First AUD Flashcards

1
Q

Go through AUD CLASSES

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Make notes from BOOK

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Take SE and Make notes from Book accordingly to bridge the gap

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Read Glossary from Becker - Ongoing

A

Audit- A methodical review and objective examination of an enterprise’s financial statements.

Audit Adjustment- A proposed correction to the financial statements resulting from the auditor’s procedures.

Audit Committee- A committee of the board of directors, generally made up of three to five members of the board who are “outside directors;” responsible for the selection and appointment of the independent external auditor, and for reviewing the nature and scope of the engagement.

Audit Data Analytics
ADAs involve analyzing patterns, identifying anomalies, and extracting other useful information in data underlying or related to the subject matter of an audit through analysis, modeling, and visualization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Read Flashcards from Becker - Ongoing (downloaded all from Becker)

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Tables from UWorld

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Farhat or i75 lectures

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Adverse Opinion
FS issue (ADF acronym)-Material effect

A

DISCLAIMER of opinion (AD acronym) =CANNOT EXPRESS AN OPINION
Insufficient Evidence =Audit Issue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Management could selct FIN REPORTING FRAMEWORK

A
  1. CASH BASIS
  2. TAX BASIS
  3. GAAP
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Generally accepted auditing standards (“GAAS”) (GAAS are not rules) are _____________

A

measures of the quality of the auditor’s performance and guide the auditor in the performance of a properly planned and executed audit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

The auditor may conduct an audit in accordance with :

A

Both GAAS ad Govt auditing stdnards (GAGAS)

It is acceptable for an auditor to apply both GAAS and auditing standards of another jurisdiction or country.

In certain audit engagements, the auditor may be required to comploy with Intl Stds on Auditing in addition to GAAS even if the audit is conducted in the USA.

The auditor may conduct the audit in accordance with both GAAS and auditing stds issued by the PCAOB. aN ADDITONAL statemet would be added to the BASIS for OPINION paragraph stating that both sets of standards were applied.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

An auditor of a non-issuer must conduct the audit in accordance with ASB standards.
The literature pertaining to U.S. GAAP changes over time, and therefore U.S. generally accepted accounting principles is an ACCOUNTING TERM can be said to encompass the conventions, rules, and procedures necessary to define accepted accounting practice _____________

A

at a particular time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

ACCOUNTING ESTIMATES

A
  1. Provision for expected credit losses
  2. Employee retirement benefit liabilities
  3. Warranty obligations
  4. Probability of loss and related amounts due to pending litigation
  5. FV os assets or liabilities including goodiwll and intangible assets.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

NONISSUERS - UNMODIFIED

A

ISSUERS-UNQUALIFIED

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Unmodified (unqualified) opinion states that the financial statements are presented fairly, in all material respects, in accordance with the applicable FIN REPORTING framework.

A

In order to issue an UNMODIFIED (UNQUALIFIED) Opinion, the auditor should take into account:

  1. Whether sufficient appropriate audit evidence was obtained
  2. Whether uncorrected misstatements are material, individually or in the aggregate and
  3. Whether the FS are prepared in accordance with the applicable FIN REPORTING framework.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

3 Types of MODIFIED OPINIONS

A
  1. Qualified opinion (except for) (modification required)
  2. Adverse opinion (modification required)
  3. Disclaimer of opinion (audit is incomplete MEANING an auditor was unable to obtain sufficient appropriate audit evidence to provide a reasonable basis for an opinion, thus no opinion is expressed)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

CHATGPT:

Qualified Opinion: A negative aspect is present (e.g., scope limitation, non-compliance), but the issue does not affect the overall fairness of the financial statements.

A

CHATGPT:

Unqualified Opinion: The auditor finds no issues, and the financial statements are fairly presented with no reservations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Cross-Foot
To verify the mathematical accuracy of a statement or schedule by adding rows of numbers across, from left to right.

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

PERVASIVE meaning (pervasive effects on the FS)_____

CHATGPT:
In the context of an auditor’s opinion, “pervasive” refers to the extent or severity of an issue found in the financial statements. Specifically, if an issue is described as “pervasive,” it means that the problem or misstatement is widespread and significantly impacts the overall reliability and presentation of the financial statements.

Pervasive Issues:
Affecting multiple areas: The issue is not isolated to just one aspect of the financial statements, but instead, it has a broad or significant effect on various parts.
Materially impacts the financial statements: The issue is so significant that it would affect users’ understanding of the company’s financial position and results.
Not easily corrected: The effect of the issue is difficult to overcome through additional explanations, disclosures, or adjustments.

A
  1. Far reaching effects(wide-spread) across several accounts e.g. 70% of assets is inventory
  2. If specific to only one account, it
    -represents a significant portion of the FS
    -Has issues with disclosues that are fundamental to the users understanding.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

AUDITORS ISSUE a Disclaimer of Opinion if they___

A
  1. conclude that the possible effect is material and pervasive
  2. Deny rendering an opinion as they:
    are unable to gather sufficient appropriate audit evidence
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

ADVERSE = Material and pervasive

A

QUALIFIED = Material but NOT PERVASIVE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

AUDITORS issue an ADVERSE OPINION if they conclude that the financial statements:

A
  1. HAVE MISTATEMENTS that are material and pervasive
  2. DO NOT present fairly

e.g. Inadequate disclosure of a material related party transaction would result in a qualified or adverse opinion.

Inadequate disclosure of material information is a departure from GAAP and may result in either a qualified or adverse opinion, depending on materiality.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

NONISSUER (Unmodified audit opinion), required SECTIONS in the report (OBRA):

A

SECTIONS:

  1. OPINION - Framework reference (i.e. GAAP)
  2. BASIS for OPINIONS (GAAS referenced)
  3. Responsibilities of Mgt for the FS (Framework reference ie. GAAP)
  4. AUDITOR’s responsibilities for the AUDIT of the FS (GAAS referenced)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

The auditor may use 2 sets of stds for auditing when:
1. It is required for e.g. when auditing a govt. entity, the auditors use both GAAS and govt auditing standards.
2. The auditors are engaged by the client to do so.

A

The auditor references both auditing standards in the:
1. Basis for opinion section
2. Auditor’s responsibilities for the audit of the FS section

