AUD - Super Fast CPA Flashcards

(89 cards)

1
Q

Audit Threats

A

Self Review (auditing one’s own work).
Self Interest (financial or other interests).
Familiarity (close relationships with auditees).
Intimidation or Undue Influences (external pressures on the auditor).
Advocacy (promoting a client’s interests).
Incentive Systems (bonuses or other incentives)
Judgment-Making Shortcuts or Heuristics (rely on rules of thumb)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Ethical requirements and
independence rules set by SEC

A

Financial Relationships:
Employment Relationships:
Non-Audit Services:
Business Relationships:
Family and Personal Relationships:
Provision of Tax Services:
Audit Partner Rotation:
Confidentiality:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Unconscious Auditor Biases

A

Confirmation Bias: focus on information that confirms their existing beliefs
Anchoring Bias: give disproportionate
weight to the first information they receive
Overconfidence Bias: overestimate their own abilities or the accuracy of their judgments
Availability Bias: judge the probability of events based on how easily instances come to mind.
Familiarity Bias: longstanding relationships with clients,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Issuers

A

entities that have securities traded on a public market

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Issuers Integrated Audit:

A

Includes a financial statement audit
along with an audit of internal control over financial reporting (ICFR), as required by the Sarbanes-Oxley Act (SOX).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Issuers Compliance Audit:

A

Ensures compliance with the
regulations set forth by the SEC and other regulatory
bodies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Issuers Financial Statement Audit:

A

Involves testing the financial
statements for material misstatements and providing an
opinion on their fairness.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Issuers ICFR Audit:

A

Assesses the effectiveness of the entity’s
internal controls over financial reporting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Nonissuers

A

are entities that do not have securities traded on a public market. Audits of nonissuers are generally conducted under Generally Accepted Auditing Standards
(GAAS) issued by the AICPA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Nonissuers Financial Statement Audit:

A

Examination of financial statements to provide an opinion on their accuracy and
compliance with the applicable framework.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Nonissuers Review Engagement:

A

Provides limited assurance on financial statements and involves less extensive
procedures than an audit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Nonissuers Compilation Engagement:

A

Assists management in presenting financial information without providing any assurance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Nature of Engagements - Financial Audits

A

Provide an opinion on whether financial
statements are presented fairly in all material respects in accordance with the applicable financial reporting framework.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Nature of Engagements - Performance Audits

A

Evaluate the performance of a
government organization, program, activity, or function in order to provide information to improve public accountability and facilitate decision-making by parties with responsibility to oversee or initiate corrective action.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Nature of Engagements - Attestation Engagements:

A

Examine, review, or perform agreed-upon procedures on a subject matter, or an assertion about a subject matter, and report on the results.
Attestation engagements involve the CPA being engaged to issue a report on subject matter, or an assertion about subject matter, that is the responsibility of another
party. These engagements are broader than financial statement audits and can encompass a variety of financial and non-financial information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Single Audits

A

A single audit is a rigorous, organization-wide audit or examination of an entity that expends $750,000 or more of federal assistance (federal funds, grants, and awards) received for its operations. Usually, single audits are required for states, local governments, and non-profit organizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Scope of Engagements - Financial Audits:

A

Include assessing the accounting principles
used and significant estimates made by management, as well as evaluating the overall financial statement presentation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Scope of Engagements - Performance Audits:

A

Cover a variety of objectives, including
assessments of program effectiveness, compliance with laws and regulations, and financial or economic impacts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Scope of Engagements - Attestation Engagements and Single Audits:

A

Involve obtaining evidence about the use of governmental or other funds to assess compliance with related laws and regulations.
The scope of an attestation engagement may vary greatly and could include:
● Examination of financial forecasts
● Review of compliance with contractual agreements
● Reporting on internal control over financial reporting
● Providing assurance on sustainability reports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Objectives - Financial Audits:

A

To express opinions on the fairness of
financial statements, and, where applicable, the effectiveness of internal controls over financial reporting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Objectives - Performance Audits:

A

To provide objective analysis to improve program performance and operations, reduce costs, facilitate decision-making by parties with responsibility to oversee or initiate corrective action, and contribute to public accountability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Objectives - Attestation Engagements

A

To provide a conclusion about the reliability of the subject matter or assertion in question. To enhance the degree of confidence of the intended users other than the responsible party about the outcome of the evaluation or measurement of the subject matter against criteria.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Accounting and Review Service Engagements

A

Nature: These engagements involve PREPARATION, COMPILATION, and REVIEW services for financial statements. They do not provide the same level of assurance as audits but are important for entities that do not require an audit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Drafting the Engagement Letter:

