Lec 9 Flashcards

1
Q

what is the purpose of the internal control structure

A

to manage business risk and produce fairly presented F/S and disclosures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Management’s and directors’ attitudes, awareness, and actions concerning the company’s internal controls set the tone for

A

the control environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

which is more effective, preventive or detective controls?

A

preventive controls because detective controls only come into play after the issue has occurred

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

“company tone” is synonymous with what

A

control environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what does management’s risk assessment process do?

A

identify risks relevant to misstatements occurring in the preparation of financial statements and to estimate risks’ likelihood and magnitude

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what are application controls

A

procedures performed at the application level in relation to date input, process and output

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what is monitoring

A

ongoing process for reviewing and assessing whether the control procedures in place are adequate to address control risks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what is misappropriation of assets

A

the theft or misuse of an organization’s assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what is embezzlement

A

fraud involving employ-ees or non-employees wrongfully taking money or property entrusted to their care, custody, and control; often accompan-ied by false accounting entries and other forms of lying and cover-up

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what is defalcation

A

fraud in which an employee takes assets (money or property) from an organization for per-sonal gain; may be due to corruption or asset misappropriation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is fraudulent financial reporting

A

intentional manipulation of reported financial results to portray a mis-stated economic picture of the firm by which the perpetrator seeks an increase in personal wealth through a rise in stock price or compensation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what is fraud risk

A

the risk that fraud has resulted in intentional misstatement in the financial statements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what are the two types of fraud risk

A

fraudulent financial reporting and asset misappropriation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

what do auditors think is more important in recognizing signs of fraud, attitude or situational factors

A

attitude

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what is fraud incentive

A

when management is under pressure to reach goals which may or may not be realistic; might involve having consequences if not met

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

what are the three part of the fraud triangle

A

incentive/pressure, opportunity, rationalization - when these three are apparent, auditors should look to further investigate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

what stage of the audit process is materiality determined

A

planning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what stage of the audit do you determine the type of tests you will do and based on what?

A

planning stage. the types of tests are decided based on the risk assessment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

understanding of internal controls is required in which of the tests?

A

both substantive and control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

what two methods do auditors use to understand internal control and are they part of the procedures

A

a walkthrough and enquiry. at this point of the audit they are not substantive tests and are done just to get an understanding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

the substantive and control method require how many substantive tests to be conducted and what are they

A

One requires 6 tests to be done and the other 4. recalculation, confirmation, observation, inquiry, analysis, inspection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

what do substantive tests gain evidence on

A

DIRECTLY obtain evidence on whether an account or class of transaction has been misstated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

the control method requires how many control tests to be conducted and what are they

A

the control method requires only 4 tests to be conducted. those are recalculation, inquiry, observation, inspection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what sort of evidence do control tests gain

A

INDIRECT evidence that misstatements exist in accounts and classes of transactions due to internal control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

what do control tests aim to measure

A

control risk - whether it is high, medium, or low

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

if the identified control risk is low, what does that mean for the risk you are willing to accept for detection

A

the risk for detection will be higher

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

if the control risk, what does that meant about the amount of audit work you will be doing

A

the amount of audit work done will be lower because the detection risk acceptable will be higher

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

if you do control tests, will you do more or less substantive tests and what is the benefit of this

A

you will do less substantive tests and the benefit is that the audit cost will decrease since substantive tests cost more

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

based on what control risk levels can a combined audit be done

A

if the control risk levels assessed are low or medium

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

what does it mean if the control risks assessed are high, should you do combined testing and why

A

it means that the internal controls set up do not work. if they are assessed to not work, there is not point in doing further testing

31
Q

what should you do if you discover in the middle of the control tests that internal control risks do not work

A

you should move over to doing substantive test

32
Q

what are two advantages of doing control tests

A

cost benefits and having the ability to begin you audit procedures earlier - maybe Q3 (interim date)

33
Q

can Canadian auditors use substantive or control method?

A

canadian auditors have a choice between the two methods

34
Q

if a public company is being audited in canada which of the two methods will most likely be chosen and why

A

combined method because public companies typically are required to satisfy internal control guidelines in order to be listed publicly

35
Q

do auditors have to comment on internal controls in canada?

