Chapter 7: Assessing Business Risks and Linking Business Risks to the Audit Flashcards
Steps to make necessary risk assessments
1) Understand nature of client’s operations, industry, and environment it operates in, 2) Identify business risks that face company, 3) Assess the significance of identified risks, 4) Assess adequacy of controls in place to mitigate risk, 5) Perform residual risk analysis
Business risks
any risks that threaten to inhibit the company from achieving objective
What is used to assess significance of business risks?
Probability of risk materializing (relatively probable) and magnitude of loss if risk were to materialize (somewhat severe)
Residual risk analysis
auditor identifies risks that could impact f/s that are not sufficiently controlled
Organizational Business Model
framework auditors use to understand nature of clients business
Components of Organizational Business Model
1) Markets, Customers, and Suppliers, 2) Competitors, 3) Resources and Suppliers, 4) Internal Processes, 5) External Agents, 60 Strategic Partners
Products
tangible goods and services company sells
Markets
discernible segments in which organization chooses to compete
Customers
people that buy your products and services
Direct competitor
external organization targeting a similar set of markets, customers, and products
Indirect competitor
external organization that competes for customers but has different products or might target different market
Strategic Management
activities that set direction of organization
Primary Processes
most directly associated with creating value in organization
Support Processes
support primary processes and indirectly related to creation of value in organization
External Agents
groups and organizations outside of an organization that have direct impact on organization’s ability to succeed