Performing Further Procedures and Obtaining Evidence Flashcards
Why do auditors emphasize transaction cycles?
Control risk is generally constant within a particular category of transactions, as all transactions are processed the same way. So, the transaction cycle is the highest level of aggregation for which control risk may be viewed as a constant.
What is meant by the term “transaction cycle.”
A group of essentially homogeneous transactions (i.e., transactions of the same type)
List the three categories of incompatible functions associated with segregations of duties.
- Authorization of transactions (execution function)
- Accounting (recordkeeping function)
- Access to assets (custody function)
List some examples of major transaction cycles.
- Revenue/receipts
- Expenditures/disbursements
- Payroll
- Inventory (especially for manufactured inventory)
- Fixed assets
- Investing/financing
Identify the key accounting documents in the revenue/receipts (sales) transaction cycle, each of which should be prenumbered.
- Sales invoices
- Shipping documents for outbound shipments
- Receiving documents for inbound shipments including sales returns
List two access controls applicable to the revenue/receipts (sales transactions) business process.
- Limit access to computer passwords limit access.
2. Ensure cash receipts are handled by someone without access to accounts receivable record keeping.
How should employee responsibilities be allocated to facilitate a proper segregation of duties in the revenue/receipts (sales transactions) cycle?
- An independent employee should review customer statements.
- An independent department should grant credit to customers.
- An independent clerk in the shipping/receiving area should account for returns.
Identify the objectives of internal control related to revenue/receipts (sales transactions).
- Goods and services are provided in accordance with management’s orders.
- Terms of sale are in accordance with management’s orders.
- Credit terms and limits are properly established.
- Deliveries of goods and services result in accurate and timely billings.
- Sales discounts and billings are in accordance with management’s authorization.
Describe management’s role in the execution of transactions controls in revenue/receipts (sales).
Management should:
- Review terms of sale and note approval.
- Establish general approval of sales within certain limits and specifically approve sales over those limits.
- Approve all adjusting journal entries.
What comparison techniques can the auditor use to ensure appropriateness of transactions in the cash receipts business cycle?
- Initial cash receipts listing (remittance listing) compared to total recorded in cash receipts journal and to bank deposit
- Cash accounts reconciled to bank statements by independent person.
What control mechanisms can be used to ensure the appropriate execution of transactions in the cash receipts business cycle?
Adjusting journal entries should be approved by management.
Bank reconciliations should be reviewed by management.
List some procedures used to ensure segregation of duties in the cash receipts business cycle.
To ensure segregation of duties, the next activities should be handled separately (by separate individuals):
- Opening mail, handling checks received, and preparing remittance listing
- Making deposits (daily)
- Applying payments received to customer accounts
- Preparing bank reconciliations on a timely basis
List access controls that can be used in the cash receipts business cycle.
- Employees with access to cash should be bonded.
- Access to cash receipts should be limited to those authorized.
List the internal control objectives related to the Cash Receipts business cycle.
- Access to cash receipts records and accounts receivable records is limited to authorized personnel.
- Detailed cash and account balance records are reconciled with control accounts and bank statements monthly.
- All cash receipts are recorded in period received.
Identify the objectives of internal control related to the expenditures/disbursements transaction cycle.
Disbursements are for authorized expenditures as approved by management.
Disbursements are recorded at the proper amounts and classifications.
The supporting accounting records are agreed to the general ledger accounts.
Management authorizes any adjusting journal entries are authorized by management.
Access to cash and disbursement records is limited to authorized personnel.
List some procedures used to ensure segregation of duties in the Expenditure business cycle.
- Separate purchasing department
- Purchasing personnel independent from receiving and recording
- Bank reconciliations are prepared by someone not having other involvement in handling cash receipts, disbursements, or record-keeping.
List two access controls applicable to the expenditures/disbursements transaction cycle.
- Cash disbursement employees should be bonded.
2. Access to cash disbursements or related documents should be limited to authorized personnel.
Describe management’s role in the execution of transactions controls over cash disbursements in the expenditures/disbursements transaction cycle.
- Management approves all adjusting entries approved by management.
