Chapter 8 Flashcards
Def: internal control
policies + procedures instituted and maintained by the management to provide reasonable assurance that management’s objectives are met
who’s responsibility is internal controls
management’s
primary objectives of effective internal controls (4)
- strategic, high level that support the mission
- reliability of financial reporting
- efficiency and effectiveness of operations
- compliance with laws and regulations
management must ___+____ . the entity’s internal controls
establish + maintain
if the company is public, management is required to
publicly report on operating effectiveness of internal controls in financial reports
auditors are responsible for
understanding entity internal control relevant to the audit
why must auditors understand
to identify the risks of material misstatement at the financial statement and assertion level
when must auditor obtain understanding of controls
ALL the time even if he does not intend on placing reliance on internal controls
when assessing control risk, auditors are concerned with (2)
- entity level controls
2. transaction controls
Def: entity level controls
pervasive in nature and not address particular transaction cycles
entity level controls may prevent or detect and correct
misstatements in several cycles
def: transaction controls
implemented for specific transaction risks
transaction controls specifically prevent or detect and correct
misstatements in classes of transactions, account balances or disclosures and their related assertions
before the auditor can conclude that the total for any given class of transactions is fairly stated
five audit objectives must be met
what are the 5 audit objectives (transaction)
occurrence, completeness, accuracy, cut-off and classification
5 components of COSO internal control framework
- control environment
- risk assessment
- control activities
- info and communication
- monitoring
principles associated with control environment (5)
- commitment to integrity and ethical values
- BofD oversight responsibility
- management structure, authority and responsibility
- commitment to competence
- establish and enforce accountability
principles with risk assessment (4)
- specifies relevant objectives
- identify and assess risk
- consider potential for fraud when assessing
- identify and assess significant changes