basics Flashcards
in the U.S. Who issue auditing standards to private companies
AICPA’s Audit Standards board
in the the U.S. who issues auditing standard to audit public companies
Public company accounting oversight board
PCAOB
Aduit the goverment in the U.S. who issues the audit standards
U.S. Government Accountability Office (GAO)
What is meant by generally accepted audit standards (GAAS) under the clarified auditing standards?
The statements of auditing standards issued by the AICPA auditing standards board.
identify the four primary theme associated with the AICPA seven principles for audit standards setting.
1 purpose / premise
- Responsibilities
- Performance
- Reporting
Identify the topics associated with each of the AICPA’ seven principles for audit standard setting.
- purpose
- premise
- responsibilities
- reasonable assurance
- performance requirements to achieve reasonable assurance
- inherent limitations
- reporting
Identify the topics associated with the three general standards formerly known as generally accepted auditing standards (GAAS), which are still applicable to the PCAOB’s auditing standards.
- Train
- Independence
- Due professional care
Identify the topics associated with the four reporting standards for generally accepted auditing standards for generally accepted auditing standards (GAAS) which are still applicable to the PCAOB auditing standards.
- GAAP
- Consitency
- Disclosure
- Opinion
List the six elements of quality control system.
- leadership responsibilities for quality within the firm
- Relevant ethical requirements
3.Acceptance and continuance of client relationships - human resources
- engagement performance
6 Monitoring
What are some considerations that must be given by the auditor during the planning phase of the audit?
- Determine whether to accept or continue the audit engagement;
- Assess the risk of material misstatement;
3 Evaluate requirements for staffing and supervision - Prepare the required written audit program (also called the “audit plan”).
What matter should be covered in the (successor) auditors inquiry of the predecessor auditor?
- Facts related to managements integrity
2 significant accounting or auditing disagreements - Any communications with the audit committee
about fraud, illegal acts, and significant deficiencies in internal controls maters - predecessor’s understanding of the reasons for client change in auditors.
What matter are typically addressed in an engagement letter?
- the objective and scope of the audit
- the auditors responsibilities
- Managements responsibilities
- statement about inherent limitations of an audit
- A statement identifying the applicable financial reporting framework
- Reference to expected content of any reports to be issued
7 other matters, as warranted
What is the auditors basic audit planning responsibility?
The auditor should plan the audit ( and design the required written audit program or plan) to be responsive to the auditors assessment of the risk of material misstatement.
what is the difference between an overall audit strategy and an audit plan?
An audit strategy deals with higher level issues, such as allocating audit resources, whereas an audit plan is more detailed and deals more specifically with the nature, timing and extent of audit procedures to be performed.
The clarified auditing standards introduced the term, “performance materiality.” What does that term mean?
Th amounts set by the auditors at less than materiality for the financial statements as a whole to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatement exceeds materiality for the financial statements as a whole.
What is the audit risk model that is applicable to classes of trasactions or to account balances?
Audit risk = inherent risk * control risk * detection risk
Define “audit risk”
The probability that the auditor fails to modify the opinion on financial statements that contain a material misstatement.
Define “ Inherent risk”
The probability that a material misstatement would occur in the particular audit area in the absence of any internal control policies and procedures
Define “Control risk”
The probability that a material misstatement that occurred in the first place, would not be detected by applicable internal controls.
Define “ detection risk.”
The probability that a material misstatement, that was not prevented or detected by internal controls, was not detected by the auditors substantive and audit procedures.
Define “risk of material misstatement.”
The risk that the financial statement contain one or more material misstatement prior to the audit.
Define “analytical procedures.”
evaluations of financial information through analysis of plausible relationships among both financial and non financial data.
what three purposes might analytical procedure serve?
- required during planning
- may be used as substantive evidence
- required during final review
What matters must be documented in connection with analytical procedures?
- The auditors exception and the factors considered in developing it;
- The results of the comparison of the recorded amounts (or ratios) with the exceptions and
- Any additional auditing procedures performed to investigate significant differences identified by that comparison
What are the three categories of fraud-related risk factors that should be considered by the auditor?
- Incentives/ pressures (the motivation for committing fraud)
- Opportunities (the ability to commit fraud)
- Attitudes/ rationalizations ( justification or excuse for committing fraud).
List the two types of financial-statement-related frauds?
- Fraudulent financial reporting (sometimes called cooking the books)
- Misappropriation of assets (covering up theft by false journal entries).
