, goodwill, revenue, assets. Lead to potential misstatements. How could it affect FS? E.g. theft give overstatement of inventory.
Recommendations for deficiencies need…
to be specific, commercially feasible, or if control in place but not followed - training, recommunication, segregation of duties, disciplinary action, regular stock counts.
The direction you do a test in (from assets to list or vice versa) measures?
Either completeness or existence depending on the direction.
An unmodified audit report is if?
You found no or immaterial issues. Unmodified report with unmodified opinion. ISA700 Clean audit report.
The three statements in a clean audit report:
True and fair, accounts properly prepared in accordance with standards, directors report consistent with financial statements.
A significant uncertainty in audit report is?
Uncertainty e.g. around going concern, Must be disclosed in accounts, if adequate issue modified report with unmodified opinion, include “emphasis of matter” paragraph. If inadequate do same as with disagreement in a material issue.
A material issue in an audit report can be (two types) ?
A material disagreement (e.g. accounting treatment) or Limitation of scope (e.g. can’t collect sufficient and appropriate evidence for material balance).
The two descriptors for material misstatements are:
“Material but not pervasive” and “Material and pervasive” (not common at all).
For a material but not pervasive material issue in a report?
Issue a modified report with a modified opinion. Say it is qualified except for. (Problem not big enough to chuck in bin).
For a material and pervasive material issue due to a disagreement?
For a disagreement (e.g. incorrect basis of accounts) issue a modified report with modified opinion, adverse opinion.
For a material and pervasive material issue due to a limitation of scope?
e.g. no evidence. Give a modified report with a modified opinion. (A “Disclaimer”).
If there is an issue in the annual report?
Often misleading statement is in “Chairman’s report” (not part of accounts). Issue a modified report with an unmodified opinion, with “other matters” paragraph - e.g. your report about company goings on at the beginning is misleading.
Audit reporting exam technique, report consists of:
Introduction, seriousness, Impact on report.
The intro of the audit report contains:
Brief summary of issue, disagreement, limitation of scope, significant uncertainty.
The seriousness section of your audit report contains:
If material (=error / base[like revenue] compare this to base materiality percentage), If pervasive
The impact on report section of your audit report contains?
Modified report? Modified opinion? What is the opinion?
The emphasis of matter paragraph comes?
After the main opinion.
Disclaimers, adverse opinions and “except for” opinions come?
Before the main opinion.
Consignment stock is?
Inventory that is yours but held somewhere else.
The three types of audit report are?
No or immaterial issues, Significant uncertainty or Material issue.
When doing the audit report questions?
State the issue, state if material and how, state conclusion.
Reasonable assurance is?
High level of assurance, positive opinion, e.g. audit of financial information.
Limited assurance is?
Moderate level of assurance, negative opinion, e.g. review of financial information.
The objectives of an auditor are?
To obtain reasonable assurance, report on financial statements, communicate with those charged with governance.
A small private company is exempt from audit if it satisfies two of?
Maximum 50 employees, turnover maximum ?6.5m, gross assets max ?3.26m (if exempt must state this in FS)
Subsidiary companies will not require audits if?
Their parent companies guarantee their liabilities.
Companies that must have an audit even if they fit rules of being exempt are?
Insurance companies, Banks, Plc., Where shareholder owning at least 10% of shares asks for audit.
A statutory audit (reports to, scope determined by, reporting about, level of assurance, circulation of)
The members, Companies act / ISAs / audit regulations, opinion on truth fairness / properly prepared / directors report, reasonable, in public domain.
A non-statutory assurance (reports to, scope determined by, reporting about, level of assurance, circulation of)
Management, Terms of engagement / ISAEs or ISREs , Arrive at conclusion depending on work performed, usually limited, likely to be restricted.
The difference between tests of control and substantive tests is?
Tests of control test the system which generates the number, substantive tests test the actual number in the accounts.
ISA 240 relates to?
The auditors responsibilities relating to fraud in an audit of financial statements. Fraudulent financial reporting or misappropriation of assets.
The triangle indicators of fraud risk are?
Opportunity, Attitude and rationalisation, incentives and pressure.
In trying to identify fraud you should be?
performing a fraud risk assessment, be professionally sceptic, discuss with engagement team, respond to fraud risk, consider implications on rest of audit.
If fraud is suspected or discovered then ?
Report to management.
If fraud has caused material misstatement or uncertainty in financial statements ?
Report to shareholders.
If there is a duty or right to disclose fraud findings then?
Report to third parties.
ISA 250 concerns?
Consideration of Laws and Regulations in an Audit of Financial Statements sets out the respective responsibilities of management and auditor with respect to compliance, and procedures for the auditor to follow.
