Sampling and communications Flashcards
All material weakness are significant deficiencies, but NOT all significant deficiencies are material weakness.
重大缺点都是重要缺陷,但是重要缺陷不一定都是重大缺点。
Significant deficiencies and material weakness observed during a F.S audit of NONISSUER should be reported in WRITING, the report of such circumstance should
- indicate that the purpose of the audit was to report on the F.S and NOT to provide an opinion on internal control.
- include a definition of a material weakness and if applicable, significant deficiency.
- include a restriction on use of the report.
Regarding communication of deficiencies in internal control of NONISSUER
- The auditor may NOT report the absence of significant deficiencies. ( 没有重大缺陷不需要报告)
- The auditor may issue a communication indicating that NO MATERIAL WEAKNESS were identified during the audit (没有重要缺点需要报告)
An SSAE examination (for nonissuer or private company) of internal control can be only be performed if management
- accept responsibility for the effectiveness of internal control
- evaluate the effectiveness of the entity’s internal control using suitable and available criteria.
- Support its assertion about the effectiveness of internal control with sufficient appropriate evidence
- Provide a written assertion about the effectiveness of the entity’s internal control in a report that accompanies the auditor’s report.
Any report issued on significant deficiencies should indicate that the purpose of the audit was to report on the F.S and NOT to provide assurance (opinion) on internal control
A statement that errors or irregularities may occur and not be detected due to inherent limitation in internal control is included in the report when an auditor is engaged to express an opinion on internal control, NOT when the auditor is reporting as part of an audit.
PCAOB standards do NOT require auditor express an opinion on effectiveness of internal control on NONISSUER
, but PCAOB standards require the auditor to express an opinion, in conjunction with F.S audit of ISSUER.
GAAS standards do NOT require provide an opinion on effectiveness of internal control of nonissuer
An engagement to report on whether a previously reported internal control weakness continues to exist is
a voluntary engagement, NOT required by professional standards.
In an audit of an ISSUER
It is management’s responsibility to assess and report on internal control, and the auditor is also required to assess and report on internal control.
In an audit of a NONISSUER, the auditor is required to communicate both significant deficiencies and material weakness to management and those charged with governance. (同审计 ISSUER)
In an audit of an ISSUER, the auditor is required to communicate both significant deficiencies and material weakness to management and the audit committee (同审计NONISSUER), but only material weakness result in an ADVERSE opinion on the effectiveness of internal control.
The communicate of deficiencies of ISSUER
- control deficiency
- significant deficiency
- material weakness
a. all three need to communicate to management, and then inform the committee that communication has been made
b. 2 and 3 need to be communicated to committee
3. 3 need to be communicated to management and committee prior to the issuance of report on internal control
When auditing the internal control of an issuer
- A scope limitation requires the auditor to DISCLAIM or WITHDRAW from the engagement, NO , never a qualified opinion.
- A material weakness in internal control requires the auditor to issue an ADVERSE opinion.
Regarding the significant deficiencies noted in an audit of NONISSUER
- The auditor is obligated to RE-COMMUNICATE significant deficiencies each year, EVEN IF management has acknowledge its understanding of such deficiencies.
- the auditor should SEPARATELY IDENTIFY significant deficiencies and material weakness.
In an engagement to express a opinion on an entity’s internal control, the scope, procedures is MORE EXTENSIVE than in an audit of an entity’s internal control.
The purpose of tests of controls when in an engagement of express an opinion and when in audit is also different.
An auditor is hired to report on a NONISSUER’s internal control over financial reporting.
- when an material weakness exists, auditor should issue an ADVERSE opinion
- Failure of management to provide a written representation letter acknowledging its responsibility for the effectiveness of internal control is a SCOPE LIMITATION which results in a DISCLAIM of opinion or WITHDRAWAL from the engagement. (never qualified opinion).
The role of the risk assessment in an integrated audit of a nonissuer incldue
- selecting control to test
- determining significant accounts and relevant assertions
- determining evidence necessary to conclude on the effectiveness of a given control
do NOT include
1. concluding on the effectiveness of a given control
because the auditor’s conclusion on the operating effectiveness of internal control occurs AFTER the risk assessment process.