When might an auditor have a duty to inform other outside of the audited entity of fraud -related matters?
- In response to a valid subpoena
- To comply with applicable legal and regulatory requirements
- To respond appropriately to successor auditor’s inquiries when the former client has given permission to predecessor
- To report fraud to the applicable funding agency under the requirements of government auditing standards.
what are the auditors responsibilities to communicate fraud identified by the auditor?
- If the fraud is not material, the auditor should inform the appropriate level of management
- If the fraud is material (or if senior management is involved, even if not material,) the auditor should inform those charged with governance.
What is meant by the term “ legal and regulatory framework”?
Those laws and regulations to which an entity is subject; noncompliance may result in fines, litigation, or other consequences that may have a material effect on the financial statements.
What is the auditor’s responsibility to detect illegal acts?
The auditor should design the audit to provide reasonable assurance of detecting illegal acts having a direct and material effect on the financial statements.
What are the two ways the external auditor might use the work of an internal audit function?
- to obtain audit evidence
2. To provide direct assistance.
When using the work of the internal audit function to obtain audit evidence, what three matters should the external auditor evaluate?
- Objectivity- the internal audit function’s organizational status and the objectivity of the internal auditors;
- Competence of the internal auditors;
- Whether the internal audit function applies a “systematic and disciplined approach, including quality control”
When using the internal audit function to provide direct assistance, what two matters should the external auditor evaluate?
- Objectivity- the internal audit function’s organizational status and the objectivity of the internal auditors; and
- Competence of the internal auditors.
Define what is meant by the term “ those charged with governance.”
The person or organization with responsibility for overseeing the strategic direction of the entity and the obligations related to accountability of the entity
Define what is meant by the term “management.”
The persons with executive responsibility for the conduct of the entity’s operations.
What matters are the auditor required to communicate to those charged with governance?
~ the auditors responsibilities under GAAS;
~ The planned scope and timing of the audit;
~ Significant finding from the audit.
What are the three objectives of internal control as identified in the definition of internal control?
- Reliability of financial reporting:
- Effectiveness and efficiency of operations
- Compliance with applicable laws and regulations.
Identify three procedures and auditor might perform to obtain an understanding of internal controls?
- Inquiry of appropriate personnel;
- observation of clients activities;
- Review entity’s documentation of internal controls.
Identify three ways auditors might document their understanding of internal controls?
- flowchart of transaction cycles;
- Internal control questionnaires;
- Narrative write-ups (memos).
Identify two reasons for assessing control risk at the maximum level.
- The auditor believes that the design of internal control is ineffective
- the auditor believes that reliance on internal control (and performing applicable test of control) is not an efficient audit strategy compared to a wholly substantive audit approach.
Identify the five interrelated components of internal controls.
- Control environment
- Risk assessment
- control activities
- Information and communication systems
- Monitoring.
What is meant by the term “control environment”?
The policies and procedures that determine the overall control consciousness of the entity, sometimes called “the tone at the top.”
What is meant by the term “ risk assessment”?
The policies and procedures involving the identification prioritization, and analysis of relevant risk as a basis for managing those risks.
What is meant by the term “information and communication systems”?
The policies and procedures related to the identification, capture, and exchange of information in a form and time frame that enable people to carry out their responsibilities.
What is meant by the term “control activities”?
The policies and procedures that help ensure that management directives are carried out especially those related to (1) segregation of duties, (2) physical controls,(3) authorization of transactions, (4) performance review, and (5) information processing.
List the three categories of incompatible functions associated with segregation of duties.
- Authorization of transactions (execution function);
- Accounting (record keeping function);
- Access to assets (custody function).
What is the auditor’s responsibility for assessing risk of material misstatement?
The auditor should identify and assess the risks of material misstatement (1) at the financial statement level and (2) at the relevant assertion level related to classes of transactions, account balances, and disclosures.
Define the term “significant risk.”
Risks that the auditor believes require special audit consideration.
Define “material weakness.”
A deficiency (or combination of deficiencies) in internal control such that there is a reasonable possibility that a material misstatement of the entity’s financial statements will not be prevented or detected and corrected on a timely basis.
Define “ significant deficiency”.
A deficiency (or combination of deficiencies) in internal control that is less severe that a materiel weakness, yet important enough to merit attention by those charged with governance.
What is meant by the term “deficiency in design”
When a control necessary to meet the control objective is missing, or when the control objective is not always met, even if the control operates as designed
What is meant by the term “ deficiency in operation”?
