Wiley Flashcards
In the USA, who issues auditing standards applicable to audits of private companies and other entities known as nonissuers?
AICPA’s Auditing Standards Board
In the USA, who issues auditing standards applicable to audits of public companies (also known as issuers)?
Public Company Accounting Oversight Board (PCAOB)
In the USA, who issues auditing standards applicable to audits of governmental entities?
US Government Accountability Office (GAO)
What is meant by generally accepted auditing standards (GAAS) under the clarified auditing standards?
The Statements of Auditing Standards issued by the AICPA’s Auditing Standards Board
Identify the four primary themes associated with the AICPA’s seven principles for audit standard setting
1, Purpose/premise
- Responsibilities
- Performance
- Reporting
Identify the topics associated with each of the AICPA’s seven principles for auditing standard setting
- Purpose
- Premise
- Responsibilities
- Reasonable Assurance
- Performance requirements to achieve reasonable assurance
- Inherent limitations
- Reporting
Identify the topics associated with the three general standards formerly known as generally accepted auditing standards (GAAS), which are still applicable to the PCAOB’s auditing standards
- Training
- Independence
- Due professional care
Identify the topics associated with the four reporting standards for generally accepted auditing standards (GAAS), which are still applicable to the PCAOB’s auditing standards.
- GAAP
- Consistency
- Disclosure
- Opinion
List the six elements of a quality control system
- Leadership responsibilities for quality within the firm
- Relevant ethical requirements (especially independent)
- Acceptance and continuance of client relationships
- Human resources
- Engagement performance
- Monitoring
What matters should be covered in the (successor) auditor’s inquiry of the predecessor auditor?
- Facts related to management’s integrity
- Significant accounting or auditing disagreements
- Any communications with the audit committee (or others charged with governance) about fraud, illegal acts, and significant deficiencies in internal control matters
- Predecessors understanding of the reason(s) for the clients change in auditors
What matters are typically addressed in an engagement letter?
- The objective and scope of the audit
- the auditors responsibilities
- managements responsibilities
- a statement about the inherent limitations of an audit
- a statement identifying the applicable financial reporting framework
- reference to the expected content of any reports to be issued
- other matters, as warranted
What is the auditor’s basic audit planning responsibility?
The auditor should plan the audit (and design the required written audit program or plan) to be responsive to the auditor’s assessment of the risk of material misstatement.
What is the difference between an overall audit strategy and an audit plan?
an audit strategy deals with higher level issues, such as allocating audit resources, whereas an audit plan is more detailed and deals more specifically with the nature, timing, and extent of audit procedures to be performed.
The clarified audit standards introduced the term “performance materiality.” What does this term mean?
the amount(s) set by the auditor at less than materiality for the financial statements as a whole to be reduced to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality for the financial statements as a whole
What is the audit risk model that is applicable to classes of transactions or to account balances?
Audit risk = inherent risk x control risk x detection risk
Define “audit risk”
The probability that the auditor fails to modify the opinion on financial statements that contain a material
Define “inherent risk”
the probability that a material misstatement would occur in the particular audit area in the absence of any internal control policies and procedures
Define “control risk”
the probability that a material misstatement, that occurred in the first place, would not be detected by applicable internal controls
Define “detection risk”
The probability that a material misstatement, that was not prevented or detected by internal control, was not detected by the auditor’s substantive audit procedures
Define “risk of material misstatement”
The risk that the financial statements contain one or more material misstatements prior to the audit
Define “analytical procedures”
Evaluation of financial information through analysis of plausible relationships among both financial and nonfinancial data
What three purposes might analytical procedures serve?
- required during planning
- may be used as substantive evidence (not required)
- required during final review
what matter must be documented in connection with analytical procedures?
- the auditor’s expectation and the factors considered in developing it
- the results of the comparison of the recorded amounts (or ratios) with the expectations
- any additional auditing procedures performed to investigate significant differences identified by the comparison
What are the three categories of fraud-related risk factors that should be considered by the auditor?
