Audit Evidence - Concepts and Standards Flashcards
Identify the 4 considerations that determine the effectiveness and efficiency of analytical procedures used for substantive purposes.
- Nature of the assertion;
- Plausibility and predictability of the relationship;
- Availability and reliability of data; and
- Precision of the expectation.
Define analytical procedures.
Evaluations of financial information through analysis of plausible relationships among both financial and non-financial data.
List the 2 broad categories of substantive procedures.
- Tests of details
- Substantive analytical procedures
What is the only component of the audit risk model that the auditor controls?
Detection risk.
How might the auditor’s decisions about the nature of audit procedures lower detection risk?
Choosing audit procedures that provide a stronger basis for conclusions will lower detection risk.
How might the auditor’s decisions about the timing of audit procedures lower detection risk?
Moving the auditor’s important substantive procedures away from an interim date (before year-end) to year-end will lower detection risk.
How might the auditor’s decisions about the extent of audit procedures lower detection risk?
Increasing the sample sizes for audit testing will lower detection risk.
Identify the 2 categories of substantive tests of details.
- Tests of Ending Balances
- Tests of Transactions
Identify the 3 purposes that might be served by performing analytical procedures.
- Audit planning (required).
- As a form of substantive evidence (not required).
- A final review (required).
What is meant by “sufficient” and “appropriate” when “Sufficient Appropriate Audit Evidence” is mentioned?
- “Sufficient” refers to the quantity of evidence that is required; and
- “Appropriate” refers to the quality of the evidence involved, in terms of “relevance” and “reliability.”
List the four assertions about presentation and disclosure (footnotes).
- Occurrence and Rights and Obligations
- Completeness
- Classification and Understandability
- Accuracy and valuation
List the five assertions about classes of transactions and events during the period (income statement).
- Accuracy
- Occurrence
- Completeness
- Cutoff
- Classification
List the four assertions about account balances at the end of the period (balance sheet).
- Existence
- Completeness
- Rights and obligations
- Valuation and allocation
List the three broad categories of assertions under AICPA professional standards.
- Account balances at the end of the period (there are 4 assertions related to the balance sheet)
- Classes of transactions and events during the period (there are 5 assertions related to the income statement)
- Presentation and disclosure (there are 4 assertions related to the footnotes applicable to any of the financial statements)
Define assertion.
Implicit or explicit statements of fact by management that are associated with the entity’s financial statements.
Define audit evidence.
All the information used by the auditor in arriving at the conclusions on which the audit opinion is based. Audit evidence includes the information contained in the accounting records underlying the financial statements and other information.
Describe what the valuation or allocation assertion means.
It means that the dollar amounts attributed to the elements of the company’s financial statements are appropriate and in accordance with GAAP (or other applicable financial reporting framework).
Describe what the rights and obligations assertion means.
It means that the company has all the rights associated with its reported assets and all the obligations associated with its reported liabilities; any limitations on such rights or obligations must be appropriately disclosed.
Describe what the completeness assertion means.
It means that there are no omissions of transactions that should have been reported.
Describe what the existence (occurrence) assertion means.
It means that the recorded transactions are valid economic events of the period in which they are reported, i.e., the recorded transactions/items are properly recorded.
What are the AICPA’s guidelines to rank the reliability of audit evidence?
- Direct personal knowledge by the auditor is the most reliable audit evidence.
- Evidence obtained from an independent outside source is the next most reliable.
- Evidence obtained from the entity under effective internal control is next.
- Documentary evidence is more reliable than verbal responses to inquiries (and original documents are more reliable than faxes and photocopies).
What are substantive procedures?
Procedures performed to detect material misstatements at the relevant assertion level; these consist of tests of details and substantive analytical procedures.
What are tests of control?
Procedures performed to obtain information about the operating effectiveness of controls in preventing or detecting and correcting material misstatements at the relevant assertion level.
What are risk assessment procedures?
Procedures performed to obtain an understanding of the entity and its environment, including internal control, to assess the risk of material misstatement, whether due to fraud or error.
List the three categories of audit procedures.
- Risk assessment procedures
- Tests of control
- Substantive procedures
What matters must be documented by the auditor in connection with the evaluation of misstatements?
- The threshold for determining what is viewed as clearly trivial.
- All misstatements accumulated during the audit (and whether they have been corrected).
- The auditor’s conclusion as to whether any uncorrected misstatements are material (individually or in the aggregate), and the basis for that conclusion.