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
CHATGPT: Qualified Opinion: If the issue is not pervasive (limited in scope or impact), the auditor may issue a qualified opinion, stating that, except for the specified issue, the financial statements present fairly.
CHATGPT: Adverse Opinion: If the issue is pervasive (widespread) and significantly affects the financial statements as a whole, the auditor issues an adverse opinion, stating that the financial statements do not present a fair and accurate picture of the company. Disclaimer of Opinion: If there is a pervasive scope limitation (e.g., insufficient evidence), the auditor may disclaim an opinion, meaning they cannot form any opinion about the financial statements. Example: Non-pervasive Issue: A company fails to report a small number of transactions, but the rest of the financial statements are unaffected. This may lead to a qualified opinion. Pervasive Issue: A company fails to follow accounting standards across multiple areas of their financial statements, resulting in a major misrepresentation of the financial position. This may lead to an adverse opinion because the issues are widespread and significantly impact the financial statements as a whole.
26
KAMs section (KEY AUDIT MATTERS) Section: NON-ISSUER REPORT 1. May be added to the nonissuer report (optional section) 2. Is added when the client engages the auditor to communicate KAMs 3. Provides visibility into the more complex areas or areas that require judgement in the audit
KEY AUDIT MATTERS are those matters that were communicated with those charged with governance and, in our professional judgment, were of most significance in our audit of the FS of the current period. These matters were adressed in the context of our audit of the FS as a whole, and in forming our opinion thereon, and we do not provide a separate opinion on these matters. E.g. KAMr are complex issues, judmentally difficult, required audit attention. ORDER OF KAMs listed is a JUDGEMENT DECISION. KAMs section can be added anywhere in the report after the 2nd section. (OPINION section and BASIS for OPINION SECTION) KAMs should NOT include the matters giving rise to: 1. A QUALIFIED OPINION - should be referenced in the BASIS for OPINION section for further explanation 2. SUBSTANTIAL DOUBT existing about an entity's ability to continue as a going concern *Should be referenced elsewhere in the report.
27
Communicating KAMs is PROHIBITED when the auditor expresses an ADVERSE OPINION or DISCLAIMS an OPINION (red zones).
Audit Documentation (Working Papers) The principal record of procedures performed, evidence obtained, and conclusions reached; also called "working papers" or "workpapers." Audit Evidence The underlying information used by the auditor in reaching audit conclusions. The information corroborates or contradicts assertions in the financial statements. Audit Objectives Goals of audit testing, developed in light of financial statement assertions. Audit Plan A listing of audit procedures necessary to accomplish the objectives of the audit; required for every audit. Audit Risk The risk that an auditor may unknowingly fail to modify appropriately the opinion on financial statements that are materially misstated. Audit Risk of Noncompliance The risk that the auditor may unknowingly fail to appropriately modify the opinion on compliance in a compliance audit. It comprises the risk of material noncompliance and detection risk of noncompliance.
28
ISSUER - just 2 sections in the report which are _________
OPINION and BASIS FOR OPINION
29
Audit issues ONLY - Disclaimer of opinion (An audit can disclaim the opinion in AUDIT issues only)
FS or GAAP issues = Adverse opinion
30
Critical Audit Matters Those matters arising from the current period audit of the financial statements that are communicated or required to be communicated to the audit committee and that relate to accounts or disclosures that are material to the financial statements and involve especially challenging, subjective, or complex auditor judgment. TO BE considered as a CAM, matter must meet all 3 criteria: 1. Be a matter that was communicated or is required to be communicated to the audit committee 2. RELATE to accounts or disclosures material to the FS 3. Involve challenging, subjective, or complex auditor judgement For each critical audit matter identified, the auditor should include a description of the principal considerations that led the auditor to determine that the matter was a critical audit matter. For each critical audit matter identified, the auditor should include a description of how the critical audit matter was addressed in the audit. For each critical audit matter identified, the auditor should reference relevant financial statement accounts that relate to the critical audit matter.
IDENTIFICATION OF CAMs (IPAD): 1. Identify each CAM in the audit report 2. Describe the PRINCIPAL CONSIDERATIONS that led the audiot to determine a CAM 3. Describe how the CAM was ADDRESSED in the AUDIT 4. Refer to the relevant FS accounts and disclosures A critical audit matter is a matter that was communicated or is required to be communicated to the audit committee and involves an especially challenging judgment made by the auditor.
31
KEY AUDIT MATTERS (Becker) Key Audit Matters Matters that, in the auditor's professional judgment, were of most significance in the audit of the financial statements of the current period.
32
NON-ISSUER: KAMs are OPTIONAL for a NON-ISSUER
ISSUER: (CRITICAL AUDIT MATTERS) CAMS are REQUIRED for an ISSUER (when an unqualified/qualified opinion is issued): 1. Opinion on the FS 2. Basis for OPINION 3. CRITICAL AUDIT MATTERS The auditor's report must include any CAMs arising from the current period's audit of the financial stateemnts. Report wording in opinion section and basis for opinin section is often boiler plate and does not provide much visibility into the audit. The CAM section provides more visibility into the more challenging areas of the audit.
33
CIRCUMSTANCE - FS ISSUES QUALIFIED (material) or ADVERSE (material and pervasive) EXAMPLES - (1) Don't follow GAAP (2) Inappropriate accounting principles (3) Unreasonable estimates (4) Inadequate disclosures (5) Incorrect numbers (6) No reasonable justification for change in accounting principles
The following non-issuer headings will change when modified opinions are isued: 1. OPINION 2. BASIS FOR OPINION
34
NO MATERIAL ISSUES
Unmodified/Unqualified (CLEAN=FS free from material misstatements in all respects) opinion 1. Sufficient evidence 2. Follows GAAP 3. Immaterial or no issues
35
GENERAL Guidance provided by a Statement on Auditing STDs is the MOST AUTHORITATIVE of level of auditing guidance for audits of nonissuers.
36
AUDITOR RESPONSIBILITIES 1. aUDITOR Must plan the work and properly supervise any assistants 2. Determine and apply appropriate materiality levels 3. Identify and assess risks of material misstatement, whether due to error or fraud and 4. Obtain sufficient appropriate audit evidence The auditor obtains reasonable assurance NOT ABSOLUTE assurance. REASONABLE ASSURANCE is a high level of assurance. The auditor is unable to obtain ABSOLUTE assurance because of the INHERENT LIMITATIONS of an AUDIT. Examination of ALL EVIDENCE would NOT BE FEASIBLE.
MANAGEMENT RESPONSIBILITES: 1. Determine the applicable FIN REPORTING framework and prepare an adequate description of the framework for inclusion in the FS 2. Designing and Implementing programs and controls to prevent, deter and detect fraud. INTERNAL CONTROL helps in Preventing, detecting and correcting MISTATEMENTS on a timely basis.
37
AUDITORS RESPONSIBILITY
The auditor has a responsibility to plan and perform the audit to obtain reasonable assurance about whether the FS are free of material misstatement whether caused by error or fraud.
38
SUFFICIENT, APPROPRIATE AUDIT evidence to afford a RESONABLE basis for the opinion.
In the FS, including accompanying notes fail to disclose info that is required by GAAP, the auditor should express a QUALIFIED OR ADVERSE OPINION, depending on PERVASIVENESS. An auditor of a nonissuer concludes that a client's illegal act, which has a material effect on the FS, has not
39
NO ISSUE
Unqualified, Unmodified.
40
AUDIT ISSUES Qualified (material) or disclaimer (material and pervasive) 1. Time constraints 2. Inability to obtain sufficient appropriate audit evidence, such as: (a) inability to confirm receivables (b) Inability to observe inventory (c) Inability to obtain audited financial statements of a consolidated investee (d) Restrictions on the use of auditing procedures (e) Inadequacy of accounting records' (f) refusal of client's attorney to respond to inquiry (g) Auditor is unable to determine the amounts associated with an employee fraud scheme
RESULTS IN DISCLAIMER ______________________________ 1. Not independent 2. Unaudited FS 3. Refusal of management to provide written representation and/or to acknowledge its responsibility for the fair presentation of the FS in conformity with GAAP (may also withdraw) A critical audit matter is a matter that was communicated or is required to be communicated to the audit committee and relates to accounts or disclosures that are material (not immaterial) to the financial statements. A critical audit matter is a matter that was communicated or is required to be communicated to the audit committee and involves a particularly complex judgment made by the auditor (not a complex transaction made by management.)
41
The scope limitation is not mentioned in the management's responsibility paragraph. The management's responsibility section remains unchanged when a qualified opinion is issued, but the BASIS for qualified opinion section should describe the reasons for the qualification.
The REASONS for the inability to obtain sufficient appropriate audit evidence should only be described in the Basis for Qualified Opinion section of the auditor's report and the Management's Responsibility section should remain unchanged. The reasons for the inability to obtain sufficient appropriate audit evidence should be described in the BASIS for Qualified Opinion section of the auditor's report.
42
DISCLAIMER OF OPINION - Unable to obtain sufficient appropriate audit evidence to provide a reasonable basis for an opinion, thus, no opinion is expressed.
Management’s refusal to provide written representations (a type of audit evidence) is a significant client-imposed restriction on the audit, which may result in a disclaimer of opinion. If the auditor is unable to obtain the audited financial statements of a consolidated investee, a qualified opinion or a disclaimer of opinion would be issued, depending on materiality. An auditor may issue a qualified or disclaimer of opinion when an auditor is unable to obtain sufficient appropriate audit evidence. For example, when an auditor is unable to determine the extent of or the amounts associated with a pervasive employee fraud scheme, there is not sufficient appropriate audit evidence, and a qualified or disclaimer of opinion may be appropriate
43
Assuming the effect is material, a change in accounting principle results in the addition of an emphasis of matter paragraph in the auditor's report. An emphasis of matter paragraph is required even if the previous accounting principle was not GAAP and even if management lacks reasonable justification for the change. (Note: A lack of reasonable justification for the change may also give rise to a report modification based on material misstatement of the FS)
A justified departure from GAAP results in the addition of an emphasis-of-matter paragraph to the unmodified opinion.
44
UPDATING (CHANGING) PRIOR OPINIONS: FORMAT The auditor should include an emphasis of matter or other matter paragraph (nonissuer) or explanatory paragraph (issuer) disclosing the following: DORCS D-Date of the auditor's previous report O-Opinion type previously issued R - Reason for the prior opinion C -Changes that have occurred S- statement that the opinion is different. REMEMBER - only DORCS change their mind
45
REPORT OF PREDECESSOR AUDITOR PRESENTED 1. Prior auditor's report is presented - PY auditor's report is issued 2. In determining if previously presented FS are still appropriate as issued, the predecessor auditor should: (a) read the statements for the current period. (b) Compare the audited statements with the current period statements (c) Obtain a letter of representation from the successor auditor stating whether the successor auditor's audit revealed any matters that may have a material effect on the statements reported on by the predecessor auditor. (d) Obtain a letter of representation from mgt stating whether any previous mgt representations have changed or whether subsequent events have occurred that may require adjustment or disclosure in the reissued FS.
PRIOR YEAR FS REVIEWED OR COMPILED 1. When the current period FS were reviewed or compiled and the report of the PRIOR PERIOD is not reissued, the auditor should include an other-matter paragraph (non-issuer) or explanatory paragraph (issuer) that includes: (a) The service (review or compilation) performed in the prior period (b) The date of the prior period report (c) a description of any material modifications described in the report. (d) A statements that the service was less in scope than an audit and does not provide the basis for expressing an opinion on the FS as a whole (review) or (d) A statement that no opinion or other form of assurance is expressed (compilation)
46
When FS contain a departure from U.S. GAAP because due to unusual circumstances, the statements would otherwise be misleading, the auditor be misleading, the auditor should express an opinion that is __________
UNMODIFIED (a DEPARTURE from US GAAP is permissible when circumstances indicate that a financial presentation in accordance with US GAAP would be misleading.
47
The opinion para in an auditor;s report should indicate a statement regarding the auditor's opinion and an indication of the applicable FIN reporting framework and its origin. The auditor's opinion section indicates the nature of the engagement (i.e. audit), the financial statements covered in the audit engagement, NAME of the entity whose FS have been audited and the dates covered by each FS. BASIS for OPINION section references GAAS, auditor independence, and states whether or not the auditor believes sufficient appropriate evidence was obtained to provide a basis for the auditor's opinion.
The word INDEPENDENT should be included in the report TITLE and not the OPINION PARAGRAPH in an auditor's report. A description of the auditor's responsibility would be included in a SEPARATE PARA stating the auditor's responsibility rather than in the opinion paragraph. An indication of mgt's responsibility for the fair presentation of the FS should be included in a separate PARA explaining mgt's responsibility rather than in the opinion para. Emphasis of matter paragraphs are used when required by SAS or when the auditor believes they are necessary. They are used when referring to a matter that is appropriately presented or disclosed in the financial statements and is of such importance that it is fundamental to the users' understanding of the FS. This para does not affect the auditor's opinion.
48
An auditor's responsbility to express an opinion on the FS of a nonissuer under US auditing stds is __________
explicitly represented in the Auditor's responsibility section of the nonissuer audit report.
49
Consistency is implicit in the auditor's report and will be explicitly mentioned in an emphasis of a matter paragraph only if there are issues with consistency.
Within the Auditor's Responsibility section of the report, the following statement is explicitly made: "Such procedures include examining, on a test basis, evidence regarding the amounts and disclosures in the financial statements." The consistency of the application of accounting principles is implicit while the examination of EVIDENCE on a test basis is explicitly stated in the Auditor's Responsibility section.
50
The auditor's report should be dated no earlier than the date on which the auditor has obtained sufficient appropriate audit evidence to support the opinion. The earliest an audit report may be dated is when the auditor has obtained sufficient appropriate evidence to support an opinion
The auditor's report should be dated no earlier than the date on which the auditor has obtained sufficient appropriate audit evidence to support the opinion. The auditor may not have received sufficient appropriate evidence by the last day of fieldwork. For example, the partner's review of the audit evidence may take place after the last day of fieldwork. The final assembly of the audit file often occurs after the date of the audit report. This assembly may occur up to 45 or 60 days following the report release date for issuers and nonissuers, respectively. Audit documentation may be completed after the date of the audit report. Generally, changes to audit documentation after the date of the audit report are administrative in nature. For example, the auditor may sort and cross-reference workpapers.
51
The CPA's report on audited financial statements includes an explanation that management is responsible for the preparation and fair presentation of the financial statements The CPA's audit includes evaluating the appropriateness of the accounting policies used and the reasonableness of significant accounting estimates made by management, as well as evaluating the overall presentation of the financial statements. This is mentioned in the auditor's responsibility paragraph.
The CPA's report on audited financial statements does not include matters related to the auditor's assessment of specific risk factors.
52
Under U.S. auditing standards, the auditor's audit report includes a statement that: "In performing an audit in accordance with GAAS, we evaluate the appropriateness of accounting policies used and the reasonableness of significant accounting estimates made by management..."
