Chapter 6

Question 1

What are the six principles of the AICPA Code of Professional Conduct?

Answer 1

The six principles (articles) of the Code of Conduct are:

• Responsibilties
• Public interest
• Integrity
• Objectivity and Independence
• Due care
• Scope and nature of services

Question 2

Under the AICPA Code of Professional Conduct, Rule 101, independence is impaired:

Answer 2

1. If a member has a direct financial interest with attestation clients without regard to materiality;
2. If a member has a material indirect financial interest in the client;
3. If a member or a member’s immediate family member has a loan to or from the client;
4. If a member accepts more than a token gift;
5. If a member is an employee of or makes management decisions on behalf of the client;
6. If the client is overdue more than one year in the payment of professional fees to the member; and
7. If there is actual or threatened litigation between the member and the client

Question 3

According to the AICPA Code of Professional Conduct, Rule 203, a departure from GAAP may be justified under what circumstances?

Answer 3

A departure from GAAP may be justified only if compliance with GAAP would cause the F/S to be misleading.

Question 4

Under Rule 301, in what circumstances must a CPA disclose confidential client information without the consent of the client?

Answer 4

A CPA must disclose confidential information without client consent under the following circumstances:

• It is necessary to comply with a valid subpoena or summons
• As part of a quality review of the CPA’s profesional practices authorized by the AICPA
• In response to any inquiry made by the ethics division or the trial board of the AICPA, or by a duty-constituted investigative body of a state CPA society

Question 5

When are contingent fees prohibited under Rule 302?

Answer 5

Contingent fees are prohibited for:

• Audit of F/S
• Reviews of F/S
• Examinations of prospective financial information

Question 6

What is an “issuer” and what group establishes standards for audit reports of issuers?

Answer 6

An issuer is an entity subject to the rules of the SEC (this would include primarily public companies)

The Public Company Accounting Oversight Board (PCAOB) establishes standards for audit reports of issuers.

Question 7

Titel I of the Sarbanes-Oxley Act of 2002 (SOX) requires that registered firms must adhere to what auditing standards?

Answer 7

• Audit workpapers must be maintained for seve years
• A concurring or second partner review is required for each audit report
• The audit report must describe the scope of the testing of the issuer’s internal controls

Question 8

Under SOX Title II, what services must be preapproved by the audit committee and what services may not be provided to an audit client?

Answer 8

All auditing services and permitted non-audit services (including tax services) must be preapproved by the audit committee

Prohibted services include:

• Bookkeeping
• Financial information systems desgin and implementation
• Appraisal and valuation services
• Actuarial services
• Management functions and HR functions
• Internal audit outsourcing services
• Investment-related services
• Legal services
• Expert services unrelated to the audit

(Note: SEC regulation S-X contains these same rules)

Question 9

What are the audit partner rotation rules under SOX Title II and SEC Regulation S-X?

Answer 9

• Both SOX and Regulation S-X required the lead and concurring partner to rotate off the audit every 5 years
• Regulation S-X further requires other partners to rotate off every 7 years. Lead and concurring partners are subject to a 5 year “time out” and other partners are subject to a 2 year “time out”

Question 10

What must be reported by the auditor to the audit committee under SOX Title II and SEC Regulation S-X?

Answer 10

• Critical accounting policies and procedures used
• Alternative accounting treatments discussed with management, the ramifications of alternatives, and the treatment preferred by the auditor
• Material written communications between the auditor and management

Question 11

What is the required cooling-off period under SOX Title II and SEC Regulation S-X?

Answer 11

The audit firm cannont have employed an issuer’s CEO, CFO, controller, CAO, or other employee in a financial reporting oversight role during the one year preceding the audit.

Question 12

What is the required content of management’s internal control report under SOX Title IV?

Answer 12

• Management’s responsibility for establishing an adquate internal control structure for financial reporting
• An assessment of the effectiveness of the current year’s control structure

Question 13

What are the PCAOB’s tax-related independence rules?

Answer 13

• Registered firms may not provide confidential or aggresive tax transactions to audit clients
• Registered firms may not provide tax services to corporate officers of audit clients or their immediate family members
• Audit committee must preapprove tax services and related fees

Question 14

Under the SEC’s principles of independence, a client relationship or a service provided to an audit client would create independence issues if it:

Answer 14

• Creates a mutual or conflicting interest between the auditor and client
• Results in the auditor acting as management or an employee of the audit client
• Places the auditor in a position of auditing his or her own work
• Makes the auditor an advocate for the audit client

Question 15

Explain the conceptual framework approach under IFAC’s Code of Ethics and idenfity threats to compliance with its fundamental principles

Answer 15

IFAC’s Code is based on a conceptual framework (versus a set of rules) that requires entities to identify, evaluate, and address threats to compliance with its fundamental principles. These threats include:

• Self-interest threat
• Self-review threat
• Advocacy threat
• Familiarity threat
• Intimidation threat

Question 16

How long must audit documentation be retained for issuers and nonissuers?