A

● Outline the Scope: Clearly define what the engagement will cover, including the objectives, responsibilities, and limitations.
● Detail the Responsibilities: Specify the responsibilities of both the auditor and the client, including the preparation of financial statements.
● Specify the Reports: Describe the expected types and formats of reports or communications to be issued by the auditor.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Key Steps for Confirming Engagement Terms
1. Initial Evaluation: 2. Drafting the Engagement Letter: 3. Discussions with Management and Governance: 4. Documentation: 5. Continuous Communication: 6. Review by Engagement Team: 7. Final Confirmation:
26
Engagement letter - body
Scope of Services: Responsibilities of Management: Auditor's Responsibilities: Access to Information: Fees and Billing: Other Services:
27
GAAS
Generally Accepted Auditing Standards
28
Elements of Sufficient Appropriate Audit Documentation (pg 67)
1. Nature, Timing, and Extent of Audit Procedures Performed: 2. Identification of Engagement Team: 3. Audit Evidence and Conclusions: 4. Accounting Records and Financial Statements: 5. Significant Matters: 6. Independence Documentation: 7. Engagement Completion: 8. Retention Period:
29
Engagement Documentation (pg 72)
Workpaper Reference: Nature of Procedure: Timing: Extent of Procedure: Procedure Performed: Results of Procedure: Significant Findings and Conclusions: Significant Professional Judgments Made: Documentation Includes: Reviewer's Comments:
30
Materiality
Materiality refers to the significance of an item or error in the financial statements that would affect the decision-making of a reasonable user of those statements. It's a threshold or cut-off point used by auditors to guide the nature, timing, and extent of audit procedures and to evaluate the effect of misstatements.
31
Outline for Written Communication:
1. Introduction 2. Description of Identified Deficiencies 3. Severity Assessment 4. Recommendations 5. Conclusion
32
AICPA
Association of International Certified Professional Accountants
33
Procedures for Managing Engagement Quality
1. Quality Management System Design 2. Assignment of Responsibilities 3. Engagement Team Composition 4. Engagement Performance 5. Monitoring 6. Engagement Quality Reviews (EQR) 7. Documentation 8. Continuous Improvement
34
Creating a detailed engagement plan (pg 98)
Step 1: Review Prior-Year Engagement Plan or Template Step 2: Client Assistance Request Listings Step 3: Time Budgets Step 4: Draft Detailed Engagement Plan Step 5: Review and Finalize Step 6: Monitor and Update
35
Marginal Revenue (MR)/Marginal Cost (MC)
additional revenue that will be generated by increasing product sales by one unit. additional cost of producing one more unit of a product.
36
Cross-Price Elasticity of Demand:
Measures the responsiveness of the quantity demanded for a good to a change in the price of another good. This can indicate whether goods are substitutes or complements.
37
Business Cycles (pg 104)
● Trough: ● Expansion: ● Peak: ● Recession:
38
Types of Economic Indicators (pg 105)
leading, coincident, and lagging indicators.
39
Economic Indicators - Consumer Price Index (CPI):
Measures the average change in prices over time that consumers pay for a basket of goods and services. It is a key measure of inflation.
40
Economic Indicators - Producer Price Index (PPI):
Measures the average change over time in the selling prices received by domestic producers for their output. It's a measure of inflation from the perspective of product sellers.
41
Economic Indicators - Federal Funds Rate:
The interest rate at which depository institutions trade federal funds (balances held at Federal Reserve Banks) with each other overnight. It's often used by the Federal Reserve to control inflation and is a leading indicator of monetary policy
42
Economic Indicators - Bond Yields:
The return an investor realizes on a bond. The yield curve (plotting yields across different maturities) is a leading indicator, with an inverted yield curve often predicting a recession.
43
Economic Indicators - Unemployment Rate:
A measure of the prevalence of unemployment and it is calculated as a percentage by dividing the number of unemployed individuals by all individuals currently in the labor force. It can be a lagging indicator because unemployment tends to increase for some time even after an economy starts to recover.
44
IFRS
International Financial Reporting Standards
45
Relevant factors that could impact an entity, its operations, and/or the inherent risk of material misstatement. (pg 107)
Economic Factors Environmental Factors Financial Reporting Framework Government Policy Industry Factors Regulatory Factors Supply Chain Technology
46
Sarbanes-Oxley Act of 2002 (SOX) Section 404
Establishing Strong Internal Controls
47
Sarbanes-Oxley Act of 2002 (SOX) Section 302
Corporate Responsibility for Financial Reports
48
Sarbanes-Oxley Act of 2002 (SOX) Section 301
Audit Committee Requirements
49
Sarbanes-Oxley Act of 2002 (SOX) Section 206
Prohibition of Certain Conflicts of Interest
50
Sarbanes-Oxley Act of 2002 (SOX) Title II
