Lec 9 Flashcards
what is the purpose of the internal control structure
to manage business risk and produce fairly presented F/S and disclosures
Management’s and directors’ attitudes, awareness, and actions concerning the company’s internal controls set the tone for
the control environment
which is more effective, preventive or detective controls?
preventive controls because detective controls only come into play after the issue has occurred
“company tone” is synonymous with what
control environment
what does management’s risk assessment process do?
identify risks relevant to misstatements occurring in the preparation of financial statements and to estimate risks’ likelihood and magnitude
what are application controls
procedures performed at the application level in relation to date input, process and output
what is monitoring
ongoing process for reviewing and assessing whether the control procedures in place are adequate to address control risks
what is misappropriation of assets
the theft or misuse of an organization’s assets
what is embezzlement
fraud involving employ-ees or non-employees wrongfully taking money or property entrusted to their care, custody, and control; often accompan-ied by false accounting entries and other forms of lying and cover-up
what is defalcation
fraud in which an employee takes assets (money or property) from an organization for per-sonal gain; may be due to corruption or asset misappropriation
what is fraudulent financial reporting
intentional manipulation of reported financial results to portray a mis-stated economic picture of the firm by which the perpetrator seeks an increase in personal wealth through a rise in stock price or compensation
what is fraud risk
the risk that fraud has resulted in intentional misstatement in the financial statements
what are the two types of fraud risk
fraudulent financial reporting and asset misappropriation
what do auditors think is more important in recognizing signs of fraud, attitude or situational factors
attitude
what is fraud incentive
when management is under pressure to reach goals which may or may not be realistic; might involve having consequences if not met
what are the three part of the fraud triangle
incentive/pressure, opportunity, rationalization - when these three are apparent, auditors should look to further investigate
what stage of the audit process is materiality determined
planning
what stage of the audit do you determine the type of tests you will do and based on what?
planning stage. the types of tests are decided based on the risk assessment
understanding of internal controls is required in which of the tests?
both substantive and control
what two methods do auditors use to understand internal control and are they part of the procedures
a walkthrough and enquiry. at this point of the audit they are not substantive tests and are done just to get an understanding
the substantive and control method require how many substantive tests to be conducted and what are they
One requires 6 tests to be done and the other 4. recalculation, confirmation, observation, inquiry, analysis, inspection
what do substantive tests gain evidence on
DIRECTLY obtain evidence on whether an account or class of transaction has been misstated
the control method requires how many control tests to be conducted and what are they
the control method requires only 4 tests to be conducted. those are recalculation, inquiry, observation, inspection
what sort of evidence do control tests gain
INDIRECT evidence that misstatements exist in accounts and classes of transactions due to internal control
what do control tests aim to measure
control risk - whether it is high, medium, or low
if the identified control risk is low, what does that mean for the risk you are willing to accept for detection
the risk for detection will be higher
if the control risk, what does that meant about the amount of audit work you will be doing
the amount of audit work done will be lower because the detection risk acceptable will be higher
if you do control tests, will you do more or less substantive tests and what is the benefit of this
you will do less substantive tests and the benefit is that the audit cost will decrease since substantive tests cost more
based on what control risk levels can a combined audit be done
if the control risk levels assessed are low or medium