AUD Flashcards
(88 cards)
5 Circumstances for Special Report
- Financial statements that are prepared in conformity with OCBOA
- Specified elements, accounts, or items of a financial statement
- Compliance with aspects of contractual agreements or regulatory requirements related to audited financial statements
- Financial representations to comply with contractual agreements or regulatory provisions
- Financial information presented in prescribed forms or schedules that require a prescribed form of auditor’s report
Interpretation No. 1 to AU-C 230, Audit Documentation, entitled “Providing Access to or Copies of Audit Documentation to a Regulator,” Who is considered a “regulator”?
Regulators include State Insurance and Utility regulators, various health care authorities, Federal agencies such as the Federal Deposit Insurance Corporation, the Office of Thrift Supervision, the Department of Housing and Urban Development, the Department of Labor, and the Rural Electrification Administration.
Regulators do not include IRS.
Footnote 2 of AU-C 9230 states that “the guidance in this Interpretation does not apply to requests from the IRS, firm practice-monitoring programs to comply with AICPA or state professional requirements such as peer or quality reviews, proceedings related to alleged ethics violations, or subpoenas.”
Review engagement
Under SSARS,
Limited assurance - no material modifications
Analytical and inquiry performed
Independence required
Does not include:
Obtaining an understanding of the entity’s internal control
Assessing fraud risk
Testing accounting records by obtaining sufficient appropriate audit evidence through inspection, observation, confirmation, or the examination of source documents; or other procedures ordinarily performed in an audit.
The accountant does not test the entity’s internal control system nor assess the risk of material misstatement (whether due to errors or fraud).
Change in engagement from audit to review
Reasonable justification, the report should not include reference to
1) the original engagement
2) any audit procedures that may have been performed
3) scope limitations that resulted in the changed engagement
What occurs in a review if the management rep letter is not received?
A management representation letter is required for the issuance of a review report. Without this letter from management, the scope of the review is restricted, and the review cannot be completed.
Accountant precluded from issuing a review report on the financial statements and would ordinarily be precluded from issuing a compilation report on the financial statements
Entity-level controls include:
controls related to the control environment,
controls over management override,
the company’s risk assessment process,
centralized processing and controls, including shared service environments,
controls to monitor results of operations,
controls to monitor other controls, including activities to monitor the internal audit function, the audit committee, and self-assessment programs,
controls over the period-end financial reporting process, and
policies that address significant business control and risk management practices.
Auditor’s consideration of the possibility of noncompliance under applicable law or regulations by clients
The auditor has the responsibility to plan and perform the audit to obtain reasonable assurance about whether the financial statements are free of material misstatement, including misstatements resulting from noncompliance under applicable law or regulations having a direct and material effect on the financial statements. (This is the same responsibility the auditor has for errors or fraud.)
Other noncompliance under applicable law or regulations may have a material indirect effect on the financial statements. While the auditor does not need to perform procedures to detect noncompliance under applicable law or regulations, if evidence of possible noncompliance comes to the auditor’s attention, the auditor should then apply procedures to determine if noncompliance has occurred.
If the auditor determines, after inquiring of management, consulting with an attorney, and examining documentation, that noncompliance under applicable law or regulations has occurred, the auditor must then evaluate its effect on the financial statements. If the noncompliance has a material effect on the financial statements and the act has not been properly accounted for or disclosed, then the auditor should express a qualified or adverse opinion.
Tracing shipping documents to prenumbered sales invoices provides evidence that:
Shipments to customers were properly invoiced.
In evaluating reasonableness, the auditor should obtain an understanding of how management developed the estimate by doing one or more of the following 3 things:
1) Review and test the process used by management to develop the estimate.
2) Develop an independent expectation of the estimate to corroborate the reasonableness of management’s estimate.
3) Review subsequent events or transactions occurring prior to the date of the auditor’s report.
When a party such as a broker-dealer or other financial intermediary, other than an underwriter or other party with a due diligence defense under section 11 of the Securities Act of 1933, requests a comfort letter but does not provide the required representation letter, accountants should
not provide a comfort letter but may provide another form of letter.