The audit report does not state that disclosures provide reasonable assurance that the financial statements are free of material misstatement. The correct statement is: "Our objectives are to obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement.. The audit report does not state that the auditor evaluated the overall internal control. The correct statement is "In performing an audit in accordance with GAAS, we obtain an understanding of internal control relevant to the audit in order to design audit procedures that are appropriate in the circumstance..." The audit report does not state "The financial statements are consistent with those of the prior period." Consistency is implicitly reported; only if there is an inconsistency is an explicit statement included
53
The responsibility of the auditor and the responsibility of management are stated explicitly in the auditor's report of a non-issuer. There is a Management's Responsibility section and an Auditor's Responsibility section.
In an auditor's report, there is a section for explicitly stating both management and the auditor's responsibilities related to the audit.
54
GAAP = Under U.S. auditing standards, the auditor expresses an opinion on the financial statements' conformity with GAAP in the Opinion section and the Management's Responsibility section that the management is responsible for the preparation and fair presentation of the financial statements in accordance with GAAP.
GAAS = The Basis for Opinion section would refer to GAAS rather than GAAP. GAAS = The Auditor's Responsibility section of the report would refer to GAAS rather than GAAP. GAAS = . The Auditor's Responsibility section would refer to GAAS rather than GAAP, which the Management's Responsibility section would include a reference to GAAP.
55
The auditor's responsibility paragraph of the unmodified opinion audit report explicitly states that an audit includes identifying and assessing the risks of material misstatement and designing and performing audit procedures responsive to those risks.
56
ISSUER = PCAOB and GAAP (no need for GAAS) An auditor reporting on the audit of financial statements of an issuer should indicate in the Basis for Opinion section that the engagement was conducted in accordance with PCAOB standards, and should refer to GAAP in the Opinion on the Financial Statements section.
An auditor reporting on the audit of financial statements of an issuer is required to refer to PCAOB standards. There is no requirement to reference GAAS. An auditor reporting on the audit of financial statements of an issuer should indicate in the audit report that the engagement was conducted in accordance with PCAOB standards. This is an explicit statement in the report; it is not implied or assumed.
57
OPINION ____________________ QUALIFIED = MATERIAL
OPINION ______________________________ DISCLAIMER = MATERIAL AND PERVASIVE
58
AUDIT ISSUES ____________________ Qualified (Material) or Disclaimer (Material and Pervasive)
1. Time constraints 2. Inability to obtain sufficient appropriate audit evidence, such as: (a) inability to observe inventory (b) inability to confirm receivables (c) inability to obtain audited FS of a consolidated investee (d) Restrictions on the use of auditing procedures (e) Inadequacy of accounting records (f) Refusal of client's attorney to respond to inquiry
59
AUDIT ISSUES ________________ Results in Disclaimer
1. Not independent 2. Unaudited F/S 3. Refusal of mgt to provide written representation and/or to acknowledge its responsibility for the fair presentation of the FS in conformity with GAAP (may also withdrawal) 4. Audit/Evidence issue - CEO is unwilling to sign the mgt representation letter. 5. Audit/EVIDENCE issue - The client refuses to permit the auditor to confirm certain AR or apply alternative procedures to verify their balances.
60
FS ISSUES Qualified(Material) or Adverse (Material and Pervasive)
1. Don't follow GAAP 2. Inappropriate accounting principles 3. Unreasonable estimates 4. Inadequate disclosure 5. Incorrect numbers 6. No reasonable justification for change in accounting principles 7. GAAP issues
61
NO MATERIAL ISSUES Unmodified/unqualified
1. Sufficient evidence 2. Follows GAAP 3. Immaterial or no issues
62
The statement "do not present fairly" would be used in an adverse opinion.
When inadequate disclosure has a material but not pervasive effect on the financial statements, the auditor's opinion should state "In our opinion, except for the omission of the information described in the basis for qualified opinion section of our report . . ."
63
An immaterial unjustified departure from GAAP would not affect the unmodified opinion. Note that if the effect were material, a qualified or adverse opinion would be appropriate.
A material change in accounting principle would result in the addition of an emphasis-of-matter paragraph to the unmodified opinion.
64
If internal control is so poor that it cannot be relied upon, the auditor must consider the effect on the audit procedures and subsequent report, but would not issue an adverse opinion. An adverse opinion is issued when the financial statements are not presented in accordance with GAAP.
Substantial doubt with regard to the entity's ability to continue as a going concern should be disclosed in either an emphasis-of-matter paragraph (optional when doubt is alleviated) or a separate section of the auditor's report (doubt remains) appended to an otherwise unmodified (unqualified) opinion. The client's refusal to provide access to the minutes of the Board of Directors' meetings would result in a disclaimer of opinion.
65
Requirements of due care
1. Observe technical stds 2. Observe ethical stds (e.g. Code of professional conduct) 3. Strive to improve competence (professional education) 4. Perform duties diligently
66
The auditor's opinion may differ with respect to different peiods.
e.g. 2011 - qualified opinion 2010 - unmodified opinion
67
UNREVISED - use original report date when reissuing previous report REVISED - dual date is used in the event that the predecessor auditor revises the report.
Reporting with predecessor auditors In determining if previously presented financial statements are still appropriate as issued, the predecessor auditor should: 1. Read the statements for the current period 2. Compare the audited statements with the current period statements 3. Obtain a letter of representation from the successor auditor stating whether the successor auditor's audi revealed any matters that may have a materal effect on the statements reportedon by the predecessor auditor. 4. OBTAIN a letter of representaton from management stating whethr ny previous management representations have change or whether any subsequent events have occurred that may require adustment or disclosure in the reissued FS
68
Prior period FS was not audited or not reissued but just REVIEWED OR COMPILED: CY auditor should include an OTHER-MATTER PARAGRAPH (nonissuer) or explanatory paragraph (issuer) that includes: 1. The service (review or compilation) performed in the prior period 2. The date o the prior period report 3. A description of any material modifications described in the report 4. A statement that the service was less in scope than an audit and does not provide the basis for expressing an opinion on the FS as a whole (review) 5. A statement that no opinion or other form of assurance is expressed (compilation).
69
AICPA - Group Engagement Partner PCAOB calls it Principal Auditor - The partner or other person in the firm who is RESPONSIBLE for the group audit engagement and the auditor's report on the group FS GROUP FS - FS that iclude the financial info of more than one component (i.e. subsidiaries) GROUP ENGAGEMENT TEAM: includes the group engagement partner, other partners, and staff who establish the overall audit strategy, communicate with component auditors, perform work on the consolidation process, and evaluate the conclusions drawn from the audit evidence as the basis for forming an opinion on the group FS
COMPONENT - An entity or business activity that prepares Financial info that is included in the group FS COMPNENT AUDITOR: An auditor who performs work on the financial information of a component that will be used as audit evidence for the group audit.
70
WHen the GROUP ENGAGEMENT team relies on the work of the component auditor, the group engagement team has 2 alternatives: OPTION 1 - Group engagement team takes full resposibility for the audit of the component - do not reference the component auditor Option 2 - Group engagement team and component auditor divide responsibility - reference the component auditor.
71
UPDATING PRIOR OPINIONS If during the current audit, the auditor becomes aware of evidence that affects the prior statements and the opinion that was expressed, the auditor should update the opinion in the CY's report.
E.g. PY FS are restated to conform with GAAP e.g. a previous report that was qualified or adverse due to a departure from GAAP would no longer be appropriate in the event of the restatement of the PY's FS to be in conformity wit GAAP.
72
REPORT OF THE PREDECESSOR AUDITOR NOT REISSUED THE succesor auditor should express an opinon on the CURRENT PERIOD FS only and indicate in an OTHER MATTER PARAGRAPH (non-issuer) or EXPLANATORY para (ISSUER): 1. That the FS of the prior period were audited by a predecessor auditor. The predecessor auditors should not be named unless the practice of the predecessors was acquired by or merged with that of the sucessor 2. The type of the opinion expressed by the predecessor auditor and if the opinion was modified, the reasons for the modification. 3. The nature of any emphasis of matter, other matter or explanatory para included in the predecessor's auditor's report.
73
MANAGEMENT'S RESPONSIBILITIES 1. The preparation and FAIR presentation (requires IDENTIFICATION of the applicable FIN REPORTING Framework, inclusion of an adequate description of the framework in the FS)) of the FS in accordance with the applicable FIN REPORTING Framework 2. The design, implementation and maintenance of internal control relevant to the prep and fair presentation of FS that are free of material misstatement due to error or fraud and 3. Providing the auditor with access to info and persons within the entity needed to complete the audit.
AUDITOR'S RESPONSIBILITIES 1. Maintaining PROFESSIONAL SKEPTICISM 2. Complying with relevant ethical requirements 3. Exercising professional judgment throughout the planning and performance of the audit 4. Obtaining sufficient appropriate audit evidence 5. Complying with GAAS (AUDITING STANDARDS) The auditor should neither assume that mgt is DISHONEST nor assume UNQUESTIONED HONESTY. A belief that management is honest and has INTEGRITY does not relieve the auditor of the need to maintain professional skepticism or allow the auditor to be satisfied with less than persuasive evidence. Example of impediments 1. Unconscious human bias 2. DEV of inappropriate level of trust or confidence in mgt, which may result in the auditor not taking as questioning a stance as needed. 3. Pressure to avoid potential negative interactions with or consequences to individuals whom auditors know (e.g. mgt ) instead of representing the int of investors. 4. scheduling and workload demands, which may result in auditors making shortcuts in judgement, such as seeking audit evidence that is easier to obtain rather than evidence that is more reliable and relevant or giving more weight to supporting evidence without considering contrary evidence.
74
REPSONSIBILITIES OF BOTH AUDITOR AND MANAGEMENT
75
ELEMENTS OF QUALITY CONTROL HELP ME HUMAN RESources Engagement or client acceptance and continuance Leadership responsibilities Performance of the engagement Monitoring Ethical requirements
MONITORING The monitoring component or function of the internal control framework is designed to ensure that controls continue to operate effectively. Monitoring of internal control effectiveness is done to provide an assessment of the performance of the system of internal control over time. Monitoring is designed to ensure that controls operate effectively. . Periodically comparing and updating the mission vision and values of a not-for-profit could best be classified as a monitoring activity. Monitoring is the process that assesses the quality of control performance over time. Monitoring may include, among other things, the evaluation of communications from external parties such as customers, regulatory agencies, and external auditors.
76
CHATGPT Unqualified Opinion (Clean Opinion): Financial statements are fairly presented. Qualified Opinion: Financial statements are fairly presented, except for a specified issue. Adverse Opinion: Financial statements are not fairly presented. Disclaimer of Opinion: The auditor cannot provide an opinion due to scope limitations or other issues.
77
Substantive procedures are used to detect ___________
material misstatements
78
Smaller reporting company____
less than $100 million in annual revenue
79
Form AP/ Audit participants - who the engagement partner was , date of audit report , if other audit firms participated
To be filed within 35 days AFTER THE AUDIT REPORT If incuded with reg statemnt - muat
80
If as an auditor we are changing the opinion, we also need to change the basis of opinion.
MODIFY auditor's responsibility section in the case of DISCLAIMER , since there are lot of things that we could not do or complete due to incomplete info?
81
AUDIT PROCESS 1. General Principles - Overall objectives, documentation, communication, quality control-firm 2. Engagement acceptance - Ethics and Independence and terms of engagement 3. Assess Risk and Plan Response (a) Audit planning, including audit strategy materiality (b) Risk assessment procedures- Understand the entity and its environment (c) Identify and assess risk (d) Respond to risk 4. Perform PROCEDURES and OBTAIN SUFFICIENT EVIDENCE Test of controls, if applicable Substantive testing 5. FORM CONCLUSIONS (a) Subsequent events (b) MAnagement representation (c) Evaluate audit results (d) QUality control - engagement 6. REPORTING report on audited FS Other reporting considerations
The auditor's report gives credibility to the FS. The auditor's as a group independent of mgt, have an objective view and can report on a company's activities without bias or conflict of interest. FS of an enterprise are prepared by the mgt of the enterprise NOT the independent auditor.
82
In certain audit engagements, the auditor may be required to COMPLY with OTHER AUDITING requirements in addition to GAAS. GAAS do not override laws or regulations that govern an audit of FS. The auditor may conduct the audit in accordance with both GAAS and: 1. Auditing standards issued by the PCAOB 2. Requirements of the ERISA (Employee Retirement Income Security Act of 1974) 3. International Standards on Auditing (ISAs) 4. Govt auditing standards (GAGAS) 5. Auditing standards of a specific jurisdiction or country
THe overall objectives of the auditor when conducting an ERISA plan FIN STATEMENT Audit are: 1. Accept an ERISA plan audit engagement when the basis upon which it is to be performed has been agreed upon through establishing whether the preconditions for the audit are present.
83
A "compilation report" refers to a report related to a ____________.
non-public entity
84
A division of responsibility affects the opinion section of the report, but does not impact any other report section.
Involvement of another auditor does not prevent the issuance of an unmodified opinion.
85
Those charged with governance are __________
BOD or Audit Committee (may also refer to members of the entity's legal structure, external parties such as legal committees)
86
The auditor may reference in the engagement letter the involvement of internal auditors. However, internal auditors may _________________ such as determining materiality.
not make significant audit decisions,
87
______________ is responsible for providing a representation letter to the auditor at the conclusion of the audit.
management
88
An auditor may not be paid in stock of the entity because this would impair the auditor's independence.
The engagement letter would include the scope of the audit and the scope of any additional services to be provided by the auditor to the entity. The engagement letter is a means by which the parties agree to the terms of the engagement.
89
A successor auditor most likely would make specific inquiries of the predecessor auditor regarding: A. Disagreements with management as to auditing procedures.
Chatgpt Audit = Reasonable assurance, detailed testing, auditor opinion. Review = Limited assurance, analytical procedures, no opinion, just a statement of no material misstatements.
90
Regulatory Requirements: In certain jurisdictions, publicly traded companies or companies of a certain size may legally be required to undergo a full audit (i.e., an audit opinion) regardless of whether the company prefers a review. For example, in the U.S., public companies must have an audit of their financial statements performed by an independent auditor under the Sarbanes-Oxley Act. In many countries, smaller private companies may have the option to choose between an audit or a review, depending on their size, industry, and local regulations.
Management Decision: In cases where a full audit isn’t required by law (for example, smaller private companies or certain non-public organizations), the company’s management and board can choose to have a review done instead of an audit. They might make this decision to save costs, simplify the process, or for other business reasons. However, they must still ensure that their financial statements comply with relevant accounting standards and regulations.
91
Contact with the predecessor auditor before client acceptance is mandatory, but client permission is required.
If the predecessor auditor refuses to give the current auditor of a nonissuer access to the documentation, the current auditor should review the risk assessment of the opening balances of the financial statements.
92
An auditor is performing an audit for a company and has a close family member working as a senior executive at that company. While the auditor may be independent in fact (i.e., they do not let this relationship influence their judgment), the appearance of independence may be compromised. Investors or other stakeholders might perceive that the auditor could be biased because of this familial connection, even though the auditor’s decisions are unaffected by it.
93
AUDITOR SPECIALIST - Assist auditor in obtaining audit evidence expertise other than accounting or auditing. Expertise other than accounting or auditing.
