Final Review Part II Flashcards
1
Q
Planning an Audit
A
- industry knowledge
- business knowledge
- determine information technology on the audit
- tour facility
- determine the timing
- determine areas where there is a greater risk of material misstatement
2
Q
Audit Strategy
A
- establish overall audit strategy
- preliminary assessment of materiality
- outlines the scope of engagement
- reporting objectives
- the timing of the audit
- required communications
can be modified in responses to new info
3
Q
Audit Plan
A
- must be written
- NET
- risk assessment procedures
- further audit procedures (test of controls and substantive procedures)
- other audit procedures
can be modified in responses to new info
4
Q
After accepting the engagement (part of audit planning)
A
- recent trends occurring in the industry
- the risk of material misstatement surrounding various FS assertions
5
Q
Not relevant information
A
client’s understanding as to the appropriate opinion on the current year’s FS
6
Q
Internal Control
A
- provide assurance that an entity’s objectives will be achieved
- objectives: reliability of financial reporting/effectiveness and efficiency of operations/compliance with applicable laws and regulations
7
Q
Internal Control = CRIME (Risk Assessment)
A
- management identifies, analyzes, and manages risks that affect the entity’s ability to accomplish its major objectives
- new products
- rapid growth
- other changes
8
Q
Internal Control = CRIME (Information and Communication)
A
- all transactions are recorded and complete
- detailed enough to provide adequate financial reporting disclosures
- communication among management, employees, charged with governance, and external parties
9
Q
Internal Control = CRIME (Monitoring)
A
- assess the quality of the internal control structure
- make necessary corrections
10
Q
Internal Control = CRIME (Existing Control Activities)
A
- PAID TIPS
- prevent and detect the risk of lying, stealing, and cheating
11
Q
SOC 1
A
addresses a company’s IC over financial reporting
12
Q
SOC 2
A
examination of controls of a service organization over privacy, confidentially, processing integrity, availability, and security
13
Q
Type 1
A
- design of control
- help the auditor understand the control
14
Q
Type 2
A
- design of control and test of operating effectiveness
- help the auditor understand the control
- reduce the assessed level of control risk
15
Q
Auditing around the computer = manual
A
- simple batch systems with a good audit trail
- risk = insufficient paper-based evidence and insufficient audit procedures
16
Q
Auditing through the computer = CAAT
A
- transaction tagging
- embedded audit modules: collects transaction data for the auditor/auditor must be involved
- test data: the result is already known/invalid #/excess pay rate/excess hours
- integrated test facility: commingled with live data
- parallel simulation: audit reprocess data and compare the result with the client file
- generalized audit software packages: allow the auditor to perform tests of controls and substantive tests directly on the client’s system