F5 Flashcards
Under the Sarbanes-Oxley Act of 2002
the chief executive officer is required to certify (or sign off) on all the other items, but is not required to certify the financial expertise of the audit committee.
entity-level control
include controls related to the control environment, the risk assessment process, and the policies over risk management practices.
These affect the company as a whole not just a specific sector for example the controls on the completeness of deposited cash this would not be an entity control as it focuses on a singular account
Material weakness
Is the only one that would lead to an adverse opinion
disclaimer of opinion arises from
Restrictions on the scope of the engagement (Scope limitation)
adverse opinion arises from
Identification of a material weakness
Failure of management to provide a written representation letter acknowledging its responsibility for the effectiveness of internal control generally will result in
a disclaimer of opinion or withdrawal from the engagement.
An engagement to report on whether a previously reported internal control weakness continues to exis
Is voluntary
does not have to comply with any professional standards for example PCAOB or GAAS
Requires a written report from the company management to the Auditors
Scope
Uses the NET of things
Nature
Extent
Timing
SSAE involves
Establiceghd by the AICPA and addresses information for Attestation services of
Agreed upon procedures
Financial forecast and projection
Pro forma FS
Compliance
Management’s discussion and analysis (MD&A)
Reporting on controls at a service organization
The consistency assertion in an MD&A presentation addresses
whether nonfinancial data has been accurately derived from related records.
The occurrence assertion in MD&A addresses whether
reported transactions or events have occurred during a given period.
The presentation and disclosure assertion in MD&A addresses whether
information included in the MD&A presentation is properly classified, described, and disclosed.
The completeness assertion in MD&A addresses whether
descriptions of transactions and events necessary to obtain an understanding of the entity’s financial condition are appropriately included in the MD&A presentation
Financial forecast
Expected results
Financial projection
Hypothetical assumption