Integrated Audits, Attestation Agreements, Compliance Flashcards
Registered Firms
Registered firms must report to the audit committee the critical accounting policies and practices used
Quality control
A firm that does not have an adequate system of quality control may still have complied with professional standards on a specific engagement
If control risk has increased…
The acceptable level of detection risk will decrease and more substantive testing will be required
Fixed assets/transactions
Since there are many transactions affecting the cash account, it is more efficient to focus on the ending balance. If there are a few transactions, then fixed assets should be audited.
Segregation of duties
Approving timesheets is an authorization function, which should be separated from custody of assets
Modification of review report
Departures from GAAP require modification of the review report
Retained earnings
The auditor should analyze the retained earnings account since the last audit
If you notice a material departure…
Recommend the client to revise the financial statements to confirm to GAAP
Internal controls (sequence)
An auditor performs test of controls at the same time he or she is obtaining an understanding
AICPA Discreditable Acts
Failure to return client records upon request
An increase in variability will..
There is a direct relationship between population variability and sample size, so an increase in variability results in an increase in sample size
Sampling
Sample deviation rate (S) + Allowance for sampling risk (A) >= Tolerable Deviation … If the tolerable deviation rate less the allowance for sampling risk is less than the sample deviation rate then do not rely on the control
Internal auditor
Helps external auditor to understand internal control, provide direct assistance to external auditor
Management rep letter
” we disclosed to you all known instances of non-compliance with laws and regulations…”
Adverse opinions - compliance report
When an auditor expresses an adverse opinion on the financial statements, the auditor should issue a report on compliance only id the auditor identifies instances of noncompliance