what is the key to conducting a quality audit
assessing and managing risk
overall goal of a quality audit is
determine the risk of material misstatement for overall statements and specific assertions related to classes of transactions, balances and disclosures
the risk of material misstatement exists at two levels
2. assertion level
def: risk of material misstatement at overall financial statement level
risk that relate pervasively to the financial statements as a whole and potentially affect many assertions
which factors can increase the likelihood of material misstatements (5)
risk of material misstatement at assertion level has two components
inherent risk and control risk
inherent risk is higher for valuation assertion related to accounts that require
complex calculations or accounting estimates that involve significant estimates or judgement
control risk may be higher for valuation assertion if internal controls fail to have
independent review and verification of complex calculations or estimates
from the assessment of risk of material misstatement the auditor will develop
2. risk response at assertion level with tests of controls and substantive audit procedures for specific assertions
if the risk is pervasive the risk response strategy could be (4)
during risk assessment process these procedures are done
with inquiries of management and personnel it is important to
get perspectives of different levels of authority
inquiries of those in charge of governance is good for
oversight provided by BofD and others, important aspect of internal control
inquiries to internal audit personnel can provide
information about key risks to business (financial reporting, operations and compliance) + design and operating effectiveness of internal controls
analytical two purposes
2. assess client business risk
how does analytical purpose happen?
identify unusual amounts, ratios or trends that might reveal unusual transactions
analytical procedures include financial or non-financial information?
both
the information used in analytical procedures is aggregated so
provide only a broad indication about if a material misstatement exists
what kind of documents to inspect
purchase orders, invoices, receiving reports with disbursements
what kind of other risk assessment procedures
information from client acceptance evaluation like discussing with predecessor or background checks
risk assessment procedures provide sufficient appropriate audit evidence to form an audit opinion
false
in all risk assessment procedures the auditor must find
the significant risks that require special audit consideration
the auditor must consider as significant risks (6)
estimation uncertainty is often related to
assumptions about future events, which are difficult to preduct