In identifying misstatement caused by non-compliance?
Perform a risk assessment (How should the client be complying with the laws), Obtain evidence of compliance and written confirmations of known non-compliance, if non-compliance then document and discuss with management.
If the auditor wishes to report non-compliance but managers are involved then?
Report to the audit committee, or if not seek legal advice.
Suspicions of bribery must be reported to?
The national crime agency (NCA)
Bribery may often be covered up as?
Hospitality expenses or donations.
The focus of bribery prevention policies is?
Top level culture, risk assessment, communication to staff, monitoring and review.
Bribery (3 forms) is?
Being bribed, offering a bribe, bribing a foreign public official.
The Sarbanes Oxley Act states?.
CEOs must attest to veracity of FS, more disclosure of amendments to FS in auditing, stricter auditor independence, the public company accounting oversight board (PCAOB) can inspect audit files.
A related party is a party that (transactions must be)?
Might be expected to have undue influence on the company being audited. Relevant transactions must be disclosed.
Audit procedures regarding related parties:
Get list, test transactions, review relevant minutes, review bank confirmations and investment transactions, confirm disclosures are made, obtain confirmation of complete disclosures.
Examples of money laundering?
Making illegal earnings seem legitimate, tax evasion, saving costs by non-compliance, oversea offences that are criminal in the UK.
Verbs involved with money laundering
Using, acquiring, retaining, controlling, concealing, disguising, converting, transferring, removing from UK.
An accountant must report to the MLRO if?
they have reasonable grounds to believe there is money laundering. (MLRO then reports to NCA if a report is necessary).
Money laundering offences include?
Failure to report, Failure to provide suitable training to staff, tipping off money launderer. 14 years is most jail time.
Bribery offences can still be reported to ?
MLRO
The expectations gap is the gap between?
The expectations of the users of the reports and the firms responsibilities regarding the reports.
To narrow the expectations gap auditors can?
Improve the audit report to set out responsibilities, include responsibilities in engagement letter, liaise with audit committees.
Audit failure can be because (some examples)?
Failure to assess audit risk, to respond to the assessed audit risk, to recognise or respond to threats to objectivity or to respond to situations where the auditor isn’t competent.
Overall regulation of auditing is driven by?
the IFAC (ICAEW is a member).
How does the IFAC play a role?
The IFAC and the forum of firms nominate members of the International auditing and assurance standards board (IAASB) which issue standards.
Standards issued by the IAASB include?
ISAs - audits, ISAEs - assurance engagements not on historic financial information, ISREs assurance engagements historic, ISRRSs - non assurance, ISQCs - all assurance engagements.
The FRC board comprises of?
The codes and standards committee, The executive committee (overseas work), The conduct committee (review of quality)
The FRC issues:
Amended ISAs, Ethical standards for Auditors, Practice notes, Bulletins,
Current issues facing the auditing profession are:
Mandatory re-tendering after 10 years, Change of auditor at least every 20 years, A ban on providing non-audit services to public interest entities.
Harmonisation is?
aligning global standards so that companies are audited in a comparable way regardless of location,
IAStadards were adopted by all EU listed companies for periods commencing?
on or after 1 January 2005.
In March 2012 the FRC issued a briefing paper about?
The difficulty to engage in professional scepticism when working closely with a company.
Auditors get ethical guidance from?
IFAC code of ethics, ICAEW code of ethics, FRC ethical standards for auditors.
The fundamental ethical principals are?
Professional competence and due care, professional behaviour, Confidentiality, Objectivity, Integrity.
If non-audit work is carried out that is audit related, threats are?
Usually insignificant when it is similar work to the audit work,
If non-audit work is carried out that is internal audit, threats and safeguards
Self-review and management. Separate teams, independent partner review, don’t perform if audit will rely on IA work.
If non-audit work is carried out that is IT related, threats and safeguards
Self review, Management (if management can’t control IT, few available safeguards). Separate teams, Independent partner review, Don’t perform if audit will rely on IT.
If non-audit work is carried out that is Tax related, threats and safeguards
Self-interest, Management, Advocacy, Self-review, Separate teams, review by ind. Partner, don’t promote tax structures if doubt as to accounting treatment, contingent fees not allowed, don’t act as advocate, don’t make material tax calculations (listed companies).
If non-audit work is carried out that is Recruitment related, threats and safeguards
Familiarity, Management. (Listed) Don’t provide recruitment services in relation to key management, (unlisted) can provide advice if partner/staff not in audit.
If non-audit work is carried out that is Remuneration related, threats and safeguards
Familiarity, Management. Relating to directors/key management. Familiarity is unsurmountable, decline audit,
If non-audit work is carried out that is Transaction related, threats and safeguards
Management, Self-review. Separate teams, due diligence work reviewed by ind transactions partner, ind partner review of audit.
