Internal Control Communications Flashcards
What does an integrated audits include?
Examination of internal control(nonissuers) and Audit of internal control(issuers)
Who requires issuers to have an audit of internal control?
SOX and PCAOB #5
What exists when the design or operation of a control does not allow management or employees, in the normal course of performing their assigned functions, to prevent, or detect and correct misstatements on a timely basis?
Control deficiency
What occurs when a necessary control is missing or when an existing control does not achieve the desired objective?
Deficiency in design
What occurs when a properly designed control does not operate as designed, or is performed by an inappropriate person?
Deficiency in operation
What is a deficiency, or a combination of deficiencies, in internal control, such that there is a reasonable possibility that a material misstatement of the entity’s financial statements will not be prevented or detected and corrected on a timely basis?
Material weakness
What is a deficiency, or a combination of deficiencies, in internal control that is less severe than a material weakness yet important enough to merit attention by those charged with governance?
Significant deficiency
Examples of control deficiencies consist of?
Deficiencies in the design of controls and failure in the operation of controls
Deficiencies in the design of controls consist of?
Preparation of financial statements, control consciousness, segregation of duties or safeguarding of assets, IT controls, qualifications or training, monitoring, and inadequate documentation
Failure in the operation of controls consist of?
Lack of objectivity, misrepresentation, management override, failure of an application control caused by a deficiency of a general control, deviation rate that exceeds the auditors expected rate, and failure of the information and communication
Indicators of a material weakness in internal control?
Identification of any level of fraud perpetrated by senior management, restatement of previously issued financial statements, identification by the auditor of a material misstatement that would not have been detected by the entity’s internal control, and ineffective oversight by those charged with governance
Is an auditor of financial statements of a nonissuer required to perform procedures to identify deficiencies in internal control, or to express an opinion on the effectiveness of internal control?
No
Should significant deficiencies and material weaknesses even though corrected during the audit be communicated on a timely basis in writing?
Yes
Who is responsible to evaluate and address control deficiencies?
Management
The written communication of significant deficiencies and material weaknesses should include the following?
Definition of term material weakness and, when relevant, the definition of the term significant deficiency, description of the significant deficiencies and material weaknesses, sufficient information to enable those charged with governance and management to understand, and use restriction