Chapter 6 Deck 3 Flashcards
Factors affecting the nature and extent of audit documentation include:
The risk of material misstatement;
The extent to which judgment was required in performing the work and evaluating the results;
The nature of the specific auditing procedure;
The significance of the evidence obtained;
The nature and extent of any problems identified; and
The need to document conclusions that may not be obvious.
Which of the following documentation is required for an audit in accordance with generally accepted auditing standards?
The quantity, type, and content of audit documentation vary with the circumstances, but it should be sufficient to show that the accounting records agree or reconcile with the financial statements.
Audit documentation should be prepared in enough detail so that:
An experienced auditor who has no previous connection with the audit can understand the procedures performed and the evidence obtained.
According to PCAOB standards, the documentation completion date is?
forty-five days following the report release date. Also note it is the date after which existing documentation must not be deleted, and additions to the documentation file must be documented as such.
Which of the following would not be considered a significant audit finding that should be included in audit documentation?
Significant audit findings do not include staffing changes at the client.
Which of the following is the primary reason that many auditors hesitate to use embedded audit modules?
Embedded audit modules are sections of the application program code that collect transaction data for the auditor. Embedded audit modules are usually built into the application program when the program is developed. This would require that the auditors be involved in the system design of the application to be monitored.
Embedded audit modules are?
are sections of an application program code that collect transaction data for the auditor. Such modules allow the auditor to capture specific data as transactions are being processed.
When an auditor tests a computerized accounting system, which of the following is true of the test data approach?
Test data consists of “dummy” data run through the client’s computer system. The data should be processed under the auditor’s control.
What does the test data approach allow the auditor to do?
Test data allows the auditor to determine whether adequate controls exist over data processing. Test data consists of fictitious entries or inputs that are processed through the client’s computer system under the control of the auditor. The client’s computerized payroll system should have adequate controls to prevent input of invalid employee I.D. numbers.
Using computers in auditing may affect the methods used to review the work of staff assistants because:
When using computers in an auditing task, audit documentation may not contain readily observable details of calculations (e.g., present value calculations). In order to review assistants’ work, a supervisor may have to examine the formulas used on the computer rather than simply examining the audit documentation.
What is a true statement about the test data approach?
The test data approach refers to a technique in which the client’s application program is used to process a set of test data, the results of which are already known by the auditor. If the client’s program is operating effectively, it should generate the same results determined by the auditor.
In computer audit applications, efficient and effective system usage requires:
Identification of the appropriate audit tasks and
Appropriate software to perform the selected audit tasks
An auditor who is testing IT controls in a payroll system would most likely use test data that contain conditions such as:
Test data often contains invalid information (such as invalid job numbers) that is used to test EDP controls.
NOTEWhile approvals and authorizations should all be tested, they are NOT IT controls and would not be tested through use of test data.
Processing data through the use of simulated files provides an auditor with information about the operating effectiveness of controls. One of the techniques involved in this approach makes use of:
An integrated test facility runs test transactions through the “live” system and posts to simulated (dummy) files to provide an auditor with information about the operating effectiveness of controls.
Which of the following computer-assisted auditing techniques processes client input data on a controlled program under the auditor’s control to test controls in the computer system?
Parallel simulation is a technique in which the auditor reprocesses the client’s data using the auditor’s own software. The auditor then compares his or her results to those obtained by the client.