- incentives/pressures (the motivation for committing fraud)
- opportunities (the ability to commit fraud)
- attitudes/rationalizations (the justification or excuse for committing fraud)
List the two types of financial statement related frauds
- fraudulent financial reporting (sometimes called cooking the books)
- Misappropriation of assets (covering up theft by false journal entries)
when might an auditor have a duty to inform others outside of the audited entity of fraud related matters?
- in response to a valid subpoena
- to comply with applicable legal and regulatory requirements
- to respond appropriately to successor auditors inquiries when the former client has given permission to the predecessor
- to report fraud to the applicable funding agency under the requirements of government auditing standards
What are the auditors responsibilities to communicate fraud identified by the auditor?
- if the fraud is not material, the auditor should inform the appropriate level of management
- if the fraud is material, the auditor should inform those charged with governance
what is the auditors responsibility to detect illegal acts?
The auditor should design the audit to provide reasonable assurance of detecting illegal acts having a direct and material effect on the financial statements
What is meant by the term “legal and regulatory framework”?
Those laws and regulations to which an entity is subject; noncompliance may result in fines, litigation, or other consequences that my have a material effect on the financial statements
what are the two ways the external auditor might use the work of an internal audit function?
- to obtain audit evidence
2. to provide direct assistance
When using the work of internal audit function to obtain audit evidence, what three matters should the external auditor evaluate?
- Objectivity - the internal audit functions organizational status and the objectivity of the internal auditors
- competence of the internal auditors
- whether the internal auditor function applies a “systematic and disciplined approach, including quality control”
When using the internal audit function to provide direct assistance, what two matters should the external auditor evaluate?
- Objectivity - the internal audit functions organizational status and the objectivity of the internal auditors
- competences of the internal auditors
define what is meant by the term “those charged with governance”
the person(s) or organization(s) with responsibility for overseeing the strategic direction of the entity and the obligations related to the accountability of the entity
Define what is meant by the term “management”
the person(s) with executive responsibility for the conduct of the entity’s operations
what matters are the auditor required to communicate to those charged with governance?
- the auditors responsibilities under GAAS
- the planned scope and timing of the audit
- significant findings from the audit
What are the three objectives of internal control as identified in the definition of internal control?
- reliability off financial reporting
- effectiveness and efficiency of operations
- compliance with applicable laws and regulations
identify three procedures an auditor might perform to obtain an understanding of internal controls?
- inquiry of appropriate personnel
- observation of client’ activities
- review entitys documentation of internal controls
identify three ways auditors might document their understanding of internal controls?
- flowcharts of transaction cycles
- internal control questionnaires
- narrative write-ups (memos)
identify two reasons for assessing control risk at the maximum level
- the auditor believes that the design of internal control is ineffective
- the auditor believes that reliance on internal control (and performing applicable tests of control) is not an efficient audit strategy compared to a wholly substantive audit approach
Identify the five interrelated components of internal controls
- control environment
- risk assessment
- control activities
- information and communication systems
- monitoring
what is meant by the term “control environment”?
the policies and procedures that determine the overall control consciousness of the entity, sometimes called “the tone at the top”
what is meant by the term “risk assessment”?
the policies and procedures involving the identification, prioritization, and analysis of relevant risks as a basis for managing those risks
what is meant by the term “information and communication systems”?
the policies and procedures related to the identification, capture, and exchange of information in a form and time frame that enable people to carry out their responsibilities
what is meant by the term “control activities”?
the policies and procedures that help ensure that management directives are carried out especially those related to (1) segregation of duties, (2) physical controls, (3) authorization of transactions, (4) performance reviews, and (5) information processing
list the three categories of incompatible functions associated with segregation of duties
- authorization of transactions (execution function)
- accounting (record keeping function)
- access to assets (custody function)
what is the auditors responsibility for assessing the risk of material misstatement
the auditor should identify and assess the risks of material misstatement (1) at the financial statement level and (2) at the relevant assertion level related to classes of transactions, account balances, and disclosures
define the term “significant risks”
risks that the auditor believes require special audit consideration
define “material weakness”
a deficiency (or combination of deficiencies) in internal control such that there is a reasonable possibility that a material misstatement of the entity’s financial statements will not be prevented or detected and corrected on a timely basis
define “significant deficiency”
a deficiency (or combination of deficiencies) in internal control that is less severe than a material weakness, yet important enough to merit attention by those charged with governance
what is meant by the term “deficiency in design”?
