Obtaining Audit Evidence Flashcards
What is the purpose of obtaining audit evidence?
The auditor needs to obtain sufficient & appropriate audit evidence to reduce the audit risk to an acceptably low level & thereby enable the auditor to express an audit opinion
What are the requirements for audit evidence?
•Sufficient audit evidence
•Appropriate audit evidence
What are the different types of audit procedures that will be performed to obtain audit evidence?
•Risk of assessment procedures
•Test of controls
•Substantive testing
What are the test of controls methods?
•Enquire
•Observe
•Inspect
•Re-perform
What are the methods of substantive procedures?
•Observe
•Inquire
•External confirmation
•Reperformance
•Analytical procedures
•Inspection
Why are test of controls procedures performed?
To obtain audit evidence about the operating effectiveness of controls(prevent, detect & correct MM)
What are substantive procedures?
These are the audit procedures to detect MM at the assertion level
What are the assertions applicable to classes of transactions?
Occurrence
Completeness
Accuracy
Cuts-off
Classification
What are the assertions applicable to account balances?
•Existence
•Rights & obligation
• Completeness
•valuation & allocation
What is the purpose of working papers?
•Provides: a sufficient & appropriate record of the basis of the auditor’s report
: Evidence that the audit was performed in accordance with ISA
What is the use of audit documentation?
•Assists the audit team in the planning & preparation of the audit
•Serve as proof of work done
•Enable the conduct of both internal & external quality review
•Assists in the supervision of audit work
What needs to be on a working document?
•Heading
•Date
•Compiler
•Reviewer
•Applicable info
•Cross referenced
•Conclusion
What are the purpose of test of controls?
- The auditor assessment of risk of MM at the assertions level includes an expectation that controls are functioning effectively
- Substantive procedures alone cannot provide sufficient appropriate audit evidence at assertion level
What is the difference between significant deficiency & other deficiencies in internal controls?
•Deficiencies- A control is unable to prevent/detect & correct MM
Significant deficiencies - A deficiency in internal control that, in the auditors professional judgement is of sufficient importance to merit the attention of management
Describe the communication of significant deficiencies in internal control
•Should be in writing
•Could be preceded by some of oral communication
•should take place on a timely basis
•Should include a description of the deficiencies & an explanation of their potential effects
•Should include sufficient information to enable management to understand the context of communication