What is a control deficiency?
A control deficiency exists when the design or operations of a control does not allow management or employees, in the normal course of performing their assigned function, to prevent or detect/correct misstatements on a timely basis.
What is a significant deficiency (SD)
A SD is a deficiency, or a combination of deficiencies, in I/C over financial reporting that is less severe than a MW, yet important enough to merit the attention by those charged with governance (responsible for oversight of the companies Financial Reporting)
What is a Material Weakness?
MW is a deficiency, or a combination of deficiencies, in I/C over the FR, such that there is a reasonable possibility that a MM of the company’s annual or interim F/S will not be prevented or detected/corrected on a timely basis.
What are the auditor’s 3 responsibilities with respect to control deficiencies identified during an audit of a non-issuer?
What is an integrated audit? When is an integrated audit required?
An integrated audit requires the auditor to audit both the FS and the IC over FR. The two audits must be performed together, and two opinions (one of the FS and one of the IC) will be rendered. An integrated audit is required:
Describe the top-down approach used to select controls to test for issuer/non-issuer clients.
The top-down approach includes the following chronological levels:
what is the accountants Responsibility with respect to CD identified during an engagement to examine the IC of a non-issuer?
SD and MW should be communicated in writing to management and those charged with governance by the report release date.
Control Deficiencies that are not SD or MW should be communicated in writing to management within 60 days of the report release date.
MW results in a adverse opinion.
How are CD, SD, and MW communicated by the A to the issuer in an integrated audit.
How does the extent of testing of IC differ between the FS Audit and an examination of IC for non-issuers.
The extent of testing IC for the FSA is more limited than in an IC examination.
When rendering an opinion on IC for an examination of IC, the auditor should obtain evidence regarding the effectiveness of selected controls over all relevant assertions. This level of testing is not required for the FSA.
List the items that an auditor is required to comm to those charged with governance:
Note: Comm can be oral or written, but must be documented in the Audit Documentation (WP)
What are the function of the Audit Committee (AC)?
Note AC had additional responsibilities under SOX
What are the 3 primary purposes for obtaining written representation from M?
What general types of items are included in a MRL, and who should sign it?
MRL general includes information related to:
MRL should be signed by the CEO, CFO, and other members of M who are responsible for knowledgeable about the items contained in the letter.
What standards are reference in the auditor’s report that provides an opinion on the operating effectiveness of internal control for:
What is included in the inherent limitation paragraph in the auditor’s report that provides an opinion on the operating effectiveness of internal control?
BC of its inherent limitation, IC over financial reporting may not prevent or detect and correct misstatements. Also, projection of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate bc of changes in conditions or bc of the degree of compliance with the policies or procedures may deteriorate.
is the report that contains an opinion on the operating effectiveness of IC restricted?
Generally, the report that contains an opinion on the operating effectiveness of IC is not restricted.
May an auditor who is engaged to perform an integrated audit provide a report stating that all control deficiencies or all significant deficiencies have been identified?
An auditor should not issue a report stating that all controls deficiencies or all significant deficiencies have been identified.
May an auditor issue a report stating that no material weaknesses were identified when engaged to perform an integrated audit?
An auditor should not issue a report stating that no material weaknesses were identified. BC the auditor’s objective in an examination of internal controls is to form an opinion on the effectiveness of the entity’s internal control, the auditor should not issue a report indicating that no material weaknesses were identified during the integrated audit.
Is it possible for an auditor to render an unmodified opinion on the F/S and an adverse opinion on IC over financial reporting?
Yes. Example, the IC may not be operating effectively, but the F/S may be fairly stated.
Note: The auditor should consider the effect his or her adverse opinion on IC has on the opinion on the F/S. The auditor should disclose whether the opinion on the F/S was affected by the adverse opinion on IC over financial reporting.