Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AA > Ch 4 - Planning an audit (basics) > Flashcards

Ch 4 - Planning an audit (basics) Flashcards

1
Q

What are the benefits of planning an audit?

A

Attention is devoted to important areas
- i.e. areas that are more likely to include material errors
Potential problems are identified and resolved on a timely basis
Audit is organised to ensure it is performed in an effective and efficient way
As this allows a profit to be made
Staff with appropriate level of competence can be selected
Facilitates direction, supervision and review of audit work
Aids co-ordination of work done by auditors of components or experts
E.g. if one auditor does consolidated FS, they might not have done indiv FS so would work with auditor of indiv FS to help understand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Why is it important that an Audit is organised to ensure it is performed in an effective and efficient way?

A

Allows for profit to be made

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What must an auditor do at the strat of an audit?

A

ISA 300 requires the auditor to

  • plan the audit engagement
  • establish and document an overall audit strategy and a detailed audit plan
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Is the overall audit strategy and detailed audit plan set in stone in planning?

A

No, These documents should be updated as necessary as the audit progresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How is an overall audit strategy done for clients?

A

This is specific to each indiv client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does the audit strategy cover?

A 
the main general areas of planning such as 
The entity and its env
Materiality
Preliminary analytical procedures 
Risk assessment 
Audit approach
Co-ordination of the audit
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the main general areas of planning?

A 
The entity and its env
Materiality
Preliminary analytical procedures 
Risk assessment 
Audit approach
Co-ordination of the audit
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What must be co-ordinated in the audit strategy?

A 
Timing
Teams
Locations
Budgets 
Deadlines
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How can auditors assess risk properly?

A

only possible with a thorough understanding of the client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Why is it important for an auditor to understand the entity and its env?

A

ISA 315 and 330 require the auditor to assess risk, which is only possible with a thorough understanding of the client
An understanding of the entity and its env underpins all the benefits of planning we saw earlier in the chapter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the 4 forms of obtaining understanding of an entity and its env?

A

Firm
You
Client
Other

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can the firm understand an entity and its env?

A

Partner
Manager briefing
Industry experts
Last years team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How can you understand an entity and its env?

A

Through past experience

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How can the client help the auditor to understand an entity and its env?

A

Discussion
Observation
Watch what they actually do to see how it works
Website/brochures
Helps determine their aims
E.g. if they want to be listed soon or show huge growth, may require more attention to sales figures
Analytical procedures
Draft figures for the current year can be a good indicator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What other things help the auditor to understand an entity and its env?

A 
Industry surveys 
Compare to competitors 
Credit reference agencies 
Companies House
Internet search
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What areas must the auditor understand?

A 
Environment 
- Laws and regulations
- Industry conditions
Entity 
- Operations
- Ownership and governance 
- Investments
-Structure & finance 
- Accounting policies
- Objectives and strategies
- System of internal control
- Use of outsourcing
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Define materiality

A

ISA 320 states that info is material if its omission or misstatement could influence the economic decisions of users taken on the basis of the FS
Materiality is therefore a matter of professional judgement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is materiality a matter of?

A

Materiality is therefore a matter of professional judgement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the general thresholds for materiality?

A

0.5-1% of revenue
5-10% of profit before tax
1-2% of gross assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Give some examples of materiality by nature

A
  • Matters relating to directors or related party transactions which are required to be disclosed in FS regardless of their value
  • Small amounts that impact on critical points
    Examples
    Change a profit to a loss
    Net assets to net liabilities
    Affect thresholds such as whether a company is a small or medium sized company under CA
    Descriptions which are misleading
    E.g. of accounting policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is performance materiality?

A

Performance materiality is an amount set at less than materiality for FS as a whole, to reduce the risk that the aggregate of smaller misstatements in the indiv acc balances or classes of transactions could exceed materiality for the FS as a whole

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the purpose of performance materiality?

A

to reduce the risk that the aggregate of smaller misstatements in the indiv acc balances or classes of transactions could exceed materiality for the FS as a whole

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Why and when are analytical procedures used?

A

During planning

To identify risks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the 3 uses of analytical procedures?

A

During planning, help to identify risks
Can be used as a form of substantive procedures to gather audit evidence (ISA 520)
Must be used to assist in forming an overall conclusion on the FS (ISA 520)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Why are analytical procedures useful at the planning stage?

A

To give an overall perspective on the FS using both financial and non-financial data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the limitations to analytical procedures?

A

Require sound knowledge/experience in the entity, which may be limited on a first year audit
Experienced staff may be required to carry them out
Quality of the analytical procedures depends on the reliability of the source data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

How do you perform analytical procedures?

A

Understand the business
Develop an expectation
Compare actual to expectation
Unexpected variations create risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

How can analytical procedures be formed?