Answer 16

PCAOB rules require that auditors retain audit documentation of public companies (issuers) for seven years from the report release date

SAS rules require that auditors keep audit documentation for nonissuers for a least 5 years from the report release date.

The report release date is the date on which the auditor gives the client permission to use the report (often the date the report is delivered to client)

Question 17

What are the advantages and disadvantages of auditing with a computer?

Answer 17

Advantages:

• Less math errors due to automatic performance of math on all documents
• Automatic cross-referencing of amounts by linking each lead schedule to the working trial balance and F/S
• Automatic preparation of F/S, tax return schedules, and consolidation schedules
• Reduction in required supervisory review time
• Automatic performance of certain analytical review procedures
• Enhanced client service
• Improved morale and productivity of audit team

Disadvantages:

• Audit documentation may not contain readily-observable details of calculations

Question 18

Describe the “auditing around the computer” and identify when it is appropriate and not appropriate

Answer 18

When auditing around the computer, the auditor does not directly test the application program, but instead tests the input data, processes the data independently, and then compares the independent results to the program results.

This method is appropriate for simple batch systems that have a good audit trail. Auditing around the computer is not appropriate when there is insufficient paper-based evidence.

Question 19

List and briefly define the types of computer assistend audit techniques (CAATs) that may be used

Answer 19

• Transaction tagging - electronically marks specific transactions
• Embedded audit modules - sections of program code collect data for the auditor
• Test data - use of the client’s system to process the auditor’s data, off-line
• Integrated test facility - use of the client’s system to process the auditor’s data, online
• Paralle simulation - use of the auditor’s system to re-process client data

Question 20

In conducting an audit of an organization receiving federal financial assistance, what additional audit procedures must be performed in addition to the general requirements of GAAS and GAGAS?

Answer 20

Those procedures performed under GAAS and GAGAS plus:

• The auditor should obtain and document an understanding of internal control established to ensure compliance with the laws and regulations appicable to the fedreal financial assistance
• In some instances, tests of controls are mandated to evaluate the effectiveness of such controls

Question 21

Audits of govenmental entities may draw on up to 3 sets of standards or supplementary requirements. What are they and what are the circumstances that surround their application?

Answer 21

Generally Accepted Auditing Standards (all audits)

Generally Accepted Government Auditing Standards (Yellow Book audits): auditee is a government, or receives financial assistance from the government

OMB Circular A-133 (Single Audits of Federal Financial Assistance): an entity expending more than $500,000 in federal financial assistance annually

Question 22

Identify the additional auditor responsibilities associated with government audits under GAGAS

Answer 22

• Obtaining an understanding of how laws, rules, and regulations relate to F/S amounts
• Assessing the degree to which management has identified laws, rules and regulations that have a material impact on F/S amounts
• Obtaining reasonable assurance that F/S are free from material misstatements resulting from violations of laws, rules, and regulations associated with the determination of F/S amounts
• Communication to management, as appropriate, that GAAS procedures alone will not fulfill additional audit requirements related to an audit of a government or of governmental assistance.

Question 23

Identify the 3 types of governmental audits/engagements normally undertaken by CPAs

Answer 23

Financial Audits

• Engagements primarily designed to determine the fair presentation of F/S in conformity with GAAP or an OCBOA. Financial audits also include audits of specified elements of the F/S, etc.

Attestation Engagements

• Examinations, reviews, and agreed upon procedures, etc.

Performance Audits

• Effectiveness, economy and efficiency audits, internal controls and compliance audits

Question 24

In conducting an audit of an organization under Generally Accepted Government Auditing Standards, what audit documentation, in addition to that required by Generally Accepted Auditing Standards, must also be included?

Answer 24

Internal control documentation must include:

• Consideration of procedures that ensure the auditee’s compliance with laws, rules and regulations
• Written representations from management with regard to management’s identification of material laws, rules and regulations; management’s responsibility for ensuring compliance with laws, rules and regulations; and management’s knowledge of any violations that should be disclosed or recorded.

Question 25

When reporting on a client’s internal control deficiencies and weaknesses under GAGAS the auditor is required to perform which procedures?

Answer 25

When reporting on a client’s internal controls, the auditor must:

• Obtain an understanding of the design of relevant controls and determine whether they have been implemented
• Communicate all significant deficiencies noted during the audit, even those that do not result in material weaknesses;
• Prepare a written report on the auditor’s understanding of the client’s internal control and assessment of control risk; and
• Report significant deficiencies to specific legislative and regulatory bodies

Note: The third bullet point is required for GAGAS, but not GAAS

Question 26

How does materiality under the Single Audit Act differ from materiality under both GAAS and GAGAS?