When a control necessary to meet the control objective is missing, or when the control objective is not always met, even if the control operates as designed
what is meant by the term “deficiency in operation”?
when a properly designed control does not operate as designed, or when the person performing the control does not have the authority or competence to effectively perform the control
describe the auditor’s requirements for communicating deficiencies in an entitys internal controls
- the auditor must communicate in writing the significant deficiencies (including material weaknesses) identified in the audit
- the auditor may choose to communicate lesser matters too
describe the timing of the required communication of significant deficiencies in internal control
under AICPA professional standards, written communication is required no later than 60 days after the audit report release date (including matters communicated orally during the audit)
what is meant by the term “transaction cycle”?
a group of essentially homogeneous transactions; that is, transactions of the same type
why do auditors emphasize transaction cycles?
control risk is generally constant within a particular category of transactions as all transactions are processed the same way.
what is the difference between an accounts payable system and a vouchers payable system?
an accounts payable system aggregates payable to identify the total owned to any individual vendor.
list to two broad categories of substantive procedures
- tests of details
2. substantive analytical procedures
identify the two categories of substantive tests of details
- tests of ending balances
2. tests of transactions
identify the four considerations that determine the effectiveness and efficiency of analytical procedures used for substantive purposes
- nature of the assertion
- plausibility and predictability of the relationship
- availability and reliability of data
- precision of the expectations
what is meant by “sufficient” and “appropriate” when “sufficient appropriate audit evidence” is mentioned?
- “sufficient” refers to the quantity of evidence that is require
- “appropriate” refers to the quality of the evidence involved, in term of “relevance” and “reliability”
define “assertion”
implicit or explicit statements of fact by management that are associated with the entitys financial statements
list the three broad categories of assertions under AICPA professional standards
- account balances at the end of the period (there are four assertions related to the balance sheet)
- classes of transactions and events during the period (there are five assertion related to the income statement)
- presentation and disclosure (there are four assertions related to the footnotes applicable to any of the financial statements
list the four assertions about presentation and disclosure (footnotes)
- occurrence and rights and obligations
- completeness
- classification and understandability
- accuracy and valuation
list the five assertions about classes of transactions and events during the period (income statement)
- accuracy
- occurrence
- completeness
- cutoff
- classification
list the four assertions about account balances at the end of the period (balance sheet
- existence
- completeness
- rights and obligations
- valuation and allocation
what are the AICPA’s guidelines to rank the reliability of audit evidence?
- direct personal knowledge by the auditor is the most reliable audit evidence
- evidence obtained from an independent outside source is the next most reliable
- evidence obtained from the entity under effective internal control is next
- documentary evidence is more reliable than verbal responses to inquiries
list the three categories of audit procedures
- risk assessment procedures
- tests of controls
- substantive procedures
what are substantive procedures?
procedures performed to detect material misstatements at the relevant assertion level; these consist of tests of details and substantive analytical procedures
define “report release date”
the date the auditor grants the entity permission to use the auditor’s report
what is meant by the term “documentation completion date” under the AICPA and PCAOB standards, respectively?
under AICPA standards, the auditor should complete the assembly of the final audit file no later than 60 days after the “report release date”
under PCAOB standards, the auditor should complete the assembly of the final audit file no later than 45 days after the “report release date”
what is meant by the term “projected misstatements”?
the auditor’s best estimate of misstatements in populations suggested by audit sampling
what matters must be documented by the auditor in connection with the evaluation of misstatements?
- the threshold for determining what is viewed as clearly trivial
- all misstatements accumulated during the audit
- the auditors conclusion as to whether any uncorrected misstatements are material, and the basis for that conclusion
what changes can the auditor make to the audit documentation after the documentation completion date?