Risk of material misstatement of accounting estimates increases with increases in the:
1) complexity and subjectivity of the estimation process
2) lack of availability and reliability of relevant data
3) number and significance of the assumptions that are made, and
4) degree of uncertainty associated with the assumptions
Engagement letter should include:
the objective of the audit (an expression of an opinion on the financial statements);
the fact that management is responsible for:
the financial statements,
establishing and maintaining effective internal control over financial reporting,
identifying and ensuring that the entity complies with laws and regulations,
adjusting the financial statements to correct material misstatements,
making all financial records and related information available to the auditor, and
providing the auditor with a letter that confirms certain representations made during the audit;
the scope of the audit work to be performed (in accordance with GAAS);
the fact that the purpose of the audit is not to detect fraud but to enable the auditor to express an opinion as to the fairness of the financial statements;
mention that an audit includes obtaining an understanding of internal control and that the audit committee will be made aware of any discovered significant deficiencies;
additional work to be performed, such as tax, consulting, or other services (if applicable);
any limitations or restrictions on the scope of the study;
work to be performed by the client’s staff (if applicable);
the basis of the auditor’s fee; and
the audit work schedule and estimated date of completion.
General controls in IT
1) data center and network operations,
2) system software acquisition, change, and maintenance,
3) access security, and
4) application system acquisition, development, and maintenance.
Who is responsible for the prevention and detection of fraud?
Management & Those Charged With Governance
Compilation Report on Projection
AT 301.18 explains that in a compilation report the accountant should include a statement that the prospective results of the projection may not be achieved. Thus, the accountant is expressing no assurance that the results may be achieved.
The standard report on a compilation of prospective financial statements does include:
a statement that a compilation of a projection is limited in scope.
a disclaimer of responsibility to update the report for events occurring after the report’s date.
a separate paragraph that describes the limitations on the presentation’s usefulness.
When considering the risk of material misstatements due to fraud, which of the following is not considered?
The role/position of an individual is not considered. Rather, the following attributes would be considered:
1) The type of risk that may exist; that is, whether it involves fraudulent financial reporting or misappropriation of assets
2) The significance of the risk; that is, whether it is of a magnitude that could lead to result in a possible material misstatement of the financial statements
3) The likelihood of the risk; that is, the likelihood that it will result in a material misstatement in the financial statements
4) The pervasiveness of the risk; that is, whether the potential risk is pervasive to the financial statements as a whole or specifically related to a particular assertion, account, or class of transactions
Not ordinarily a departure from GAAP
While required by GAAP, the omission of a disclosure regarding advertising costs would not ordinarily be material to the financial statements taken as a whole and, therefore, not a departure from GAAP requiring modification to the standard accountant’s report.
The objective of tests of details of transactions performed as tests of controls is?
Same as other test of controls, To evaluate whether controls operated effectively
The Securities Exchange Act of 1934
Created the SEC
The Securities Act of 1933
is concerned with preventing fraud in securities sales
Government Auditing Standards (the “Yellow Book”) require a written report
on internal control in all audits
An accountant’s report that is restricted should contain a separate paragraph at the end of the report that includes the following elements:
1) A statement indicating that the report is intended solely for the information and use of the specified parties
2) An identification of the specified parties to whom use is restricted. The report may list the specified parties or refer the reader to the specified parties listed elsewhere in the report.
3) A statement that the report is not intended to be and should not be used by anyone other than the specified parties
Compilation Report includes:
A statement that the compilation has been performed in accordance with SSARS issued by the AICPA
A statement that a compilation is limited to presenting in the form of financial statements information that is the representation of management
A statement that the financial statements have not been audited or reviewed and that the accountant does not express an opinion on them
A signature of the accounting firm or accountant
The date of the compilation report (dated as of the date of completion of the compilation)
The report does not include a description of the procedures performed during the compilation, and the accountant is permitted to perform the compilation even if she is not independent. In this circumstance, the report would state that the accountant is not independent but would not disclose the reason for the lack of independence.
Under Government Auditing Standards, the auditor should recognize the need to disclose the fraud to parties outside the entity:
To comply with legal and regulatory requirements
To a successor auditor when the successor makes inquiries in accordance with SAS 84
In response to a subpoena
To a funding agency or other specified agency in accordance with requirements for the audits of entities that receive governmental financial assistance