Exam 7: Understanding and Testing the Clients System of Internal Controls
Attribute sampling is a sampling technique used to reach a conclusion about the total dollar amount of misstatement in an account balance.
False
Explain the seven generally accepted objectivof internal control activitiand identify the relevant assertions.
The internal control objectives are matched with the relevant assertions as follows:
Real - there are controls in place to ensure that fictitious or duplicate transactions are not included in the books and records of the organization (occurrence, rights and obligations, and existence assertions).
Recorded - there are controls in place that will prevent or detect the omission of transactions from the books and records of the organization (accuracy, completeness, and valuation and allocation assertions).
Valued - there are controls in place to ensure that the correct amounts are assigned to the transactions (accuracy, and valuation and allocation assertions).
Classified - there are controls in place to ensure that transactions are charged and allocated to the correct general ledger account (accuracy, classification, and valuation and allocation assertions).
Summarized - there are controls in place to ensure that the transactions in the books and records are summarized and totalled correctly (accuracy, and valuation and allocation assertions).
Posted - there are controls in place to ensure that the accumulated totals in the transaction file are correctly transferred to the general ledger and subsidiary ledgers (accuracy, classification, and valuation and allocation assertions).
Timely - there are controls in place to ensure that transactions are recorded in the correct accounting period (cut-off and completeness assertions).
What are the factors considered by auditors in determining whether there is a need for additional detailed tests of controls?
In determining whether there is a need for additional detailed tests of controls, the following factors are considered:
Results of enquiries and observations. If, during their enquiries or observations later in the audit process, the auditors identify that significant changes to processes and controls have occurred, their previous tests of controls may no longer provide a basis for relying on those controls. Therefore, they may need to identify and test other controls, perform additional tests of controls or increase the level of substantive testing performed at year-end. Changes to processes or controls are only significant if they have implications for the continued functioning and effectiveness of controls on which the auditor is relying in the first place.
Evidence provided by other tests. Tests of account balances (substantive testing) can often provide evidence about the continued functioning of controls. For example, when the auditor examines vendors' invoices in support of year-end accounts payable and expense account balances, they learn whether controls relating to the recording of these transactions continue to function. To the extent that their other audit procedures provide evidence of the effectiveness of controls from the date of interim work to the end of the period under audit, additional tests that otherwise might be necessary can be reduced.
Changes in the overall control environment. An effective entity-level control environment may allow the auditor to limit their tests of controls to enquiry and observation during the period between when they tested the controls (interim) and year-end. If they become aware of adverse changes in the overall control environment of the entity, such as a loss of employees and key management who perform key controls and who provide evidence as to the effectiveness of the overall entity control environment, additional tests of controls may be necessary.
Audit risk is the risk that an entity's internal control system will not prevent or detect material misstatements.
A sampling technique used to reach a conclusion about a population in terms of a rate of occurrence is known as:
Which of the following is an example of a preventive control?
Emile Santiago was anxious to start the selection and testing of controls at Dooley Real Estate Group, a company that specializin unique coastal propertinestled along the Nova Scotia coastline. A charming collection of coastal communitidots the rocks along the Bay of Fundy. Buzz Dooley brings years of talent and experience from being an executive in the marketing, technology and finance world to personally owning, renovating, aggregating and subdividing property. Along with investment analysis and extensive contract negotiation experience, clients are expertly represented in every transaction. Buzz imparts a sense of ease and joy to finding the perfect property for each client, making owning beach and coastal property a dream! Emile had two main "big picture" objectives: to prevent or detect misstatements in the financial statements. Emile was concerned about the following issues:
1) Revenue recognition was the trickiest as many of the transactions took place over longer than one year time frames. Partial payments and deposits are being made and have to be matched up with proper revenue recognition criteria.
2) The entertainment and promotional expenswere high and he was not sure how they compared to industry standards, although they appeared to be consistent with the Dooley Real Estate Group's profile and the deep pockets of its clientele. Required:
a) What are detective and preventive controls?
b) Can Emile use these preventive and detective controls to help him resolve the two issues he is concerned about?
c) Which factors will Emile have to consider when determining the "extent" of tests to be performed?
d) When would Emile perform substantive testing of revenue?
Rosie Garaga spent the past week designing audit procedurto evaluate the operating effectiveness of controls in preventing, or detecting and correcting, material misstatements of a major bookstore operation at the assertion level. What typof audit procedurdid she employ?
The more complex the client's operations and its internal controls, the less experienced the auditor who performs the work needs to be.
In the United States, what have been the major impacts on companiand auditors of section 404 of the Sarbanes-Oxley Act (2002)? Has this section improved the quality of companies' internal controls? CASE
CAS 230 Audit Documentation requirauditors to document each stage of the audit in their working papers. What are the specific requirements in CAS 230 regarding the contents of working papers and explain the importance of auditors effectively documenting the tests of controls that they have performed?
Millicent Vonareva was reviewing her IT General Controls program for her client visit. She noticed an item that she thought did not belong in her "Controls to prevent unauthorized access to data" section of the program. Which item did not belong there?
If inherent risk is high and no assurance has been obtained from controls testing:
When the auditor decidto include controls testing in their audit strategy, they select those controls that:
The greater the degree of reliance on an internal control, the less they test the control to provide the required assurance.
CAS 260 Communication with Those Charged with Governance requirauditors to communicate audit matters of governance interest arising from the audit of the financial report with those charged with governance of an entity. What are some examplof these matters and why is it important for auditors to communicate them?
A computer program that will not allow a sale to be processed if a customer has exceeded its credit limit is an example of a:
Filters
- Essay(0)
- Multiple Choice(0)
- Short Answer(0)
- True False(0)
- Matching(0)