- the auditor must not deleted audit documentation before the end of the retention period
- the auditor may add to the documentation but must document any materials added, by whom, when, the reasons for the change, and the effect on the auditors conclusions
what are the audit documentation retention requirement under the AICPA and PCAOB standards, respetively
under AICPA standards, the audit documentation should be retained for at least five years from the report release date
under PCAOB standards, the audit documentation should be retained for at least seven years from the report release date
list two alternative procedures for a nonresponse to a positive confirmation (usually performed after a second request was sent, but no response was received)
- Verify subsequent cash receipts
2. examine underlying documents for apparent validity
when might negative confirmations be justified?
- the final statement item involves a large number of small (immatrial) accounts
- control risk is low
- recipient are expected to pay attention to the request
what is meant by the term “negative confirmation”?
a response is only requested in the event the confirming party disagrees with the identified balance
what is meant by the term “positive confirmation”?
a response is requested whether or not the confirming party agrees with the entitys recorded amount
what is the auditors basic responsibility when auditing accounting estimates?
evaluate the reasonableness of any significant accounting estimates relative to GAAP or other applicable financial reporting framework
what is meant by the term “estimation uncertainty”?
the susceptibility of an accounting estimate and related disclosures to an inherent lack of precision in its measurement
what is the best evidence of fair value?
published price quotations in an active market
define “fair value”
the amount at which the asset could be bought or sold in a current transaction between willing parties, that is, other than in a forced or liquidation sale
what is meant by the term “observable inputs”?
assumptions that market participants would use in pricing an asset or liability based on market data from sources independent of the reporting entity
what is meant by the term “unobservable inputs”?
an entitys own judgments about what assumptions market participants would use
list the two types of letters involved in the communication with the entitys lawyers
- letter of inquiry
2. lawyer’s letter
what is meant by the term “asserted claim”?
a claim that has already been filed or when the other party has announced an intention to sue
what is meant by the term “unasserted claims”?
audited entity has exposure to litigation but no one has yet filed a law suit or announced an intention to sue
list the four matters the lawyers letter should address regarding asserted claims
- the nature of the litigation
- the progress of the case to date
- how management is responding or intends to respond to the litigation
- an evaluation of the likelihood of an unfavorable outcome and an estimate, if one can be made, of the amount or range of potential loss
list the three matters the lawyers letter should address regarding “unasserted” claims
- the nature of the litigation
- how management intends to respond if the claim is asserted
- an evaluation of the likelihood of an unfavorable outcome and an estimate, if one can be made, of the amount or range or potential loss
what is the effect of a limitation in the lawyers response to the letter of inquiry of the audit report?
this would be considered a scope limitation sufficient to prevent an unqualified opinion and likely resulting in a disclaimer of opinion
under what circumstances might an auditor NOT be required to obtain a letter from the entitys legal counsel?
if the entity had no litigation, claims, or assessments having financial reporting relevance and, accordingly, did not engage legal counsel
what are the two basic categories of issues usually addressed by the management representation letter under the AICPA’s clarified auditing standards?
- financial statements
2. information provided
what is the purpose of obtaining the required management representations letter?
to document in writing the essence of managements verbal responses to the auditors important verbal inquiries
list the members of management who are responsible for signing the management representations letter
the chief executive officer (CEO) and chief financial officer (CFO)
what is meant by the term “related party”?
one party that controls or can significantly influence the management or operating policies of another party
identify three responsibilities of the auditor when related party transactions have been identified
- obtain an understanding of the business purpose of the related party transaction
- determine if the related party transaction was authorized by board of directors
- evaluate the adequacy of the disclosures of the related party transactions
what is meant by the term “subsequent events”?
events or transactions that occur after the balance sheet date up to the date of the auditor’s report which have a material effect on the financial statements and, therefore, require either financial statement adjustment or disclosure
what period of time defines a subsequent event?
the period after the balance sheet date up to the date of the auditors report
when would a subsequent event require adjustment of the financial statements?
when material events or circumstances clarify circumstances already in effect as of the balance sheet date