4 Strategic Planning Issues Flashcards
(116 cards)
How does an external auditor use the work of an internal auditor?
- using the work of internal auditors to obtain audit evidence
- using internal auditors to provide direct assistance under the direction, supervision, and review of the external auditor
The external auditor may be able to use the work of the internal audit function to obtain audit evidence in a constructive and complementary manner depending on?
- the objectivity of the internal auditors
- the level of competence of the internal audit function
- whether the function applies a systematic and disciplined approach, including quality control
What is objectivity?
The ability to perform tasks without bias
How is objectivity promoted in the internal audit function?
Objectivity is promoted when the internal auditors:
- report to those charged with governance rather than management
- are free of any conflicting responsibilities
- work without constraints
- are members of professional organizations that obligate them to be objective
What is competence?
The attainment and maintenance of knowledge and skills of the function as a whole at the level required to enable assigned tasks to be performed diligently and with the appropriate level of quality.
What are factors that may affect the external auditor’s determination about the competence of the internal audit function?
- The internal audit function is adequately and appropriately resourced relative to the size of the entity and the nature of its operations
- Appropriate policies for hiring, training, and assigning internal auditors to internal audit engagements exist
- The internal auditors are members of relevant professional bodies or have certifications that require them to comply with the relevant professional sandards, including continuing professional education requirements
- The internal auditors have the required knowledge and/or experience relating to the entity’s financial reporting and applicable financial reporting framework
- The internal audit function has the necessary skills (ex - industry-specific knowledge) to perform work related to the entity’s financial statements
What are factors that may affect the external auditor’s determination about the competence of the internal audit function?
- The internal audit function is adequately and appropriately resourced relative to the size of the entity and the nature of its operations
- Appropriate policies for hiring, training, and assigning internal auditors to internal audit engagements exist
- The internal auditors are members of relevant professional bodies or have certifications that require them to comply with the relevant professional sandards, including continuing professional education requirements
- The internal auditors have the required knowledge and/or experience relating to the entity’s financial reporting and applicable financial reporting framework
- The internal audit function has the necessary skills (ex - industry-specific knowledge) to perform work related to the entity’s financial statements
How do objectivity and competence relate to each other?
Objectivity and competence are a continuum from low to high, a high level of one attribute cannot compensate for a low level of the other.
How should internal audit activities be perfomed?
Through the application of a systematic and disciplined approach to planning, performing, supervising, reviewing and documenting internal audit activities.
What should an external auditor consider when evaluating whether a systematic and disciplined approach is applied to the internal audit function?
- The existence, adequacy, and use of documented internal audit procedures or guidance for such matters as:
- risk assessments
- work programs
- documentation
- reporting - the nature and extent of this documentation should be proportionate to the nature and size of the internal audit function relative to the complexity of the entity - Whether the internal audit function has:
- appropriate quality control policies and procedures relating to leadership, HR, and engagement performance
- quality control requirements in standards set by relevant professional bodies
When should an external auditor not use the work of the internal audit function to obtain audit evidence?
If the external auditor determines that:
- The function’s organizational status and relevant policies and procedures do not adequately support the objectivity of internal auditors
- The function lacks sufficient competence
- The function does not apply a systematic and disciplined approach, inluding quality control
What should the external auditor consider regarding the use of internal audit work before using it to obtain audit evidence?
- The nature
- The timing
- The extent of the work performed or planned by the function
- The work’s relevance to the overall audit strategy and audit plan
What significant judgments should an external auditor make in determining when to use the work of the internal audit function to obtain audit evidence?
- assessing the risks of material misstatement
- evaluating the sufficiency of tests performed
- evaluating the appropriateness of management’s use of the going concern assumption and whether substantial doubt exists about the entity’s ability to continue as a going concern
- evaluating the significant accounting estimates
- evaluating the adequacy of disclosures in the financial statements and other matters affecting the auditor’s report
What significant judgments should an external auditor make in determining when to use the work of the internal audit function to obtain audit evidence?
- assessing the risks of material misstatement
- evaluating the sufficiency of tests performed
- evaluating the appropriateness of management’s use of the going concern assumption and whether substantial doubt exists about the entity’s ability to continue as a going concern
- evaluating the significant accounting estimates
- evaluating the adequacy of disclosures in the financial statements and other matters affecting the auditor’s report
How is undue use of the internal audit function to obtain audit evidence prevented?
Less of the work should be used, which will require:
- more judgment to plan and perform audit procedures or evaluate the audit evidence
- higher assessed risk of material misstatement at the assertion level with special consideration given to significant risks
- the less the objectivity of the internal audit function
- the lower the competence of the internal audit function
What should the external audito evaluate regarding their involvement in the audit when using work from the internal audit function and internal auditors’ direct assistance?
Whether the use of the work and the direct assistance of internal auditors results in too little involvement of the external auditor in the audit.
What should the external audito evaluate regarding their involvement in the audit when using work from the internal audit function and internal auditors’ direct assistance?
Whether the use of the work and the direct assistance of internal auditors results in too little involvement of the external auditor in the audit.
Should internal auditors be used to perform critical procedures?
No
What are examples of critical procedures that shouldn’t be performed by internal auditors?
- inquiries of entity personnel or those charged with governance related to identifying fraud risks and determining the procedures to respond to such risks
- determine the use of unpredictable audit procedures
Should an external auditor reperform some of the body of the work of the internal audit function that the external auditor intends to use in obtaining audit evidence?
Yes
What should the external auditor do before the conclusion of the audit regarding the internal auditor’s work?
The external auditor should make an overall assessment of the usefulness of the internal auditor’s work to obtain evidence.
When should an external not use the internal auditor to provide direct assistance?
If the internal auditor lacks the necessary objectivity or competence.
What should the external obtain before using an internal auditor to provide direct assistance?
The external auditor should obtain written acknowledgement, in the audit engagement letter, from management or those charged with governance, as appropriate, that:
- Internal auditors can follow the external auditor’s instructions
- The entity will not intervene in the work
How should the external auditor determine the work that may be assigned to internal auditors?
The external auditor should:
- Evaluate threats to the internal auditor’s objectivity, the effectiveness of the safeguards applied to reduce or eliminate the threats, and the competence of the internal auditors who will be providing such assistance
- Consider the assessed risk of material misstatement
- Consider the judgment involved in performing relevant audit procedures and evaluating audit evidence