Internal Audit Flashcards

1
Q

what matters must be considered by auditor / pre requisites before relying on the work of managements expert?

A

1) independence: must be unbiased
2) competence: relevant qualifications must be there
3) experience: how long have they been offering these services
4) documentation: work must be documented in form or reports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what are the advantages of outsourcing the internal audit department?

A

1- professional firms follow an ethical code of conduct and should therefore be independent of client
2- professional firms should have qualified, competent staff who recieve regular development and have broader range of expertise
3- specialist skills will be readily available therefore outsourcing can be used to overcome skills shortage

Flexibility- professional firms can be hired on flexible basis , eg. single engagement basis rather than full time, this can be more cost effective

Staffing:
-recruitment and employment costs of permanent staff are avoided
-risk of staff turnover is passed to outsourcing firm

7- professional firms are responsible for their activities and hold insurance
8- there is likely to be greater focus on cost and efficiency as this will affect profitability
9- the co will get access to new technologies without the costs (data analytical tools and audit software)
10- management time in registering an in house department will be reduced

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

disadvantages of outsourcing internal audit department?

A

1- professional firms lack the intimate knowledge and understanding of organisation that employees have, cud result in decreased quality

2- the decision may be based on cost with the effectiveness of function being reduced

3- fees charged by professional firms may be high

4- engagements with firms are constrained by contractual terms. flexibility and availabilty may not be as high as in house function

5-lack of control over the quality of service

6- ethical threat may arise if the service is offered by external audit firm (ACCA code of ethics prohibits the same company to offer external and internal services if it related to financial reporting system)

7- pressure on independence of firm, eg. if management threaten not to renew the contract

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what is outsourcing

A

when a company uses an external service to perform it’s internal audit service instead of employing it’s own staff.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what are the limitations of the internal audit function?

A

-they may be employees of the company and not want to raise issues for fear of losing their job

-in small orgs, they may be managed as finance function, they will have to report on their dept effectiveness, and may be reluctant to say their department has deficiencies.

-if employees are old, there may be familarity threat as they will be auditing their colleagues and friends.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

how can limitations of internal audit dept be overcome?

A

1- outsource to third party
2- their work shud be reviewed by independent managers under scrutiny
3- separate reporting channel from the management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

define internal audit?

A

independent, objective assurance and consulting activity.
purpose is to add value and improve company’s operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what factors influence the need for internal audit?

A

1- size and scale of activities
2- number of employees
3- complexity of operations
4- cost/benefit considerations
5- desire of assurance and advice from management
6- the control environment/ history of fraud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what are the operational activities/ scope of IA function?

A

-assess CORPORATE GOVERNANCE best practice
-test effectiveness of controls
-assess reliability of information
-evaluate risk assessment process
-VFM of operating activites
-compliance with laws
-giving recommendations on prevention an detection of fraud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what type of assignments are performed by internal audit department, and their purposes?

A

1- IT system reviews - to assess reliability of IT system
2- mystery shopper visits- pose as customers to ensure customer service is at reliable level.
3- fraud investigations: detect fraud, identify frauder, quantifying the loss of fraud
4- VALUE for money - to assess efficiency, effectiveness, economy
5- financial regulatory compliance - that co is following reporting standards.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

how are internal audit reports made?

A

they dont have formal structure.
-before starting assignment, format is likely agreed with directors.
-reports r for internal use only

reports typically include:
-terms of reference : requiremnts of the assignment
-executive summary : risks and recommendations
-body of report: detailed description of work performed and results
-appendix: additional info that doesnt belong in body but relevant to assignment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

how is VFM performed?

A

vfm is concerned with obtaining best possible combo of services for the least resources.
vfm is perfomed by assessing:
-economy: cost
-efficiency: maximum output with minimum input
-effectiveness: achievement of goals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

diff between internal and external auditors

A

1) objectives r different
2) report to diff ppl
3) availability of report
4) appointment and removal one by..
5) independence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

why do auditors rely on work of others?

A

when they lack technical knowledge to gather SAE.
eg. valuation of financial instruments like buildings, land, art
-estimation of oil and gas reserves
-tax and law interpretation issues

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

prerequisites before auditor gets an expert?

A

evaluate competence, capability, objectivity.

sources:
-personal experience
-discussions with expert
-discussions with other auditors
-check qualifications, memberships

-ask client if relationship
-obtain written rep from expert
-personal and financial interests of expert

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

can work of others be referenced in auditor report?

A

work of expert: use of expert is not mentioned in unmodified opinion unless required by law. reference may be included in modified opinion if relevent.

third party orgs: same as above. if SAE is not obtained, disclaimer will be given

for internal audit: no reference is to be made.

17
Q

describe audit considerations relating to entities using service organisations:

A

when planning:
-understand service org, identify and assess risks of MS, design and perform procedures to respond.

18
Q

how can auditor obtain understanding of service org and identify risks?

A

understand:
-nature of service, effect on internal control
-materiality of the transactions
-level of interaction
-relationship

consider:
-rep of service org
-is it being supervised by anyone
-extent of controls followed
-experience of errors

19
Q

how can information be obtained from external service organisation?

A

-obtain type 1 or 2 report from SO’s auditor
-contact SO thru client
-visit them
-use another auditor to perform procedures to give info about controls

20
Q

to what extent can internal audit’ work be relied upon?

A

audior may cooperate with them and rely on their procedures instead of performing their own
however must assess:
-objectivity
-competence
-approach of work
if all is good
auditor can consider whether IA can provide direct help in gathering SAE.
HOWEVER, consdier:
-laws
-competence and objectivity
-no judemental work can be assigned to IA
-planned must be communicated with TCWG so they agree we r not over using IA
-IA , management must give written statements
-skepticism must be maintained

21
Q
A