Chapter 10 - Risk Response: Putting it All Together

Question 1

What are the steps to risk response at the financial statement level?

Answer 1

1. Identify the risk through understanding the entity.
2. Assess the risk and develop an overall risk response at the overall financial statement level.
3. Team Discussion

Question 2

What are some topics that should be discussed on the “identifying the risk by understanding the entity level”?

Answer 2

1. Industry factors
2. Regulatory requirements
3. Nature of the business - Operations and processes
4. Business Model - Objectives, strategies, and related business risks.
5. Performance measurements
6. Accounting Policies

Question 3

What are some topics to be discussed at the “assess the risk and develop an overall risk response at the overall financial statement level”

Answer 3

1. With each of the risks identified in the first step (entity specific risks) , list them down in the working paper and indicate what impact it has on the OFSL risk. Then provide a response as to how you will improve it.
2. Provide an evaluation of indirect controls and the related risks, indicating whether it increases or decreases the risk and if it increases what response would be necessary.
3. Just provide an overall risk response and indicate what the overall impact is.

Question 4

What should the overall financial statement level risk response include?

Answer 4

1. Types and allocation of resources
2. timing of the engagement
3. Changes to the nature, timing, and extent of the audit procedures based on the risks identified.
4. An audit team meeting to consider the fraud risk and discuss the potential for employee fraud and management override.

Question 5

What are the 4 agenda items for the risk response team discussion?

Answer 5

1. Review the risks and brainstorm fraud risks.
2. Design a risk response
3. Update the overall audit strategy, overall response, and detailed audit plans
4. Discuss audit milestones, supervision, and communications required to those charged with governanceTCWG

Question 6

What information is required to prepare the overall audit strategy?

Answer 6

Derived from understanding the entity and its environment, identifying inherent risk factors, and understanding and evaluating the internal controls system.

Question 7

What is the overall audit strategy?

Answer 7

The scope (the accounting framework) , timing (reporting deadlines and when work will be performed), and factors significant in the direction of the engagement teams efforts.

The nature and extent of resources necessary and a more detailed audit plan is developed.

Question 8

What are the four key planning decisions?

Answer 8

1. Risk of material misstatement
2. Approach
3. Materiality
4. Procedures

Question 9

What should be included in the overall audit plan?

Answer 9

1. Overview
2. Planned scope and timing of the audit
3. Materiality
4. Significant Risks - Explanation
5. Risk responses
6. An audit time table for key activities in the audit plan
7. Firm contacts

Question 10

What must be assessed before developing a risk response at the assertion level? What is the purpose of these two steps?

Answer 10

1. Perform an assessment of RMM at the OFSL
2. Perform an assessment of RMM at the assertion level.

• Helps the auditor scope out where to focus the audit effort

Question 11

What are the 2 conditions that affect the scope to focus the audit effort?

Answer 11

1. Which accounts are material?
2. Which accounts are high risk

Question 12

What are the 3 key points to assess when developing an effective risk response at the assertion level?

Answer 12

1. Performance Materiality
2. Understanding the entity
3. Nature of the assessed risk.

Question 13

What are the two considerations in performance materiality?

Answer 13

• The account balances, classes of transactions, or disclosures are material
• Regardless of risk assessment, auditors are required to design and perform substantive procedures for each material class of transactions, account balance, and disclosure

Question 14

What are two considerations in understanding the entity?

Answer 14

• Particular characteristics of the relevant class of transactions, account balances, and disclosures
• Experience in prior period audits

Question 15

What are five considerations in the nature of assessed risk?

Answer 15

• Overall RMM at the assertion and OFSL
• Significant risks that require special audit attention
• Procedures performed before the end of period
• Assessed level of risks assume effective operation of controls
• Areas where substantive procedures alone are not sufficient audit evidence

Question 16

What are the four parts to the summary of assessed risk at the assertion level document. Explain what each one does.

Answer 16

1. Summary of the significant assertion level risks - Discussion of the asserion level risks, take into account revenue transactions.
2. Existence of relevant controls - Controls that exists fir the relevant cycle.
3. Risk response - Guides the development of further audit procedures.
4. General procedures - For each audit cycle, basic substantive procedures will be used to address a particular assertion.