MANAGEMENT SPECIALIST- Hired by client to assist entity in preparing the FS
94
CONSOLIDATION SIM -
It came in Trupti's exam
95
The COSO Cube links all five components with all three objectives categories and all levels of the organizational structure; everything is interrelated, which is illustrated by the cube itself.
96
According to COSO, an executive’s deliberate misrepresentation to a banker who is considering whether to make a loan to an enterprise is an example of which of the following internal control limitations?
Management override
97
INTERNAL CONTROL includes 1. Control Environment 2. Monitoring 3. Information and Communication Systems 4. Risk Assessment 5. Existing control activities
Internal Audit function is part of MONITORING
98
Establishing a control baseline needs to be the first monitoring step in evaluating the effectiveness of an internal control system. Without a baseline for comparison, there is nothing to compare against when the evaluation is performed.
The control environment component of the internal control integrated framework includes such principles as commitment to competency, accountability, and organizational structure, etc. The risk assessment component of the internal control integrated framework includes such principles as specify objectives, identify/analyze risks, and consider fraud and control changes. The risk assessment component of the COSO framework includes principles associated with management's consideration of the risk of material misstatement, not the assurance that controls continue to operate effectively. The control activities component of the internal control integrated framework includes such principles as deployment of policies and procedures and the selection and development of controls around information technology. The information and communication components of the COSO framework consider those systems that identify, capture, process, and distribute information supporting the accomplishment of financial reporting objectives, not the assurance that controls operate effectively. The information and communication component of the internal control integrated framework includes such principles as internal and external communication as well as obtaining and using information
99
The control environment sets the overall tone of the organization and is considered the foundation for the other components of internal control. The other components of internal control are risk assessment, information and communication, control activities, and monitoring. The control environment is sometimes referred to as the "tone at the top." The control environment is the framework upon which all other principles are built. It is not as specifically designed to ensure that controls continue to operate effectively as is monitoring
The "tone at the top" represents the culture of an organization in terms of the standards related to controls and conduct that senior management and the board of directors set for an entity. When employees are focused on doing the right thing, when management quickly addresses and resolves issues, and when fairness and honesty prevail in dealings with internal and external people, a positive tone for the organization is established.
100
Logical controls use software and data to monitor and control access to information and computing systems.Logical Control -A control that addresses the authorization for access to computer programs and data files. An uninterrupted power supply is considered a physical control. Physical controls monitor and control the environment of the workplace and computing facilities. They also monitor and control access to and from such facilities.
General controls are designed to ensure that an organization's control environment is stable and well-managed. Information-processing controls can be automated or manual, and apply to the processing of information and transactions to help ensure transactions occurred, are authorized, and are completely and accurately processed and reported.
101
Communication of control deficiencies in INTERNAL CONTROL - FS AUDIT ONLY, NONISSUER - CONTROL DEFICIENCY, SIGNIFICANT DEFICIENCY, MATERIAL WEAKNESS.
Communication should be made within 60 days (FOR NON ISSUER) of the report release date. (14 DAYS FOR ISSUER)
102
INTERNAL FACTORS - Mgt performance based compensation, financing methods.
EXTERNAL FACTORS - Business cycles, regulatory factors, industry factors
103
104
Identify and assess risk of material misstatement at the financial statement level =
Respond with financial level response (i.e. increase level of supervision)
105
Identify and assess risk of material misstatement at assertion level =Respond at assertion level by changing NET
Inherent risk * Control risk Assertion - COVERUP
106
Relationship between RMM and NET
Drafting the audit plan 1. OBJECTIVE - All AR exist 2. ASSERTION - Existence 3. AUDIT PROCEDURE - Confirm(NATURE) 25 (EXTENT) AR as of 12/31/year 1 (TIMING)
107
Susbstantive procedures
1. Used to detect material misstatements to transaction classes, account balances, and disclosures. 2. Includes other audit procedures required by GAAS (i.e. letter of lawyer inquiry) Test of Details - Applied to transaction classes, account balances and disclosures. Consist of audit procedures used to gather evidence to support the account balances as reflected in the financial statements. SUBSTANTIVE ANALYTICAL PROCEDURES 1. Evaluations of Fin Information made by a study of plausible relationships among both Financial and nonfinancial data 2. Generally involve comparisons of recorded amounts to independent expectations developed by the auditor.
108
ELEMENTS OF QUALITY CONTROL
1. HUMAN resources 2. Engagement/Client Acceptance and Continuance 3. Leadership Responsibilities 4. Performance of the engagement 5. Monitoring 6. Ethical Requirements
109
Inherent rrisk factors may be qualitative or quantitative and include factors such as:
1. Complexity 2. Subjectivity 3. Change 4. Uncertainty 5. Mgt bias or fraud risk 6. Significance 7. Volume or lack of uniformity
110
AUDIT objectives are the same in both __________
computerized and manual environments
111
CHATGPT - Assertion level ASSERTIONS- Audit assertions are claims or statements made by management regarding the financial statements of an organization. These assertions form the basis of an audit, guiding auditors in determining whether the financial statements are accurate and complete. The auditor tests these assertions to gather evidence and express an opinion on the financial statements.
Assertion level in the context of auditing refers to the specific representations made by management in the financial statements regarding the accuracy and completeness of the financial information. These assertions are made about individual transactions, account balances, and disclosures in the financial statements. When auditors perform their work, they need to test these assertions to determine whether the financial statements are fairly presented in accordance with the applicable accounting framework (e.g., GAAP or IFRS). These assertions help auditors identify areas where misstatements might occur and guide the audit process. The key assertions typically covered during an audit include: Existence (or Occurrence) Meaning: The items or events actually exist or have occurred. Example: The company’s reported assets, like inventory, actually exist at the balance sheet date. Completeness Meaning: All transactions, balances, and disclosures that should have been included are indeed included. Example: All liabilities are reported and none are left out. Rights and Obligations Meaning: The entity has the legal rights to the reported assets, and it is obligated for the reported liabilities. Example: A company reports ownership of its property and has responsibility for any reported debts. Valuation or Allocation Meaning: The amounts are properly valued and recorded in the correct accounting period. Example: Inventory is valued correctly based on its cost or market value, and no overstatements are made. Presentation and Disclosure Meaning: The financial statements are properly classified, described, and disclosed in accordance with the applicable financial reporting framework. Example: The financial statements clearly present the entity’s activities, and all required disclosures are made, such as contingent liabilities or related-party transactions. Accuracy Meaning: Transactions and events have been recorded at the correct amounts. Example: The sales figures recorded reflect the accurate amount billed to customers. By evaluating these assertions, auditors assess whether the financial statements present a true and fair view of the company's financial performance and position. The assertion level is crucial for auditors to focus their testing on areas of high risk or potential misstatements.
112
ASSERTIONS
1. CUTOFF - Cutoff A financial statement assertion in the "transactions and events" category indicating that transactions and events have been recorded in the correct accounting period.
113
Audit documentation supports the ______
Opinion
114
Mgt representation letter
All material matters have been adequately disclosed to the AUDITOR
115
A written audit program is required for every audit
engagement letter - mandatory
116
Hospitals - less affected by business cycles
Cutoff Bank Statement A bank statement sent directly to the auditor, usually shortly after period end. Cutoff Testing An examination of transactions occurring several days before and several days after year-end, to ensure that they were recorded in the proper accounting period. Defalcation (Misappropriation of Assets) Theft of an entity's assets when the effect of the theft causes the financial statements not to be presented in conformity with GAAP. Walk-Throughs Procedures performed by the auditor around the flow of data from origination to final disposition to obtain an understanding of the system and controls. Working Papers (Audit Documentation) The principal record of procedures performed, evidence obtained, and conclusions reached; also called "workpapers" or "audit documentation." Yellow Book A publication of the U.S. Government Accountability Office (GAO), entitled "Government Auditing Standards," which represents the source of GAGAS.
117
Documentation may include any item the AUDITOR can (Acronym -FIND): 1. F - Flowchart 2. I - Internal control questionnaire or checklists 3. N - Narrative 4. D - Documentation from the client, including copies of the entity's procedures manuals and org charts.
118
The determination of whether a risk is a significant risk should ignore the effects of controls related to the risk and should be based entirely on inherent risk. A significant risk exists when inherent risk is higher on the spectrum of inherent risk.
119
Testing of Design and Operating Effectiveness Procedures to test design effectiveness: 1. INQUIRIES 2. OBSERVATION 3. INSPECTION Walkthroughs that include these procedures are sufficient to test design effectiveness.
Procedures to test OPERATING effectiveness: 1. INQUIRIES 2. OBSERVATION 3. INSPECTION 4. REPERFORMANCE Used exclusively for testing operating effectiveness.
120
Controls that are tested only during an interim period should be supplemented by additional evidence for the remaining period. Also known as rollforward procedures for remainder year
E.g. Interim testing period
121
Even if controls have not changed, operating effectiveness must be tested at least once ___________
every third year
122
IR = RMM (Risk of Material Misstatement)
IR*CR=RMM
123
Susbtantive procedures are used to detect material misstatements to transaction classes, account balances and disclosures at the relevant assertion level. Includes other audit procedures required by GAAS (i.e. letter of lawyer inquiry) 2 types
1. Test of details - Applied to transaction classes, account balances, and disclosures Consist of audit procedures used to gather evidence to support the account balances as reflected in FS. 2. Substantive Analytical procedures - Evaluations of FI made by a study of plausible relationships among both financial and nonfinancial data. Generally involve comparisons of recorded amounts to independent expectations developed by the auditor.
124
Ratios and Subsequent events and Consolidation sim to be revised from FAR
125
Planning stage - auditor should make a preliminary judgement of ________
materiality
126
More complex indicators 1. Several business lines 2. Many levels of mgt 3. Complex transactions
Less complex indicators" 1. Fewer business lines 2. More centralized accounting functions 3. Few levels of management
127
Audit procedures - 2 categories
1. Risk assessment Procedures 2. Further Audit procedures - further into 2 categories - A. TEST OF CONTROLS (if applicable) and B. SUBSTANTIVE PROCEDURES (required)
128
AUDIT PLAN should include info related to NATURE, EXTENT AND TIMING of audit procedures: NET
1. Nature refers to the type of procedure that's going to be performed 2. Extent refers to number of items 3. Timing refers to the testing period or testing as of date.
129
Performance MATERIALITY (Nonissuer)
Tolerable Misstatement (Issuer)
130
MISSTATEMENTS include:
1. Inaccuracies in the collection of processing of data 2. Departures from GAAP 3. Omissions 4. Inappropriate selection or application of accounting policies 5. Inappropriate classification, aggregation, or disaggregation of information
131
TYPES of MISSTATEMENTS
1. FACTUAL (about which there are no doubt) 2. JUDGEMENTAL (differences arising from the judgments of mgt, including those concerning recognition, measurement, presentation, and disclosure in the FS(including the selection or application of accounting policies that auditor considers unreasonable or inappropriate) 3. PROJECTED (These are the auditor's best estimate of misstatements identified in audit samples to the entire population from which the samples were drawn.)
132
AUDIT RISK (should be low) = Risk of Material Misstatement (Assessed by Auditor)* Detection Risk (controlled by auditor) Audit risk = RMM*DR RMM = IR*CR The auditor must perform a separate assessment of INHERENT RISK (IR) and CONTROL RISK (CR).
The components of audit risk may be assessed either: 1. Quantitatively (e.g. as a %); or 2. Nonquantitatively (e.g. High, medium, low, etc.)
133
Audit risk equation AR = RMM*DR = IR*CR*DR or DR = AR/RMM
134
Types of Fraud 1. Fraudulent Financial Reporting 2. Misappropriation of Assets
Fraud Triangle 1. Incentives/Pressures - a reason to commit fraud. e.g. excessive pressure for mgt to meet aggressive goals 2. Opportunity - a lack of effective controls. Example -weak controls over cash (no locks on cash register) 3. Rationalization/Attitude - an attempt to justify fraudulent behavior. Example includes: Disregard for authority (i.e. known history of violations of securities law)
135
Confirmation of accounts payable is a test of details, not an analytical procedure. Scanning payroll files for terminated employees is a test of details, not an analytical procedure. Recalculating interest expense based on notes payable balances is a test of details, not an analytical procedure.
Total transactions = Total revenue
136
Something not in FS, e.g. Compliance (never part of FS)
Report in Other Matter Paragraph
137
Examination engagement - Opinion report Review - Conclusion Agreed-upon Porcedures - Findings
Examination can be an assertion based examination or a direct examination
138
ASSERTIONS - MNEMONIC COVER UP Valuation and Allocation A financial statement assertion in the "account balances" category indicating that assets, liabilities, and equity interests are included in the financial statements at appropriate amounts and any resulting valuation or allocation adjustments are appropriately recorded.
1. COMPLETENESS - all account balances, transactions, and disclosures that should have been recorded and included in the FS. 2. CUTOFF- Transactions - Transactions have been recorded in the correct accounting period. 3. VALUATION, ALLOCATION AND ACCURACY - Account balances, transactions and disclosures are recorded and described fairly and measured at appropriate amounts, and any resulting valuation or allocation adjustments are appropriately recorded. 4. EXISTENCE AND OCCURRENCE - Account balances exist, and transactions that have been recorded and disclosed have occurred and pertain to the entity. 5. RIGHTS AND OBLIGATIONS - The entity holds or controls the rights to assets and liabilities are the obligations of the entity. Account balances and disclosures. 6. UNDERSTANDIBLITY OF PRESENTATION AND CLASSIFICATION- Transactions have been recorded in the proper accounts and appropriately aggregated or disaggregated. Fin Information is appropriately presented and descibed and disclosures are clearly expressed and understandable in the context of the applicable financial reporting framework.
139
Control and Detection
Inverse relation
140
Test of controls cannot detect misstatements but can only be used to assess the risk of material misstatements
Inherent risk is a component of audit risk and not of detection risk. Detection risk is a component of audit risk and not vice versa.
141
Compilation Agreement
The effect that independent impairments if present will have on the expected form of the accountant's report.
142
Issuer = 14 or 45? days after re[prt release date, retained for 7 yrsrd
Non issuers = 60 days after report release date, 5 years
143
AUDIT REQUIREMENTS WHEN USING A SPECIALITIST
1. Evaluate his competence and objectivity 2. Assess the risk of material misstatement with the subject matter 3. Understand and evaluate the external IT auditor's or specialist's work 4. Verify any relationships with the client are appropriate
144
145
MONITORING sequence of activities 1. cconduct ongoing and/or separate evaluations to determine if IC are in place and functionning 2. EValuate and control IC deficiencies
1. CONTROL baseline - Understand internal controls (I/C) system and develop baseline 2. Change IDENTIFICATION - identify changes in I/C effectiveness through ongoing and/or separate evaluations 3. Change management - Implement I/C Changes are needed. 4. Control revalidation/update Develop new baseline after I/C revisions
146
To what degree, is a significant deficiency related to a material weakness
IT Is LESS SEVERE than a MATERIAL WEAKNESS.
147
Disclaimer of opinion
Auditors cannot/do not express an opinion
148
KEY POSITION- Any position that gives the ability to exercise influence over financial statements.
CEO, CFO, Controller, Director of internal audit
149
LEADING INDICATIORS
LAGGING INDICATORS - inventories to sales ratios, prime rate charged by banks
150
Shortgaes may occur during a PEAK TROUGH - Profit at lowest, firms have excess capacity and must reduce COSTS and their WORKFORCES. RECOVERY -
Contraction - Decrease in economic activity, when the economy is contracting
151
Periodic reconciliation of changes to the data is considered a detective control because it reviews changes. This control helps to verify that any changes made to the data follow the established policies and procedures, including appropriate review and approval.
. In every audit, the auditor should obtain a sufficient understanding of the design of relevant controls pertaining to financial reporting in each of the five internal control components.
152
AR = RMM *DR= IR*CR*DR
153
ATTEST = Examination, Review and Agreed-upon procedures (ERA)
154
Vulnerability controls identify and prevent security issues for newly installed applications and post-installation applications on an ongoing basis. This control is not related to job role duties. Authentication controls validate a user's identity for system access, ensuring that only the appropriately designated person accesses a system. This control is not violated because Computing Corp. granted system access for Janice for both job roles, so she would be the proper person to allow access during the authentication process. Access control lists are a type of authentication control that governs the level of access that a user has, such as the ability to create content, read it only, or remove data. There is no mention of the type of access Janice has been given in her two job roles, which means there is no indication that this type of access control was violated.
Computing Corp. violated the preventive control of segregation of duties. To implement this control, organizations identify job role functions that have conflicts of interest or functions that should otherwise not be performed by the same person because that could lead to fraudulent behavior or errors. If Janice is both a security administrator and a programmer, she would have the ability to create an application that circumvents network security protocols, violating the control of segregation of duties.
155
Substantive testing is typically not utilized to identify relevant controls. Substantive testing is an audit procedure designed to detect material misstatements. Auditors typically will assess the risk of material misstatement, which includes obtaining an understanding of controls, and then will determine the nature, extent, and timing of substantive procedures.
An auditor is not required to evaluate operating effectiveness as part of understanding the system of internal control. Tests of controls are performed when the auditor's risk assessment is based on the assumption that controls are operating effectively or when substantive procedures alone are insufficient (e.g., when the entity makes extensive use of information technology).
156
3 impairments
PERSONAL, ORGANIZATIONAL and EXTERNAL
157
GAGAS
Yellow book
158
Auditors of public companies of any size are not covered by ________
GAO rules (Govt Accountability office)
159
Detection risk
A risk that a misstatement can go undetected
160
Professional judgement is based on
Training, knowledge and experience
161
On the job training does not qualify as CPE under GAO rules and over a 2 year period. ABC will need 80 hours of CPE of which at least ______should cover subject matter that deals directly with auditing in the govt. environment.
24 hours
162
GAO's conceptural framework includes a unique ___________that derives from an auditing organization's placement within a government entity which might, in combination with the structure of the entity being audited, impact the auditor's ability to work and report results objectively.
STRUCTURAL THREAT - GAO
163
Testing at interim is often performed when the ___________________
risk of material misstatement is low
164
Attestation services are non-audit services.
e.g. assertions/ claims made by another party. examination/forecasts 1. examination 2. reviews 3. agreed upon procedures
165
Disposes off shares within 30 days - does not create AUD problem
True
166
1. Other partner in the office even if he is not providing service to the client 2.DHG firm providing audit services
COVERED member
167
If loan payments are uptodate and terms are completely normal, no problem arises if staff took bank from the loan staff is auditing.
True
168
Blank confirmations provide the most assurance because they require that the 3rd party writes down the amount they believe they owe the client. The auditor can then compare what the 3rd party wrote down to what the client has reported.
Blank confirmations require the customer to input the amount that they owe the company (your audit client). Blank forms will often provide a greater amount of assurance; however, they will often result in lower responses as people are less likely to make the effort to fill them out. Blank confirmations provide the highest level of assurance.
169
Motivation, Rationalization and Opportunity
Fraud Triangle
170
COMPILATIONS do not require independence but lack of independence should be ____________
DISCLOSED.
171
what is scope limitation in Audit ChatGPT said: In auditing, scope limitation refers to a situation where the auditor is unable to obtain sufficient appropriate audit evidence to form an opinion on the financial statements due to restrictions imposed by the client or other circumstances. These limitations prevent the auditor from fully assessing the financial records, transactions, or internal controls of the entity being audited. Scope limitations can arise in various ways, such as: Client-imposed limitations: The client may refuse to provide access to certain records or documents, restrict access to key personnel, or limit the auditor’s ability to perform certain audit procedures. Inability to perform necessary audit procedures: Sometimes, due to time constraints, lack of cooperation, or inability to access certain information (such as records from a third party), the auditor cannot complete the audit process as planned. Circumstances beyond the auditor’s control: There may be instances where natural disasters, fire, or theft result in the destruction of accounting records, or where legal restrictions prevent certain information from being reviewed. Types of Scope Limitations: Complete scope limitation: When the auditor is unable to perform any of the planned audit procedures. Partial scope limitation: When the auditor cannot perform specific procedures in some areas, but the audit can still proceed in other areas. Impact on the Audit Opinion: If a scope limitation is significant and cannot be resolved, the auditor may issue a qualified opinion, indicating that they were unable to obtain sufficient evidence to form an opinion on certain aspects of the financial statements. In extreme cases, if the scope limitation is pervasive and affects the entire audit, the auditor might issue a disclaimer of opinion, stating that they cannot express an opinion on the financial statements due to the lack of sufficient evidence. Scope limitations are taken very seriously in audits, as they could signal potential issues or risks with the entity’s financial reporting.
Voucher Packets A group of matched documents related to a particular purchase (i.e., a requisition, purchase order, receiving report, and vendor invoice)
172
Vouching- Directional testing in which the auditor examines support for what has been recorded, going from the financial statements back to supporting documentation (i.e., testing existence). Note that the term "vouching" is sometimes used generically to mean comparing one item to another, without indication of direction.
173
ChatGPT A Financial Reporting Framework Audit is an examination of an entity's financial statements to ensure they comply with the applicable financial reporting framework (FRF) in place. These frameworks provide the guidelines for how financial statements should be prepared and presented. The audit ensures that the financial statements are accurate, complete, and fairly represent the financial position of the company or entity in accordance with the chosen framework. Key Financial Reporting Frameworks (FRFs) Generally Accepted Accounting Principles (GAAP) – Widely used in the United States, it outlines the rules and procedures for accounting in various industries. International Financial Reporting Standards (IFRS) – Used globally, IFRS is a set of standards set by the International Accounting Standards Board (IASB). Other FRFs – Some organizations may follow specialized frameworks such as the cash basis, tax basis, or regulatory basis depending on their specific needs and jurisdiction. Steps in a Financial Reporting Framework Audit Understanding the Entity: The auditor will review the company’s business model, operations, and the regulatory environment to determine the most relevant financial reporting framework. Evaluating Internal Controls: The auditor evaluates the effectiveness of internal controls over financial reporting to assess how accurately the financial information is compiled. Testing Financial Statements: The auditor tests the financial statements against the selected framework (e.g., GAAP or IFRS) to ensure compliance. This includes: Verifying the accuracy of financial data Ensuring correct classification of assets, liabilities, revenues, and expenses Assessing the adequacy of disclosures required by the chosen framework Identifying Material Misstatements: The auditor looks for any material misstatements or deviations from the framework and evaluates whether these issues are significant enough to impact the overall reliability of the financial statements. Forming an Opinion: After assessing the financial statements, the auditor forms an opinion on whether the financial statements are prepared in accordance with the financial reporting framework, offering one of the following opinions: Unqualified Opinion: The financial statements are presented fairly in accordance with the applicable framework. Qualified Opinion: The financial statements are mostly compliant with the framework, but there are exceptions. Adverse Opinion: The financial statements do not conform to the framework. Disclaimer of Opinion: The auditor is unable to form an opinion due to significant limitations in the scope of the audit. Importance of a Financial Reporting Framework Audit Transparency: It ensures that the company is transparent in its financial reporting, providing stakeholders with reliable and consistent information. Compliance: Ensures the entity adheres to relevant legal and regulatory requirements. Investor Confidence: Proper audits enhance the credibility of financial statements, reassuring investors, creditors, and other stakeholders. Financial Decision-Making: Accurate and reliable financial information is crucial for internal management decisions and external investments.
Undue Influence Threat The threat that external influences or pressures will affect an auditor's ability to make independent and objective judgments. Unmodified Opinion - MN An auditor's report for a nonissuer stating that the financial statements are presented fairly in all material respects in accordance with the applicable financial reporting framework. Unqualified Opinion - IQ An auditor's report for an issuer stating that the financial statements are presented fairly in all material respects in accordance with the applicable financial reporting framework. Updated Report A report on previously issued financial statements that takes into consideration information that the accountant has become aware of during the current engagement, and includes any necessary revisions to the original report. Upper (Maximum) Deviation Rate In sampling, the sum of the sample deviation rate and the allowance for sampling risk. User Auditor The auditor of a company that makes use of an outside service organization. Qualified Opinion An auditor's report stating that "except for" the effects of the matter(s) to which the qualification relates, the financial statements are presented fairly, in all material respects. Quality Control System - 5 ELEMENTS A system designed to ensure that services are competently delivered and adequately supervised. A firm's quality control system is composed of five elements of engagement quality: acceptance and continuance of clients and engagements; independence, integrity, and objectivity; monitoring; personnel management; and engagement performance. Questioned Costs Expenditures deemed to be non-allowable, undocumented, or unreasonable for reimbursement under a grant.
174
Material effect
add EMPHASIS MATTER para
175
Anything that's not disclosed in FS
Other matter PARA
176
Omits one of the financial statements
Qualified opinion e.g. GAAP DEPARTURE Does not issue/omit cash flow statement
177
Reviewing confirmations of loans receivable and payable is useful for determining the existence of related party transactions because guarantees are commonly provided by or for related parties.
Recurring transactions after year-end are a usual business occurrence. Related party transactions would most likely be nonrecurring.
178
The auditor would generally rely on persuasive evidence rather than conclusive evidence.
To be assured beyond a reasonable doubt would require that the auditor test near or at 100% of the items in the population for a given audit procedure. This is not practical in many cases.
179
Cash disbursements
180
Attribute sampling is also known as _________ Attribute Sampling A statistical sampling method used to estimate the rate of occurrence of a specific characteristic or attribute in a population.
Sampling internal control
181
Audit Sampling- The testing of less than 100 percent of the items within an account balance or class of transactions in order to evaluate some characteristic of the balance or class. Block (Cluster) Sampling- In sampling, the selection of groups of adjacent items. Discovery Sampling-A special type of attribute sampling appropriate when the auditor believes that the population deviation rate is zero or near zero. Nonsampling Risk All aspects of audit risk that are not due to sampling (e.g., selecting inappropriate audit procedures, failing to recognize a misstatement in documents examined, etc.). Nonstatistical Sampling=JUDGMENT rather than Maths formulae A method of sampling in which auditors use their judgment (rather than mathematical formulae) to estimate risk, determine sample size, and evaluate sample results. Probability-Proportional-to-Size (PPS) Sampling A sampling technique in which the sampling unit is defined as an individual dollar in a population. Once a dollar is selected, the entire account (containing that dollar) is audited. Sampling Interval In PPS sampling, a range of dollars from which each sampling unit will be selected (e.g., in a population of $500,000 with a sampling interval of $5,000, there would be 100 sampling intervals; the sample would consist of 100 items, with one item being selected from each of the 100 intervals). Sampling Risk In sampling, the risk that the sample is not representative of the population, and that the auditor's conclusion therefore will be different from the conclusion that would have been reached had the tests been applied to all items in the population. Sampling Unit In sampling, an item selected from the population for testing. Statistical Sampling = MATHS FORMULAE being used A method of sampling in which auditors use mathematical formulae (rather than simply using judgment) to quantify risk, determine sample size, and evaluate sample results. Stop-or-Go Sampling (Sequential Sampling) In sampling, a method designed to avoid oversampling for attributes by allowing the auditor to stop an audit test before completing all steps, if the results have become clear. Variables Sampling - e.g. AR balance A statistical sampling method used to estimate the numerical measurement of a population, such as a dollar value (e.g., accounts receivable balance).
Audit Strategy An overall plan for the audit, typically used to develop the more detailed audit plan. Audit Trail Evidence indicative of the sequential flow of accounting operations. Auditing Procedures Tasks performed to accomplish the objectives of the audit. Bank Confirmation An independent bank verification of year-end bank balances; also may provide information regarding loans, contingent liabilities, discounted notes, pledged collateral, and guarantees or security agreements. Bank Reconciliation A schedule that compares the cash balance reported by the bank with the cash balance reported by the client, and explains any differences. Bank Transfer Schedule A schedule that itemizes transfers of cash among banks, including the record date per the client and the transaction date per the bank. Bias Threat The threat that an auditor will, as a result of political, ideological, social, or other convictions, take a position that is not objective. Bill of Lading A shipping document issued by a carrier evidencing receipt of goods and terms of transport. Blank Confirmation A confirmation in which the recipient is requested to fill in the balance. Capsule Financial Information Unaudited summarized interim information for subsequent periods. Combined Approach An audit approach in which both tests of the operating effectiveness of controls and substantive procedures are used. If controls are operating effectively, less assurance will be required from substantive procedures. Common Size Financial Statements Restated financial statements in which each balance sheet component is expressed as a percentage of total assets, and each income statement component is expressed as a percentage of total revenue. = IS = % of TOTAL REVENUE; BS = % of TOTAL ASSETS Compilation An engagement in which an accountant presents in the form of financial statements information that is the representation of management. Completeness A financial statement assertion appearing in all three assertion categories and indicating that all transactions, events, assets, liabilities, and equity interests that should have been recorded have been recorded, and that all disclosures that should have been included in the financial statements have been included. Compliance Audit An attest engagement under GAAS (and sometimes GAGAS) in which the auditor reports on whether the entity or compliance audit client(s) complied, in all material respects, with the compliance requirements applicable to its programs. Additional Single Audit Act requirements may apply. Component An entity or business activity that prepares financial information that is included in the group financial statements in the audit of a nonissuer. Component Auditor An auditor who performs work on the financial information of a component that will be used as audit evidence for the group audit of a nonissuer. A component auditor may be part of the group engagement partner's firm, a network firm, or another firm. Components of Internal Control Interrelated elements of the system of internal control used to achieve an entity's objectives; control components consist of: control environment, risk assessment, information and communication systems, monitoring, and (existing) control activities. Concurring Approval of Issuance Approval of the issuance of the engagement report granted by the engagement quality reviewer under PCAOB standards. A firm cannot give an issuer permission to use the engagement report until concurring approval of issuance has been granted. Condensed Financial Statements Historical financial information that is presented in less detail than a complete set of financial statements, in accordance with an appropriate financial reporting framework. Condensed financial statements may be separately presented as unaudited financial information or may be presented as comparative information. Confidence Level (also called Reliability) In sampling, a measure of how certain the auditor wants to be that his or her results are accurate. Note that the confidence level plus the risk of being ineffective equals 100 percent. Confirmation A direct written response to the auditor from a third party, either in paper form or by electronic or other medium. Consigned Goods Goods belonging to one party that are held for sale by another party; the seller does not pay the owner until the goods have been sold. Consistency A measure of the comparability of financial statements from one year to the next. Contingency An event that may, but is not certain to, occur. A loss contingency that is probable and that can be reasonably estimated should be reflected in the accounts.
182
After obtaining an understanding of how management developed its estimate, the auditor would perform one or a combination of the following procedures: Review subsequent events and transactions (occurring prior to completion of fieldwork) that corroborate the value of the estimate (choice "A"). Develop an auditor's point estimate or range (choice "B"). Review and test the procedures used by management to develop the estimate (choice "D").
Attributes of Risk Four characteristics used in analyzing risk: type, significance, likelihood, and pervasiveness.
183
Social media post -Unstructured data
spreadsheet, data mart data - structured data
184
Variance analysis-bullet charts
Scatter plots - analyzing relationships
185
Pie chart
Propotional make up of analysis of category of population
186
Ratio estimation is most effective if there is a correlation between book values and audit amounts.
A relatively small number of differences do not improve the effectiveness of ratio estimation sampling relative to other techniques.
187
Overstated units have a higher (not lower) probability of sample selection than units that are understated, because with PPS sampling, each item is given a probability of selection in proportion to its recorded amount (probability-proportional-to-size).
. The sampling distribution does not have to approximate the normal distribution in order for PPS sampling to be used.
188
Sampling interval = Tolerable misstatement/Reliability factor
Dollar unit sampling or In PPS sampling, the auditor controls the risk of incorrect acceptance by specifying that risk level for the sampling plan. The inputs for PPS are tolerable misstatement, risk of incorrect acceptance (reliability factor), and the recorded amount of the population being sampled.
189
An emphasis-of-matter paragraph is used to emphasize a matter that is appropriately presented or disclosed in the financial statements.
An other-matter paragraph is used to refer to matters other than those presented or disclosed in the financial statements.
190
Negative cash flows from operations are examples of negative trends that the entity has experienced. They may be an indicator of financial difficulties that the entity is facing.
. If substantial doubt remains, a separate section should be added to the auditor's report with the heading "Substantial Doubt About an Entity's Ability to Continue as a Going Concern." If management's plans alleviate the substantial doubt, an emphasis-of-matter may be added (optional). When a CPA concludes that there is substantial doubt about an entity's ability to continue as a going concern and that doubt remains (is not alleviated by management's plans) and the entity adequately discloses its financial difficulties, an unmodified opinion is appropriate. A separate section with the heading "Substantial Doubt About the Entity's Ability to Continue as a Going Concern," rather than an emphasis-of-matter paragraph, should be added to the auditor's report. This paragraph should include the phrases "substantial doubt" and "going concern." If substantial doubt about the entity's ability to continue as a going concern has been removed in the current period, the separate going concern section included in the prior period auditor's report should not be repeated, and no description of the reasons or plans for recovery need be included.
191
Inadequate disclosure of the substantial doubt about an entity's ability to continue as a going concern is a departure from GAAP, resulting in either a qualified or adverse opinion.
Scope limitations result in either a qualified opinion or in a disclaimer of opinion, but not in an adverse opinion.
192
Risk of incorrect acceptance: Deciding from the sample that the balance is correct when it is really materially misstated; affects audit effectiveness.
Risk of incorrect rejection: Deciding from the sample that the balance is materially misstated when it is really correct; affects audit efficiency.
193
Risk of assessing control risk too low: The risk that the assessed level of control risk is less than the true risk, which is caused by thinking that the control is more effective and reliable than it really is; affects AUDIT EFFECTIVENESS.
Risk of assessing control risk too high: The risk that the assessed level of control risk is greater than the true risk, which is caused by thinking that the control is less effective and reliable than it really is; affects audit efficiency.
194
Sampling risk + reliability (confidence)=
100%
195
Attribute sampling
196
These factors affect sample size in an attribute sampling application:
1. Risk of assessing control risk too low (inverse relationship) 2. Tolerable deviation rate (inverse relationship) 3. Expected deviation rate (direct relationship) 4. Population size (not an issue if the population is large)
197
The auditor compares the upper deviation rate with the tolerable deviation rate in drawing conclusions about an attribute sampling application. If the upper deviation rate exceeds the auditor's tolerable deviation rate, the auditor will not rely on the control.
(The upper deviation rate is the sample deviation rate plus an allowance for sampling risk)
198
Providing more supervision during an audit of a nonissuer in response to assessed risks of material misstatement at the financial statement level is an example of an overall response
Substantive procedures include both tests of details and substantive analytical procedures. Substantive procedures are required for all relevant assertions related to each significant transaction class, account balance, and disclosure item. An auditor would most likely respond to a heightened assessed risk of material misstatement by using substantive tests of details at period end, when appropriate. Substantive analytical procedures are often used when there is a large volume of predictable transactions and when the risk of material misstatement is low.
199
If control risk and inherent risk are both high, the auditor will likely assess the risk of material misstatement higher as well. If the risk of material misstatement is higher and the auditor is performing tests of details, the auditor will select a larger sample for their audit procedure.
If the auditor determines that testing the operating effectiveness of controls would not be efficient, he or she may choose to use only substantive procedures to evaluate specific assertions and risks.
200
A dual-purpose test is a test of controls that is performed concurrently with a test of details on the same transaction. The purpose of a test of controls is to evaluate the operating effectiveness of a control, whereas the purpose of a test of details is to support relevant assertions or to detect material misstatements. A dual-purpose test should be designed to accomplish both objectives.
e.g. A senior auditor conducted a dual-purpose test on a client's invoice to determine whether the invoice was approved and to ascertain the amount and other terms of the invoice.
201
Substantive procedures are used to detect material misstatements and include tests of details (as applied to transaction classes, account balances, and disclosures) and substantive analytical procedures. A dual-purpose test is defined as a test of controls that is performed concurrently with a test of details on the same transaction.
A dual-purpose test is defined as a test of controls that is performed concurrently with a test of details on the same transaction.
202
If it would take less time or be more efficient to perform substantive tests than it would to perform tests of controls, and if there is no other reason to test controls (i.e., if there is not a high degree of electronic processing), the auditor would not be likely to test controls.
Substantive procedures are always be necessary for all assertions relevant to material transaction classes, account balances, and disclosures. Assuming inventory is material, tests of controls alone would not be sufficient.
203
Substantive auditing procedures are required in the financial statement audit, but not in the audit of internal control.
Tests of controls include such procedures as inspecting documentation, inquiry, observation, and reperformance. Note that inquiry alone is not sufficient as the auditor should use a combination of procedures.
204
Analytical procedures are used for planning purposes, as substantive tests, and as an overall final review, but they do not provide evidence about control risk.
Calculation is used as a substantive test rather than as a test of controls. Confirmation represents a substantive test rather than a test of controls.
205
"Substantive response" is not a term used in the audit literature. The terms used are "overall response," "response to risks at the relevant assertion level," and "response to significant risks." The auditor develops these responses to the assessed risks of material misstatement.
. A substantive procedure test the dollar amount of an account, balance, or disclosure. A test of controls is where the auditor tests controls that exist at the client. A combined approach refers to the auditor performing both a test of controls and a substantive procedure.
206
. A management representation letter must be obtained in any audit, regardless of the level of risk of material misstatement.
The auditor most likely would perform tests of controls at period end because it provides greater assurance. Testing at interim is often performed when the risk of material misstatement is low.
207
Negative confirmations provide less assurance than positive confirmations.
If the auditor determines that testing the operating effectiveness of controls would not be efficient, he or she may choose to use only substantive procedures to evaluate specific assertions and risks.
208
A dual-purpose test is a test of controls that is performed concurrently with a test of details on the same transaction. The purpose of a test of controls is to evaluate the operating effectiveness of a control, whereas the purpose of a test of details is to support relevant assertions or to detect material misstatements. A dual-purpose test should be designed to accomplish both objectives.
If it would take less time or be more efficient to perform substantive tests than it would to perform tests of controls, and if there is no other reason to test controls (i.e., if there is not a high degree of electronic processing), the auditor would not be likely to test controls.
209
In order to assess control risk at a low level, tests of controls would need to be performed. Assessing control risk may be performed concurrently during an audit with obtaining an understanding of the entity's system of internal control.
Substantive auditing procedures provide the audit evidence that an auditor needs in order to opine on the financial statements. Substantive procedures include substantive analytical procedures and tests of details. These types of procedures are performed in a financial statement audit but not in the audit of internal control.
210
Analytical procedures are used for planning purposes, as substantive tests, and as an overall final review, but they do not provide evidence about control risk.
Tests of controls include such procedures as inspecting documentation, inquiry, observation, and reperformance. Note that inquiry alone is not sufficient as the auditor should use a combination of procedures.
211
As part of understanding internal control, an auditor is not required to obtain knowledge about the operating effectiveness of controls. Operating effectiveness is evaluated later, and only for those controls on which the auditor plans to rely.
Tests of controls are required to support the auditor's assumption that controls are operating effectively. Obtaining an understanding of each of the five components of internal control is required before making an assessment of control risk. The entity's accounting system (part of the information and communication component) and control environment are part of the five components. Considering whether control activities can have a pervasive effect on financial statement assertions is part of the auditor's risk assessment process.
212
Test counts and cut-off procedures are effective substantive tests of inventory (existence assertion). Analytical procedures and invoice recomputation are substantive tests performed by the auditor to gather evidence regarding management's assertion of valuation of the inventory. Document inspection and reconciliation generally is not helpful in testing segregation of duties, since even appropriate segregation often does not provide documentary evidence.
CONTROL/OPERATING EFFECTIVENESS OF OPERATION - Reperformance of a control by the auditor is used to evaluate the effectiveness of the operation of that control. Inquiry, observation, inspection, recalculation, and reperformance are procedures used to test operating effectiveness of controls. SUBSTANTIVE PROCEDURES - Confirmation, verification, and analytical procedures are substantive procedures. Recalculation related to the BALANCE of accounts is a substantive procedure. Recalculation related to a CONTROL would help the auditor obtain evidence of the control's effectiveness.
213
Chatgpt: An integrated audit refers to an audit process that combines both financial audits and internal control audits into one comprehensive evaluation. It typically aims to assess not only the accuracy and fairness of a company's financial statements but also the effectiveness of its internal controls, risk management processes, and overall governance. For example, in the context of publicly traded companies in the U.S., integrated audits are often required under the Sarbanes-Oxley Act (SOX). This legislation mandates that auditors must evaluate and report on the effectiveness of a company’s internal control over financial reporting (ICFR) as part of the overall audit of its financial statements. In essence, an integrated audit provides a broader, more holistic view of an organization’s financial health and risk management practices, ensuring that the financial statements are accurate and that the controls in place are sufficient to prevent fraud or errors.
Analytical procedures do not provide evidence about the operating effectiveness of a control. However, analytical procedures may be used in the testing phase of the audit as a substantive procedure to provide evidence about the dollar balance of an account.
214
An auditor uses the knowledge provided by the understanding of internal control and the final assessed risk of material misstatement primarily to determine the nature, timing, and extent of the substantive tests to be performed.
215
Natural umployment
Full employment
216
Stagflation
High unemployment, high inflation
217
A characteristic of nonstatistical sampling is it requires judgment to select a sample.
A characteristic of statistical sampling is it uses the laws of probability to select a sample. A characteristic of statistical sampling is each item in the sample has an equal probability of being selected.
218
Both statistical and nonstatistical sampling are acceptable methods for sampling in an audit. However, statistical sampling is sometimes preferred over nonstatistical sampling because it offers several advantages, such as it provides an objective basis for quantitatively evaluating sampling results.
Statistical sampling still requires judgment to determine sample sizes. The tolerable rate of deviation, the likely rate of deviation, and the allowable risk of assessing control risk too low are all determined by the auditor's professional judgment. Statistical sampling does not afford greater assurance than a nonstatistical sample of the same size. It only provides the auditor with a better measure of the sufficiency of the evidence found, and helps to evaluate the results found. A principal advantage of statistical methods of attribute sampling over nonstatistical methods is that they provide a scientific basis for planning the sample size.
219
The risk of incorrect acceptance is the risk that the sample supports the conclusion that the recorded account balance is not materially misstated when in fact it is materially misstated (i.e., sample results fail to identify an existing material misstatement).
In both statistical and nonstatistical sampling, the sample size is determined based on the sampling risk that the auditor is willing to accept based on their professional judgment.
220
The risk of assessing control risk too high is a sampling risk related to the efficiency of an audit.
The risk of incorrect acceptance is a sampling risk related to the effectiveness of an audit.
221
Inherent risk is not associated with the efficiency of an audit and is not a sampling risk. Inherent risk is the susceptibility of a relevant assertion to a material misstatement, assuming that there are no related controls.
Detection risk is not associated with the efficiency of an audit and is not a sampling risk. Detection risk is the risk that the auditor will not detect a material misstatement that exists in a relevant assertion.
222
Nonsampling risk includes all aspects of audit risk that are not due to sampling. It is always present and cannot be measured; the auditor can only attempt to reduce this risk to a very low level through adequate planning and supervision of the audit and quality control of all firm practices. Nonsampling risk can arise because an auditor failed to recognize misstatements in documents examined.
223
The auditor’s allowable risk of assessing control risk too low has an inverse relationship with sample size when planning a sample for a test of controls.
Preliminary judgments about materiality levels might be a consideration in planning an auditor’s sample for a substantive test, but not for a test of controls. The auditor’s desired level of detection risk might be a consideration in planning an auditor’s sample for a substantive test, but not for a test of controls.
224
In both statistical and nonstatistical sampling, the sample size is determined based on the sampling risk that the auditor is willing to accept based on their professional judgment.
Consumer price index measures rate of inflation.
225
Standards for audits of federal financial assistance recipients
Government Accountability Office. Governmental Auditing Standards (the Yellow Book)
226
The primary purpose of the consumer price index (CPI) is to compare relative price changes over time.
227
A decrease in govt spending is an example of fiscal, not monetary policy. Although this decrease would tighten the money supply for businesses and consumers, it would not necesssarily impact the int rates charged by banks.
228
CHATGPT: A disclaimer of opinion is an auditor's statement that they cannot express an opinion on the financial statements of a company. This typically happens when the auditor is unable to gather enough evidence to form an opinion, or when there are significant limitations in the scope of their audit. A disclaimer of opinion may be issued if: Scope limitation: The auditor is unable to obtain sufficient audit evidence (e.g., access to certain records or information is restricted). Uncertainty: There are significant uncertainties or issues that prevent the auditor from forming a clear opinion about the financial statements, like going concern issues. Inability to assess fairness: The auditor might not be able to assess whether the financial statements are presented fairly due to lack of adequate information.
229
Analytical procedures are evaluations of financial information made by a study of plausible relationships among both financial and nonfinancial data.
For example, the analytical procedure may consist of reviewing changes in account balances from the prior year to the current year using the unadjusted trial balance, and for others, it may be a more detailed analysis of a monthly or quarterly financial statement. Analytical procedures may be done using a variety of tools or techniques, including automated tools, such as a spreadsheet or a more sophisticated form of software used for performing audit data analytics.
230
The analytical procedures performed in planning assist in assessing the risk of material misstatement, including inherent risk factors, and determining the nature, extent, and timing of audit procedures that will be used to obtain audit evidence.
During planning, the auditor is specifically required to perform analytical procedures related to revenue in order to identify unusual or unexpected relationships that might indicate material misstatement, including material misstatement due to fraud. The auditor should also take into account analytical procedures performed during interim reviews (if performed).
231
Form 4 is a required form for principal owners to file with the SEC when they purchase or dispose of equity in an entity in which they own more than 10 percent of the voting interests.
232
ANALYTICAL PROCEDURES
High level review with an intention of inspection e.g. auditors scanned the repairs account to find unusually large amounts.
233
Authorization transactions - TEST OF CONTROLS
$$ amount = SUbstantive procedure
234
An investment held through a DEFINED BENEFIT PLAN for which CPA is not a trustee is an _______
INDIRECT FINANCIAL INTEREST
235
Kiting occurs when a check drawn on one bank is deposited in another bank and no record is made of the disbursement in the balance of the first bank. Frequent kiting may result in a high level of deposits coupled with a low average balance. Kiting A scheme whereby a check drawn on one bank is deposited in another bank, but the disbursement is not recorded on a timely basis, resulting in an overstatement of cash.
Lapping A scheme whereby a current receipt of cash (or a check) is stolen. To prevent detection, a subsequent receipt is applied to the previously unrecorded customer account. A lockbox system is the best means of preventing defalcation of cash by employees because the employees never have direct access to cash receipts.Lock Box-A system in which customers send their payments directly to the bank, preventing access by company employees. The use of prenumbered remittance advices is not effective in preventing theft of receipts by employees because it does not prevent employee access to cash receipts. While the performance of monthly bank reconciliations is a good control, it would not be effective in preventing the theft of receipts because it does not prevent employee access to cash receipts. (It might, however, be effective at detecting a theft that has already occurred). Daily deposit of cash receipts is not an effective control for preventing theft of receipts by employees because it does not prevent employee access to cash receipts. Logical Control A control that addresses the authorization for access to computer programs and data files.
236
Judgmental Misstatements Differences that arise from the judgments of management concerning accounting estimates that the auditor considers unreasonable, or the selection and application of accounting policies that the auditor considers inappropriate.
Lead Auditor The accounting firm that bears responsibility for issuing the auditor’s report. The lead auditor supervises the work of other auditors involved in the audit of an issuer and determines whether to divide responsibility. Letter of Audit Inquiry A direct letter sent to the client's attorney detailing any pending or threatened litigation matters and requesting the attorney to provide his or her evaluation directly to the independent auditor. Limited Use Report A report that is intended only for specified parties.
237
Sending a confirmation to a bank will result in external evidence from an independent source. This is the most reliable form of evidence.
IT Auditor Someone possessing specialized knowledge in information technology (IT) participating in the audit. Hypothetical Transaction A transaction not involving the facts or circumstances of a specific entity.
238
According to the Contingent Fee Rule, contingent fees are permitted when they involve a legal proceeding or ruling. When a CPA is receiving a contingent fee for a private letter ruling, it would be allowed under the Contingent Fee Rule and not be considered "contingent" because it would most likely be fixed by the legal jurisdiction. Contingent Fee A fee established for performing services when no fee is charged unless a specific finding or result is obtained, or the fee amount is dependent upon the finding or result obtained.
PROHIBITED Contingent fee Contingent fees are prohibited for audits of a client's financial statements. Contingent fees are not allowed for a review engagement of a client's financial statements. Contingent fees are prohibited for an examination of a prospective client's financial information.
239
SSARS apply when an accountant prepares, compiles, or reviews financial statements. Using information in the general ledger to prepare financial statements outside an accounting software system is considered a preparation engagement. Typing or reproducing client-prepared financial statements, without modification, as an accommodation to a client does not constitute preparation of financial statements because the accountant has not prepared those statements. Providing a client with a financial statement format does not constitute preparation of financial statements and, therefore, this does not fall within the guidelines of SSARS. Proposing correcting journal entries does not constitute preparation of financial statements. Even entering general ledger transactions or processing payments (general bookkeeping) in an accounting system does not constitute a preparation engagement because it is considered merely "assisting " in preparing the financial statements (bookkeeping service.)
Statements on Standards for Accounting and Review Services (SSARS) are applicable for a compilation of a nonissuer. Statements on Auditing Standards (SAS) apply to audit engagements for nonissuers. Statements on Standards for Attestation Engagements (SSAE) provide guidance for attestation engagements for issuers and nonissuers. Generally accepted auditing standards (GAAS) apply to audit engagements for issuers and nonissuers. (SAS provide guidance on GAAS for auditors of nonissuers and the PCAOB provides guidance on GAAS for issuers.)
240
When an accountant performs more than one level of service (for example, a compilation and a review, or a compilation and an audit) concerning the financial statements of a nonissuer, the accountant generally should issue the report that is appropriate for the highest level of service rendered.
A compilation of financial statements in accordance with Statements on Standards for Accounting and Review Services (SSARS) presents information that is the representation of management in the form of financial statements. A compilation does not provide assurance on the financial statements. A compilation of financial statements is not limited to presenting accounting data that conforms to a special purpose framework. A compilation of financial statements may present accounting data that conforms to frameworks other than special purpose frameworks, such as GAAP. A compilation of financial statements is not limited to presenting unaudited financial statements that omit substantially all required GAAP disclosures. Compilation of financial statements also includes compiling financial statements that present all required GAAP disclosures. A compilation of financial statements is not limited to presenting supplementary information that has been subjected to inquiry and analytical procedures. Supplementary information may or may not be subjected to compilation procedures, and compilation engagements do not require analytical procedures.
241
SSARS requires compiled financial statements to be accompanied by a compilation report. SSARS requires compiled financial statements to be accompanied by a compilation report. Note that an accountant who lacks independence is still permitted to compile financial statements of a nonissuer entity as long as lack of independence is disclosed. SSARS requires compiled financial statements to be accompanied by a compilation report even if the financial statements are not expected to be used by a third party. SSARS requires compiled financial statements to be accompanied by a compilation report. Compiled financial statements may be prepared using a framework other than GAAP, such as a special purpose framework or IFRS.
SSARS applies to the preparation of financial statements that are presented "alongside" the entity's tax return. Note: SSARS would not apply if the preparation of the financial statements with the tax return were solely for submission to taxing authorities.
242
Statements on Standards for Accounting and Review Services (SSARS) establish standards and procedures for an engagement to compile an individual's personal financial statements to be used to obtain a mortgage. Choice "A" is incorrect. Proposing adjustments to the books of account for a partnership is an engagement that does not pertain to SSARS, as it falls short of preparing financial statements. Choice "B" is incorrect. Reviewing interim financial data required to be filed with the SEC is covered under PCAOB standards. Choice "C" is incorrect. Preparing standard monthly journal entries is not covered by SSARS, as it falls short of preparing financial statements.
The accounting and review services committee is the authoritative body designated to promulgate standards concerning an accountant's association with unaudited financial statements of a nonissuer (i.e., an entity that is not required to file financial statements with an agency regulating the issuance of the entity's securities). Choice "A" is incorrect. The Financial Accounting Standards Board (FASB) is responsible for GAAP standards. Choice "B" is incorrect. The General Accounting Office (GAO) is responsible for audit standards under the federal "Single Audit Act." Choice "D" is incorrect. The Auditing Standards Board (ASB) is responsible for auditing standards under GAAS.
243
An accountant should be able to justify departures from SSARS. Choice "B" is incorrect. An accountant may occasionally depart from SSARS guidelines, but should be prepared to justify such departures. Choice "C" is incorrect. While it is true that an accountant should exercise professional judgment in applying SSARS, it is not true that SSARS are considered recommendations. SSARS are professional standards, which the accountant should generally follow. Choice "D" is incorrect. Statements on Auditing Standards do not apply to compilations or reviews of the financial statements of a nonissuer.
Continuing Accountant An accountant with whom the client has an ongoing relationship, as opposed to an accountant hired only to report on the application of accounting principles. Control A policy or procedure that an entity establishes to achieve control objectives. Control Deficiency A weakness that exists when the design or operation of a control does not allow management or employees, in the normal course of performing their assigned functions, to prevent or detect misstatements on a timely basis. Control Environment The tone of an organization, including management attitude, participation of those charged with governance, organizational structure, and human resource policies. Control Risk The risk that a material misstatement that could occur in an assertion will not be prevented or detected on a timely basis by the entity's system of internal control. Control Risk of Noncompliance The risk that noncompliance with a compliance requirement that could be material will not be prevented or detected on a timely basis by an entity's system of internal control. Controlled Processing - ACTUAL PROCESSING RUN A form of parallel simulation in which the auditor observes an actual processing run and compares the actual results to the expected results based on the auditor's own program. Controlled Reprocessing - ARCHIVED COPY A form of parallel simulation in which the auditor uses an archived copy of the program in question (generally the auditor's control copy) to reprocess transactions. The results are then compared with the results from the normal processing run. Corroborating Evidence Support that gives validity to recorded accounting data. Credit Memo = AR An internal document used to indicate a credit to a particular account, typically accounts receivable.
244
PREPARATION - Non Attest engagement
COMPILATION, REVIEW and AUDIT - Attest engagements
245
Negative confirmations are used when the combined assessed level of inherent and control risk is low, a large number of small balances is involved, and the auditor has no reason to believe that the recipients of the requests are unlikely to give them consideration.
Negative confirmation of accounts receivable is less effective than positive confirmation of accounts receivable because the auditor cannot infer that all nonrespondents have verified their account information. Negative confirmations returned do produce information (e.g., errors noted in accounts) that can be statistically quantifiable.
246
The negative request form of accounts receivable confirmation is useful particularly when: The assessed level of control risk relating to receivables is low (if control risk is high, then positive confirmation requests would probably be sent), There are many small balances (which would make it difficult to keep the number of positive confirmations to a reasonably low level), and Consideration of the confirmation by the recipient is likely (since the auditor is relying on the customers' consideration as the sole basis of support for the confirmation).
When there are unreturned positive confirmations of accounts receivable, the auditor would first respond by sending second confirmation requests.
247
. In a computerized accounting environment, audit trails generally exist for only a short time. Choice "C" is incorrect. The management representation letter should be signed and dated on the date of the auditor's report. Choice "D" is incorrect. Consultation with other accountants would not cause an auditor to believe material misstatements have occurred.
he auditor would only increase detection risk in response to a decrease in inherent and/or control risks, which is not the case here. Additionally, confirmation relates to the existence assertion, not the valuation assertion.
248
CHATGPT 1. Substantive Procedures Substantive procedures are designed to detect material misstatements in the financial statements, whether due to fraud or error. These procedures focus on the accuracy, completeness, and validity of financial statement information. Purpose: To provide evidence on the financial statement assertions (existence, completeness, valuation, rights and obligations, and presentation). Examples: Tests of details (e.g., verifying individual transactions or balances like inspecting invoices, confirmations with customers, or verifying physical assets). Substantive analytical procedures (e.g., comparing current financial data to historical trends or industry averages to identify discrepancies). 2. Tests of Control Tests of control are designed to evaluate the effectiveness of an entity's internal controls in preventing, detecting, or correcting misstatements. They help auditors assess whether the internal control systems in place are operating as intended. Purpose: To gather evidence on the operating effectiveness of the controls. Examples: Observing the application of a control (e.g., watching a company employee perform a control activity). Reperformance (e.g., the auditor independently performing the control to verify it works as designed). Inspection of documentation (e.g., reviewing signed authorization forms for transactions to check whether controls are being followed).
Purchase orders should be issued by the purchasing department, not the accounts payable department. Internal control is enhanced if check mailing is performed by the treasury (cash disbursements) department. Mailing disbursement checks and remittance advices should be controlled by the employee who signs the check last. This employee is generally in the treasury department. Approving the vouchers for payment and matching the receiving report, purchase orders, and vendor's invoices are functions of the vouchers payable department. When a mechanical check-signing device is used, there is generally dual control. One person maintains possession of the device itself, and the other controls the signature plates. The person with possession of the device would not mail disbursement checks, since mailing should be done by the last check signer.
249
The authority to accept incoming goods in receiving should be based upon an approved purchase order. A vendor's invoice does not serve as an authority to accept incoming goods since it is generated by the vendor, not a responsible employee in the purchasing department. A materials requisition, which is prepared by the ultimate user of the goods, does not serve as an authority to accept incoming goods since it has not been approved by the purchasing department. A bill of lading does not serve as an authority to accept incoming goods since it is generated by the carrier, not a responsible employee in the purchasing department.
The purchasing department is responsible for preparing the purchase order, the accounts payable department is responsible for matching documents, and the treasurer is responsible for making payment. Once signed, the check should be mailed to the payee by the check signer or an employee operating under the supervision of the check signer to prevent defalcations of checks. Generally this occurs in the treasurer's department. The check signer should have access to supporting documentation so that it can be reviewed before the check is signed. Under an effective system of internal control, the accounts payable clerk should ensure that supporting documents (invoice, receiving report, and purchase order) are in agreement before the voucher is submitted for payment.. By stamping the voucher "paid," the check signer cancels the voucher so it cannot be resubmitted for payment.
250
When nonconforming goods are returned to a vendor, the purchasing department should send a debit memo to the accounting department to ensure that the accounts payable balance is reduced appropriately. Choice "A" is incorrect. The unpaid voucher is sent from the accounts payable department to the treasurer's department for payment when conforming goods are received. Choice "C" is incorrect. The vendor invoice is sent to the accounting department when conforming goods are received. Choice "D" is incorrect. A credit memo is generally used to reduce accounts receivable, not accounts payable.
In a well designed internal control, employees in the purchasing department most likely would approve purchase orders and also negotiate terms with vendors. Personnel in the accounts payable department reconcile the open invoice file while the purchasing agent approves purchase orders. Employees in the receiving department inspect goods upon receipt while the purchasing agent approves purchase orders. The stores department (personnel in the raw materials inventory area) authorize requisition of goods while the purchasing agent approves purchase orders.
251
Agreed-Upon Procedures An attestation engagement in which a practitioner performs specific procedures on underlying subject matter or subject matter information and reports the findings without providing an opinion or conclusion.
Allowance for Sampling Risk In sampling, a "cushion" for protection against undetected deviations that is added to the sample deviation rate to arrive at the upper deviation rate.
252
Analytical Procedures Evaluations of financial information made by a study of plausible relationships among both financial and nonfinancial data.
Analytical Procedures Evaluations of financial information made by a study of plausible relationships among both financial and nonfinancial data.
253
Assumption of Responsibility A situation in which the group engagement partner decides to assume responsibility for the work performed by a component auditor, and therefore does not refer to the component auditor in the auditor's report. Attestation Risk In an examination or review attest engagement, attestation risk is the risk that the practitioner expresses an inappropriate opinion or conclusion, respectively, when the subject matter information or assertion is materially misstated.
Attest Engagements An engagement in which a practitioner is engaged to issue or does issue an examination, a review, or an agreed-upon procedures report on subject matter, or on an assertion about the subject matter, that is the responsibility of another party.
254
Choice "C" is correct. Analytical review is generally used to ascertain the reasonableness of investment income in relationship to the amount invested. Choice "A" is incorrect. Valuation would be verified using listed prices (NYSE, etc.). Choice "B" is incorrect. Classification of gains or losses would be evaluated based upon appropriate accounting principles. Choice "D" is incorrect. Existence and ownership is generally evaluated by inspection of securities, review of brokerage statements, or confirmation with an outside independent custodian.
The standard AICPA bank confirmation form includes spaces for the bank to confirm both cash balances on deposit at the bank and collateral pledged on loans originating from the bank. Choice "A" is incorrect. Purchase commitments are not typically confirmed on an accounts payable confirmation request. Choice "C" is incorrect. Contingent liabilities (confirmed in a letter of inquiry to the client's attorney or bank) and inventory on consignment (confirmed with the consignee) are not confirmed together. Choice "D" is incorrect. Accrued interest receivable (usually on investments held by a trust company) is not typically confirmed along with trade accounts receivable.
255
The standard confirmation request seeks information on contingent liabilities and security agreements in addition to information related to deposit account balances. Choice "A" is incorrect. The standard confirmation request does not provide all of the data necessary to prepare a "proof of cash" (i.e., bank reconciliation), since it only confirms the balances at the end of a period, and does not provided information about the activity during the period under audit. Such information is necessary to perform a bank reconciliation and would be provided in a bank statement. Choice "B" is incorrect. A request for a cut-off statement, and not the standard bank confirmation form, is used to obtain a cut-off bank statement and related checks. Choice "C" is incorrect. The bank cut-off statement, not the standard confirmation request, is used to detect kiting activities that may not otherwise be discovered.
The SEC has strongly recommended that companies establish audit committees, but does not require this action-NOT MANDATORY by SEC. Choice “A” is incorrect. The use of an audit committee does strengthen the public’s sense of the independence of the external auditor. Choice “B” is incorrect. Large accounting firms strongly support the function of an audit committee. Choice “D” is incorrect. The New York Stock Exchange requires listed companies to have audit committees.
256
Choice "A" is correct. The audit committee is considered a subgroup ordinarily charged with assisting the board of directors in fulfilling its oversight responsibilities. Choice "B" is incorrect. Secured creditors are lenders to the entity that hold a legally enforceable claim on the entity's assets. Secured creditors are not responsible for assisting the board of directors in their oversight duties, nor are they a subgroup of the board of directors. Choice "C" is incorrect. Internal auditors are not a subgroup of the board of directors. The internal audit function may report to the audit committee or the board of the directors, but they are not a subgroup of the board of directors. Choice "D" is incorrect. Senior management assists the board of directors with the day to day activities of the business. Senior management reports to the board of directors but is not considered a subgroup of the board of directors.
Same CPA firm that audits financials will take care of your assessment of internal control. due to cost benefit analysis
257
INTEGRATED AUDIT Includes: 1. AUDIT of FS 2. AUDIT of MGT ASSESSMENT/ASSERTION on the EFFECTIVENESS of IC over Financial Reporting or Audit over ICFR
Internal control - main role is to detect, prevent and correct errors/frauds. Internal Monitoring is for MONITORING that internal controls are present and are functioning effectively.
258
The identification of fraud, even if immaterial, by a member of senior management is indicative of a material weakness.
A material weakness is a deficiency, or combination of deficiencies, such that there is a reasonable possibility that a material misstatement of the entity's financial statements will not be prevented or detected/corrected.
259
An auditor is required to communicate significant deficiencies and material weaknesses in writing to management and to those charged with governance within 60 days of the report release date.
For nonissuers, if an auditor has communicated other deficiencies in a prior period and management has chosen not to correct the deficiencies for cost or other reasons, the auditor need not repeat the communication in the current period.
260
All material weaknesses are significant deficiencies.
The auditor should separately identify those significant deficiencies that are considered to be material weaknesses.
261
The auditor is not required to search for significant deficiencies (but any that are identified should be reported).
The auditor should not indicate to management that no significant deficiencies were noted during the audit, as this might cause misinterpretation of the auditor's responsibility in such cases.
262
In an audit of a nonissuer, the auditor is required to communicate both significant deficiencies and material weaknesses to management and those charged with governance.
Communication of a significant deficiency and material weakness (even though corrected during the audit) is required to be reported in writing to management and those charged with governance by the report release date, with a window extending 60 days beyond the report date being acceptable. Earlier communication is also acceptable and is not required to be in writing; however, this does not negate the requirement for eventual written communication of all significant deficiencies and material weaknesses.
263
The auditor need not search for significant deficiencies in internal control, but should document and communicate any such deficiencies that are discovered.
Tests of controls are designed and applied to evaluate the risk of financial statement misstatement, and to determine the nature, timing, and extent of substantive tests to be performed. They are not designed to discover significant deficiencies in internal control.
264
The Statements on Auditing Standards (SASs) is the appropriate authoritative literature for both an audit of internal control and a financial statement audit of a nonissuer.
UNAUDITED - The Statements on Standards for Accounting and Review Services (SSARSs) is the appropriate authoritative literature for unaudited financial statements or information of a nonissuer. ATTESTATION Engagements - The Statements on Standards for Attestation Engagements (SSAEs) is the appropriate authoritative literature for attestation engagements.
265
The auditor provides an opinion on the entity's financial statements and on the effectiveness of internal control. The auditor is not required to provide an opinion on the audit committee's oversight (but is required to report to the board when such oversight is ineffective).
PCAOB Standards require Jackson to perform an integrated audit, which includes audits of both the financial statements and the effectiveness of internal control. PCAOB Standards require the same auditor to perform the audit of the financial statements and the audit on the effectiveness of internal control. An audit of internal control is required, regardless of the type of opinion rendered on the financial statements.
266
Under the Sarbanes-Oxley Act, the chief executive officer is required to certify (or sign off) on all the other items, but is not required to certify the financial expertise of the audit committee. The expected financial expertise of the audit committee is typically verified by the entity's board.
Periodic comparison of actual assets with amounts shown in the accounting records is a control activity related to the existence of specific assets. It is not an entity-level control. Risk assessment process controls, biannual distribution of the code of conduct, and period-end financial reporting controls are considered entity-level controls, as they have a pervasive effect on a company’s internal control.
267
Entity-level controls include controls related to the control environment and period-end financial reporting. Depending on the specific control, the control could be classified as either preventive or detective.
The "top-down approach" used during an audit of internal control over financial reporting begins by understanding the overall risks to internal control over financial reporting at the financial statement level.
268
Performing walkthroughs are frequently the most effective way of understanding sources of potential misstatements. A walkthrough involves following a transaction from origination through the entity's processes, including information systems, until it is reflected in the entity's financial records, using the same documents and IT that entity personnel use.
An entity-level control exists independently of the audit. Controls over the completeness of deposited cash relates to controls at the account level and NOT ENTITY Level. The evaluation of risk factors is the same for both an audit of the financial statements and an audit of internal control. Confirmation is an audit procedure that is performed during substantive procedures. Operating effectiveness of controls can be tested through inspection, reperformance, or recalculation. OPERATING EFFECTIVENESS = INSPECTION, REPERFORMANCE OR RECALCULATION DESIGN EFFECTIVENESS = Recalculation is NOT Included.
269
It is unlikely that the reliability of the financial statements would be increased if an audit on internal control is performed; however, the audit might be more efficient due to the integration of the two audits. Controls related to shipping most likely relate to the revenue cycle.
In a financial statement audit, communication of significant deficiencies must be made within 60 days of the report release date, whereas in an audit of internal control, the communication must be made by the report release date. An auditor’s consideration of internal control in a financial statement audit is more limited than that of an auditor engaged to examine the effectiveness of internal control. An opinion on financial statements is over a period of time, and an opinion of internal control is at a point in time. In a financial statement audit, communication of significant deficiencies should include restricted use language, whereas in an audit of internal control, no restriction on the use of the report is required.
270
Combined report on FS and ICFR (ISSUER) HEADINGS 1. Opinion 2. Basis for Opinion 3. Definitions and Limitations 4. CAMs (Critical Audit Matters)
271
NON-ISSUER - it's upto non-issuer if it wants to file separate or combined report (SEPARATE REPORT Sections) HEADINGS 1. Opinion on internal control over financial reporting 2. Basis for opinion 3. Responsibilities of managements for ICFR 4. Auditor's responsibilities for the audit of ICFR 5. Definition and inherent limitation of ICFR 6. Report on other legal and regulatroy requirements 7. Report on audits of ICFR
NON-ISSUER - COMBINED report on ICFR (Nonissuer) 1. Opinions on the FS and ICFR 2. Basis for opinion 3. MGT Responsibilities for the FS and ICFR 4. Auditor's responsibilities for the audits of the FS and ICFR 5. Definition and inherent limitations of ICFR 6. Report on other legal and regulatory requirements 7. Report on audit of ICFFR 8. Basis for adverse opinion on ICFR (if applicable)
272
Separate report ISSUER -Sign -*Different than Non-issuer report We have served as the company's auditor since (year) -City and state or country -Date
273