Describe the auditor’s responsibility to accumulate misstatements identified during the audit.
The auditor should accumulate identified misstatements, except for those that are clearly trivial. (Clearly trivial means clearly inconsequential.)
What is meant by the term projected misstatements?
The auditor’s best estimate of misstatements in populations suggested by audit sampling. (The AICPA formerly used the term likely error for this concept.)
What is meant by the term judgmental misstatements?
Differences arising from the judgments of management that the auditor considers unreasonable; or the selection of accounting policies deemed inappropriate.
What is meant by the term factual misstatements?
Misstatements for which there is no doubt.
Define misstatement.
A difference between the amount, classification, presentation, or disclosure of a reported financial statement item and that which is required for the item to be in accordance with the applicable reporting framework.
List 3 purposes of audit documentation.
- Provides the principal support for the auditor’s report
- Documents the auditor’s compliance with GAAS
- Assists in controlling the audit engagement
What is contained in the permanent file of the audit documentation?
The permanent file contains documentation of matters having ongoing audit significance.
Define report release date.
The date the auditor grants the entity permission to use the auditor’s report; (that date must be documented).
What is meant by the term documentation completion date under the AICPA and PCAOB standards, respectively.
- Under AICPA standards (applicable to audits of “non-issuers”) - The auditor should complete the assembly of the final audit file no later than 60 days after the “report release date.”
- Under PCAOB standards (applicable to audits of “issuers”) - The auditor should complete the assembly of the final audit file no later than 45 days after the “report release date.”
What changes can the auditor make to the audit documentation after the documentation completion date?
- The auditor must not delete audit documentation before the end of the retention period;
- The auditor may add to the documentation but must document any materials added, by whom, when, the reasons for the change, and the effect on the auditor’s conclusions.
What are the audit documentation retention requirements under the AICPA and PCAOB standards, respectively.
- Under AICPA standards (applicable to audits of “non-issuers”) - The audit documentation should be retained for at least 5 years from the report release date.
- Under PCAOB standards (applicable to audits of “issuers”) - The audit documentation should be retained for at least 7 years from the report release date.
List 2 alternative procedures for a nonresponse to a positive confirmation (usually performed after a second request was sent, but no response was received).
- Verify subsequent cash receipts
- Examine underlying documents for apparent validity
When might negative confirmations be justified?
- The financial statement item involves a large number of small (immaterial) accounts;
- Control risk is low (that is, internal control is viewed as effective);
- Recipients are expected to pay attention to the request.
What is meant by the term negative confirmation?
A response is only requested in the event the confirming party disagrees with the identified balance. A non-response is viewed as indicating that party’s agreement.
What is meant by the term positive confirmation?
A response is requested whether or not the confirming party agrees with the entity’s recorded amount. A non-response indicates a “loose end” that must be resolved.
List the 2 general types of confirmations
- Positive
- Negative
List some audit procedures that might be used to assess accounting estimates.
- Inquire of management to understand how the estimate was developed;
- Review and test management processes;
- Develop an independent expectation for comparison to the entity’s estimate;
- Review subsequent events for additional evidence.
What is the auditor’s basic responsibility when auditing accounting estimates?
Evaluate the reasonableness (and the adequacy of related disclosures) of any significant accounting estimates relative to GAAP or other applicable financial reporting framework.
What is meant by the term estimation uncertainty?
The susceptibility of an accounting estimate and related disclosures to an inherent lack of precision in its measurement. (The risks of material misstatement increase when there is high estimation uncertainty.)
What further substantive procedures should the auditor perform in responding to significant risks?
The auditor should evaluate: (1) how management addressed estimation uncertainty in making the estimate; (2) whether management’s significant assumptions are reasonable; and (3) whether management has the intent and ability to carry out specific actions, as relevant.
What matters should the auditor document in connection with accounting estimates?
- The basis for the auditor’s conclusions about the reasonableness of accounting estimates resulting in significant risks and their disclosure; and
- Any indications of possible management bias.
Identify 3 factors affecting the nature of estimation uncertainty.
The nature of estimation uncertainty varies with:
- The nature of the accounting estimate;
- The extent to which there is an accepted method (or model) to be used; and
- The subjectivity of any assumptions or the degree of judgment involved.
What is meant by the term unobservable inputs?
An entity’s own judgments about what assumptions market participants would use. (Estimation uncertainty increases when the fair value estimates are based on unobservable inputs instead of observable inputs.)
What is meant by the term observable inputs?
