NATURE-
TIMING
EXTENT
Nature - Necessity
- Possible
- Desirable
Necessity- There is a very large volume of transactions
* Transactions are highly complex
* There is no visible audit trail to audit (will need to test general IT controls)
* Transactions are computer-generated (will need to test general IT controls)
Possible
There are controls in place which, if effective, would ensure the integrity of financial
information
* The control environment of the client appears to be effective
* We have the necessary staff and resources to test controls
Desirable
Timing
The auditor must determine when to perform audit testing on the given balance or transaction. The
following consideration will apply:
* If there are tight audit deadlines roll-forward may be necessary for transactional testing
* If the client is high-risk, procedures may be done close to the year-end
* If the client has outsourced its functions the availability of data will impact the timing of
procedures
Extent
The extent of testing will be influenced by the following factors:
* High-risk clients will require extended testing and larger sample sizes
* If the client’s systems change during the year the auditor may have to test both systems
* The use of CAATs may enable the auditor to test the whole population instead of a sample
There is something about possible l guess which says preceding 3 years
CAATS
- Availability of Software
- Client co-operation
- Cost-efficiency.
If you wish to place reliance on:
- Manual dependant controls
- Automated controls
You must test general IT controls:
- Programme Change Controls
- Programme Development Controls
- Access Controls
- Continuity of operations
- Personnel practices
- Control environment
- Standards
- Documentation
3. Test Application Control