understanding entity Flashcards
Internal Control
An entity’s systems and policies designed to enable management to meet its objectives related to (ACE) Accurate and reliable financial reporting, Compliance with applicable laws and regulations and Efficient and effective operations.
5 components of Internal Control (CRIME)
Internal Control Components (CRIME)
Control Activities
Risk Assessment
Information and Communication
Monitoring
Control Environment
Control Environment
The “tone at the top.” Sets the tone of an organization, influencing the control consciousness of its people. It is the foundation for all other components of internal control, providing discipline and structure. (CHOPPER)
Commitment to competence
Human resources policies & practices
Organizational structure
Participation of those charged with governance
Philosophy and operating style of management
Ethical values and integrity Responsibility assignment
Risk Assessment
An entity’s identification and analysis of the internal and external risks that may interfere with the achievement of management’s objectives, including the requirement for reliable financial reporting and the preparation of fairly presented financial statements.
Control Activitie
Specific policies and procedures designed to manage identified risks to help ensure management directives are carried out, including achieving the objective of reliable financial reporting.
Information and Communication
The component of internal control that makes certain that management’s instructions are communicated and that there is a flow of information in all directions within the entity to enhance the efficiency and effectiveness of operations and ensure the transparency and fairness of financial reporting.
Monitoring
The ongoing evaluation of internal controls to make certain that they are effective, functioning as intended, and that they remain relevant.
Steps in “understanding” the internal control structure
Step 1 - Obtain an understanding of the design of internal control (perform risk assessment procedures - CRIME).
Step 2 - Document the understanding of Internal Control.
Step 3 - Assess Risk of Material Misstatement (RMM = IR x CR).
Step 4 - Perform tests of those controls the auditor intends to rely upon.
Step 5 - Reassess RMM based on tests of controls and evaluate results.
Step 6 - Document conclusions and determine the effect on the planned substantive procedures
Segregation of Duties
Assigning different people to different responsibilities such that no individual is responsible for any two of the four key components of business transactions, Authorization, Recording, Custody of resources, and Comparison or reconciliation (ARCC)
Tests of Controls
Audit procedures in the form of Reperformance, Inspection, Inquiry and Observation (RIIO), designed to determine whether controls are in place, operating as designed, and effective in the prevention or timely detection and correction of misstatements that could be material to the financial statements.
Inherent limitations in an internal control environment
Internal control might not be effective because of (COP):
Collusion (employees conspire to circumvent controls)
Override by management
Poor human judgment and errors
Reasonable assurance
The costs of the internal control structure should not exceed the benefits.
Flow of transactions
A good system of internal control is SACRED.
Start – Some event or circumstance initiates a transaction.
Authorization – Confirm legitimate counter party or event.
Completion or execution – Policies in place to ensure intended execution.
Recording – Ensure all transactions are recorded in F/S.
Evaluate Defenses – Checks and balances to verify appropriate functioning.
Revenue Cycle
A set of procedures that are followed by a business entity in generating sales, earning revenues, billing customers, and collecting and depositing cash receipts.
Spending Cycle
A business cycle that deals with ordering, receiving, and paying for goods or services including purchases of inventory on account, and cash disbursements.