Audit Engagement Planning Flashcards
On what 4 things do minutes of board and committee meetings provide info?
- New developments
- Staff changes
- Diversification into new markets or products
- Major initiatives such as cost reduction programs
With respect to gathering information from the audit committee, what is the CAE’s responsibility?
To have regular meetings with chairman of audit committee
What are the 7 sources of external reports?
- External audit
- Specialists (e.g. I.T. consultants)
- Engineers
- H&S inspectors
- Insurance assessors
- Actuaries
- Occupational health practitioners
What information can be gathered from external reports?
- May indicate hi-level risks
- Evidence of fraud
- May warn of potentially serious situation
- May provide assurance
What information can be gathered from the organisation’s intranet?
- Policy information
- Structure charts
- Procedures
- Standards
What information can be gathered from the Internet when planning an audit engagement?
Key risks facing similar organisations
When gathering information, what should the organisation’s risk policy confirm?
- Management ethos
2. Policy for risk management
What is the purpose of policy documents?
To lay down a framework in which the organisation will achieve its objectives
How do policy documents help IA when gathering information?
They help IA to identify key processes
With respect to policy and procedure documents, for what does IA have authority?
To recommend and influence changes to policies and procedures
What information can be taken from the business plan?
- Most recent assessment of business area
- Strategy for next 12 months
- Forecast for next three to five years
Analytical reviews provide measures of d… and t… when compared to related facts
Deviation and trend
What are the two main questions asked in analytical review?
- Is variance within tolerance?
2. Are trends consistent with one another?
When due to conduct a fact-finding interview, it is important to undertake b… p…
Background preparation
When conducting a fact-finding interview, it is important never to enter the interview c…
Cold
When conducting a fact-finding interviewing, you should prepare a c… of areas to cover
Checklist
When preparing for a fact finding interview, you should list the t… of q… you will use
Types of questions
The two types of fact finding questions are…?
Open and closed
When conducting a fact finding interview, it is crucial to define the o… of the meeting
Objectives
During or after a fact finding interview, you should encourage the manager to what?
Walk through the processes and introduce you to key staff
What is the first stage in engagement planning?
Establish planned scope
When establishing the planned scope of an audit engagement, what information should you draw on?
- Conclusions on risk maturity
- The audit strategy
- Title of the assignment
- Info linking audit to responses requiring assurance
What is the second stage of audit engagement planning?
Assess the risk maturity of the unit being audited
When assessing risk maturity at the engagement level, the criteria used should be…
Consistent with those used at macro level
If actual risk maturity is greater than or equal to expected risk maturity, how should IA proceed?
Carry on as planned
If actual risk maturity is less than expected, how should IA proceed?
Report to management, with conclusion that responses in scope not working effectively
If risk maturity is less than expected, is it necessarily the end of the audit?
No. Can restrict scope to responses identified as effective