- Only authorized personnel should be able to place an order for goods and services on the entity’s behalf.
- The department requesting the purchase should approve the goods or services received before payment is made.
What is the difference between an accounts payable system and a vouchers payable system?
An accounts payable system aggregates payables to identify the total owed to any individual vendor. A vouchers payable system keeps track of individual transactions for which payment is owed without summarizing the totals by vendor.
The auditor can use what comparison techniques to ensure appropriateness of transactions in the expenditure business cycle?
The auditor can compare:
- Suppliers’ monthly statements with recorded payables.
- Purchase orders to receiving document to vendor’s invoice.
Identify three access controls applicable to the payroll transaction cycle.
- Access to personnel files should be limited to authorized personnel.
- Access to payroll checks should be limited to authorized personnel.
- Personnel with access to payroll checks should be bonded.
What comparisons should be made within the entity to ensure the appropriateness of payroll transactions?
Payroll information should be periodically matched to information in personnel files.
Payroll checks should be compared to entries on the payroll register.
Amounts on the payroll register should be agreed to the applicable general ledger accounts.
Describe management’s role in the execution of transactions controls in the payroll transaction cycle.
- A responsible official should review and approve payroll
- An independent person should verify computations.
- Management should approve overtime payments.
- Payroll for management should be appropriately reviewed and approved.
Identify the objectives of internal control related to the production/manufacturing inventory transaction cycle.
“Resources obtained and used are accurately recorded in a timely manner.
Transfers of finished goods are accurately recorded.
Related expenditures are appropriately classified.
Access to inventory is restricted to authorized personnel.
Comparisons are made of actual inventory to recorded amounts.
Describe management’s role in the execution of transactions controls in the production/manufacturing inventory transaction cycle.
- Acquisition and distribution of inventory should be in accordance with management’s authorization.
- Management should establish general approval of transactions with specified limits and require specific approval for amounts over those limits.
- Management should approve any adjusting journal entries.
Identify the objectives of internal control in the fixed assets transaction cycle.
- Transactions are recorded accurately in accordance with management’s authorization.
- Estimates used to record depreciation and the like are reasonable and consistent over time.
- Assets are safeguarded with appropriate property insurance in force.
- Supporting details records are properly maintained.
- Management approves any adjusting journal entries.
Identify the objectives of internal control in the investing/financing transaction cycle.
- Transactions are recorded accurately in accordance with management’s authorization.
- Investment assets should be reasonably secure from loss.
- Supporting detailed records should be maintained and compared to the general ledger.
- Management approves any adjusting journal entries.
How should employee responsibilities be allocated to facilitate a proper segregation of duties in the production/manufacturing inventory transaction cycle.?
- Authorization, bookkeeping (recording), and custody of inventory should be separate.
- Sales returns should be counted by receiving clerk, who prepares an appropriate receiving document.
What is the only component of the audit risk model that the auditor controls?
Detection risk
Performing analytical procedures may serve what three purposes?
- Audit planning (required)
- As a form of substantive evidence (not required)
- Final review (required)
List the two broad categories of substantive procedures.
- Tests of details
2. Substantive analytical procedures
Define “analytical procedures.”
Evaluations of financial information through analysis of plausible relationships among both financial and non financial data
Identify the two categories of substantive tests of details
- Tests of ending balances
2. Tests of transactions
Identify the four considerations that determine the effectiveness and efficiency of analytical procedures used for substantive purposes.
- Nature of the assertion
- Plausibility and predictability of the relationship
- Availability and reliability of data
- Precision of the expectation
How might the auditor’s decisions about the extent of audit procedures lower detection risk?
Increasing the sample sizes for audit testing will lower detection risk.
How might the auditor’s decisions about the timing of audit procedures lower detection risk?
Moving the auditor’s important substantive procedures away from an interim date (before year-end) to year-end will lower detection risk.
How might the auditor’s decisions about the nature of audit procedures lower detection risk?
Choosing audit procedures that provide a stronger basis for conclusions will lower detection risk.
Coverage Ratios (also known as leverage ratios):
Measures of the entity’s ability to meet its obligations over time (i.e., measures of long-term risk to creditors and the extent to which the entity has borrowed up to its available capacity).