If non-audit work is carried out that is accounting related, threats and safeguards
Self-review, management. No accounting to listed client unless emergency, to non-listed client only if technical and mechanical, no judgment, separate teams, reviewed by partner of both work.
If non-audit work is carried out that is valuation related, threats and safeguards
Self-review, management. Separate teams, ind partner review, don’t do valuation if it would be material (listed) and also involves subjectivity (non-listed).
The main response to management threat is?
prohibiting work that involves taking management decisions, and ensuring informed management is in place for engagements that are taken on
The main response to self-review threat is?
separate teams and independent partner review.
ESPASE is?
The ES provisions available for small entities,
ES4 is the requirement for ?. (and ESPASE?)
external ind quality review if 10%
ES5 is the requirement for ?. (and ESPASE?)
Restriction of provisions of non-audit services. ESPASE restrictions waved provided there is: informed management, regular cold review or audit, disclosure of non-audit services.
ES2 is the requirement for ?. (and ESPASE?)
Where audit partner joins client, firm should resign, can’t accept again for 2 years. ESPASE firm can continue provided: no threat to integrity independence objectivity, disclosure made in audit report.
Audit quality I measured by the?
FRC monitoring committee, ICAEW practice assurance scheme.
The FRC promotes audit quality by?
issuing ISAs, ethical standards and briefings. Monitoring compliance through reviews of audit firms. Overseeing professional accountancy bodies, investigating misconduct.
The professional standard ISQC 1?
Quality Control for Firms and Perform Audits and Reviews of Financial Statements and other Assurance and Related Services Engagements.
The professional standard ISA 220?
Quality Control for an Audit of Financial Statements
Things the auditor should consider include:
Management integrity, competence time and resources, compliance with ethical standards, significant matters (even from previous audits).
Details of the engagement quality control review:
“Hot review” - independent evaluation of independence, significant judgments made and conclusions in audit opinion. Before opinion issues. For listed/high risk clients.
Details of the monitoring review?
“Cold review”, ensure compliance with the firms procedures and ISAs, ethical standards etc. identify improvement areas. Ongoing basis, done for a sample of audit files.
On quality control failure the ICAEW can issue?
Fines, disciplinary action, withdrawal of firm’s authorisation to carry out audits.
What three lists of rules govern all Chartered Accountants assurance engagements?
Internal Standards on Quality Control, ICAEW Code of ethics, Terms of Engagement
Name 3 things issued by the FRC out of: International Standards on Auditing, Ethical standards for Auditors, Practice Notes, International Standards on Auditing, International Standards on Quality Control.
Ethical Standards for Auditors, Practice Notes, International Standards on Auditing.
Fraud caused by employees should be reported to…
Client management. (Management Fraud goes to MLRO).
Why are related party transactions high risk?
Extensive and complex structure range, information systems may be ineffective at identifying related party transactions.
Under Ethical Standards 1 which of these does not need to be communicated for non-listed clients: Threats to Objectivity and Independence, Safeguards adopted and why they are effective, Details of non-audit services and fees charged, Overall assessment of safeguards and threats.
Details of non-audit services and fees charged.
What things would an Ethics Partner be responsible for?
The adequacy of the firm’s policies and procedures relating to integrity, objectivity and independence, Communicating the firm’s policies and procedures relating to integrity, objectivity and independence to partners and staff, Providing guidance to individual partners with a view to achieving a consistent approach to the application of Ethical Standards.
Bob, the audit manager on Mortimer Ltd, has resigned to take up work as the Finance Director of Mortimer Ltd. What action should be taken by the audit firm?
The audit firm should consider the composition of the audit team
Dhruv was previously the audit engagement partner on Hallowell plc, a listed company, for five years and stood down from the role two years ago so…
he cannot return to the role for another three years.
In the case of a senior manager who has worked on a listed client for eight years…
Introduce an additional review of the work done by the manager by the audit engagement partner and Carry out an enhanced engagement quality control review
Patricia and Co regularly receives 8% of its gross practice income from the audit of Karen plc, a listed company, and 7% of its gross practice income from the audit of Linda Ltd, a private company. You should…
Implement safeguards in respect of Karen plc and take no action with respect to Linda Ltd
According to Ethical Standard 5 what is Informed management?
Informed management requires a member of management to be designated to receive the results of non-audit services and make any necessary judgements, and the member of management designated to receive the results of non-audit services to be capable of making independent judgements on the basis of the information provided.
A liability cap is…
something which limits the liability to companies on statutory audits.
