Chapter 3 Flashcards
What is definition of internal control?
the process designed, implemented and maintained by directors and management to ensure the RELIABILITY of financial reporting, effectiveness and efficienct of operations, and compliance with applicable laws and regulations
Who regulates internal control?
UK Corporate Governance Code
They states the BOARD responsibility to maintain sound risk management and internal control systems
Part of the role of the AUDIT COMMITTEEof the board (3 NED, one with recent, relevant financial experience)
What are the responsibilities of the audit committee
- Oversight of financial and narrative reporting
- Internal controls and risk management
- Whistleblowing and fraud
- Internal and External auit
- Repoprting to the board and shareholders
Part of a company’s internal control systems should include the assessment of its key business risks? What are these?
Financial Risks, Compliance Risks, Operational Risks
Financial Risk
Risks that would affect company’s cash flow (e.g. chang in intR or exR)
Compliance Risk
risks relating to laws and regulations
Operational Risk
Risks relating to the day- to day operations of the business (loss of key staff, inventory management)
What is the internal control system? What are the 5 elements of internal control?
The company needs policies and procedures which acknowledge and manage business risks, this is called the internal control system
CCMRI
Control environment
Control activities’
Monitoring of controls
Risk assessment process
Information system
Internal control system: Control environment
The attitudes, awareness, and actions of management concerning the company’s internal control and its importance in the company.
The control environment sets the tone of an organisation, influencing the control consciousness of its people
Internal control: risk assessment process
The process for identifying and controlling the risks in the business
Internal control system: Information system
Information system relevant to financial reporting
Internal control system: control activites
policies and procedures that help ensure management directives are carried out
Internal control systems: monitoring of controls
Managements monitoring of controls includes considering whether they are operating as intended and that they are modified as appropriate for changes in conditions
Limitations of internal control
1) Human error is always possible
2) Staff could collude to get around the system
3) Management override of controls is possible
4) Many controls could cover routine transactions
5) The cost of the controls may outweigh the benefits
Define ‘audit’
An evaluation of an organisation, system or process
What is an assurance services
An external audit performed by an external person who is independent.
Define an ‘external audit’
An independent examination and expression of opinion on the financial statements of a company
examination - obtain sufficient evidence on which to base the audit opinion
opinion prepared for benefit of shareholders
independence - crucial if audit opinion to have credibility
What is a true and fair view
An external auditors opinion states that the financial statements give a true and fair view of the position, performance and cash flows of a company
True - factual and applies w accounting standards
Fiar - clear, impartial and unbiased
International version of ‘True and fair view’
‘Faithful representation’
Means financial statements are complete, neutral and free from error
What is the expectation gap?
An audit does not provide absolute assurance or guarantee of correctness. The misconception by users that they are is called the ‘expectation gap’/
The accountancy profession addresses common misconceptions through the audit engagement letter
What is an audit engagement letter
Details the contract between the client and the audit firm before audit. Review every year to ensure up to date. Only needs to be reissured if changes to terms, or evidence directors misunderstand the nature of the audit
What is a stewardship
External audit addresses the ‘Agency Issue’. Directors are considered stewards of the company, they are accountable to the shareholders for the performance. External audit gives accountability.
auditor gives opinion to shareholders
from independent examination of financial statements that are prepared by directors
Company owned by shareholders but run by directors
DIAGRAM
What are the limitations of external audits
Integrity of client management, nature of financial reporting, limited amount of time, samples
Integrity of client management: Auditor rely on client management to provide infor and access, client management could hid if wanted to
* Nature of financial reporting: it inherently involves management judehement and subjective decisions, which may be influenced by bias
* Limited amount of time: spent on clients premises, testing only a sample of items (due to cost benefit ratio.
* Samples: Auditors select samples for testing based on where greatest risk lies. They plan work to detect material error and fraud, minor error and fraud may not be detected
What are the rights of external auditors?
- Right to receive info and explanations from company personnel
- Right to receive notice of general meetings
- Right to speak at general meetings on matters that are related to the audit
What are the two different types of audit tests
Controls testing
Detailed testing
What is Controls Testing
on Systems to ensure that:
the internal control systems that directors have in place are:
-capable of preventing errors in financial information
-or detecting and correcting them
What is detailed testing
on higher risk areas to ensure that reported transactions and balances do not contain material missstatements
What is audit risk
The risk that an audditor gives an inappropriate opinion
What are the three elements of audit risk
Inherent risk
Detection Risk
Control Risk
Audit risk: Inherent risk
always INHERENT risk due to OTHER things
the risk posed by an error or omission in a financial statement due to a factor other than a failure of internal control
The risk of a material misstatement before consideration of internal controls present
Can be considered at:
The financial statement level (factors that could impact the whole entity and therefore its financial statements)
assertion level (specific claims being made in the financial statements)
Audit risk: Control risk
MM not picked up by CONTROLS or accounting systems
The risk that material misstatements are not picked up by the accounting and internal control systems
Audit risk: Detection risk
AP doesnt DETECT MM
The risk that the auditors procedures will not detect a misstatement
What is the documentation of audits?
-required to document their work
-produces an ‘audit trail’
-documentation should be sufficient enought that an experience auditor can read the working paper and understand what has been done and what conclusions have been drawn
what must audit evidence be?
sufficient
appropriate
where evidence is less reliable (approp), more will be needed (sufficient)
Audit evidence: Sufficient
-having enough evidence
-one very conclusive piece
-several pieces that corroborate with each other
Audit evidence: appropriate
-evidence must be reliable and relevant
Reliable
-independant external source
-if internal, subject to effective control
-obtained by auditors themselves
-documented not verbal
-original form
What is the Audit report
-outlines the audit opinion in writing to the shareholders
-filed as a matter of public record
Audit report: If conclusion is that financial statements are prepared within financial reporting framework and materially present a true and fair view
- the report will contain an unmodified opinion
Audit report: If conclusion finds that financial statements include material misstatements
Report would be qualified
QUALIFIED OPINION-If isolated misstatement - it is true and fair with exception to this issue - auditors would explain this -
ADVERSE OPINION - multiple or particularly significant misstatements - financial statements do not give a true and fair view
Audit report: Auditors couldn’t obtain enough evidence
1) cant determine a true and fair view
2) DISCLAIMER - they disclaim any opinion
or only one area - they say ‘except for this area true and fair
Audit report: Accounts give true and fair view but a matter properly disclosed is so important that auditors want to highlight it
Give unmodified opinion, but modify standard report to highlight important matter
What is the report on control deficiences
If auditors have discovered any significant deficiencies in internal controls at the company. They may also discuss minor deficiencies with management for improvement. Report is private to the board and will not be issued to shareholders or 3rd parties
What is the future of audit?
-Audit profession has come under heavy criticism due to some high profile company failures
-The UK gov commission reviews on the audit process and issued a white paper, relating to proposed changes in the structure and purpose of external auditing. Kingman review and Brydon review.
What is internal audit?
Internal auditing: independent, objective assurance and consulting activity designed to add value and improve an organisations operations.
- Typically focusses on accounting/internal control systems of a company
- present reports directly to the audit committee
- Can be outsourced to an external company,
Internal vs External: Objectives
EA – To add credibility and reliability to financial reports from the company to its stakeholders
IA - To evaluate and improve the effectiveness of governance, risk management and control processes.
Internal vs External: Standards
EA – Must follow International Standards on Auditing (ISAs)
IA – Can choose to use the guidelines of the Institute ofInternal Auditors (IIA).