Liquidity Ratios (also known as solvency ratios):
Measures of an entity’s short-term ability to meet its obligations.
Activity Ratios (also known as turnover or efficiency ratios):
Measures of an entity’s effectiveness putting its assets to use.
Profitability Ratios:
Measures of an entity’s operating success (failure) for a period of time.
Describe what the existence (occurrence) assertion means.
The existence (occurrence) assertion means that the recorded transactions are valid economic events of the period in which they are reported (i.e., the recorded transactions/items are properly recorded).
Describe what the completeness assertion means
The completeness assertion means that there are no omissions of transactions that should have been reported.
Describe what the rights and obligations assertion means.
The rights and obligations assertion means that the company has all the rights associated with its reported assets and all the obligations associated with its reported liabilities; any limitations on such rights or obligations must be appropriately disclosed.
Describe what the valuation or allocation assertion means.
The valuation or allocation assertion means that the dollar amounts attributed to the elements of the company’s financial statements are appropriate and in accordance with generally accepted accounting principles (GAAP) or other applicable financial reporting framework.
Define “audit evidence.”
All the information used by the auditor in arriving at the conclusions on which the audit opinion is based. Audit evidence includes the information contained in the accounting records underlying the financial statements and other information.
Define “assertions.”
Implicit or explicit statements of fact by management that are associated with the entity’s financial statements
List the three broad categories of assertions under AICPA professional standards.
- Account balances at the end of the period (there are four assertions related to the balance sheet)
- Classes of transactions and events during the period (there are five assertions related to the income statement)
- Presentation and disclosure (there are four assertions related to the footnotes applicable to any of the financial statements)
List the four assertions about account balances at the end of the period (balance sheet).
- Existence
- Completeness
- Rights and obligations
- Valuation and allocation
List the five assertions about classes of transactions and events during the period (income statement).
- Accuracy
- Occurrence
- Completeness
- Cutoff
- Classification
List the four assertions about presentation and disclosure (footnotes)
- Occurrence and rights and obligations
- Completeness
- Classification and understandability
- Accuracy and valuation
What is meant by “sufficient” and “appropriate” when “sufficient appropriate audit evidence” is mentioned?
“Sufficient” refers to the quantity of evidence that is required.
“Appropriate” refers to the quality of the evidence involved, in terms of relevance and reliability.
What are the AICPA’s guidelines to rank the reliability of audit evidence?
- Direct personal knowledge by the auditor is the most reliable audit evidence.
- Evidence obtained from an independent outside source is the next most reliable.
- Evidence obtained from the entity under effective internal control is next.
- Documentary evidence is more reliable than verbal responses to inquiries (and original documents are more reliable than faxes and photocopies).
“Reliability” is affected by________
Reliability is affected by the source and nature of evidence and depends upon individual circumstances however, the SAS offers the following guidelines:
- Evidence obtained directly by the auditor is more reliable than evidence obtained indirectly or by inference (e.g., observation of the application of a control is more reliable than inquiry of entity personnel about the application of a control).
- Evidence is more reliable when obtained from independent (knowledgeable) sources outside the entity;
- Evidence generated internally is more reliable when the related controls are effective;
- Evidence is more reliable when it exists in documentary form (whether paper or electronic); and
- Evidence provided by original documents is more reliable than evidence based on photocopies/facsimiles (faxes).
List the three categories of audit procedures
- Risk assessment procedures
- Tests of control
- Substantive procedures
What are risk assessment procedures?
Procedures performed to obtain an understanding of the entity and its environment, including internal control, to assess the risk of material misstatement, whether due to fraud or error
What are substantive procedures?
Procedures performed to detect material misstatements at the relevant assertion level; these consist of tests of details and substantive analytical procedures
What are tests of control?
Procedures performed to obtain information about the operating effectiveness of controls in preventing or detecting and correcting material misstatements at the relevant assertion level
Describe what is meant by “audit plan” that an auditor is responsible for establishing under Public Company Accounting Oversight Board (PCAOB) auditing standards.