Facts about Liability caps…
Only cover one financial year, need to be approved by shareholders. Enforceable if fair and reasonable, based on auditors share of responsibility, set monetary amount or formula.
The most popular kind of liability for liability caps is…
proportional liability. The auditor is not the sole one responsible.
Audit firms must carry professional indemnity insurance, this is…
any settlements of claims against company will be settled by insurer. Also legal fees and partner time and damage to reputation.
If a low fee is charged for audit work there might be a threat of…
Self-interest. Can they really ensure they complete all work sufficiently. Quality review.
Things to consider before accepting an audit engagement…
Risk analysis, ethical barriers, resources, legal issues.
Risk analysis before an engagement helps to determine…
Risk of client, audit fee, areas that will need more work.
When prospective auditors contact existing auditors they must…
Ask client permission, contact about relevant information accepting appointment. (Response is similar, request, state no matters to be aware of or set out matters).
Auditors can be appointed by directors for…
Casual vacancies (e.g. When the existing auditor resigns), or first auditor between incorporation and AGM.
Auditors can be appointed by members when…
Ordinary resolution (>50%), at AGM. Appointment within 28 days after latest date for financial statement filing (or existing auditor reappointed).
Secretary of state may appoint auditor when…
no auditor has been appointed in time (rare).
When removing an auditor…
Ordinary resolution at general meeting, The auditor must submit a statement of circumstances to the company’s registered office. Auditor has right to prepare written representation for members arguing case and has right to notice.
If an auditor is going to resign, they must:
Submit notice to company’s registered office, prepare statement of circumstances to office (for shareholders and creditors), can request a general meeting (can be 4 weeks after called) to explain and written representation to be circulated. Then company must notify Registrar of companies, and anyone entitled to a copy.
If the auditor simply decides not to be reappointed the auditor must still…
prepare statement of circumstances or confirm in writing that there are no circumstances members should know of.
The notice and resolution needed for auditor removal…
Ordinary notice with special resolution.
ISA 210 concerns…
Agreeing the terms of the Audit engagement,
The engagement letter should cover…
Objective, scope, management responsibilities, auditors responsibilities, form and content of communications, right to access, expectation of management to provide written representations.
On a recurring engagement a letter…
May not net to be sent, but perhaps if terms need to be revised or if client needs to be reminded.
The audit strategy should cover…
Materiality, Risk, Audit Approach, Timing, team, budgets, deadlines.
ISA 300 concerns…
Planning an audit of financial statements.
An item is material if…
Its omission or misstatement could influence the economic decisions of users.
ISA 315 concerns…
Identifying and assessing risks of material misstatement.
Analytical procedures are used in these three key stages…
Planning, evidence, overall review.
Limitations to analytical procedures at the planning stage are…
Need sound knowledge of entity, high level activity and requires staff, needs reliable source data, division of data needed.
To perform analytical procedures you must…
Gain an understanding of the business, develop expectation, compare actual to expectation.
The audit risk (equation) is…
Inherent risk x control risk x detection risk.
Entity risk is…
Inherent risk and control risk.
An audit risk associated with a desire to increase overdraft is…
Could be a sign of financial difficulties.
An audit risk associated with 3-5 year contracts is…
Revenue recognition may be complicated.
An audit risk associated with Property that has been revalued is…
Revaluation is subjective which increases ROMM, Revaluation may have been done to relate favourable impression for bank, they may withdraw funding if they realise it was based on misstated balance.
An audit risk associated with an increase in Revenue is…
Overstated revenue (recognised too early) or expansion due to borrowing.
An audit risk associated with an increase in profit margin is…
No indication in change in business so overstated revenue? Unrecorded purchases?
An audit risk associated with an increase of receivables days…
Overstatement of receivables? Irrecoverable debts? Sales recorded early?
An audit risk associated with a fall in payables days is…
Due to unrecorded liabilities?
An audit risk associated with a loss on sale of vehicles is…
Inappropriate asset lives being used, PPE overstated, going concern risk if companies have been forced to sell goods at undervalue.
If there is an increase in GPM and payables days this may be due to…
Unrecorded liabilities.
Risk and impact of auditing a new firm is…
Opening balances audited by previous firm - additional testing required. Lack of knowledge - Increase planning time.
Risk and impact of auditing foreign currency purchases are…
Purchases and inventory may be incorrectly translated - test rates that were used, re-perform.
Risk and impact of profit related bonuses…
Increases the likelihood of manipulation of results - need increased awareness when testing subjective areas.
Risk and impact of testing overdraft renewals…
Breach of loan covenant may lead to bank withdrawing overdraft, threaten going concern - consider errors in light of impact on loan covenant and planning materiality.
A significant risk is …
an identified risk that requires special attention.