Audit & Assurance Flashcards
Client acceptance & continuance -
4 considerations when determining acceptance or continuance of a prospective client
CAS 220 Quality Control for an Audit of Financial Statements and CSQC 1
- The integrity of the principal owners, key management and those charged with governance of the entity;
- Whether the engagement team is competent to perform the audit engagement and has the necessary capabilities, including time and resources;
- Whether the firm and the engagement team can comply with relevant ethical requirements; and
- Significant matters that have arisen during the current or previous audit engagement, and their implications for continuing the relationship.
Client acceptance & continuance -
5 potential factors to consider when assessing a client’s integrity
- What is the reputation of the client in the business community? What is the reputation of the client’s management, directors, and key stakeholders?
- What is the client’s attitude toward risk? How does the client manage risk?
- Will the client be co-operative in providing the practitioner with access to information?
- What is the client’s attitude toward the audit fee?
- In the case of a client acceptance decision, why does the potential client want to switch audit firms?
Client acceptance & continuance -
4 possible procedures to gauge the integrity of a prospective or existing client
- In the case of a client acceptance decision, communicate with the previous auditor, where applicable.
- Communicate with independent third parties, such as lawyers and creditors.
- Perform a background check of the client.
- Obtain and scan financial statements from prior periods
Client acceptance & continuance -
5 criteria for accepting a new engagement following the client risk assessment
CAS 210 & CSQC 1
- Is the financial reporting framework to be applied in the preparation of the financial statements appropriate? The practitioner must understand the client’s financial reporting framework and believe that the framework applied is acceptable.
- Threats to independence
- Is the practitioner able to mitigate or accept engagement risk factors
- Is there industry legislation or regulations impacting the financial reporting requirements of the client? The practitioner must understand this in order to demonstrate professional competence and due care.
- Has the client’s management agreed to its responsibilities in writing?
- Are there any known scope limitations that may restrict the practitioner’s ability to provide an opinion?
Client acceptance & continuance -
2 situations where a new client or an existing client should not be accepted, unless required by law to do so
CAS 210
- where management does not acknowledge its responsibilities in writing
- where the chosen financial reporting framework is not acceptable
Client acceptance & continuance -
6 terms of engagement laid out in the engagement letter
- the objective and scope of the audit of the financial statements
- the responsibilities of the practitioner
- the responsibilities of management
- identification of the applicable financial reporting framework for the preparation of the financial statements
- reference to the expected form and content of any reports to be issued by the practitioner and a statement that there may be circumstances in which a report may differ from its expected form and content
- the basis on which fees are computed and any billing arrangements
Materiality -
5 steps to determine overall materiality
- Identify the users of the financial statements
- Identify the users’ objectives
- Determine the base for materiality
- Identify the percentage threshold for materiality
- Perform normalizing adjustments and calculate overall materiality
Materiality -
Common bases for materiality
- Normalized income before tax - Entity that has shown positive net income over the long term
- Gross profit - Entity where there are fluctuations in profit after tax
- Sales - Not-for-profit or other entity that has minimal or variable profits
- Total assets - Property management company with value derived from asset valuations
- Total expenses - Not-for-profit or other entity that has minimal or variable profits
- Owner’s equity - Entity whose operating results are so poor that liquidity or solvency is a real concern
Materiality -
How to identify percentage threshold for materiality?
For-profit entities: • 3% to 7% of normalized income before tax • 1% to 3% of revenues or expenses • 1% to 3% of total assets • 3% to 5% of equity
Not-for-profit entities:
• 1% to 3% of revenues or expenses
• 1% to 3% of total assets
Materiality -
How to set performance materiality
60% - 75% of overall materiality, depending on RMM
PM is the figure that is used to design audit tests and determine sample sizes. It will ensure that more work is performed and will increase the probability of the auditor detecting material misstatements.
When the risk of a material misstatement is higher, a PM threshold at the lower end of the range is generally selected, increasing the auditor’s sensitivity to potential misstatements thus creating a larger safety cushion. Unlike overall materiality and specific materiality, PM is based on risk rather than user objectives
Materiality -
When to use specific materiality and how to calculate
SM is used for designing audit procedures that address specific risks and balances in sensitive audit areas. Specific materiality (SM) is set if there are balances or classes of transactions where an amount less than overall materiality would influence or change the decision of a known user. Similar to overall materiality, SM is based on user objectives and not on risk.
Establishing SM is based on professional judgment. The auditor can use a percentage of the accounts that the user is concerned about, as long as the amount is less than overall materiality. Alternatively, the auditor may simply use a reasonable
percentage of overall materiality in the calculation of SM.
Materiality -
When to use Specific Performance Materiality and how to calculate
60% - 75% of SM, based on RMM
SPM is required only when SM has been set for
an account or group of accounts. Specific performance materiality (SPM) is established by the auditor based on what is required to reduce the RMM to an appropriately low level. To be used when the RMM for a specific group of accounts (e.g. PPE) is set at high
Audit Risk -
Audit Risk calculation
AR = RMM x DR
AR = CR x IR x DR
Audit Risk -
RMM calculation
RMM = IR x CR
Audit Risk -
What is inherent risk?