A

Analytical procedures can be performed using simple trends or complex calculations predicting figures in the FS
Acc ratios can be used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

How do you calc and what is the interpretation of

Gross profit margin

A

Gross profit/revenue * 100%

Assess profitability before taking OH into acc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

How do you calc and what is the interpretation of operating margin?

A

Operatingprofit/ revenue * 100%

Assess profitability after taking OH into acc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How do you calc and what is the interpretation of

return on capital employed?

A

Operating profit / equity + debt * 100%

Measure how effectively resources are used to generate profit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are the 3 key performance ratios?

A

Gross profit margin
Operatin margin
Return on capital employed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are the 2 key ST liquidity ratios?

A

Current ratio

Quick ratio

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

How do you calc and what is the interpretation of

Current ratio

A

current assets / current liabilities

Assess ability to pay current liabilities from current assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

How do you calc and what is the interpretation of

Quick ratio

A

Current assets less inv / current liability = assesses ability to pay current liabilities from reasonably liquid assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are the 2 solvency ratios?

A

Gearing ratio

Interest cover

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

How do you calc and what is the interpretation of

Gearing ratio

A

Net debt / equity

Assess reliance on external finance

38
Q

How do you calc and what is the interpretation of

Interest cover

A

Profit before interest payable / interest payable

Assess ability to pay interest charges

39
Q

What are the 3 key efficiency ratios?

A

Trade receivables collection period
Inventory holding period
Trade payables payment period

40
Q

How do you calc and what is the interpretation of

Trade receivables collection period

A

Trade receivables / revenue * 365

Assess average time taken to collect cash from credit customers

41
Q

How do you calc and what is the interpretation of

Inventory holding period

A

Inventory / CoS * 365

Assess the average length of time inv held

42
Q

How do you calc and what is the interpretation of

Trade payables payment period

A

Trade payables / purchases * 365

Average time taken for suppliers to pay

43
Q

What is business risk?

A

risk that could adversely affect an entity’s ability to achieve its objectives and execute its strategies

44
Q

What are the types of business risk?

A

Financial
Operational
Compliance based

45
Q

Who should manage business risk?

A

DIRECTORS

46
Q

When are auditors related to business risks

A

Auditors are ONLY interested in business risks that impact the FS

47
Q

What is audit risk?

A

risk that the auditor expresses an inappropriate opinion on the FS
Audit risk = inherent risk x control risk x detection risk

48
Q

What is entity risk?

A

risk that the FS are materially misstated and is made up of
Inherent risk
Control risk
Detection risk

49
Q

What is inherent risk?

A

susceptibility of the assertion about transactions, balances or disclosure to a misstatement which could be material, assuming there were no related internal costs

50
Q

What is control risk?

A

risk that a misstatement isn’t prevented, detected or corrected by an entity’s internal control systems

51
Q

What is detection risk?

A

risk that procedures performed by an auditor doesn’t detect a misstatement that exists and is made up of
Sampling risk
Non-sampling risk

52
Q

What is sampling risk?

A

risk that the conclusion drawn from the results of a sample test is diff to the conclusion that would’ve been drawn had the whole population been tested

53
Q

What is non-sampling risk

A

risk of drawing the wrong conclusions for other reasons than sampling

54
Q

What are the signif risk areas that requite special audit consideration?

A 
Fraud 
Related party transactions 
Subjective items
Complex items 
Unusual transactions
55
Q

What risks must an auditor identify?

A

ISA 315 requires the auditor to identify specific risks arising at each audit client

56
Q

What are the specific risks that are common in most audits?

A

Management override
Risk i present in every audit engagement
Management is in a unique position to manipulate acc records so audits must assess the risk during the planning stage
Journals
Fraudulent activity may be carried out using inappropriate or unauthorised journal entries
Auditor should test journal entries for
Unusual items
Round number entries
Journals made by indivs who don’t normally do so
Journals made outside office hours
Postings to suspense accounts
Revenue recognition
Risk of misstatement is higher where management reward is linked to revenue or profit
Cyber security

57
Q

What is management override risk?

A

Risk is present in every audit engagement

Management is in a unique position to manipulate acc records so audits must assess the risk during the planning stage

58
Q

What is journal risk and how should they be tested?

A

Fraudulent activity may be carried out using inappropriate or unauthorised journal entries
Auditor should test journal entries for
Unusual items
Round number entries
Journals made by indivs who don’t normally do so
Journals made outside office hours
Postings to suspense accounts

59
Q

What is revenue recognition risk?

A

Risk of misstatement is higher where management reward is linked to revenue or profit

60
Q

In the audit approach, how should an auditor reduce the audit risk to suitable level?

A

Determine overall responses to assessed risk at the FS level
Perform audit procedures to response to a assessed risks at the assertion level

61
Q

What are involved in the overall responses of reducing audit risk to an acceptable level?

A

Emphasise staff need to maintain professional scepticism
Assign extra/more experienced staff
Use the work of experts, internal auditors and other auditors
Provide more supervision on the audit
Incorporate more unpredictability into audit procedures

62
Q

What are involved in the responses at assertion level of reducing audit risk to an acceptable level?

