A3 - Risk, Evidence, and Sampling Flashcards
(132 cards)
How is the overall audit risk lowered?
If the risk of material misstatement is too high (e.g, with regard of overstatement of revenue), the audit has no choice but to lower the detection risk, and with it, the overall audit risk is lowered by performing more substantive testing.
How is detection risk lowered?
If the risk of material misstatement is too high, you lower detection risk as follows:
1. N - Nature: substantive test rather than test of controls
2. E - Extent: More testing rather than less
3. T - Timing: Closer to year end
Increased emphasis on professional skepticism when gathering and evaluating audit evidence.
What risks does the auditor assesses?
- Inherent risk
- Control risk
What risk does the auditor make a decision to increase or decrease?
Detection risk
How is detection risk increased?
If the risk of material misstatement is below the maximum, you increase detection risk as follows:
1. Perform less substantive tests or perform them earlier in the year.
2. Test controls instead of substantiative tests
3. Perform testing earlier in the audit
How does inherent risk and control risk differ from detection risk?
- They exist independently of the audit of financial statements. The auditor cannot change them.
- Assessed by the auditor.
Why does the auditor assesses control risk?
Because it affects the level of detection risk that the auditor may accept.
How is Audit Risk (AR) computed?
Audit Risk (AR) (should be low) = Risk of material misstatement (RMM) (assessed by auditor) * Detection Risk (DR) (controlled by auditor)
How is Risk of material misstatement (RMM) computed?
Risk of material misstatement (RMM) = Inherent risk (IR) * Control risk (CR)
How are the components of audit risk assessed?
The components (e.g., inherent risk, control risk, detection risk) can be assessed as either quantitative (e.g., as a percentage) or nonquantitative (e.g., high, medium, low, etc.)
What is considered a judgmental misstatement?
Are differences arising from the judgement of management, including those concerning recognition, measurement, presentation, and disclosure of F/S (including selection of accounting policies considered unreasonable/inappropriate and estimates)
What is considered projected misstatement?
Auditor’s best estimate of misstatements in populations, involving the projections of misstatements identified in audit samples to the entire population from which the samples were drawn. Auditor’s improper judgement or estimate.
What factors represent a high inherent risk (CECH)?
C - Complex calculations
E - Estimates (Amounts derived from estimates)
C - Cash
H - High-volume transactions
What other factors specific to the entity and its environment may also increase inherent risk?
- Technology that renders a product obsolete
- A lack of working capital
- A decline in the overall industry or economy
What is control risk?
The risk that material misstatements that could occur in a relevant assertion will not be prevented or detected (and corrected) on a timely basis by the entity’s internal control.
When does the auditor assess control risk as high?
- There are no effective controls relative to the specific assertions
- The implemented controls are not operating effectively
- it would not be efficient to test the operating effectiveness of the controls.
What is audit risk?
It is the risk that the auditor may unknowingly fail to modify the opinion on financial statements that are materially misstated.
What is fraud risk?
The risk that misstatements will arise from fraudulent financial reporting or misappropriation of assets.
What would the auditor consider in an overall response to financial statement level risk?
- Communicate the audit team an increased need for professional skepticism
- Assign staff with more experience or specialized risk
- Increase the level of supervision
- Incorporate a greater level of unpredictability into the audit
- Make pervasive changes to the nature, extent, or timing of tests, such as shifting substantive procedures closer to period end.
What is a dual-purpose test?
It is a test of controls that is performed concurrently with a test of details on the same transaction. The test should be designed to achieve both objectives.
What is the purpose of the test of controls?
To evaluate the operating effectiveness of a control
What is the purpose of a test of details?
To support relevant assertions or to detect material misstatements.
How does the auditor performs the risk assessment to determine the effective operation of controls?
- Identifying specific controls relevant to specific assertions that are likely to prevent or detect material misstatements.
- Performing tests of such controls to evaluate their effectiveness.
How would the auditor validate segregation of duties?
The auditor will perform a test of segregation of duties by relying on inquiry and observation.