Test 2 Flashcards
PROBLEM I: What are the two Purposes of Internal Controls?
- Assess risk of material misstatement in financial statements
- Design nature, extent, and timing (NET) of audit procedures
PROBLEM I: What are the Limitations of Internal Controls? (LIST 4)
COCOC
1. Competence (unintentional; human error; misunderstanding of instructions; mistakes of judgment; fatigue)
- Obsolescence (error; change in operating environment)
- Collusion (fraud; failure to use segregation of duties that causes two or more people to collude)
- Override by Management (fraud; e.g. bonus tied to performance, “cook the books” to get results)
- Cost vs Benefit Constraints (e.g. small company)
PROBLEM II: List and Describe the COSO Internal Control Components (“C”)
CRIME
1. Control Environment (“Tone at the Top;” auditor obtains a detailed understanding of Co’s internal controls; CHOPPER)
PROBLEM II: List and Describe the COSO Internal Control Components (“R”)
CRIME
2. Risk Assessment (affected by internal and external circumstances; e.g. changes in personnel, rapid growth of organization, corporate restructuring; expansion/acquisition of foreign operations)
PROBLEM II: List and Describe the COSO Internal Control Components (“I”)
CRIME
3. Information and Communication System (relating to AIS)
e.g. identify and record all valid transactions, ensure proper recording of transactions in appropriate time period, measure proper monetary value of transactions
PROBLEM II: List and Describe the COSO Internal Control Components (“M”)
CRIME
4. Monitoring (assess the quality of internal controls performance over time)
-Ongoing Monitoring (regularly performed supervisory and management activities)
-Separate Evaluations (non-routine basis)
PROBLEM II: List and Describe the COSO Internal Control Components (“E”)
CRIME
5. Existing Control Activities (policies and procedures; PIPS/ARCC)
-performance reviews, information processing (IT), physical controls, segregation of duties
-authorization of transactions, recording of transactions, custody and security
What is the difference between Attribute and Variable sampling?
Attribute = used to estimate the extent to which a characteristic exists within a population
-used in the auditor’s testing of INTERNAL CONTROLS)
Variable = used to estimate the amount (or value) of some characteristic of a population
-used in the auditor’s SUBSTANTIVE PROCEDURES
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Auditors conclude that internal controls are functioning effectively when they are actually not (incorrect decision)
Attribute (Risk of Overreliance)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Audit risk is not reduced to sufficient level
Attribute (Risk of Overreliance)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Effectiveness loss
Attribute (Risk of Overreliance)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Auditors conclude that internal controls are not functioning effectively when they actually are (incorrect decision)
Attribute (Risk of Underreliance)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Perform more effective substantive procedures than necessary (efficiency loss)
Attribute (Risk of Underreliance)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Auditors concluded that the account is not materially misstated when it actually is
Variable (Risk of Incorrect Acceptance)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Issue incorrect opinion on misstated financial statements (effectiveness loss)
Variable (Risk of Incorrect Acceptance)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Auditors concluded that the account is misstated when it actually is not
Variable (Risk of Incorrect Rejection)
PROBLEM III (MATCHING): Is the following Attribute or Variable Sampling?
Perform more effective substantive procedures than necessary (efficiency loss)
Variable (Risk of Incorrect Rejection)
What is the audit risk formula?
AR = IR x CR x DR
Inherent and Control Risk x Detection Risk
In pre-engagement planning, what is a requirement of an auditor before communicating with predecessor auditors to accept the engagement?
Must get company management approval to be able to “attempt” to communicate with previous auditors
What is an Engagement Letter?
contract with the client to ensure a clear understanding of the services that the CPA provides
-objectives
-responsibilities of management
-inherent limitations of an audit
-applicable financial reporting framework
-expected form and content of reports issued
-the timing of procedures
-arrangements of fees and billing
What is the Audit Plan/Program?
REQUIRED comprehensive list of the specific audit procedures that the audit team needs to perform to gather sufficient appropriate evidence on which to BASE THEIR OPINION on the financial statements