Lesson 5: Audit risk And audit evidence Flashcards
What type of approach is required by ISAs when auditing?
Risk-based approach
What happens in a risk-based approach?
Auditors analyse the risks associated with the client’s business, transactions and systems which could lead to misstatements in the financial statements, and direct their testing to risky areas
Define audit risk
Audit risk is the risk that the auditor expresses an inappropriate audit opinion when the financial statements are materially misstated
What two levels can a misstatement be at?
Financial statement level
Individual account balance or disclosure leve
Audit risk has two major components,
what are they?
One is dependent on the entity, and is the risk of material misstatement arising in the financial statements (inherent risk and control risk).
The other is dependent on the auditor, and is the risk that the auditor will not detect material misstatements in the financial statements (detection risk
What is the equation for audit risk?
Audit risk = Inherent risk x Control risk x Detection risk (AR = IR x CR x DR)
Define inherent risk
Inherent risk is the probability of loss based on the nature of an organization’s business, without any changes to the existing environment. The concept can be applied to the financial statements of an organization, where inherent risk is considered to be the risk of misstatement due to existing transactional errors or fraud.
Define controlled risk
Control risk is the probability that financial statements are materially misstated, due to failures in the system of controls used by a business.
Define detection risk
This risk is caused by the failure of the auditor to discover a material misstatement in the financial statements.
Finish the sentence Detection risk is a function of the effectiveness
of an audit procedure and of its application by the auditor.
What is Professional scepticism
‘An attitude that includes a questioning mind, being alert to conditions which may indicate possible misstatement due to fraud or error, and a critical assessment of audit evidence.’
What are the three risk assessment procedures
Inquiries of management and other within the entity
Analytical procedures
Observation (e.g. of control procedures) and inspection (e.g. of key strategic documents and procedural manuals).
Inquiry
The auditors will usually obtain most of the information they require from staff in the accounts department, but may also need to make enquiries of other personnel, for example, internal audit, production staff , management or those charged with governance.
Observation and inspection
Include observing the normal operations of a company, reading documents or manuals relating to the client’s operations or visiting premises and meeting staff.
These techniques are likely to confirm the answers made to inquiries made of management.
What does Analytical procedures mean
‘Analytical procedures’ means the analysis of relationships to identify inconsistencies and unexpected relationships.