Assumptions that market participants would use in pricing an asset or liability based on market data from sources independent of the reporting entity.
Define “fair value.”
The amount at which the asset could be bought or sold in a current transaction between willing parties, that is, other than in a forced or liquidation sale.
What is the auditor’s basic responsibility regarding Fair Value Measurement and Disclosures?
The auditor must obtain sufficient appropriate audit evidence to provide reasonable assurance that fair value measurements and disclosures comply with GAAP. The auditor should also determine that the methods used to determine fair value are consistently and appropriately applied.
What is the best evidence of fair value?
Published price quotations in an active market.
Under what circumstances might an auditor NOT be required to obtain a letter from the entity’s legal counsel?
If the entity had no litigation, claims, or assessments having financial reporting relevance and, accordingly, did not engage legal counsel. (In such a case, the management representations letter would include a statement to that effect.)
What is the effect of a limitation in the lawyer’s response to the letter of inquiry on the audit report?
This would be considered a scope limitation sufficient to prevent an unqualified opinion and likely resulting in a disclaimer of opinion.
What is meant by the term unasserted claims?
Audited entity has exposure to litigation but no one has yet filed a lawsuit or announced an intention to sue.
What is the auditor’s purpose in obtaining a lawyer’s letter?
To corroborate management’s responses to the auditor’s inquiries about litigation-related issues.
What is meant by the term asserted claim?
Also referred to as “pending or threatened litigation” - a claim that has already been filed (pending) or when the other party has announced an intention to sue (threatened).
What is the lawyer’s responsibility for communicating omissions of asserted and unasserted claims that should have been included in the letter of inquiry?
- Regarding asserted claims - the lawyer’s letter should inform the auditor directly of such an omission from the letter of inquiry;
- Regarding unasserted claims - the lawyer should inform management of such an omission and encourage management to discuss the matter with the auditor (but the lawyer will not inform the auditor directly).
List the two types of letters involved in the communication with the entity’s lawyers.
- Letter of inquiry - management’s letter to the entity’s lawyer(s) (as requested by the auditor) asking the lawyer to provide litigation-related information directly to the auditor;
- Lawyer’s letter - the lawyer’s response directly to the auditor.
List the 4 matters the lawyer’s letter should address regarding “Asserted” claims.
- The nature of the litigation;
- The progress of the case to date;
- How management is responding or intends to respond to the litigation; and
- An evaluation of the likelihood of an unfavorable outcome and an estimate, if one can be made, of the amount or range of potential loss.
List the three matters the lawyer’s letter should address regarding “Unasserted” claims.
- The nature of the litigation;
- How management intends to respond if the claim is asserted; and
- An evaluation of the likelihood of an unfavorable outcome and an estimate, if one can be made, of the amount or range of potential loss.
List the members of management who are responsible for signing the management representations letter.
The Chief Executive Officer (CEO) and Chief Financial Officer (CFO).
What is the purpose of obtaining the required management representations letter?
To document in writing the essence of management’s verbal responses to the auditor’s important verbal inquiries.
What are the 2 basic categories of issues usually addressed by the management representations letter under the AICPA’s clarified auditing standards?
- Financial statements
- Information provided
What would be the effect on an audit opinion of management’s unwillingness to sign the management representations letter?
This would be considered a scope limitation; probably resulting in disclaimer or withdrawal.
What periods should be covered in the management representations letters?
All periods included in audit report.
When should the management representations letter be dated?
It should have the same date as the auditor’s report.
What is meant by the term arm’s length transaction?
A transaction conducted on such terms and conditions between a willing buyer and a willing seller who are unrelated and are acting independently of each other and pursuing their own best interests.
What is meant by the term related party?
One party that controls or can significantly influence the management or operating policies of another party.
Identify 3 responsibilities of the auditor when related party transactions have been identified.
- Obtain an understanding of the business purpose of the related party transaction;
- Determine if the related party transaction was authorized by board of directors (those charged with governance);
- Evaluate the adequacy of the disclosures of the related party transactions.
What is the primary focus of the auditor regarding an entity’s transactions with related parties?
Evaluating the adequacy of disclosure about the related party transactions.
List audit procedures used to identify the existence of related parties.
- Inquire of management as to the existence of related entities;
- Review prior year’s audit documentation;
- Review any applicable SEC filings (for a public company);
- Inquire of predecessor auditors if applicable;
- Review stockholder listings of closely held companies to identify major stockholders.
List 3 audit procedures that an auditor might use to identify an entity’s transactions with a related party.