Question 17

What are further audit procedures?

Answer 17

1. Test of controls
2. Substantive testing (Test in details and substantive analytical procedures)

Question 18

What are considerations when selecting an audit approach to perform the audit?

Answer 18

The OFSL control risk (If high cannot rely upon controls and substantive would be taken instead and if low can rely upon the controls and use the assessment of control risk to determine areas they believe are operating efficiently.

Question 19

Why are analytical procedures effective?

Answer 19

1. Provide evidence for multiple assertions.
2. Identify audit issues that may not be apparent from detailed tests of transactions.
3. Direct the auditors attention to areas requiring further audit procedures.

Question 20

What happens if analytical procedures support that an account is reasonable?

Answer 20

1. Some test of details can be eliminated
2. Sample sizes for the test of details can be reduced.

Question 21

What are the four types of possible audits?

Answer 21

1. Significant Internal Controls
2. Some controls
3. Limited / No Controls
4. Limited / No Controls and Switch in Audit Approach

Question 22

Describe significant internal controls audit 1

Answer 22

Sophisticated internal controls exist, auditor performs extensive test of controls and relies heavily on internal controls to reduce test of details. In addition, more heavy focus on the substantive analytical procedures rather than test of details.

Question 23

Describe the some control audit 2

Answer 23

Effective controls exist and auditor identified some effective controls at the assertion level. Combined audit approach taken, medium amount of test of controls, substantive analytical and test of details. More substantive testing done for areas with high RMM.

Question 24

Describe limited / no controls audit 3

Answer 24

Few effective controls and significant RMM, management decided not to implement better internal controls. Test of controls are only performed to ensure auditors understanding of controls however not used to lower control risk assessment. Heavy emphasis on test of details as well as substantive analytical procedures. Cost likely to be high.

Question 25

Describe limited / no control and switch in audit approach audit 4

Answer 25

Audit has planned to rely upon controls and follow a combined approach, however auditor found control test deviations and significant misstatements in substantive testing. Thus the auditor concludes that controls are not effective and reverts to a wholly substantive approach. Extensive test in details required and costs higher as they had performed test of controls that no longer can be used.

Question 26

What situation would give rise to impossible audit procedures?

Answer 26

If there is a large firm that processes millions of transactions and is highly autonomous, and then the auditor concluded that controls were ineffective, it would be likely that the audit cannot be performed.

Question 27

Based on the three types of audit procedures, what types of procedures do they encompass?

Answer 27

1. Test of Controls - Inspection, observation, Inquiry with client, recalculation, and reperformance. 2. Test of details - Inspection, inquiry with client, external confirmation, recalculation, and reperformance 3. Substantive analytical - Inquiry and analytical

Question 28

What are the 4 general rules for further audit procedures? Describe them

Answer 28

1. Test of controls - Only test a control if you have reasonable expectation that the control has operated reliably throughout the period 2. Dual Purpose Test - To improve audit efficiency, consider if dual purpose tests are possible 3. Substantive Analytical procedures - Use these account balances or classes of transactions that can be reasonably predicted. 4. Test of details - Design audit procedure that will obtain necessary audit evidence for the assertion being tested in the most efficient manner.

Question 29

What are dual purpose tests? What is the planning consideration?

Answer 29

Procedures that consist of test of controls and substantive tests of details being performed concurrently on the same transaction. If you are going to perform test of controls, dual purpose tests can improve the efficiency.

Question 30

What are unpredictable procedures? What is the planning consideration?

Answer 30

If fraud risk is high for a particular assertion, auditors are required to incorporate an element of unpredictability in developing procedure such as an unannounced visit for inventory counts. Consider what type of information to provide to the management client with regard to audit procedures and their timing

Question 31

What are these following specific procedures and what are the planning considerations? - Management Override - Revenue Recognition - Significant Risks

Answer 31

- Specific audit procedures designed to address the potential risk of management override. - Auditors are required to assume that the risk of revenue recognition is high - Audit procedures that are designed to address significant risks identified through Risk assessment procedures. Those with high RMM have significant risks Planning Considerations: - Auditors must develop specific procedures that account for management override and risk of revenue recognition fraud. - Auditors cannot perform only substantive analytical procedures for significant risks

Question 32

What are audit procedures for closing and what are its planning considerations?

