WEEK 9: AUDITING Computer-based Flashcards

1
Q

steps in audit process

A
  1. audit planning ( inherent, control, detection )
  2. collection of audit evidence ( observing reviewing etc.)
  3. evaluation of evidence ( use credible analysis methods)
  4. communication of results
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

reasons for audit planning

A

To identify areas of risk ofmaterial misstatements

To design audit procedures (audit strategy) to address those risks and to obtain sufficient appropriate evidence

To help keep audit costs reasonable

To avoid misunderstandings with the client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Auditing objectives

A
  1. Ensure security provisions protect computer equipment, programs, communications, and data from unauthorized access, modification, or destruction.
  2. Program development and acquisition are performed in accordance with management’s general and specific authorization.
  3. Program modifications have management’s authorization and approval.
  4. Processing of transactions, files, reports, and other computer records is accurate and complete.
  5. Source data that are inaccurate or improperly authorized are identified and handled according to prescribed managerial policies.
  6. Computer data files are accurate, complete, and confidential.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what is the objective of risk based approach

A

ensures risk and opportunities are considered

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

key components of risk based approach

A
  1. identification and detection of risks
  2. assessment and classification of risk ( significant/ insignificant)
  3. designing and implementing further audit procedures to respond to these risks
  4. issuing appropriate audit report in a manner to reduce the audit risk to acceptable level
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

calculating audit risk

A

audit risk = IRCRDR

CR = Control risk 
IR= Inherent risk 
DR= Detection risk
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what is a compensating control?

A

control that is designed to satisfy the requirement for some other control deemed too difficult

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Are there lots of controls and stuff you need to read over in the slides for this section ?

A

yes :(((

How well did you know this?
1
Not at all
2
3
4
5
Perfectly