- Review minutes of board of directors’ meetings (those charged with governance) for activities with related parties;
- Inquire of management as to such transactions; and
- Examine underlying documents for unusual or large transactions or transactions with terms or conditions that are inconsistent with prevailing market conditions.
What is meant by the term subsequent events?
Events or transactions that occur after the balance sheet date up to the date of the auditor’s report which have a material effect on the financial statements and, therefore, require either financial statement adjustment or disclosure.
What period of time defines a subsequent event?
The period after the balance sheet date up to the date of the auditor’s report.
When would a subsequent event require adjustment of the financial statements?
When material events or circumstances clarify (that is, provide better information about) circumstances already in effect as of the balance sheet date.
When would a subsequent event require disclosure in (but not adjustment of) the financial statements?
When material events or circumstances arise after the balance sheet date.
List 4 audit procedures the auditor might perform to identify subsequent events.
- Inquiry of management;
- Review minutes of board meetings (or those charged with governance);
- Review the lawyers’ letters in response to the letter(s) of inquiry; and;
- Scan the accounting records subsequent to year end for unusual activities.
What should the auditor do when subsequently discovered facts become known to the auditor (either before or after the report release date)?
Discuss the matter with management (and possibly those charged with governance) and determine whether the financial statements require revision. If so, inquire how management will deal with the matter.
When is the auditor’s report normally dated?
When the auditor has obtained sufficient appropriate audit evidence as a reasonable basis for the opinion. (The date of the auditor’s report cannot precede the completion of fieldwork and may be later than that.)
What is meant by the term dual dating the auditor’s report?
The auditor uses one date for the overall audit report, but specifies a later date to address a particular subsequent event. The later date is limited to the specific subsequent event, and does not imply responsibility for other matters beyond the basic date of the report.
What is meant by the term reasonable period of time when the auditor is assessing an entity’s going concern issues?
A period of time not to exceed one year beyond the date of the financial statements being audited.
What is meant by the term mitigating factors when the auditor is evaluating an entity’s going concern issues?
Those aspects of management’s strategy that might be expected to improve the entity’s cash flows (that is, generate cash inflows or reduce cash outflows).
If management revised the financial statements because of subsequently discovered facts that became known to the auditor after the report release date, what should the auditor do?
- The auditor should perform appropriate audit procedures on the revision.
- The auditor should assess whether management’s actions are appropriate and timely to inform users about previously issued (erroneous) financial statements.
- If the resulting opinion differs from that previously expressed, add an other-matter paragraph to the auditor’s report to comment on that change of opinion.
What procedures should the predecessor auditor perform when reissuing an audit report?
- Read the subsequent financial statements and compare to those previously audited.
- Make inquiries of management and obtain written representations from management about issues affecting the previous representations obtained from management.
- Obtain a representations letter from the successor auditor about known relevant matters.
Describe the auditor’s reporting responsibilities when the auditor has substantial doubt about an entity’s ability to continue as a going concern.
- Consider the adequacy of disclosure about these issues relative to GAAP or other applicable financial reporting framework (is there a misstatement?); and
- If the financial statements (including disclosure) are consistent with the requirements of the applicable framework, the auditor should add an emphasis-of-matter paragraph after the unmodified opinion.
When the auditor has substantial doubt about an entity’s ability to continue as a going concern, what further evidence-gathering responsibilities does the auditor have?
- Inquire about management’s strategy to overcome the entity’s financial difficulties; and
- Evaluate the feasibility of the “key” elements of management’s plans with emphasis on “mitigating factors.”
List some indicators that might suggest to an auditor substantial doubt about the entity’s ability to continue as a going concern.
- Negative trends (recurring losses, negative cash flows from operating activities, etc.);
- Internal matters (labor problems, dependence on a single project or customer);
- External matters (litigation, general decline in the economy or industry, etc.); and
- Other indicators (defaults on debt, violations of debt covenants, etc.).
List routine audit procedures that should identify whether there is “substantial doubt about an entity’s ability to continue as a going concern.”
- Analytical procedures;
- Review for subsequent events;
- Review loan agreements for compliance with restrictive debt covenants;
- Read minutes of meetings of the board or those charged with governance;
- Inquire of management about legal liability issues and obtain lawyers’ letters.
What communication is required with those charged with governance when there is “substantial doubt regarding an entity’s ability to continue as a going concern”?
- Nature of conditions identified;
- The possible effect on financial statements and disclosures; and
- The effect on the auditor’s report.