A

Adjust the nature,natures tent and timing of procedures in response to assessed risks
Nature: type of test
Extent: how much testing
Timing: during the year, at the y.e and after y.e

63
Q

What must the auditor assess when planning to rely on the work of others?

A

General assessment
Consider whether third party is competent and independent
Specific assessment
Consider whether the piece of work on which the auditor wants to place reliance on is suitable for this purpose

64
Q

What is the specific assessment required when the auditor intends to rely on info from others ?

A

Consider whether the piece of work on which the auditor wants to place reliance on is suitable for this purpose

65
Q

What is the general assessment required when the auditor intends to rely on info from others ?

A

Consider whether third party is competent and independent

66
Q

What must an auditor do if they expect controls to be effective?

A

Test controls
if found to be effective, do limited substantive testing
If not found, do significantly substantive testing

67
Q

What must an auditor do if they don’t expect controls to be effective?

A

Carry out substantive testing

i.e. analytical procedures and tests of detail

68
Q

What action is required when signif substantive testing is required?

A

Analytical procedures

Tests of detail

69
Q

What must be done when carrying out limited substantive testing?

A

Perform some substantive testing due to inherent limitations of control

70
Q

What should the audit plan be guided by?

A

Overall audit strategy

71
Q

What should the audit plan include a description of?

A

Nature, extent and timing of planned risk assessment procedures
Nature, extent and timing of further audit procedures at the assertion level

HOWEVER Plan will develop over time, so the auditor doesn’t play how to audit indiv acc balances until they have considered the results of their risk assessment procedures
Audit plan should be modified where necessary in response to new info, or the results of audit testing carried out

72
Q

Why is an audit plan not rigid?

A

Plan will develop over time, so the auditor doesn’t play how to audit indiv acc balances until they have considered the results of their risk assessment procedures
Audit plan should be modified where necessary in response to new info, or the results of audit testing carried out

73
Q

When must an audit plan be modified?

A

where necessary in response to new info, or the results of audit testing carried out

74
Q

What is cyber security?

A

Cyber security protects systems, networks and data in cyberspace

75
Q

What does cyber security include?

A

The protection of data from unauthorised modification, disclosure or destruction
The protection of the info systems from failure

76
Q

Why is cyber security v important for most orgs?

A

Increasing use of technology and constantly evolving risk makes this v important for most organisations

77
Q

What are the key risk areas for entity’s IT system?

A 
Hacking
Fraudulent theft of funds
Deliberate sabotage 
E.g. commercial espionage/malicious damage 
Viruses, malware and other corruption
Denial of Service attacks
78
Q

What are the risks for businesses that auditors must react to?

A

Reputational damage
Breaches of data protection legislation leading to fines
Misstatements in FS

79
Q

What should IT security controls cover?

A

prevention, detection, deterrance and recovery procedures

80
Q

What practical measures are included in IT security controls?

A

Business continuity planning
Measure to ensure the business can continue in the event of a disaster/system failure
Systems access control
Protection of systems and detection of unauthorised activity
Systems development maintenance
IT projects should be conducted securely and development/maintenance should ensure systems/data are protected
Physical and env security
Prevention of unauthorised access, damage, theft or interference with assets/systems
Compliance
Monitor compliance with legal requirements and organisational policies
Personnel security
Recruitment of trustworthy employees, training and reporting arrangements
Security organisation
Clear reporting lines and responsibility for info security
Computer and network management
Protection of system integrity (e.g. from viruses/malware) and info especially when exchanged between organisations
Asset classification and control
Assign ownership of info assets
Security policy
Written policy available to all employees

81
Q

What does business continuity planning do?

A

Measure to ensure the business can continue in the event of a disaster/system failure

82
Q

What does systems access control do?

A

Protection of systems and detection of unauthorised activity

83
Q

What does systems development maintenance do?

A

IT projects should be conducted securely and development/maintenance should ensure systems/data are protected

84
Q

What is physical and env security?

A

Prevention of unauthorised access, damage, theft or interference with assets/systems

85
Q

What is personnel security?

A

Recruitment of trustworthy employees, training and reporting arrangements

86
Q

What are computer and network management?

A

Protection of system integrity (e.g. from viruses/malware) and info especially when exchanged between organisations

87
Q

What is security policy?

A

Written policy available to all employees

88
Q

What is cloud computing

A

allowing users to access data from any location

89
Q

What are the benefits of cloud computing?

A

Creates cost savings compared to traditional IT storage on site

90
Q

What are the disadvantages of cloud computing?

A

passes on control of data to a cloud-service provider

Creates danger that inadequate cyber security could lead to data being lost, corrupted stolen

91
Q

What must auditors consider re cloud computing?

A

consider whether the cloud-based service provider’s controls are reliable

AA (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions