II. Planning Activities - Audit Risk Flashcards
As a result of control testing, a CPA has decided to reduce control risk. What is the impact on substantive testing sample size if all other factors remain constant?
The sample size would be lower.
Note: Lowering the assessment of control risk would permit a somewhat higher level of detection risk. Taking a smaller sample size would be associated with a higher level of detection risk, which would be appropriate in view of the reduced control risk.
Which of the following is an example of an inherent risk that an auditor should consider?
Technological developments that may render inventory obsolete.
Note: Inherent risks are defined as risks of material misstatement before consideration of any related controls. External circumstances that influence business risks may also affect inherent risks. Technological developments causing inventory to be obsolete (and therefore susceptible to overstatement) are specifically identified as inherent risks in AICPA Professional Standards (AU-C 200.A42).
Inherent risk and control risk differ from detection risk in which of the following ways?
Inherent risk and control risk exists independently of the audit.
Note: Inherent risk and control risk comprise the risk of material misstatement, which the auditor is obligated to assess. The auditor is responsible for designing the audit procedures to be responsive to the assessed risk of material misstatement, which exists independently of the audit itself.
The acceptable level of detection risk is inversely (opposite) related to the
Detection risk is inversely related to the assurance provided by substantive tests. The lower the detection risk, the more assurance needed from substantive testing.
Note: < detection risk = > Substantive testings, vice versa
The risk that an auditor will conclude, based on substantive tests, that a material error does not exist in an account balance when, in fact, such error does exist is referred to as
Detection risk.
Inherent risk and control risk differ from detection risk in that inherent risk and control risk are
Inherent risk and control risk (also called environmental risks) are functions of the client and its environment,
Detection risk is not. As a result, inherent risk and control risk can only be assessed by the auditor, while detection risk is controlled by the auditor.
As the acceptable level of detection risk increases, an auditor may change the
Timing of substantive tests from year end to an interim date.
Note: Increasing detection risk means that the auditor can obtain less or weaker evidence. As a result, the auditor may be able to push the timing of substantive tests from year-end to an interim date.
When an auditor increases the assessed level of control risk because certain control procedures were determined to be ineffective, the auditor would most likely increase the
Extent of tests of details.
We understand that if CR or IR increase we must decrease Detection Risk, remember that DR = TD x AP, In order to decrease DR we must increase TD or AP.
Note: An increase in the assessed level of control risk means that the risk of a material misstatement occurring and not being detected has increased. To offset that increased risk, the auditor should make decisions that decrease the level of detection risk. Increasing the emphasis on tests of details would decrease detection risk.
Holding other planning considerations equal, a decrease in the number of misstatements in a class of transactions that an auditor could tolerate most likely would cause the auditor to
Perform the planned auditing procedures closer to the balance sheet date.
Note: When the level of tolerable misstatements decreases, the auditor will have to increase substantive testing to ensure that all material misstatements are detected. Performing the planned auditing procedures closer to the balance sheet date increases the effectiveness of substantive procedures and therefore increases substantive testing.
The risk that an auditor will conclude, based on substantive procedures, that a material misstatement does not exist in an account balance when, in fact, such misstatement does exist is referred to as
Detection risk is the risk that the auditor will not detect a material misstatement that exists in an assertion.
Note: detection risk relates to the auditor’s procedures and can be changed at his or her discretion.
May be viewed in terms of two components:
(1) the risk that analytical procedures and other relevant substantive tests would fail to detect misstatements equal to tolerable misstatement, and
(2) the allowable risk of incorrect acceptance for the substantive tests of details.
Inherent risk and control risk differ from detection risk in that they
Exist independently of the financial statement audit.
Which of the following audit risk components may be assessed in nonquantitative terms?
Control risk
Detection risk
Inherent risk
All of these risks may be assessed in either quantitative terms such as percentages, or nonquantitative terms such as a range from a minimum to a maximum.
As the acceptable level of detection risk decreases, the assurance directly provided from
The acceptable level of detection risk decreases, the assurance provided from substantive tests should increase. To gain this increased assurance the auditors may:
(1) change the nature of substantive tests to more effective procedures (e.g., use independent parties outside the entity rather than those within the entity),
(2) change the timing of substantive tests (e.g., perform them at year-end rather than at an interim date), and
(3) change the extent of substantive tests
In a financial statement audit, inherent risk is evaluated to help an auditor assess which of the following?
The susceptibility of a financial statement assertion to a material misstatement assuming there are no related controls.
Detection risk -
- audit procedures implemented will not detect a material misstatement of a financial statement assertion.
Control risk -
- internal audit department objectivity is more directly related to control risk
- the risk that the internal control system will not prevent or detect a material misstatement of a financial statement assertion.
On the basis of audit evidence related to internal control, an auditor decides to increase the assessed level of the risk of material misstatement from that originally planned. To achieve an overall audit risk level that is substantially the same as the planned audit risk level, the auditor would
Decrease detection risk.
Note: suggests a decrease in detection to accompany the increase in the risk of material misstatement.