SU 05 Audit risk and materiality Flashcards
Audit risk
the risk the auditor may not catch materially misstated financials (due to either error or fraud)
Materiality threshold
the acceptable level of misstatment/ the amount of error that can be allowed in an audit
Audit risk assessment types
Technical risk assessment
non-technical risk assessment
Technical risk assessment
Quantitative risk assessment
auditor “must assess risk associated with a client, to design nature, timing, and extent of audit procedures to be employed”
now generally build into the software
Non-technical risk assessment
Qualitative risk assessment, generally from an understanding of internal controls
Risk assessment procedures used to gain an understanding of the entity
- inquiries
- analytical procedures
- inspection and observation
what does the non-technical initial assessment of a potential audit client include
1) observation and inspection of
- control environment and activities
- documents and reports
- walk through for observation
- inspect prior period information if verified as current/ relevant
- nature of the entity (business plans/ objectives
2) analytical procedures
3) inquiries
- management, internal auditors, lawyers etc
what does the initial assessment of a potential audit client result in
preliminary risk determination
general idea of risk level leads to determination of materiality threshold
Equation for audit risk
Audit risk = RMM x DR
RMM = risk of material misstatement
DR = detection risk
AKA audit risk model
Detection risk
the risk that substantive audit procedures will miss a material misstatement
expressed by a percentage indicating the amount of detection risk that can be tolerated
the only part of the audit equation that can be directly affected by the audit firm
Factors of detection risk
- effectiveness of audit procedures
- how well audit procedures are carried out by the auditor
Relationship between risk of material misstatement and detection risk
Inverse - as RMM rises, DR must be kept lower
Direct connections
aka positive - related elements rise or fall together
Inverse connections
aka negative - move in opposite directions
Components of RMM
RMM = IR x CR
IR = inherent risk
CR = control risk
Inherent risk
the susceptibility of an assertion to material misstatement if no controls are in place
largely a factor of the business environment?
Control risk
the risk that internal controls in place will not prevent or detect a material misstatement in a timely manner
management responsibility
Expanded Audit risk equation
AR = IR x CR x DR
Audit risk = inherent risk x control risk x detection risk
detection risk equations
DR = AR / RMM or DR = AR / (IR x CR)
Components of detection risk
DR = TD x AP
TD = test of details
AP = risk of substantive analytical procedures
When is materiality considered in an audit
- balances
- transaction classes
- disclosures
- financial statements overal
Materiality threshold
amount of misstatement that is tolerable at a given level, must in aggregate be less than the materiality threshold for the financial statements as a whole
Tolerable misstatement
the amount of inaccuracy that can be tolerated
aggregated small misstatements may together exceed overall tolerable materiality, ergo tolerable misstatement must be less than materiality by some safety margin
why might misstatements below the materiality threshold still be material misstatements?
there may be qualitative considerations, including:
- management integrity or bias
- cumulative affect
- effect of specific regulations