Ch-4 Audit evidence Flashcards
r
Reliability of audit evidence increases when
- obtained from independent sources outside the entity.
- the related controls imposed by the entity are effective.
- obtained directly by the auditor
- in documentary form, whether paper, electronic, or other medium,
- obtained as original documents
Auditor’s judgement as to sufficiency may be affected by the factors such as
a) Materiality
b) Risk of material misstatement
c) Size & characteristics of a population
Audit procedures for obtaining audit evidence
Audit evidence to draw reasonable conclusions on which to base the auditor’s
opinion is obtained by performing:
(a) Risk assessment procedures; and
(b) Further audit procedures, which comprise:
(i) Tests of controls, when required by the SAs or when the auditor has chosen to do so; and
(ii) Substantive procedures, including tests of details and substantive analytical procedures.
Audit procedures to obtain audit evidence can include:
(i) Inspection
(ii) Observation
(iii) External Confirmation
(iv) Recalculation
(v) Reperformance
(vi) Analytical Procedures
(vii) Inquiry
Inspection
Inspection involves examining records or documents, whether internal or external, in paper form, electronic form, or other media, or a physical examination of an asset.
Observation
Observation consists of looking at a process or procedure being performed by others
External Confirmation
An external confirmation represents audit evidence obtained by the auditor as a direct written response to the auditor from a third party (the confirming party), in paper form, or by electronic or other medium.
Recalculation
Recalculation consists of checking the mathematical accuracy of documents or records.
Reperformance
Reperformance involves the auditor’s independent execution of procedures or controls that were originally performed as part of the entity’s internal control.
Analytical Procedures
Analytical procedures consist of evaluations of financial information made by a study of plausible relationships among both financial and non-financial data.
Inquiry
Inquiry consists of seeking information from knowledgeable persons, both financial and non- financial, within the entity or outside the entity.
What is Audit Trail ?
An audit trail is a documented flow of a transaction. It is used to investigate how a source document was translated into an account entry and from there it was inserted into financial statement of an entity. It is used as audit evidence to establish authentication and integrity of a transaction.
- Audit trails (or audit logs) act as record-keepers that document evidence of certain events, procedures or operations, because their purpose is to reduce fraud, material errors, and unauthorized use.
- Audit trails help to enhance internal controls and data security.
- Audit trails can help in fixing responsibility, rebuilding events and in thorough analysis of problem areas.
100% examination may be appropriate when,
- The population constitutes a small number of large value items;
- There is a significant risk and other means do not provide sufficient appropriate audit evidence; or
- The repetitive nature of a calculation or other process performed automatically by an information system makes a 100% examination cost effective.
The auditor may decide to select specific items from a population. Specific items selected may include:
- High value or key items.
- All items over a certain amount.
- Items to obtain information.
Relying on the work of a management’s expert
If the entity has employed or engaged experts, the auditor may rely on the works of experts, provided he is satisfied that sufficient and appropriate audit evidence is obtained with reasonable assurance to form an opinion on the financial statements.
the auditor shall
(a) Evaluate the competence, capabilities and objectivity of that expert;
(b) Obtain an understanding of the work of that expert; and
(c) Evaluate the appropriateness of that expert’s work as audit evidence for the relevant assertion.
Definition of Internal Audit Function
A function of an entity that performs assurance and consulting activities designed to evaluate and improve the effectiveness of the entity’s governance, risk management and internal control processes.
what are the Ways in which the external auditor may make use of the function for purposes of the audit.
the external auditor may make use of the internal audit function for purposes of the audit in one or more of the following ways:
(i) to obtain information that is relevant to the external auditor’s assessments of
the risks of material misstatement due to error or fraud.
(ii) Unless prohibited, or restricted to some extent, by law or regulation, the external auditor, after appropriate evaluation, may decide to use work that has been performed by the internal audit function during the period in partial substitution for audit evidence to be obtained directly by the external auditor.
(iii) Unless prohibited, or restricted to some extent, by law or regulation, the external auditor may use internal auditors to perform audit procedures under the direction, supervision and review of the external auditor (referred to as “direct assistance”).
Objectives of the external auditor, where the entity has an internal audit function
(a) To determine whether the work of the internal audit function can be used, and if so, in which areas and to what extent;
(b) If using the work of the internal audit function, to determine whether that work is adequate for purposes of the audit; and
(c ) If using internal auditors to provide direct assistance, to appropriately direct, supervise and review their work.
How can the external auditor determine whether the work of the internal audit function can be used for purposes of the audit.
by evaluating the following:
(A) The extent to which the internal audit function’s organizational status and relevant policies and procedures support the objectivity of the internal auditors;
(B) The level of competence of the internal audit function; and
(C) Whether the internal audit function applies a systematic and disciplined approach, including quality control.
What are the circumstances When Work of the Internal Audit Function Cannot Be Used
The external auditor shall not use the work of the internal audit function if the external auditor determines that:
(a) The function’s organizational status and relevant policies and procedures do not adequately support the objectivity of internal auditors;
(b) The function lacks sufficient competence; or
(c ) The function does not apply a systematic and disciplined approach, including quality control.
Give examples of work of the internal audit function that can be used by the external auditor
Examples of work of the internal audit function that can be used by the external auditor include the following:
1. Testing of the operating effectiveness of controls.
2. Substantive procedures involving limited judgment.
3. Observations of inventory counts.
4. Tracing transactions through the information system relevant to financial reporting.
5. Testing of compliance with regulatory requirements.
What are the circumstances in which the external auditor shall plan to use less of the work of the Internal audit function and perform more of the work directly
The external auditor shall make all significant judgments in the audit engagement and, to prevent undue use of the work of the internal audit function, shall plan to use less of the work of the function and perform more of the work directly if:
(a) The more judgment is involved in:
(i) Planning and performing relevant audit procedures; and
(ii) Evaluating the audit evidence gathered;
(b) The higher the assessed risk of material misstatement at the assertion level, with special consideration given to risks identified as significant;
(c ) The less the internal audit function’s organizational status and relevant policies and procedures adequately support the objectivity of the internal auditors; and
(d) The lower the level of competence of the internal audit function.
Read topic 2.10 and 2.11 on pg 4.40 to 4.43
ok
Distinction between Internal Financial Control and Internal Control over financial reporting
The term Internal Financial Controls (IFC) refers to the policies and procedures put in place by companies for ensuring reliability of financial reporting, effectiveness and efficiency of operations, compliance with applicable laws and regulations, safeguarding of assets and prevention and detection of frauds.
On the other hand, Internal controls over financial reporting is required where auditors are required to express an opinion on the effectiveness of an entity’s internal controls over financial reporting, such opinion is in addition to and distinct from the opinion expressed by the auditor on the financial statements.
Therefore, “internal financial control” is a wider term where as “internal controls over financial reporting” is a narrower term restricted to entity’s internal controls over financial reporting only.