Auditor Independence
51
Sarbanes-Oxley Act of 2002 (SOX) Title VIII
Increased Criminal Punishment
52
Sarbanes-Oxley Act of 2002 (SOX) Section 806
Whistleblower Protection
53
Sarbanes-Oxley Act of 2002 (SOX) Section 406
Code of Ethics for Senior Financial Officers
54
Sarbanes-Oxley Act of 2002 (SOX) Section 306
Insider Trades During Pension Fund Blackout Periods
55
relevant factors that define the nature of an entity, including the impact on the risk of material misstatement (pg 114)
1. Nature of the Entity's Operations 2. Ownership and Governance Structure 3. Investment and Financing Plans 4. Selection of Accounting Policies 5. Objectives and Strategies 6. Adoption and Use of Technologies, Including Artificial Intelligence
56
COSO
Committee of Sponsoring Organizations of the Treadway Commission
57
COSO integrated framework encompasses: (pg 118)
● Control Environment: ● Risk Assessment: ● Control Activities: ● Information and Communication: ● Monitoring Activities:
58
Walkthrough Example: Revenue Cycle (pg 133)
1. Selecting the Process for Walkthrough: 2. Planning the Walkthrough: 3. Performing the Walkthrough: Step 1: Initiation of Sales Transaction: Step 2: Delivery of Goods or Services: Step 3: Invoicing and Accounts Receivable: Step 4: Receipt of Payment: Step 5: Reporting and Disclosure: 4. Documenting the Walkthrough: Flowcharts or Process Diagrams: Narratives: Screenshots or System Reports: 5. Analyzing the Walkthrough Findings: 6. Reviewing and Updating Documentation:
59
Overview of Entity’s IT Infrastructure (pg 136)
1. Enterprise Resource Planning (ERP) Systems: 2. Cloud Computing or Hosting Arrangements: 3. Custom vs. Packaged Applications:
60
Procedures to Obtain Understanding (pg 137)
1. Document Review and Inquiry: 2. Observation and Inspection: 3. Technical Procedures: 4. Interviews with IT Personnel: 5. Review of IT Governance Policies: 6. Assessment of IT-related Risks:
61
SOC 1® Engagements (pg 148)
Purpose: SOC 1 (Service Organization Control 1) reports are primarily aimed at the internal control over financial reporting (ICFR). They are designed for entities (like service organizations) that provide services that could impact their clients' financial statements.
62
SOC 1® Engagements (pg 148) Types of Reports:
● Type I: Evaluates the suitability of the design of controls at a specific point in time. ● Type II: Assesses the effectiveness of those controls over a period, usually 6 to 12 months. Audience: Primarily used by the service organization’s management, user entities, and user auditors. Framework: Based on the SSAE 18 (Statement on Standards for Attestation Engagements) standard. Example Use-Cases: Payroll processing, loan servicing, data center hosting, and other services that directly affect the financial statements of user entities.
63
SOC 2® Engagements (pg 149)
Purpose: SOC 2 reports focus on controls related to security, availability, processing integrity, confidentiality, and privacy of a system. These are based on the Trust Services Criteria.
64
SOC 2® Engagements (pg 149) Types of Reports:
● Type I: Reports on the fairness of the presentation of management’s description of the system and the suitability of the design of controls. ● Type II: Provides the same as Type I and evaluates the operating effectiveness of these controls over a certain period. Audience: Broader than SOC 1, including stakeholders such as regulators, business partners, suppliers, and customers who need assurance about the security and processing integrity of the service organization’s systems. Framework: Based on the Trust Services Criteria set by the AICPA (American Institute of Certified Public Accountants). Example Use-Cases: Cloud computing providers, data hosting services, and entities handling sensitive customer data where the focus is on non-financial controls.
65
Key Differences of SOC 1 and SOC 2 (pg 150)
● Scope and Purpose: SOC 1 is focused on financial reporting, whereas SOC 2 is centered around the principles of security, availability, processing integrity, confidentiality, and privacy. ● Relevance and Use: SOC 1 is for user entities and their auditors concerned with financial reporting, while SOC 2 targets a wider audience concerned with information security and processing. ● Report Types: Both have Type I and Type II reports, but the focus of the assessment differs.
66
Determining Materiality (pg 164) Quantitative Measures:
● Often determined as a percentage of a financial statement benchmark, such as total assets, total revenue, or net income. ● Different benchmarks may be appropriate depending on the entity’s industry and financial situation.
67
Determining Materiality (pg 164) Qualitative Considerations:
● Not all material issues are captured by quantitative measures alone. ● Qualitative factors include the nature of the item or issue (e.g., whether it involves fraud), the context of the misstatement, and circumstances such as compliance with loan covenants or regulatory requirements.
68
Tolerable Misstatement (pg 171)
