Audit Evidence Flashcards
Audit Evidence
All the information gathered by the auditor through observation, inquiry, analysis, or examination, to form basis of auditor’s opinion.
Can be in documentary or electronic form
Auditor gathers and analyzes evidence at almost every step in the audit process (not in last step: report)
Step 1: Engagement letter
Step 2: perform risk assessment procedures (observation, inquiry, inspection, analytical procedures); identitfy high degree of inherent risk; comparing ratios, etc.
Step 3: Evaluate RMM in given assertions (adjust NET of audit procedures)
Step 4: Design and perform audit procedures to address RMM
Test of controls: observation, inquiry, reinspection, re-perform transactions
Substantive tests: analytical procedures and tests of details
Purpose is to test managemetn’s assertions about: account balances transactions, totals, disclosures
Evidence must be from both client records and outside corroboration
Substantive tests are required for all material assertions
Step 5: Evaluate evidence
Evaluating Audit Evidence
GAAS requires that audit evidence be both:
SUFFICIENT - enough for a basis of opinion; consider RMM and quality of evidence
APPROPRIATE - both relevant (related to audit purpose and assertion being tested) and reliable (persuasive, but not conclusive beyond all doubt; consider materiality and inherent risk)
Levels of Reliability
Generated Circulated Example
- Direct Auditor Knowledge
- Externally Externally Bank Cutoff Statement; A/R Confirm
- Externally Internally Bank Statement
- Internally Externally Cancelled Check
- Internally Externally Client PO, receiving report
Most Reliable/Persuasive (top) to Least Reliable/Persuasive (bottom)
Confirmation Types
Positive Confirmation - respond whether or not they agree with the balance
Used: small number of large accounts; weak internal controls; a lot of disputed accounts
-Must follow up if no customer reply
Negative Confirmation - only respond if they disagree with balance; can’t infer information from a non-response
Used: large number of small accounts; strong internal controls: few disputed accounts
Reliability of Evidence
Reliability refers to:
Source of the evidence
Nature of the evidence
Generally, evidence is more reliable if it’s:
- from outside sources
- obtained directly by auditor
- an original document
Use Internal Auditor
Can use if objective and competant
Can ask to help with test of controls and substantive tests
Legal Letter
Letter of audit inquiry to client’s attorney (Level 2, similar to A/R confirmation; mailed by auditor)
Returned directly to auditor
Management is primary source for information about litigation and claims
ILLLC (I Love Legal Letter Confirmations)
Identify client
List of any litigation
Legal opinion on all outcomes
Limitations on attorney’s response (attorney/client priviledge, ex.)
Contingencies are communcation to client
Legal Letter: Attorney Refusal
Scope limitation
Precludes unmodified opinion (except for; qualified; disclaim)
Legal Letter: Client Refusal
Client imposed scope limitation
generally considered very material (disclaim; withdraw from engagement)
Litigation, Claims, and Assessments (audit procedures used to locate unrecorded)
RRRRR
Review the internal controls to record litigation claims and assessments
Request a list of litigation claims and assessments
Read attorney correspondence and bills
Read minutes and interim F/S and disclosures
Request management representation letter
Management Rep Letter
From management to the auditor requested at the end of the audit.
Last piece of audit evidence
-Engagement letter is first
Required under GAAS for unmodified opinion
If client refuses to give auditor MRL, it is a client imposed scope limitation (disclaim; withdraw engagement)
Management Rep Letter: Purpose
Purpose:
Confirm all representations made by management to auditor
Reduce chance of misunderstanding
Management Rep Letter: Sample
F/S are presented fairly in accordance with US GAAP or other framework
Mgmt responsible for design and implementation of internal controls (prevention and detection of fraud)
States any noncompliance with laws or regulations
All requested data has been provided
All transactions have been recorded
All required disclosures have been made in F/S (related party transactions, subsequent events, litigations, claims & assessments
Documents continuing appropriateness of managements’ representations
Signed by top management
Dated the date of the audit report (never after)
Management Rep Letter: Does not reduce
Does not reduce:
The scope of the audit
The risk of material misstatements
Auditor’s responsibility to detect errors and/or fraud in the F/S
Management Assertions
Evidence is gathered and analyzed to test management assertions
Design audit procedures to address the RMM in particular assertions
F/S are really just a set of assertions: account balances, transactions, presentation and disclosures