Lec 11 & 12 Flashcards
what is the definition of internal control
the process designed by those in charge with governance to provide reasonable assurance about the achievement of the entity’s objectives
what are the entity’s objective
reliable financial reporting, effective and efficient operations, compliance with laws and regulations
what is the auditor and management responsible in regard to internal control
auditors are responsible for understanding, evaluating, and assessing existing internal controls
management is responsible for establishing and maintaining a system of internal controls
what are the six categories of misstatements
- recording invalid transactions - validity
- valid transactions are omitted - completeness issue
- unauthorized transactions are executed - issues with authorization
- transaction amounts are inaccurate - issue with accuracy
- transactions are classified incorrectly - issues with classification
- transactions are recorded in incorrect period - issues with proper period
how are control objectives linked to the 6 types of misstatements
they are designed in order to prevent misstatements
what do internal control objectives correspond with
management assertions
what is the primary reason for evaluating internal control
to give auditors a basis in determining the nature, timing and extent of the audit program - in short combined or substantive approach
describe the implications if the internal controls are assessed to be weak on nature, timing and extent
nature - tests that are consider higher quality need to be conducted - this will increase cost
timing - testing will need to take place closer to year end - delay and increase cost
extent - more testing will need to be done - increase cost
if controls are good, what sort of cheaper testing can be used
analytical procedures. better controls means better data, meaning more reliable results from the analysis
how are sample sizes affected when controls are weak
they need to be bigger
What is the credit manager control for A/r and what objective and assertion is it related to
a credit manager checks the customers credit worthiness before allowing a sale on account - this is linked with valuation and authorization
what is an example of substantive tests for valuation for A/R
examine subsequent collections - meaning looking at what has been collected 30 days after year end
how is the subsequent collections test altered if controls are good or bad
weak controls require 25% of the collections be examined
strong controls require 10% of collections be examined
what are the steps in risks assessment and audit procedures (9 step decision tree)
1 - understand business, f/s, and risk
2 - identify inherent risk of f/s assertions
3 - asses risk,magnitudes to identify if misstatements could occur
4 - identify the controls specific to inherently risky accounts
5a - if controls are weak or absent consider control risk
7a - can be reason to withdraw from audit engagement or develop a revised audit program that gathers sufficient audit evidence
5b & 6- tests reveal that controls related to significant risks are strong
7b - if controls are reduce risk to a satisfactory low level, develop a revised audit plan that provides sufficient appropriate audit evidence
8 - continue with substantive audit procedures
9 - if necessary revise audit program based on findings and perform new procedures
10 - evaluate audit and let management know about any weaknesses they can improve on
what type of controls do auditors test and define them
key controls. these are controls come from the 5 components of internal control and are important in accomplishing management control objectives
what does the design and operation of key controls do
helps prevent and detect material misstatement due to fraud or error
what are the 6 internal control objectives
validity, completeness, authorization, accuracy, classification, proper period
what are control objectives analogous with
they are analogous to management assertions when it comes to controls
validity corresponds with what assertions
existence and ownership
completeness corresponds with what assertions
completeness, and ownership
authorization corresponds with what assertions
existence, valuation and ownership
accuracy corresponds with what assertions
valuation
classification corresponds with what assertions
valuation and presentation and disclosure
proper period corresponds with what assertions
existence, completeness, ownership and presentation
if control assessment reveals that controls are good for authorization, what is the impact on substantive tests
less substantive tests done on existence, valuation and ownership
what are the 6 steps in the a/r and sales cycle
- customer places order (external doc)
- credit approval by manager - (if not approved sell in cash)
- sales order is generated (internal dic and prenumbered)
- shipping document (bill of lading and packing slip) and invoice
- post on a/r subledger and sales journal
- post on gl
how to test for validity objective in ar cycle
chose sample from sales journal and vouch to the external customer document
how to test authorizing objective in ar cycle
check if the sales invoices come from the client’s authorized price list and when the customer authorizes the sale on account
how to test accuracy in ar cycle
recalculate taxes and total in the sales invoice
how to test proper period in ar cycle
check the date of the shipment and ensure it belongs to the current accounting/fiscal period on the packing slip
how to test completeness objective in ar cycle
gain a sample from the sales order and trace it to the sales journal with the block sampling method
for completeness, why do we use the sales order and nor the customers order for the tracing
not all customers orders pass credit manager and become numbered sales orders
how do we test classification objective in ar cycle
when doing tracing testing for completeness, we inevitably will be testing for classification as we ensure that the sales orders have been placed in the sales journal
how many times are sales journals and ar subs posted to general ledger and how many of these should be test
posted 12 times a year and 3/12 should be tested
in the ar cycle, vouching helps which which ic objectives
validity, authrization, accuracy, and proper period