AUDIT PLANNING Flashcards
(18 cards)
AUDIT PLANNING
THE PROCESS WHERE THE AUDITOR DEVELOPS A STRATEGY PLAN ON HOW TO CONDUCT THE AUDIT EFFICIENTLY AND EFFECTIVELY, FOCUS ON HIGH-RISK AREAS, ALLOCATE RESOURCES AND ENSURE COMPLIANCE WITH ISAs
THE BENEFITS OF PLANNING
- APPROPRIATE ATTENTION IS DEVOTED TO IMPORTANT AREAS OF THE AUDIT
- POTENTIAL PROBLEMS ARE IDENTIFIED AND RESOLVED ON TIME
- THE ENGAGEMENT TEAM MEMBERS WITH THE APPROPRIATE EXPERIENCE AND EXPERTISE ARE ALLOCATED TO THE AUDIT
- UNDERSTANDING OF THE ENTITY AND ITS ENVIRONMENT
Help plan the audit, exercise professional judgement when evaluating and assessing the risk of material misstatements, identify significant classes of transactions, account balances and disclosures which will be tested individually in detail and respond to identified risks for example when:
setting materiality
formulating an overall audit strategy
assigning staff of the right experience, skills and competence to the audit and co-ordinating the overall audit.
- RISK ASSESSMENT PROCEDURES
(1) INQUIRIES - Ask management and others within the entity
(2) OBSERVATION AND INSPECTION - Documents and systems
(3) ANALYTICAL PROCEDURES - Identify the existence of unusual transactions, trends and determine the financial position.
- UNDERSTAND THE ENTITY SYSTEM AND INTERNAL CONTROLS
LOOK AT HOW WELL CONTROLS ARE DESIGNED TO PREVENT OR DETECT MISTAKES
(1) CONTROL ENVIRONMENT
Sets the entity’s tone and creates the working environment for employees to perform their duties, this is the ethics.
- code of conduct
- Competence
- Human Resources policies and practices
(2) RISK ASSESSMENT PROCESS
the company’s process for identifying and analysing risks that may mess up financial reporting and how they address them.
(3) INFORMATION SYSTEMS AND RELATED BUSINESS PROCESSES
This consists of the functions (computerised and manual
procedures) through which the entity’s business processes are controlled and financial information is assembled, processed and recorded.
(4) CONTROL ACTIVITIES
the things the company does on a day-to-day basis to prevent or catch errors and fraud. (SSSSSCRAM)
- Supervision
- Segregation of duties
- Staff practices and duties
- Signatures
- Stationary control and document design
- Comparisons
- Reconciliation and review
- Authorisation
- Management control
(5) MONITORING OF CONTROLS
This is how the company keeps track of whether its internal controls are actually working and being followed.
- IDENTIFY AND ASSESS THE RISKS OF MATERIAL MISSTATEMENT
DETERMINE WHETHER THEY EXIST AT:
- FS LEVEL OR
- THE ASSERTION LEVEL
INHERENT RISK
The natural chance that an area is prone to error even before any controls.
Example: Revenue is usually high risk because companies often want to overstate it.
CONTROL RISK
The possibility that internal controls within an organization will fail to prevent or detect material misstatements - AVOIDABLE
DETECTION RISK
the risk that the auditor’s procedures will fail to find a material misstatement
THE AUDITOR CONTROLS THIS BY HOW MUCH AUDIT WORK IS DONE AND WHAT TYPE OF TESTING IS DONE
ROMM
= IR X CR
AUDIT RISK
THE ROMM AND THE RISK THAT THE AUDITOR WILL NOT DETECT SUCH MISSTATEMENTS
AR = IR x CR x DR
RISK ASSESSMENT AND RESPONSE THERETO
After the auditor has identified the significant ROMM at the overall financial statement level, they will then assess the risk (normally high, medium or low).
This will then affect:
The setting of the planning materiality
The overall audit strategy/response to the audit
THE ASCERTAIN LEVEL
THE AUDITOR ASSESS THE ROMM FOR EACH SIGNIFICANT CLASS OF TRANSACTIONS AND THEN DESIGN PROCEDURES TO REDUCE THE RISK AND LIMIT AUDIT RISK THROUGH:
- TESTS OF CONTROL
- SUBSTANTIVE PROCEDURES