Module 14 Flashcards
Systems and controls analysis involves what following tasks?
Understanding and documentation Walkthrough Evaluation of the design of controls Tests of controls Assessment of ROMM Production of audit programmes in response to risk
Internal control system components?
Control activities Risk assessment Information systems Monitoring of controls Environment of control
What is a walkthrough?
Where the auditor selects one or more transactions relating to specific systems and follows them through the system from initiation to settlement and reporting
NOT A TEST OF CONTROL
Approach to tests of control?
Identify key controls
Assess design
Test whether operates effectively
What is a key control?
A control that mitigates the ROMM and that the auditor intended to rely on
How will the auditor gain an understanding of the information systems?
Enquiries
Inspection
Observation
What is a test of controls?
Audit procedures performed by the auditor to determine whether the control activities operated as documented throughout the period under review
Test of controls can involve what?
Enquiring
Inspection
Observation
Reperformance
What are the reliability levels of test of controls?
Enquiry - low
Observation - medium
Inspection - high
Reperformance - high
A well written test of control should contain what?
A testing technique (e,o,i,r)
The control activity being tested
What is being checked
Testing stock counts, if performed at end of year the auditor can?
Confirm integrity of controls
Perform tests of controls over stock count
Perform substantive procedures over completeness and existence
Reperformance to ensure correctly counting
What are the two types of test count?
Floor to sheet
Sheet to floor
Evaluation of results?
All errors must be investigated, the value of the error is not important
If error found it may be that the error can be localised to a period
Localised: operate effectively for year except period
Controls reliance
Controls reliance - control risk is low
No controls reliance - control risk is high
At the end of the systems and controls analysis stage of the audit the auditor must be able to conclude on inherent risk and control risk- that is?
ROMM