What does IAS 315 define risk assessment procedures as?
The audit procedures designed and performed to identify and assess the risks of material misstatement, whether due to fraud or error, at the financial statement and assertion levels
What does risk assessment help the auditor do?
Helps to prepare the auditor by planning the audit effectively to deliver a valid opinion
Since audit opinions are full of uncertainty, what do auditors need to do?
Plan for possible cases of fraud or error jeopardising the truth and fairness of the financial statements which they might not detect
What can the two levels of risk mentioned by the extract from ISA 315 do?
Each can influence the opinion given by the auditor
What are the two levels of risk which ISA 315 makes references to in the extract?
Financial statement level
Assertion level
What is financial statement level risk?
Where there is a possibility certain factors might have a detrimental effect on the whole set of financial statements
Give an example of a financial statement level risk?
E.g., flaws in the control environment, an overall lack of management integrity or even adverse economic conditions which could lead to the entire set of statements being affected
What is assertion level risk?
Where there may only be one specific element of the financial statements that is at risk of material misstatement due to problems with one or more characteristics of that element
Give examples of assertion level risks
E.g., if material assets listed on the SFP are incorrectly valued, there is a material misstatement in respect of them due to the assertions made by management about their value
What does ISA 315 go on to list about an entity’s risk assessment process and what does it use to do this?
List the circumstances that should be considered as part of an entity’s risk assessment process, using categories that include complexity, subjectivity, change, uncertainty and susceptibility to misstatement as a result of fraud or management bias.
What are the 9 circumstances in the book that should be considered as part of an entity’s risk assessment process?
Why does the external auditor face a serious problem when agreeing to deliver and audit opinion?
Could easily be discredited if has not taken into consideration all available info and auditor’s expertise
How does the auditor make sure info and expertise has been taken into consideration so an audit opinion is not easily discredited?
Answer lies in understanding the risk faced by auditors and working to control them by use of the audit risk model.