A ___________________ is defined by the US SEC as an issuer with a worldwide market value of outstanding common equity held by nonaffiliates of $700 million or more
A) large accelerated file
B) accelerated file
C) smaller reporting company file
D) affiliated company file
A) large accelerated file
> $700 million or more
A ___________________ is defined by the US SEC as an issuer with a worldwide market value of outstanding common equity held by nonaffiliates of $75 million or more, but less than $700 million
A) large accelerated file
B) accelerated file
C) smaller reporting company file
D) affiliated company file
B) accelerated file
Between $75M - $699M
A ___________________ is defined by the US SEC as an issuer as an entity with annual revenue of less than $100 million, are excluded from the definition of large accelerated/accelerated filers
A) large accelerated file
B) accelerated file
C) smaller reporting company file
D) affiliated company file
C) smaller reporting company file
A ___________________ is used in selecting controls to test. Auditor evaluates overall risks at the financial statement level, considers controls at the entity level, and then focuses on accounts, disclosures, and assertions for which there is a reasonable possibility of material misstatement
A) overall risk approach
B) tone at the top approach
C) effective control approach
D) top-down approach
D) top-down approach
In testing controls, note which tests are appropriate for evaluating design effectiveness, operating effectiveness, or both:
1) walk-throughs
2) inquiry
3) observation
4) inspection of documentation
5) recalculation
6) reperformance
1) walk-throughs - DESIGN
2) inquiry - DESIGN AND OPERATING
3) observation - DESIGN AND OPERATING
4) inspection of documentation - DESIGN AND OPERATING
5) recalculation - OPERATING
6) re-performance - OPERATING
An audit of ICFR results in an opinion on internal control as of _________________(1)
An opinion on financial statement relates to __________________(2)
A) longer period of time, such as 1 year; point in time
B) point in time; longer period, such as 1 year
C) period of time; 6 months
D) shorter period of time; 30 days
B) point in time; longer period, such as 1 year
In financial statement audit, communication of significant deficiencies and material weaknesses must be made ______________
An audit of internal control over financial reporting, communication of significant deficiencies and material weaknesses must be made ________________
A) by balance sheet date; within 45 days
B) by the report release date; within 60 days
C) within 60 days; by the report release date
D) as soon as it’s discovered; by the balance sheet date
C) within 60 days; by the report release date
In a FS audit, the communication of control deficiencies for restricted use language should _________________
In an audit of ICFR, the communication of control deficiencies for restricted use language should ______________
A) not be included; be included
B) be included, be included
C) not be included; not be included
D) be included; not be included
B) be included, be included
In an integrated audit of a nonissuer, which of the following is the responsibility of an auditor with regard to testing controls at a company with multiple business units?
A. Testing controls over all risks at business units that are material to the company’s consolidated financial statements.
B. Testing controls over only certain specific risks at all business units of the company.
C. Testing controls over all risks at all business units of the company.
D. Testing controls over specific risks at business units that are material to the company’s consolidated financial statements.
D. Testing controls over specific risks at business units that are material to the company’s consolidated financial statements
Which of the following is the relevant authoritative literature for an audit of internal control of a nonissuer?
A. Statements on Auditing Standards
B. Statements on Standards for Attestation Engagements
C. PCAOB Auditing Standards
D. Statements on Standards for Accounting and Review Services
A. Statements on Auditing Standards - for audits of FS and ICFR of a nonissuer
___________________
B. SSAE - for attestation engagements
C. PCAOB - for issuers
D. SSARS - for unaudited FS or information of a nonissuer
In an audit of an issuer:
I.Management must assess and report on internal control.
II.The auditor must assess and report on internal control.
A. Both I and II.
B. Either I or II.
C. II only.
D. I only.
A. Both I and II.
Both auditor and management assess and report on internal control
In an audit of an issuer, the auditor must provide an opinion on which of the following?
I. The financial statements.
II. The audit committee’s oversight of financial reporting and internal control.
III. The effectiveness of internal control.
A. I, II, and III.
B. I and III only.
C. I and II only.
D. I only.
B. I and III only.
Jackson is auditing the financial statements of Saffer Company, an issuer. Which of the following is true?
A. Saffer is required to obtain an audit of its internal control, but a professional other than Jackson may be hired for this purpose.
B. If Jackson provides an adverse opinion on the financial statements, an audit of Saffer’s internal control is not permitted.
C. Jackson is required to audit and report on Saffer’s internal control.
D. Jackson is not required to audit internal control, but should report any significant deficiencies or material weaknesses noted.
C. Jackson is required to audit and report on Saffer’s internal control
As an issuer, PCAOB standards require the same auditor to perform both the FS and effectiveness of internal control audit
With respect to the expression of an opinion regarding whether a client maintained effective internal control over financial reporting:
A. The auditor of a nonissuer must express an opinion in every financial statement audit.
B. The auditor of a nonissuer may express an opinion as a result of a financial statement audit.
C. The auditor of a nonissuer must express an opinion whenever significant deficiencies or material weaknesses are noted.
