Internal Control Flashcards
auditors of entities that do not report to SEC aka non-issuers are required to follow
GAAS issued by auditing standard board (ASB) of the AICPA
auditors of entities that DP report to SEC aka issuers are required understand
internal control
required to perform integrated audit 3 both internal control over financial reporting and of financial statements
5 assertions related to Events and Transactions that occurred during period of audit
CPA-CO
Completeness
Period Cuttof
Accuracy
Classification
Occurrence
4 assertions related to Account Balances
RACE
Rights and obligations
Allocation and Valuation
Completeness
Existence
5 assertions related to Presentation
RACOU-n
Rights and obligations Accuracy and valuation Completeness Occurence Understandability and Classification
auditor seeks reasonable assurance that internal control are achieving certain objectives:
ACE
Accurate and reliable financial reporting
Compliance w law and reg.
Effectiveness and efficiency of operations
5 components of internal control
CRIME
- control activities (C)
- risk assessment (R)
- info and communication (I)
- monitoring (M)
- control ‘E’nvironment (E)
control environment
CHOPPER
C-ommitment to competence
H-uman resource policies and practices
O-rganizational structure
P-articipation of those charged w governance
P-hilosophy of management and mgt operating style
E-thical values and integrity
R-esponsibility assignment
inherent limitation - things that could occur even if theres rly good internal control
COCO
Collusion (no segregation of duties)
Override by mgmt
Competence/Human error
Obsolescent (changes in company’s operation/size , change in tech, changes affecting entity’s business)
Management override, mistakes in judgment, and collusion among employees
reasonable assurance
cost of maintain internal control should now exceed benefit derived from having the control.
Segegration
ARCC
authorization
recording
custody
comparison/ reconciliation
what has more scope, internal control or assessment of risk of material misstatement?
In the assessment of RMM, the auditor will only test those controls that are expected to be relied upon, more limited in scope than an examination of internal control
In an examination of internal control, the auditor expresses an opinion in relation to the effectiveness of internal control, requiring an engagement more extensive in scope.
letter written about internal control is for who?
The distribution of the report on internal controls in conjunction with an audit is restricted to management, the audit committee and the board of directors
Control activities are the policies and procedures that
management uses to provide reasonable assurance that the entity’s objectives will be achieved
monitoring
Monitoring is the process the entity uses to make certain that policies and procedures are, in fact, being followed.
The control environment, or tone at the top,
would include the fact that management is control conscious and willing to commit the resources to develop policies and procedures, but the policies and procedures themselves are control activities
checking credit before sending item is part of manager’s assertion of
valuation
management’s assertions: implicit/explicit assertions regarding recognition, measurement, presentation, and disclosure of info in f/s and disclosures. goal is to give opinion about f/s
COCA-CURVE
Completeness
Occurence
Cutoff
Classification
Classification Understandability Rights and Obligations Valuation and Allocation Existence
purchasing manager would be responsible for
authorization, including negotiating terms with vendors, and would not defer to the accounts payable department
when to cancel documentation
Documentation will be canceled at the time payment is made, often by the check signer at the time checks are being signed
what does accounts payable do
Accounts payable will establish agreement between the vendors invoice, the receiving report, and the purchase order as a basis for determining that payment may be made.
personnel, aka
HR
generally approve pay rate changes that are recommended by operating personnel, and deductions from employees’ salaries
controller and payroll
are responsible for the recordkeeping function, which should also be segregated from authorization of transactions
treasurer
has custody of the cash, which should be segregated from authorization of transactions
Analytical procedures and testing account balances are part of
substantive testing
report on internal control will include
- acknowledgement of management’s responsibility for internal control;
- a description of what aspects of the system of internal control were examined;
- the criteria used for performing the evaluation;
- management’s assertion regarding the effectiveness of the entity’s internal controls;
- a description of any material weaknesses; and
- the date of the assertion