Inherent risk (IR) is the likelihood that the financial statements are misstated before considering internal control. IR exists independent of the audit, is made up of business risks that prevent an entity from achieving its objectives or executing its strategies.
The auditor CANNOT control IR
Audit Risk -
What is Control Risk?
Control risk (CR) is the likelihood that misstatements due to inherent risk will not be prevented or detected and corrected by the client’s internal controls. Control risk is especially important for auditors because it drives the audit approach.
The auditor CANNOT control CR
Audit Risk -
What is Detection Risk?
Detection risk (DR) is the likelihood that the auditor will not detect existing misstatements in the financial statements. The auditor’s objective is to design procedures that will bring the detection risk to an acceptably low level to compensate for any RMM and thus bring the overall AR to an acceptably low level.
The auditor CAN control detection risk, unlike IR and CR
Audit Risk -
How to Inherent risk and Control risk influence Detection Risk?
Audit risk must always be assessed as low. Auditors will design their audit procedures to bring detection risk an acceptably low level that compensates for the level of RMM
If IR = high and CR = high, DR must be low to make AR low
If IR = low and CR = low, DR may be high and AR will still be low
Audit Risk -
7 inherent risk factors at OFSL
The below factors stated in reverse DECREASE risk
- Entity in poor financial health - if the entity may not be a going concern it will impact presentation of fin. stmts
- Significant market competition that is driving down prices and pressuring cost structures - increases bias to overstate earnings (revenue rec) in order to strengthen fin. stmts and maintain ability to raise financing
- Entity has never been audited before - increases risk opening balances are not reliable/accurate
- Upcoming purchase or sale of the entity - increases bias to make fin stmts appear more favourable, sale transaction will likely rely on audit report
- Imposition of new industry regulations - new users to fin stmts (regulatory agencies), pressure on mgmt to adhere to regulations
- IPO, new debt or bank covenants - increases bias to make fin stmts appear more favorable for new users
- Bonus structure based on key metrics - e.g. employee bonus based on net income. Increases bias to overstate earnings
Audit Risk -
8 control risk factors at OFSL
If the opposite of any points below is found (the company is strong in controls) it reduces the control risk
- Use of outdated GL system for financial reporting - risk that software does not reliably compile information
- Lack of segregation of duties - Staff have access to complete accounting cycle, increases risk of fraud & error going undetected
- Lack of internal audit - Mgmt & board may not be aware of control deficiencies
- Lack of computer controls (passwords, access restrictions, etc.) - system is susceptible to loss or data intrusion by unwanted parties
- Mgmt does not place adequate importance on controls - risk that controls are not in place or employees don’t follow control procedures
- Mgmt override of controls - increases fraud risk, sets the tone for disregard of controls
- Lack of policies - risk that employees will act inconsistently, lack of accountability
- Lack of system documentation - It may be difficul to ascertain system processes and controls. Employees may not be following complete system processes
Audit risk -
6 possible responses to address RMM at OFSL
- emphasizing professional skepticism to the audit team
- assigning more experienced staff to the audit team
- increasing supervision of the audit
- adding elements of unpredictability in audit procedures
- making changes to the nature, timing, and extent of the audit procedures
- if the entity has multiple locations/branches, increasing the number of locations/branches to be tested
Audit Risk -
3 factors that impact inherent risk at the assertion level
The below factors states in reverse decrease risk
- Industry - if technology rapidly changes (e.g. cellphone producer) inventory is easily made obsolete
- Nature of business
- if customers are concentrated in one industry with an economic downturn, receivables may not be collectable
- Type of inventory held (electronics become obsolete faster than lumber or steel) - Characteristics of an account balance or class of transaction
- inventory or fixed assets susceptible to theft
- significant estimate uncertainty
- complex transactions or calculations (e.g. derivatives, uncommon financial instruments that are difficult to account for)
- Unusual / non-routine transactions
Audit risk -
3 factors that impact control risk at the assertion level
The below factors in reverse decrease risk
- Lack of authorization controls over the credit approval process (e.g. credit checks) - increases risk that credit could be extended to unreliable customers, impacts valuation of A/R balances
- Lack of physical security controls over inventory - increases risk of loss/theft, may result in overstatement/understatement of inventory (existence / completion)
- Lack of segregation of duties over cash receipts - increases risk of misappropriation
Going concern -
How often must management assess going concern for public companies? (IFRS vs. ASPE)
Every 12 months for both standards (IAS 1, ASPE 1400)
Going concern -
How often must management assess going concern for public companies? (IFRS vs. ASPE)
Every 12 months for both standards (IAS 1, ASPE 1400)
Going concern -
Financial indicators
- A net liability or net current liability position
- Adverse key financial ratios
- Long-term debt that is maturing and cannot be repaid or refinanced
- Reliance on excessive short-term financing
- Inability to secure supplier credit or pay bills on time
- Negative operating cash flows
- Poor profitability and return ratios
- Substantial operating losses
- Negative retained earning