Audit Risk Strategy in a Professional Engagement Flashcards
What are the different phases (or stages) of an audit?
- The risk assessment phase
- The risk response phase (where the detailed work is conducted)
- The reporting phase (where the audit opinion is formed)
Define engagement letter.
A letter that sets out the terms of the audit engagement, to avoid any misunderstandings between the auditor and the client.
What will an auditor consider in assessing the integrity of a client?
The auditor will consider the reputation of the client, its management, directors, and key stakeholders. Auditors will consider a client’s reasons for switching audit firms, if the company was previously audited, and management’s’ attitude to risk exposure, and to the implementation and maintenance of adequate internal controls, the appropriateness of management’s interpretation of accounting rules, and willingness to allow the auditors full access to client personal, records, and information required to form their opinion.
How does an auditor gather information about management integrity?
The auditor can communicate with the previous auditor (with client permission), client personnel, third parties such as lenders, industry peers, and read industry journals.
What are the key components of an engagement letter?
Are an explanation and scope of the audit, the timing of the completion of various aspects of the audit, an overview of the client’s responsibility for the preparation of the financial statements, the requirement that the auditor have access to all information required to perform the audit, and independence consideration and fees.
What happens in the risk assessment phase?
It involves gaining an understanding of the client, identifying factors that may impact the risk of a material misstatement occurring in the F/S, performing a risk and materiality assessment, and developing an audit strategy.
What happens in the risk response phase?
It involves the performance of detailed tests of controls and detailed testing of transactions and account balances, called substantive testing.
What happens in the reporting phase?
It involves an evaluation of the results of the detailed testing in the light of the auditor’s understanding of the client and forming an opinion on the fair presentation of the client’s F/S.
Define audit risk
Is the risk that an auditor expresses an inappropriate audit opinion when the F/S are materially misstated.
Why do auditors treat every audit as unique?
Because risks associated with two companies may be different even if they are in the same industry. For clients in different industries, laws and regulations will differ amongst industries.
How does the risk assessment phase help improve the efficiency and effectiveness of the audit?
It optimizes efficiency and effectiveness when conducting an audit. It requires auditors to plan with a goal of minimizing audit risk, ensuring that appropriate attention is paid to the accounts and transactions most at risk of being materially misstated.
Define materiality
The ability of information to influence decisions that users make on the basis of the financial information of a specific reporting entity.
What is the concept of materiality?
It is used to quiet audit testing and assess the validity of information contained in the F/S and the notes.
What is the difference between qualitative and quantitative materiality?
Information is considered qualitatively material if it affects a user’s decision-making process for a reason other than its magnitude.
Information is considered quantitatively material if it exceeds the magnitude of an auditor’s planning materiality assessment, which is a percentage of an appropriate benchmark.
Define performance materiality
It is amount or amounts set by the auditors at less than materiality and is used to make decisions about the extent of audit procedures for a particular class of transaction, account balance, or disclosure.
What are two key concepts that apply to all phases of the audit?
Performance skepticism and audit risk
Define professional skepticism
It is an attitude adopted by auditors when conducting all phases of the audit. It means that auditors remain independent of the entity, its management, and its staff when completing the audit work.
It means auditors maintain a questioning mind and thoroughly investigate all evidence presented by the client.
What is the first stage of audit risk assessment?
It involves the identification of accounts and related assertions most at risk of material misstatement. It is referred to as inherent risk.
Define inherent risk
The susceptibility of an assertion to a misstatement that could be material, either individually or when aggregated with other misstatements, before consideration of any related controls.
Define significant risk
An identified and assessed risk of material misstatement that, in the auditor’s judgement, requires special audit consideration
What is the second stage of audit risk assessment?
Involves gaining an understand of the client’s system of internal controls.
What is the final stage of audit risk assessment?
The assessed level of inherent and control risk for each assertion will guide auditors in developing their audit strategy to gather appropriate audit evidence.
Define risk of material misstatement (RMM)
It is the risk that the F/S are materially mistated prior to the audit. It is a combination of inherent risk and control risk.
Define detection risk
Is the risk that the auditor’s procedures will not be effective in detecting a material misstatement should there be one.
What are the three types of audit risks?
- Inherent risk (economic or industry factors)
- Control risk (failure of an internal control)
- Detection risk (failure of an audit procedure)
What is the relationship between risk of material misstatement and detection risk?
An inverse relationship exists between the risk of material misstatement (RMM) and detection risk. When RMM is high, detection risk is low.