When a properly designed control does not operate as designed, or when the person performing the control does not have the authority or competence to effectively person the control.
describe the auditor requirement for communicating deficiencies in an entity’s internal controls
- The auditor must communicate in writing the significant deficiencies ( including material weakness) identified in the audit
- the auditor may choose to communicate lesser matters too.
Describe the timing of the required communication of significant deficiencies in internal control.
Under AICPA professional standards, written communication is required no later than 60 days after the audit report release date (including matters communicated orally during the audit.)
What is meant by the term “transaction cycle”?
A group of essential homogeneous transactions; that is transaction of the same type.
Why do auditor emphasize transaction cycles?
Control risk is generally constant with in a particular category of transactions as all transaction are processed the same way. So the transaction cycle is the highest level of aggregation for which control risk may be viewed as a constant.
What is the difference between an accounts payable system and a vouchers payable system?
An account payable system aggregates payable to identify the total owed to any individual vendor. A voucher payable system keeps track of individual transactions for which payment is owed without summarizing the totals by vendor.
List the two broad categories of substantive procedures.
- test of details
2. Substantive analytical procedures
Identify the two categories of substantive test of details
- test of ending balances
2. test of transactions.
Identify the four considerations that determine the effectiveness and efficiency of analytically procedures used for substantive purposes.
- Nature of the assertion;
- Plausibility and predictability of the relationship;
- Availability and reliability of data; and
- Precision of the exception.
What is meant by “sufficient” and “appropriate” when “ sufficient appropriate audit evidence “ is mentioned?
~ “sufficient” refers to the quantity of evidence that is required; and
~ “Appropriate” refers to the quality of the evidence involved, in terms of “relevance” and “reliability”.
Define “Assertion.”
Impact or explicit statements of fact by management that are associated with the entity’s financial statements.
List the three broad categories of assertions under AICPA professional standards.
- Account balances at the end of the period (there are four assertions related to the balance sheet);
- Classes of transactions and events during the period (there are five assertions related to the income statement);
- Presentation and disclosure (There are four assertions related to the footnotes applicable to any of the financial statements).
List the four assertions about presentation and disclosure ( footnotes).
~ Occurence and rights and obligations;
~ completeness;
~ Classification and understandably and accuracy and valuation.
~ Accuracy and valuation.
List the five assertions about classes of transaction and events during the period (income statement).
- Accuracy
- Occurrence
- completeness
- Cutoff
- Classification
List the four assertions about account balances at the end of the period (balance sheet).
- Existance;
- Completeness
- Rights and obligations
- Valuation and allocation
What are the AICPA guideline to rank reliability of audit evidence?
- Direct personal knowledge by the auditor is the most reliable audit evidence.
- Evidence obtained from an independent outside source is the next most reliable.
- Evidence obtained from the entity under effective internal control is next.
- Documentary evidence is more reliable than verbal responses to inquires (and original documents are more reliable that faxes and photocopies).
List the three categories of audit procedures.
- Risk assessment procedures
- test of controls
- substantive procedures.
What are substantive procedures?
Procedure performed to detect material misstatements at the relevant assertion level; these consist of tests of details and substantive analytical procedures
Define “report release date”
The date the auditor grants the entity permission to use the auditor report (that date must be documented)
What is meant by the term “documentation copletion date” under the AICPA and PCAOB standards, respectively?
Under AICPA standards ( applicable to audits of “non issuers”) The auditor should complete the assembly of the final audit file no later that 60 days after the “report release date.”
Under PCAOB standards ( applicable to audits of “issuers”) - the auditor should complete the assembly of the final audit file no later that 45 days after the “report release date.”
What is meant by the term “projected misstatements”?
The auditors best estimate of misstatements in populations suggested by audit sampling. ( The AICPA formerly used the term “likely error” for this concept)
What matters must be documented by the auditor in connection with the evaluation of misstatements?
- The threshold for determining what is viewed as clearly trivial.
- All misstatements accumulated during the audit (and whether they have been corrected).
- The auditors conclusion as to whether any uncorrected misstatements are material ( individually or in the aggregate), and the basis for that conclusion.
What changes can the auditor make to the audit documentation after the documentation completion date?
~ the auditor must not delete audit documentation before the end of the retention period;
~ The auditor may add to the documentation but must document any material added by whom when the reasons for the change and effect on the auditors conclusions.
What are the audit documentation retention requirements under AICPA and PCAOB standards, respectively.
Under AICPA standard ( applicable to audits of “nonissuers” )___ The audit documentation should be retained for at least five years from the report release date.
