Module 13: Audit Process: Fundamental Concepts Flashcards
What is audit risk?
The risk that the auditor gives the wrong opinion on the financial statements when the financial statements are materially misstated.
The auditor will reduce audit risk to an acceptably low level. Giving the incorrect opinion may result in damage to the firm’s reputation and possible regulatory action.
What is misstatement?
Where there is a difference between an amount, classification, presentation or disclosure reported in the financial statements and the correct treatment in accordance with the applicable financial reporting framework.
Misstatement can occur from fraud or error.
What is the risk-based approach?
Where the auditor tailors the nature, extent and timing of audit procedures performed on each area of the financial statements according to the risk of there being a misstatement in that area.
What is the balance required in external audit and how have auditors responded to these pressures?
Shareholders are keen for the auditor to highlight irregularities in the financial statements whilst avoiding undue delay of the publication of the information that is being audited without running up a significant fee.
Responded by:
Providing the highest quality evidence in a given time for a given fee
Ensure that adequate evidence is collected on which the opinion can be based.
What are the three fundamental concepts that relate to the practical process of auditing?
- Materiality
- Evidence
- Audit judgement
What is materiality?
An expression of the relative significance or importance of a particular matter in the context of the financial statements as a whole. A matter is considered to be material if its omission or misstatement would reasonably influence the economic decisions of users taken on the basis of financial statements.
When should materiality be considered by the auditor?
- Identifying transactions and balances that are individually material (Planning)
- Evaluating the potential impact of identified risks (planning)
- Determining the nature, timing and extent of audit procedures (planning/testing)
- Evaluating whether sufficient appropriate evidence has been gathered (completion)
- Evaluating the effect of unadjusted misstatements (completion)
Methods of gathering evidence?
- Understanding the entity and the overall control environment - this provides susceptibility of the financial statements to misstatement
- Testing the controls of the entity - good controls reduce the risk that the figures in the financial statements are incorrect as they will help prevent or detect errors.
- Testing the numbers in the financial statements - this is called substantive testing and allows the auditor to detect misstatements
What is professional scepticism?
It requires an attitude that includes questioning mind that challenges management with a degree of doubt that demands hard evidence, being alert to conditions which may indicate possible misstatement due to error or fraud.
What are the three components of audit risk?
- Inherent risk - The susceptibility of a financial statement account to a material misstatement, irrespective of related internal controls. IR is performed at planning stage.
- Control risk - The risk that the entity’s controls will not prevent or detect and correct a material misstatement in the financial statements on timely basis . Done at systems and control phase.
- Detection - The risk that the auditors procedures will not detect material misstatements that exist in the financial statements.
These misstatements may be material, individually or in aggregate.
What are the two sources of inherent risk
- Business risk - Business risks that would have an impact on the financial statements would be considered an inherent risk. Example, business in fast moving tech may have obsolete stock
- Account specific risk - Accounts that contain non-routine, complex or judgemental transactions or which a significant development has occurred are inherently risky. Example revaluation of property
What two categories can the impact of account specific risk and business risk be categorised into?
- Financial statement level risks - something that will effect the financial statements as a whole
- Assertion level risks - relate to the specific area of the accounts only.
How does control risk increase?
It increases where the internal control systems of an entity are poorly designed.
What is risk of material misstatement (ROMM)?
The combination of inherent risk and control risk. It is the risk that a material misstatement may exist in the financial statements prior to the auditor undertaking any procedures.
What is detection risk?
Detection risk is the risk that the auditor will not find a misstatement. Once ROMM has been assessed the auditor will know what the level of detection risk needs to be.