The audit plan is more specific than the audit strategy and deals with the nature, timing, and extent of the auditor’s planned procedures (including risk assessment procedures, tests of controls, and substantive procedures).
List the matters to be evaluated by the auditor under Public Company Accounting Oversight Board (PCAOB) auditing standards.
- Results of analytical procedures performed as the overall review
- Misstatements accumulated during the audit
- Qualitative aspects of the company’s accounting practices
- Conditions identified related to fraud risk
- Presentation (including disclosures) of the financial statements
- Adequacy of evidence obtained
What is the auditor’s objective for identifying and assessing risks of material misstatement under Public Company Accounting Oversight Board (PCAOB) auditing standards?
To identify and appropriately assess the risks of material misstatement, thereby providing a basis for designing and implementing responses to the risks of material misstatement
Describe the different treatments regarding financial statement assertions between the AICPA’s Statements on Auditing Standards and the Public Company Accounting Oversight Board’s (PCAOB) auditing standards.
The PCAOB identifies 5 financial statement assertions, whereas the AICPA identifies 13 assertions in total of three categories of assertions [involving (1) account balances at period-end; (2) transactions and events for the period; and (3) presentation and disclosure]. The AICPA’s discussion of assertions is consistent with International Standards on Auditing.
Under Public Company Accounting Oversight Board (PCAOB) auditing standards, what is the purpose of risk assessment procedures?
The auditor should perform risk assessment procedures sufficient to provide a reasonable basis for identifying and assessing the risks of material misstatement and designing further audit procedures.
What is the auditor’s objective for audit risk as prescribed by Public Company Accounting Oversight Board (PCAOB) auditing standards?
To conduct the audit of financial statements in a manner that reduces audit risk to an appropriately low level associated with “reasonable” assurance
What is the auditor’s objective for obtaining audit evidence under Public Company Accounting Oversight Board (PCAOB) auditing standards?
To plan and perform the audit to obtain appropriate audit evidence that is sufficient to support the opinion
List the specific risk procedures an auditor should perform in assessing the risks of material misstatement under Public Company Accounting Oversight Board (PCAOB).
- Obtain an understanding of the company and its environment.
- Obtain an understanding of internal control over financial reporting.
- Consider information from client acceptance/retention, planning, prior audits, and other engagements for the company.
- Perform analytical procedures.
- Inquire about the RMM.
List the circumstances that impact the extent of supervision under Public Company Accounting Oversight Board (PCAOB) auditing standards.
- Size and complexity of the company
- Nature of the work assigned to engagement personnel
- Capabilities of each engagement team member
- Risks of material misstatement
List the five financial statement assertions identified by Public Company Accounting Oversight Board (PCAOB) auditing standards.
- Existence
- Completeness
- Rights and obligations
- Valuation or allocation
- Presentation and disclosure
What are the engagement partner’s basic responsibilities under Public Company Accounting Oversight Board (PCAOB) auditing standards?
The engagement partner is responsible for the engagement and its performance, including the proper supervision of the engagement team members and compliance with PCAOB standards.
What is the auditor’s objective for the consideration of materiality in planning and performing the audit under Public Company Accounting Oversight Board (PCAOB) auditing standards?
To apply the concept of materiality appropriately in planning and performing audit procedures
List the two categories of auditor responses regarding risks of material misstatement under Public Company Accounting Oversight Board (PCAOB) auditing standards.
- Overall responses
2. Responses involving the nature, timing, and extent of audit procedures at the relevant assertion level
List the two levels at which the risks of material misstatement should be assessed as prescribed by Public Company Accounting Oversight Board (PCAOB) auditing standards.
- At the financial statement level
2. At the assertion level
What is the auditor’s objective for evaluating audit results under Public Company Accounting Oversight Board (PCAOB) auditing standards?
To evaluate the results of the audit to determine whether the audit evidence obtained is sufficient and appropriate to support the opinion
What is the auditor’s objective regarding audit planning as prescribed by Public Company Accounting Oversight Board (PCAOB) auditing standards?
The objective is to plan the audit so that the audit is conducted effectively subject to an appropriately low level of audit risk.