Tolerable misstatement, sometimes referred to as specific materiality or allocation of materiality, is the maximum error or misstatement in a specific account or class of transactions that an auditor would be willing to accept without concluding that the financial statements as a whole are materially misstated.
69
Performance Materiality (pg 172)
Performance materiality, often used interchangeably with tolerable misstatement, is the amount set by the auditor at less than materiality for the financial statements as a whole to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality.
70
The Fraud Triangle (pg 177)
The Fraud Triangle consists of three elements that, when present together, significantly increase the risk of fraud: ● Pressure (Motivation) ● Opportunity ● Rationalization
71
Risk of Material Misstatement (RMM) Inherent Risk (IR): (pg 180)
The susceptibility of an assertion about a class of transaction, account balance, or disclosure to a misstatement that could be material, either individually or when aggregated with other misstatements, before consideration of any related controls.
72
Risk of Material Misstatement (RMM) Control Risk (CR): (pg 180)
The risk that a misstatement that could occur in an assertion about a class of transaction, account balance, or disclosure and that could be material, either individually or when aggregated with other misstatements, will not be prevented, or detected and corrected, on a timely basis by the entity’s internal control.
73
Determine risk of material misstatement (pg 180)
1. Understanding Risk of Material Misstatement (RMM) 2. Financial Statement Level Assessment 3. Assertion Level Assessment for Each Significant Class of Transactions, Account, and Disclosure 4. Specific Considerations for Fraud Risk 5. Documenting and Responding to Risks
74
Assertions
claims made by management about the accuracy and completeness of financial information
75
response to risks of material misstatement at the financial statement level (pg 184)
1. Maintaining Professional Skepticism 2. Engagement Team Supervision 3. Incorporating Elements of Unpredictability 4. Considering the Control Environment
76
Appropriate procedures to assess the operating effectiveness of relevant controls. (pg 187)
1. Understanding Relevant Controls 2. Risk Assessment 3. Selecting Testing Procedures 4. Types of Tests 5. Documenting and Evaluating Results 6. Considerations for IT-Related Controls 7. Adjusting Audit Procedures Based on Results
77
Appropriate substantive procedures to test relevant assertions for each significant class of transactions, significant account and disclosure. (pg 189)
Understanding Assertions Assertions About Transactions and Events: Assertions About Account Balances: Assertions About Presentation and Disclosure: Designing Substantive Procedures For Each Significant Class of Transactions: For Each Significant Account and Disclosure:
78
Procedures in Attestation Engagements (pg 193)
1. Engagement Acceptance and Planning: 2. Assessing and Responding to Risks: 3. Performing Attestation Procedures: 4. Evaluating Evidence and Formulating a Conclusion: 5. Reporting:
79
Accounting and Review Services Engagements (pg 196) Compilation:
The objective is to assist management in presenting financial information in the form of financial statements without providing any assurance on them.
80
Accounting and Review Services Engagements (pg 196) Review:
A review engagement provides limited assurance that there are no material modifications that should be made to the financial statements for them to be in conformity with the applicable financial reporting framework.
81
Assertions that relate to classes of transactions, account balances, and disclosures: (pg 201)
● Completeness: ● Accuracy: ● Cut-off: ● Classification: ● Existence: ● Rights and Obligations: ● Valuation and Allocation: ● Presentation and Disclosure:
82
Benford’s Law Analysis:
method for identifying patterns in data sets and detecting anomalies or fraud. It's based on the observation that the leading digit in many real-world data sets is more likely to be small.
83
Internal Audit Function (pg 214)
Internal auditors typically focus on evaluating and improving the effectiveness of risk management, control, and governance processes within an organization.
84
IT Auditor (pg 214)
IT auditors assess the controls within an entity’s information technology infrastructure.
85
Auditor’s Specialist (pg 215)
An auditor’s specialist is an individual or organization possessing expertise in a field other than accounting or auditing, whose work in that field is used to assist the auditor in obtaining sufficient appropriate audit evidence.
86
Management’s Specialist (pg 215)
Similar to the auditor's specialist, management’s specialist is engaged by the entity’s management to provide expertise in a particular field.
87
Component Auditor (pg 216)
A component auditor audits one or more components of a group financial statement. A component could be a division, subsidiary, or joint venture.
88
Referred-to Auditor (pg 216)
A referred-to auditor is an auditor from an external firm that the principal auditor references in the audit report, typically for work performed on a separate part of the financial statements, such as a subsidiary or division.
89