Answer 32

These procedures address the clients closing financial processes. Regardless of the audit approach, auditors must perform procedures related to financial statement closing

Question 33

What are test of controls and its planning considerations?

Answer 33

What is it: - Identify relevant internal controls that could reduce the need / scope for other substantive procedures - No requirement to perform test of controls unless substantive procedures are not available. Planning Considerations: - Required for highly automated processes that do not have an audit trail - Sample size for control tests us significantly less than test of details for a transaction stream. - Assuming relevant controls operate consistently and control deviations unlikely, test of controls can reduce work required to be performed.

Question 34

What are test of details and its planning considerations?

Answer 34

- Examination of the details of a sample (or all) of the underlying transactions /balance for an account / group of accounts - If RMM at assertion level states significant risk, planned audit response states substantive procedures, they must include a test of details.

Question 35

What are substantive analytical procedures and its planning considerations?

Answer 35

- Total amount of a transaction stream or account balance can be reliably predicted and then compared to the actual amounts - If inherent risk is low for a particular assertion, auditor may state that the substantive analytical procedure alone is sufficient audit evidence.

Question 36

What are two circumstances when substantive procedures must be performed?

Answer 36

- Each material class of transaction, account balance, and disclosure (regardless of assessed RMM) - Each significant risk at the assertion level. If the approach to significant risk is only substantive procedures, test of details must be included.

Question 37

What are 5 other significant risks?

Answer 37

1. Non routine related party transactions 2. Estimates 3. Non compliance with laws and regulations 4. Going concern 5. Subsequent events.

Question 38

What is the clients period end financial process?

Answer 38

1. Enter transactions into the general ledger 2. Evaluate the accounting policies 3. Record journal entries into the general ledger 4. Record recurring and non recurring adjustments to the financial statements

Question 39

What are the 2 procedures required by auditors in the closing financial

Answer 39

1. Agree / reconcile the financial statements with the underlying accounting records. 2. Examine material journal entries and other adjustments made when preparing the financial statements

Question 40

What does the extent of procedure mean? How do we determine the number of items to test for controls and details?

Answer 40

It means the number of items to select that we are going to test. Test of controls - Expected deviation rate (based on control risk) and how often the control is performed Test of details - Determined by the outcome of substantive analytical procedures and RMM assertion. The higher the RMM the more testing needed.

Question 41

Describe the timing of procedures for interim vs year end balances. What is the impact if clients want to issue the statement soon after the balance sheet date? Does this method provide much assurance?

Answer 41

- Since the test of controls and dual tests determine the extent of the substantive tests, these are done at interim 2-3 months prior to year end to ensure that auditors may revise the test of details audit program for unexpected results and complete the audit as soon as possible after the balance sheet date. -The more time consuming test of details balances will be done at interim audit dates prior to the year end, with additional work being done to roll forward the audited interim date balances to year end, including journal entries and other activities during the period. - no since you have done the significant testing 3 months before other available information and the internal controls have not been assessed to be effective.

Question 42

What is roll forward?

Answer 42

Substantive work on journal entries and transactions from a date prior to the balance sheet date to the year end.

Question 43

Describe throughout the year timing of procedures

Answer 43

For clients with highly sophisticated accounting systems. auditors will perform test of controls and substantive test of transactions throughout the year to identify significant or unusual transactions and determine whether any changes have been made to the clients computer system.

Question 44

What is continuous auditing?

Answer 44

Any method used by auditors to perform audit related activities on a more continuous or continual basis.

Question 45

What does the detailed audit plan outline?

Answer 45

1. Different types of the test of details - Inspection, reperformance, recalculations 2. Extent of the testing 3. The timing of the tests - Essentially we go into the specific details of the accounts

Question 46

What are the three substantive audit procedures?

Answer 46

1. Substantive analytical procedures alone (can only be used if material misstatements not significantly high) 2. Test of details (must be used if material misstatements are high) 3. Use a combination of the two