A

no

36
Q

what is the only reason the combined approach is done in canada

A

cost reductions

37
Q

which companies would ask the auditor to issue an opinion on internal controls and why

A

typically companies in which tasks are outsourced to (e.g. payroll and Ceridian). this is done because auditors do not want to have to test the internal controls of ceridian if they are sending in confirmations for A/P - they want to just trust ceridians internal controls

38
Q

in usa for public companies, do auditors have a choice between substantive and combined and why

A

no, they must use only combined approach due to the requirements by SOX

39
Q

must american auditors give an opinion on internal controls and why

A

yes, and opinion on internal controls is required by SOX

40
Q

what are two reasons the combined approach done for public companies

A
  • better internal controls are required for the companies to be listed publicly
  • it is too costly to do substantive tests for a big company
41
Q

why is substantive method used for private corporations

A

because they most likely do not have strong internal controls

42
Q

what is the purpose of internal controls for management and which ones do auditors care about

A
  • reliability of financial reporting
  • effectiveness and efficiency of operations
  • compliance to laws and regulations
    Auditors only care about reliability and compliance
43
Q

definition of control risk

A

the risk that a company’s internal control system will not be able to prevent or detect material misstatements

44
Q

what are the components of internal control

A
  • control environment
  • risk assessment
  • control activities
  • information and communication
  • monitoring
45
Q

which of the components is considered the umbrella component

A

control environment

46
Q

control environment contains a______, p_____ and p______ that reflect the a_____ of top management and board about c_______

A

actions, policies, procedures, attitudes, control

47
Q

the essence of an effectively controlled business lies in the a_____ of management

A

attitude

48
Q

control environment factors can be used to build what kind of profile

A

a client risk profile

49
Q

what are the components of the control environment (HIPDOC)

A
  • HR policies and practices
  • Integrity and ethical values
  • management’s Philosophy and operating style
  • board of Directors (audit committee)
  • Organization structure
  • Commitment to competence
50
Q

what does the hr policies of HIPDOC include

A

hiring practices, evaluation, and compensation

51
Q

what does the management philosophy and operating style of HIPDOC include

A

behavior should be encouraged and documented in the code of ethics

52
Q

what should the board of directors in HIPDOC include

A
  • independent directors (required by stock exchange)
  • audit committee composed of independent directors and financial experts
53
Q

what does the organizational structure in HIPDOC include

A
  • a structure appropriate for planning, directing and controlling
  • clear authority and responsibility
54
Q

what is risk assessment in internal controls

A

management identification and analysis of risks relevant to preparing f/s in relation to GAAP

55
Q

what is the process in management risk assessment

A
  • risk identification
  • risk possibility/likelihood
  • risk magnitude/significance
  • develop action plan to reduce risk to acceptably low level
56
Q

will risk increase if a company acquires anther company with great control systems

A

yes, because it will take time for the systems to integrate with one another

57
Q

what are some risks a company can face

A
  • new personnel
  • changed I/S
  • rapid growth
  • new business model
  • restructuring
  • new accounting methods
58
Q

should you use the risk assessments a business has done themselves

A

yes, you can use part of it if you deem it reliable

59
Q

what are control activities

A

policies and procedures that ensure the entity reaches its goals, including financial reporting goals

60
Q

what are the two components of control activities

A

general and application controls

61
Q

what are general controls

A

policies and procedures that relate to applications and support the functioning of applications
include performance reviews

62
Q

what are the components of general controls in control activities (SPAID)

A
  • separation of duties
  • physical controls
  • authorization
  • independent checks
  • documents and records
63
Q

what are application controls

A

the accounting systems that record transactions and produce the F/S

64
Q

what are the essential functions of application controls/accounting system

A
  • data preperation
  • data entry
  • transaction processing
  • report production and distribution
65
Q

what are the components of application controls in control activities (PPAC)

A
  • program changes
  • program development
  • access to programs and data
  • computer operations
66
Q

the accounting system produces what sort of trail

A

audit trail

67
Q

what are the components of information and communications system (IFSAI)

A
  • initiation, authorization, recording, processing and reporting
  • financial reporting process
  • significant classes of transactions
  • accounting records
  • information technology
68
Q

unlike human control measures, IT control measure operate in what % of times

A

100% of cases

69
Q

what are the procedures in the information and communication systems

A
  • record valid transactions
  • classify transactions
  • measure value of transactions
  • determine time period of transaction
  • present transaction in FS
70
Q

what is the monitoring of controls

A

considerations whether the controls are working as intended

71
Q

what may monitoring controls include

A
  • reviews of reconciliations
  • internal audit
  • evaluation of compliance
72
Q

what are some of managements objectives with internal control

A
  • provide reliable accounting data
  • safeguard assets
  • operational efficiency
  • prevent or detect errors
  • ensure compliance with laws
73
Q

auditor responsibilities in relation to internal controls

A
  • assess control risk as part of audit planning process
  • test controls if doing combined approach
  • communicate weakness if required or asked to