What is the auditor’s objective as it relates to responding to the risks of material misstatement under Public Company Accounting Oversight Board (PCAOB) auditing standards?
To address the risks of material misstatement through appropriate overall audit responses and audit procedures
What is the auditor’s objective for supervision of the audit engagement under Public Company Accounting Oversight Board (PCAOB) auditing standards?
To supervise the audit engagement so that the work is performed as directed and supports the conclusions reached
Describe what is meant by “overall strategy” that an auditor is responsible for establishing under Public Company Accounting Oversight Board (PCAOB) auditing standards.
The overall strategy involves rather high level audit resource allocation issues involving the scope, timing, and direction of the audit activities.
Define “misstatement.”
A difference between the amount, classification, presentation, or disclosure of a reported financial statement item and that which is required for the item to be in accordance with the applicable reporting framework.
What is meant by the term “factual misstatements”?
Misstatements for which there is no doubt
What is meant by the term “judgmental misstatements”?
Differences arising from the judgments of management that the auditor considers unreasonable; or the selection of accounting policies is deemed inappropriate
What is meant by the term “projected misstatements”?
The auditor’s best estimate of misstatements in populations suggested by audit sampling. (The AICPA formerly used the term “likely error” for this concept.)
Describe the auditor’s responsibility to accumulate misstatements identified during the audit.
The auditor should accumulate identified misstatements, except for those that are clearly trivial. (“Clearly trivial” means clearly inconsequential.)
The auditor must document what matters in connection with the evaluation of misstatements?
- The threshold for determining what is viewed as clearly trivial.
- All misstatements accumulated during the audit (and whether they have been corrected).
- The auditor’s conclusion as to whether any uncorrected misstatements are material (individually or in the aggregate), and the basis for that conclusion.
What is contained in the permanent file of the audit documentation?
The permanent file contains documentation of matters having ongoing audit significance.
What is meant by the term “documentation completion date” under the AICPA and PCAOB standards, respectively?
Under AICPA standards (applicable to audits of “nonissuers”): The auditor should complete the assembly of the final audit file no later than 60 days after the “report release date.” Under PCAOB standards (applicable to audits of “issuers”): The auditor should complete the assembly of the final audit file no later than 45 days after the “report release date.”
Define “report release date.”
The date the auditor grants the entity permission to use the auditor’s report. (That date must be documented.)
What are the audit documentation retention requirements under the AICPA and PCAOB standards, respectively.
Under AICPA standards (applicable to audits of “nonissuers”): The audit documentation should be retained for at least five years from the report release date.
Under PCAOB standards (applicable to audits of “issuers”): The audit documentation should be retained for at least seven years from the report release date.
List three purposes of audit documentation.
- Provides the principal support for the auditor’s report
- Documents the auditor’s compliance with generally accepted accounting standards (GAAS)
- Assists in controlling the audit engagement
What changes can the auditor make to the audit documentation after the documentation completion date?
- The auditor may add to the documentation but must document any materials added, by whom, when, the reasons for the change, and the effect on the auditor’s conclusions.
- The auditor must not delete audit documentation before the end of the retention period.
Describe the limited changes in audit documentation that are permitted after the documentation completion date.
No documentation can be deleted, but documentation can be added. It must indicate the date the information was added, the name of the person preparing the additional documentation, and the reason for adding it.
Describe the level of detail in the audit documentation required by Public Company Accounting Oversight Board (PCAOB) auditing standards.
The documentation should be prepared in sufficient detail to permit an experienced auditor without prior connection to the engagement to understand the procedures performed and the conclusions reached and to determine who performed the work and on what date.
List the three general documentation requirements under Public Company Accounting Oversight Board (PCAOB) auditing standards.
- Demonstrate the auditor’s compliance with PCAOB standards.
- Support the basis for the auditor’s conclusions regarding every relevant financial statement assertion.
- Demonstrate that the underlying accounting records agree to or reconcile with the financial statement elements.
Differentiate between the requirements of the American Institute of Certified Public Accountants (AICPA) and of the Public Company Accounting Oversight Board (PCAOB) regarding “retention” of audit documentation.
