week 2 - Audit Flashcards
What is an important part of the control environment in an organization?
An effective internal audit function that reports to an audit committee.
What do external auditors assess in relation to control risk?
They make a preliminary assessment of control risk for material financial statement assertions and perform tests of control to support that assessment.
What is a major objective of company systems?
To reduce risk, particularly the impact of inherent and control risk, by implementing efficient accounting and control systems.
What are controls designed to do?
Controls are designed to prevent, detect, or correct unwanted events and ensure data and information meet required standards.
What are the basic elements of control in the internal environment?
(a) Control environment and related components (management integrity, competence, philosophy, organizational structure, monitoring, and corrective actions).
(b) Accounting and quality assurance/control systems (data security, hardware security, and data processing controls).
How is internal control defined?
- Internal control is a process effected by an entity’s board, management, and personnel to provide reasonable assurance regarding the achievement of objectives in three categories:
- Operational effectiveness and efficiency (O)
- Reliability of financial reporting (F)
- Compliance with applicable laws and regulations (C)
What is the “control environment” in internal control?
- The foundation for all other control components, contributing to discipline and structure.
- Reflects management’s actions, attitude, and awareness of the need for control.
- If the control environment is poor, other control measures are ineffective.
Why do auditors assess the control environment before considering control activities?
Because a weak control environment undermines the effectiveness of control activities.
What is risk assessment in internal control?
A process of identifying risks that could prevent the achievement of objectives, measured in terms of probability and impact.
How should risks be managed?
Risks must be continually identified, analyzed, and managed while considering changing internal and external environments.