Internal Control Flashcards
Control risk increases with poor Internal Controls and sloppy accounting practices.
Internal Control
Auditor will need to perform more testing and dig deeper into accounts in order to arrive at an opinion regarding the financial statements.
Internal Control
Internal control provides reasonable assurance that
Material misstatements will be prevented
Reliability/integrity of financial statements will be preserved
Assets are protected against misuse
Internal Control
CEO/CFO must disclose Internal Control deficiencies
Management must provide assessment of Internal Control
Management must certify Financial Statements
Internal Control
Examination of IC is required under SOX
Inverse Relationship
Stronger Internal Controls - Less Testing Needed
Weaker Internal Controls - More Testing Needed
Internal Control
Reliability of Financial Reporting
Operational Efficiency/Effectiveness
Compliance with Law and Regulations
Internal Control
3 objectives of IC
Control Environment
Risk Assessment
Information and Communication
Monitoring
Control Activities
Internal Control
5 components of IC
Sets tone for the entire company
Internal Control- Control Environment
Integrity/Ethics of Management Competence of Management Organizational Structure Human Resource Policies Assignment of Authority/Responsibility Management's Style (riskier with a dominant/aggressive individual) Board/Audit Committee involvement
Internal Control- Control Environment
Detection Risk determines nature- timing- and extent of audit procedures.
Internal Control-Audit Risk Model
Risk of material misstatement determines acceptable level of Detection Risk
Internal Control-Audit Risk Model
Rapid growth in the company.
The methods management uses to identify risk- estimate its significance and assess the likelihood of occurrence
Major changes to operations- personnel- systems- IT- products- corporate organization- and foreign operations.
Internal Control- Risk Assessment
No Internal Control testing is performed.
All audit procedures are increased in intensity to compensate for increased risk.
Internal Control- Audit Risk Model- CR assessed at MAX
Auditor tests Internal Controls.
Auditor evaluates Control Risk based on tests
Auditor adjusts substantive tests accordingly
Weaker Internal Control - More substantive tests
Stronger Internal Control - Less substantive tests
Internal Control-CR assessed below MAX
Performance Reviews
Information Processing
Physical Controls
Segregation of Duties
Internal Control- Control Activities R I P S
Understand Client’s
Major transaction classes
Transaction initiation
Support records/documents
Transaction processing
Financial Statement internal reporting process
Financial Statement external reporting process
Internal Control-Information and Communications
Through written documentation such as Internal Control memos- flowcharts- and questionnaires
Internal Control