AICPA: Requires retention of audit documentation for 5 years for audits of “nonissuers.”
PCAOB: Requires retention of audit documentation for 7 years for audits of “issuers.”
What are deemed “significant findings or issues” that must be documented by the auditor?
- Issues involving the application of accounting principles
- Circumstances causing modification of planned audit procedures
- Matters that could result in modification of the auditor’s procedures
- Material misstatements
- Significant deficiencies or material weaknesses in internal control
- Difficulties in applying auditing procedures
- Disagreements among members of audit team
Differentiate between the requirements of the American Institute of Certified Public Accountants (AICPA) and of the Public Company Accounting Oversight Board (PCAOB) regarding the documentation completion date.
AICPA: A complete and final set of audit documentation should be assembled no later than 60 days after the report release date for audits of “nonissuers.”
PCAOB: A complete and final set of audit documentation should be assembled no later than 45 days after the report release date for audits of “issuers.”
List the five conditions required for an engagement to report whether a previously reported material weakness continues to exist under Public Company Accounting Oversight Board (PCAOB) auditing standards.
- Management accepts responsibility for internal control over financial reporting.
- Management evaluates the effectiveness of the specific controls that address the material weakness.
- Management provides an assertion that the specific control is effective.
- Management supports its assertion with evidence.
- Management provides a written report to accompany the auditor’s report.
List two alternative procedures for a nonresponse to a positive confirmation (usually performed after a second request was sent but no response was received).
Either:
Verify subsequent cash receipts; or
Examine underlying documents for apparent validity.
What is meant by the term “negative confirmation”?
A response is requested only in the event the confirming party disagrees with the identified balance. A nonresponse is vewed as indicating that party’s agreement.
List the two general types of confirmations.
Positive
Negative
What is meant by the term “positive confirmation”?
A response is requested whether or not the confirming party agrees with the entity’s recorded amount. A nonresponse indicates a “loose end” that must be resolved.
When might negative confirmations be justified?
- When the financial statement item involves a large number of small (immaterial) accounts
- When control risk is low (i.e., internal control is viewed as effective)
- When recipients are expected to pay attention to the request
List some audit procedures that might be used to assess accounting estimates.
Inquire of management to understand how the estimate was developed.
Review and test management processes.
Develop an independent expectation for comparison to the entity’s estimate.
Review subsequent events for additional evidence.
What is the auditor’s basic responsibility when auditing accounting estimates?
Evaluate the reasonableness (and the adequacy of related disclosures) of any significant accounting estimates relative to generally accepted accounting principles (GAAP) or other applicable financial reporting framework
Define “view-only access.”
Permitting a user to view, but not change, a file.
What further substantive procedures should the auditor perform in responding to significant risks?
The auditor should evaluate:
- How management addressed estimation uncertainty in making the estimate.
- Whether management’s significant assumptions are reasonable.
- Whether management has the intent and ability to carry out specific actions, as relevant.
What matters should the auditor document in connection with accounting estimates?
- The basis for the auditor’s conclusions about the reasonableness of accounting estimates resulting in significant risks and their disclosure
- Any indications of possible management bias
Identify three factors affecting the nature of estimation uncertainty.
The nature of estimation uncertainty varies with
- The nature of the accounting estimate;
- The extent to which there is an accepted method (or model) to be used; and
- The subjectivity of any assumptions or the degree of judgment involved.
Define Estimation Uncertainty
The susceptibility of an accounting estimate and related disclosures to an inherent lack of precision in its measurement.
What is the best evidence of fair value?
Published price quotations in an active market
What is meant by the term “observable inputs”?
Assumptions that market participants would use in pricing an asset or liability based on market data from sources independent of the reporting entity
What is the auditor’s basic responsibility regarding fair value measurement and disclosures?
The auditor must obtain sufficient appropriate audit evidence to provide reasonable assurance that fair value measurements and disclosures comply with generally accepted accounting procedures. The auditor should also determine that the methods used to determine fair value are consistently and appropriately applied.
Define “fair value.”
The amount at which the asset could be bought or sold in a current transaction between willing parties, that is, other than in a forced or liquidation sale