Audit Process, Planning And Risk Flashcards
What are the overall objective of the auditor?
To obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement, whether due to fraud or error, thereby enabling the auditor to express an opinion whether the financial statements are prepared, in all material aspects, in accordance with an applicable financial reporting framework and to report on the financial statements and to communicate as required by the ISAs and in accordance with the auditor’s findings.
What are the general principles of an audit?
- Integrity
- Objectivity
- Professional competence and due care
- Professional behavior
How must an auditor plan and perform the audit?
With an attitude of professional skepticism that circumstances may exist that could cause the financial statement to be materially misstated.
Does an audit conducted in accordance with the ISAs provides reasonable assurance that the statements taken as a whole are free from material misstatements?
Yes, but the inherent limitations of an audit may affect the auditor’s ability to detect material misstatements.
What are the inherent limitations of an audit?
- The use of testing
- The inherent limitations of the internal control systems ( possibility of management override or collusion)
- The fact audit evidence is often more persuasive than conclusive
- The fact that the auditor’s work is open to subjective judgement in terms of:
- obtaining audit evidence (nature, extent and timing of the audit procedures)
- the drawing of conclusion based on the audit evidence obtained.
What are the responsibility for the financial statements for an auditor?
For forming and expression an opinion on the statements.
What are the managements responsibility for the financial statements?
For preparation and fair presentation of the statements in accordance with the applicable financial reporting framework.
What does professional skepticism mean?
The auditor should make critical assessments with a questioning mind, taking into account that circumstances may exist that may result in the financial statements being materially misstated.
How does the auditor plan and perform the audit to reduce the risk of material misstatement to an acceptably low level?
The auditor performs audit procedures (risk assessment procedures) to obtain information to assess the risk of material misstatements and then performs further audit procedures (test of controls and substantive procedures) based on the assessment of risk at the assertion level.
What are the fundamental principles of auditing theory?
- Financial data are verifiable
- No necessary conflict of interests exists between the auditor and the management of the entity under audit
- The financial statements and other information presented for verification are free of collusion and other irregularities
- Internal controls reduce the probability of errors and irregularities
- The consistent application of GAAP results in fair presentation
- In the absence of any contrary evidence, that which held true in the past will hold true in the future
- When the auditor is examining financial data with the objective of expression independent opinion thereof, he/she acts exclusively in the capacity of auditor.
- The professional status of the independent auditor imposes commensurate professional obligations.
What are the auditor’s responsibility?
Be aware and comply with the following:
- legislation and regulations applicable to the audit engagement
- the Auditing Profession Act
- the IFAC statements of auditing
- the codes of conduct of the IRBA and the relevant professional bodies.
What is a statutory audit?
Audit mandated by an Act, for example, the Companies Act. The auditor’s duties and responsibilities are statutorily regulated by the relevant Acts.
What are non-statutory audits?
Audits requested by the clients although this is not statutorily required.
Why is absolute assurance not possible?
- The need for judgement
- The use of testing
- The inherent limitations of the accounting and internal control systems
- The fact that most audit evidence may be considered persuasive rather than conclusive
What is a review?
To enable the auditor to state, based on procedures that do not provide all the evidence of an audit, whether or not anything has come to the auditor’s attention that may cause the auditor to believe that the statements were not prepared in all material aspects in accordance with an identified reporting framework and/or certain given criteria.
What are the procedures of review?
- Enquiries
2. Analytical procedures
What are the elements of an assurance engagement?
Subject matter = financial statements
Criteria = compliance with ISAs
Users = shareholders
Audit opinion = provide reasonable assurance not absolute assurance
What are the stages of audit process?
- Engagement activities
- Planning the audit at the overall financial statements level and establishing the overall audit strategy
- Detailed planning at the assertion level for individual classes of transactions, account balances and disclosure
- Detailed testing: obtaining of audit evidence
- Evaluating, concluding and reporting
What does engagement activities involve?
- Client investigation for new and existing clients
- Determine skills and competence required
- Establish the terms of engagement
What does planning the audit at the overall financial statements level and establishing the overall audit strategy involve?
- Understand the entity and its environment
- Obtain an understanding of the entity’s internal control, including the information system
- Identify and assess the risk of material misstatement at the overall financial statements level
- Set materiality
- Overall audit strategy
What does setting materiality involves?
Identifying significant accounts to audit in detail at the assertion level
What does overall strategy involve?
- Formulating an overall audit approach at the financial statement level
- Specific risk response: professional skepticism, unpredictability, staff, etc
- Organizational, administrative and coordination issues for managing and controlling the audit as a whole (timing of visits, use of experts, etc)
What does detailed planning at the assertion level involves?
- For individual significant accounts:
- identify the significant risks at the assertion level
- identify significant (key) controls at the assertion level that may exist to address the risks
- establish a detailed audit strategy for the individual accounts - For non-significant accounts:
- verify through substantive analytical review procedures
What does detail testing: obtaining of audit evidence involve?
- Test of controls
2. Substantive procedures
What does evaluating, concluding and reporting involve?
- Overall review of the financial information
- Conclude and formulate an audit opinion
- Reporting
What is the objective of engagement activities?
To determine the acceptability of new clients or to consider the viability to carry on as auditors for the existing clients.
What should be considered when performing a new client investigation or consider changes in circumstances of existing clients?
- The independence of the auditor
- The integrity (risk) of the client and its management
- Changes in the entity for existing clients
- Communication with predecessor auditors
How do you determine the skills and competence requirements for the engagement?
- Knowledge and experience requirements for the relevant industries
- Skill, experience and expertise required for the audit
- Experts required
- Sufficient audit staff
What is the objective of planning of the audit?
To ensure the audit work will be performed in an effective manner. The results of the planning process are the formulation of the overall audit strategy for the audit as a whole and a detailed strategy and audit approach for individual accounts to determine the nature, timing and extent of the audit procedures necessary for the obtaining of audit evidence and risk of material misstatement is appropriately addressed.
How should an auditor obtain an understanding of the entity and its environment?
- The relevant industry, regulatory and other external factors
- The nature of the entity (internal)
- Financial reporting
How should an auditor obtain an understanding of the entity’s internal control, including information system?
By obtaining an understanding of the following:
- The control environment
- Management’s risk management policies
- The information systems and business processes relevant to financial reporting
- The internal control systems
What does assess of the risk of material misstatements at the overall financial statement level relates to?
The risks affecting the financial statements as a whole, and all account balances, classes of transactions and disclosure (management’s integrity, financial position of the entity, the control environment, etc)
What is in the overall audit approach at the financial statement level?
- A combined (system) or substantive approach at the financial statement level
- A broad description of the nature, timing and extent of the tests of controls and substantive procedures as a whole