D. The auditor of a nonissuer may express an opinion as a result of an audit engagement.
D. The auditor of a nonissuer may express an opinion as a result of an audit engagement
Which of the following conditions is necessary for an auditor to accept an engagement to audit and report on a nonissuer’s internal control over financial reporting?
A. The auditor anticipates relying on the entity’s internal control in a financial statement audit.
B. Management presents its written assessment about the effectiveness of internal control.
C. The auditor is a continuing auditor who previously has audited the entity’s financial statements.
D. Management agrees not to present the auditor’s report in a general-use document to stockholders.
B. Management presents its written assessment about the effectiveness of internal control
Which of the following is an appropriate response when an auditor does not receive a written representation letter from management during the integrated audit of a nonissuer acknowledging responsibility for establishing and maintaining effective internal control?
A. Either withdrawal from the engagement or disclaimer of opinion.
B. Disclaimer of opinion only.
C. Withdrawal from the engagement only.
D. Neither withdrawal from the engagement or disclaimer of opinion; the auditor can issue an opinion since the client is a nonissuer.
A. Either withdrawal from the engagement or disclaimer of opinion
According to the Sarbanes-Oxley Act of 2002, a chief executive officer must certify each of the following, except:
A. The financial expertise of the audit committee.
B. The management internal control report.
C. The annual financial report.
D. The quarterly financial report.
A. The financial expertise of the audit committee
Expertise of the audit committee is typically verified by entity’s board
A firm is engaged to perform an integrated audit of an issuer. In this case, the auditor should design testing of controls to accomplish the objectives of both audits simultaneously, resulting in an assessment of:
A. Inherent risk for the financial statement audit and an opinion on internal control over financial reporting for the internal control audit.
B. Control risk for the financial statement audit and an opinion on internal control over financial reporting for the internal control audit.
C. Inherent risk for the financial statement audit and limited assurance on internal control over financial reporting for the internal control audit.
D. Control risk for the financial statement audit and limited assurance on internal control over financial reporting for the internal control audit.
B. Control risk for the financial statement audit and an opinion on internal control over financial reporting for the internal control audit
Control risk is assessed by the auditor during risk assessment process
If a service auditor is unable to obtain a written assertion from the service organization’s management regarding its system and the suitability of the design and operating effectiveness of controls, it would be most appropriate for the auditor to:
A. Increase the substantive testing of the service organization’s controls.
B. Withdraw from the engagement unless prohibited by law.
C. Report management’s action in the auditor’s communication to those charged with governance.
D. Assess a higher level of detection risk for the engagement.
B. Withdraw from the engagement unless prohibited by law
When planning an audit of the effectiveness of the entity’s internal control in an integrated audit of a nonissuer, an auditor would be least likely to consider which of the following factors?
A. The extent of recent changes in the entity and its operations.
B. Preliminary judgments about the effectiveness of internal control.
C. The evaluation of the operating effectiveness of the controls.
D. The type of available evidential matter pertaining to the effectiveness of the entity’s internal control.
C. The evaluation of the operating effectiveness of the controls
Least of consideration because this occurs after the planning stage
Which of the following would not be considered an entity-level control?
A. Period-end financial reporting controls.
B. Biannual distribution of the code of conduct via intranet.
C. Periodic comparison of actual assets with amounts shown in the accounting records.
D. Risk assessment process controls.
C. Periodic comparison of actual assets with amounts shown in the accounting records
This is a control activity related to existence of specific assets. NOT an entity level control
Identify the correct order of steps for an auditor when applying a top-down approach to select controls to test in an integrated audit.
I. Evaluation of overall risks at the financial statement level.
II. Evaluation of accounts, disclosures, and assertions for which there is a reasonable possibility of material misstatement.
III. Consideration of controls at the entity level.
A. I, II, III
B. III, I, II
C. I, III, II
D. III, II, I
C. I, III, II
Risks at FS level, controls at entity level, then focus on accounts, disclosures and assertions
Controls related to the control environment and the period-end financial reporting process are examples of:
A. Service organization controls
B. Assertion-level controls
C. Entity-level controls
D. Automated controls
C. Entity-level controls
Each of the following statements is correct regarding how an auditor can obtain an understanding of the likely sources of potential misstatements in an integrated audit of a nonissuer, except:
A. An evaluation of the entity’s information technology risk and controls should be performed utilizing an approach other than the top-down approach.
B. Walkthroughs are frequently the most effective way of understanding sources of potential misstatements.
C. An understanding of how transactions are initiated, authorized, processed, and recorded should be achieved.
D. The controls that management has implemented to address potential sources of misstatements should be identified.
A. An evaluation of the entity’s information technology risk and controls should be performed utilizing an approach other than the top-down approach