Answer 26

Under the Single Audit Act, materiality is considered in relation to each major program, not simply in relation to the F/S

Question 27

What are the two types of requirements surrounding federal financial assistance programs?

Answer 27

• General requirments involve national policy and apply to most federal financial assistance programs
• Specific requirements apply to a particular federal program and generally arise from statutory requirements.

Question 28

Material instances of noncompliance include:

Answer 28

• Failure to follow requirements.
• Violations of rules contained in statutes, regulations, contracts, or grants

Question 29

Discovery of illegal acts requires specific written communication under different circumstances.

Which parties may be notified?

Answer 29

Any of the following may be notified of illegal acts:

• Top officials of entity
• Appropriate oversight/governance bodies
• Officials of the entity’s audit organization

Question 30

Under what circumstances must discovered instances of fraud or other illegal acts be communicated directly to the applicable federal Inpector General?

Answer 30

• Management fails to disclose the discovered illegal action to the grantor
• Management does not take appropriate remedial action

Question 31

What are the four reports recommended under the Single Audit Act?

Answer 31

Under the Single Audit Act, the following reports are recommended:

• Opinion on F/S and supplementary schedule of expenditures of federal awards
• Report on compliance and on internal control over financial reporting based on a F/S audit
• Report on compliance and on internal control over compliance applicable to each major program
• Schedule of findings and questioned costs

Question 32

Which laws and regulations need to be considered by the auditor in a government audit?

Answer 32

The auditor must consider the effects of laws and regulations that have a direct and material effect on the determination of amounts in the entity’s F/S

Question 33

What are the specific requirements for an auditing firm relative to quality reviews of their government audits?

Answer 33

External quality reviews must be conducted every 3 years and a copy of the review report must be provided by teh auditee

Question 34

Identify the addtional managment responsibilties associated with government audits

Answer 34

• Identification of applicable laws and regulations with compliance requirements
• Establishment of internal controls to provide reasonable assurance that the entity complies with those laws and regulations
• Preparation of supplementary financial reports, including a “Schedule of Expenditures of Federal Awards”
• Obtaining and audit that satisfies revelant legal, regulatory, or contractual requirements

Question 35

What are the objectives of a single audit?

Answer 35

• Audit of the entity’s F/S and reporting on a seperate schedule of expenditures of federal awards
• Compliance audit of federal awards expended during the year, as a basis for issuing additional reports on compliance and on internal control over compliance for major programs

Question 36

Control evaluations made for purposes of performing an audit in accordance with the Single Audit Act are made in relation to individual compliance areas applicable to each major program. Such evaluations are limited to compliance requirements that could have a direct and material impact on major programs and include what requirements?

Answer 36

1. Tests of controls must be performed to evaluate the effectiveness of the internal controls (unless the control is deemed to be ineffective).
2. Controls deemed to be ineffective result in expanded procedures including:
   
   1. Assessment of control risk at the maximum
   2. Consideration of the impact of weak controls on substantive compliance testing
   3. Reporting a significant deficiency (reportable condition) or material weakness as an audit finding

Question 37

Material noncompliance with the requirements of major federal financial assistance programs results in what type of opinion on compliance?

Answer 37

Qualified (except for) or adverse opinions on compliance will be rendered in the event of discovery of material reportable instances of noncompliance

Question 38

List the ethical principles under GAGAS

Answer 38

1. Serving public interest
2. Integrity
3. Objectivity
4. Proper use of governmental information, resources, and positions
5. Professional behavior

Question 39

List the two general characteristics of independence under GAGAS

Answer 39

1. Independence of mind
2. Independence in appearnce

Question 40

What are the four steps in the evaluation of auditor independence under GAGAS?

Answer 40

1. Identification of threats to independence
2. Evaluation of the significance of threats identified both individually and in the aggregate
3. Application of safeguards necessary to eliminate threats to reduce them to an acceptable level
4. Conclude if safeguards are adequate to elminate or appropriately reduce threats

Question 41

List the 7 different threats to auditor independence under GAGAS

Answer 41

1. Self-interest threat
2. Self-review threat
3. Bias threat
4. Familiarity threat
5. Undue influence threat
6. Management participation threat
7. Structural threat

Question 42

Under Generally Accepted Government Auditing Standards, the critical feature in determining whether a nonaudit service is a threat independence:

Answer 42

Consideration of management’s ability to effectively oversee the nonaudit service to be performed. The auditor should determine:

1. That the audited entity has designated an individual who possesses suitable skill, knowledge, or experience; and
2. That the individual understands the services to be performed sufficiently to oversee them