Chapter 3 Deck 4 Flashcards
Which of the following types of evidence would an auditor most likely examine to determine whether internal controls are operating as designed?
Client records documenting the use of EDP programs would be a relevant item for an auditor to examine while determining if internal control is operating as designed. (Think of whether or not it uses dollar amounts and is a substantive test or if it has to do w/ controls)
Obtaining an understanding of an internal control involves evaluating the design of the control and determining whether the control has been?
When evaluating a client’s internal controls, the auditor must first obtain an understanding of the design of the controls and then determine if the controls have been implemented.
Which of the following is the best way to compensate for the lack of adequate segregation of duties in a small organization?
The best compensating control for the lack of segregation of duties in smaller organizations is to have more management oversight of incompatible functions.
If an auditor is obtaining an understanding of an issuer’s information and communication component of internal control, which of the following factors should the auditor assess?
The classes of transactions in the issuer’s operations that are significant to the issuer’s financial statements are typically assessed when the auditor is obtaining an understanding of the information and communication component of internal control.
Which of the following statements is correct concerning an auditor’s assessment of control risk?
Some risk assessment procedures performed to obtain an understanding of internal control may provide evidence about operating effectiveness, even if they were not intended for that purpose. This is possible because the procedures performed to achieve one objective may also provide evidence regarding the other.
The lower the assessed level of control risk (that is, the greater the reliance placed on the control), the more what?
assurance the auditor must gather that the controls are operating effectively.
When there are numerous property and equipment transactions during the year, an auditor who plans to assess control risk at a low level usually performs:
Since control risk is assessed at a low level, tests of controls would be required to evaluate the effectiveness of the internal controls to support that assessed level. However, the need for some substantive tests of transactions is never eliminated.
After obtaining an understanding of the entity and its environment, including its internal control, an auditor decided to perform tests of controls. This is likely because?
After obtaining an understanding the entity and its environment, including its internal control, the auditor may make a risk assessment that assumes controls are operating effectively. In such cases, the auditor performs tests of controls to obtain evidence supporting this assessment.
To obtain audit evidence about control risk, an auditor selects tests from a variety of techniques including?
Tests of controls include such procedures as inspecting documentation, inquiry, observation, and reperformance. Note that inquiry alone is not sufficient as the auditor should use a combination of procedures.
The objective of tests of details used as tests of controls is to?
Evaluate whether an internal control operated effectively.
Inquiry, inspection, observation (and reperformance) are all tests that may be used to evaluate what?
the operating effectiveness of an internal control activity
What things will support an auditor’s conclusion for a lower level of assessed control risk?
a. Observation by the auditor provides more assurance than audit evidence obtained by inquiry alone.
b .Prior audits may be considered by the auditor in assessing control risk in the current audit.
c. An audit of financial statements is a cumulative process.
After performing risk assessment procedures, an auditor decided not to perform tests of controls. The auditor most likely decided that?
After performing risk assessment procedures, an auditor might decide not to perform tests of controls because it would be inefficient. In other words, the time required to perform tests of controls would be greater than the reduction in time spent on substantive testing.
As part of understanding internal control, an auditor is not required to?
As part of understanding internal control, an auditor is not required to obtain knowledge about the operating effectiveness of controls. Operating effectiveness is evaluated later, and only for those controls on which the auditor plans to rely.
What documentation is required for an audit in accordance with generally accepted auditing standards?
- The auditor is required to prepare a written audit plan.
- Audit documentation should be sufficient to show that the accounting records agree or reconcile with the financial statements.
- Establishing an understanding with the client is required by GAAS, and an engagement letter is a presumptively mandatory requirement.