Under PCAOB Standards (applicable to audits or issuers”)__ the audit documentation should be retained for at least seven years from the report release date.
List two alternative procedures for a non-response to a positive confirmation ( usually performed after a second request was sent, but no response was received).
First verify subsequent cash receipts; or second examine underlying documents for apparent validity.
When might negative confirmations be justified?
- The financial statement item involves a large number of small (immaterial) accounts;
- Control risk is low ( that is, internal control is viewed as effective);
- Recipients are expected to pay attention to the request.
What is meant by the term “negative confirmation” ?
A response is only requested in the event the confirming party disagrees with the identified balance. A non-response is view as indicating that party agreement.
What is meant by the term “ positive confirmation”?
A response is requested whether or not the confirming party agree with the entity’s recorded amount. A non-response indicates a “loose end” that must be resolved.
What is the auditors basic responsibility when auditing accounting estimates?
evaluate the reasonableness (and the adequacy of related disclosures) of any significant accounting estimates relative to GAAP or other applicable financial reporting framework.
What is meant by the term “estimation uncertainty”
The susceptibility of an accounting estimate and related disclosures to an inherent lack of precision in its measurement. (The risks of material misstatement increase when there is high estimation uncertainty.)
What is the best evidence of fair value?
published price quotations in an active market
define fair value
The amount at which the asset could be bought or sold in a current transaction between willing parties, that is, other than in a forced or liquidation sale.
What is meant by the term “observable inputs”?
Assumptions that market participants would use in pricing an asset or liability based on market data from sources independent of the reporting entity.
What is meant by the term (unobservable inputs)
An entity’s own judgement about what assumptions market participants would use. (estimation uncertainty increases when the fair value estimates are based on unobservable inputs instead of observable inputs)
List the two types of letter involved in the communication with the entity’s lawyers.
~letter of inquiry- management’s letter to the entity’s lawyers ( as requested by the auditor) asking the lawyer to provide litigation-related information directly to the auditor
~ lawyer’s letter— the lawyer’s response directly to the auditor.
What is meant by the term “assert claim”?
Also referred to as “pending or threatened litigation” a claim that has already been filed (pending) or when the other part has announced an intention to sue (threatened).
What is meant by the term “unasserted claims”?
Audited entity has exposure to litigation but no one has yet filed a law suit or announced an intention to sue
List the four matters the lawyer’s letter should address regarding “asserted” claims.
- The nature of the litigation
- the progress of the case to date
- how management is responding or intends to respond to the litigation
- An evalutation of the likelihood of an unfavorable outcome and estimate if one can be made, of the amount or range of potential loss
List the three matter the lawyers letter should address regarding “unasserted” claims.
- The nature of the litigation
- How management intends to respond if the claim is asserted and
- An evaluation of the likelihood of an unfavorable outcome and estimate, if one can be made, of the amount or range of potential loss.
What is the effect of a limitation in the lawyers response to the letter of inquiry on the audit report?
This would be considered a scope limitation sufficient to prevent an unqualified opinion and likely resulting in a disclaimer of opinion.
Under what circumstance might an auditor NOT be required to obtain a letter from the entity’s legal counsel?
If the entity had no litigation, claims or assessments having financial reporting relevance and accordingly, did not engage legal counsel. ( in such a case, the management representations letter would include a statement to effect.)
What are the two basic categories of issues usually addressed by the management representation letter under the AICPA clarified auditing standards?
- financial statements
2. Information provided.
What is the purpose of obtaining the required management representation letter?
to document in writing the essence of managements verbal response to the auditors important verbal inquiries
List the members of the management who are responsible for signing the management representations letter.
The chief executive officer and chief financial officer
What is meant by the term “related party”
One party that controls or can significantly influence the management or operating policies of another party.
Identify three responsibilities of the auditor when related-party transactions have been identified.
- obtain an understanding of the business purpose of the related-party transactin
- Determine if the related-party transaction was authorized by board of directors
- Evaluate the adequacy of the disclosures of the related party transactions
What is meant by the term subsequent events
Events or transactions that occur after the balance sheet date up to the date of the auditor’s report which have a material effect on the financial statements and, therefore, require either financial statement adjustment or disclosure.
What period of time defines a subsequent event?
The period after the balance sheet date up to the date of the auditors report.
When would a subsequent event require adjustment of the financial statements?
When material events or circumstances clarify (that is provide better information about) circumstances already in effect as of the balance sheet date