primary objective of procedure to obtain understanding of internal control structure
to gain knowledge necessary for audit planning
Documentation required for audit in accordance with GAAS
Flowchart
pictorial summary of auditor’s understanding of system
Examples of Management control method to improve mgmt ability to supervise effectively
why evaluating the substance of internal control procedure is more important than the form
procedure may be est appropriately but not enforced/implemented (“substance”)
Decision table
presents in table format the conditions and alternative actions. Emphasizes the relationship between conditions and actions
In planning, auditor may skip certain procedure to obtain understanding of internal control structure because of
auditor’s judgment about materiality and assessment of inherent risk
Primary consideration regarding internal control structure policies and procedures is
whether they affect FS assertions
Compensating controls
used by organizational unit when adequate segregation of duties is not present
less desirable than segregation of duties internal control
Batch processing of transaction
processed by type, not order
easier to follow audit trail
Walk-through
approach tracing a transaction from its origination through information systems until reflected in financial report
Computer sys supported by variety of utility software are important to auditor b/c
they may enable unauthorized changes to data files if not properly controlled
Impact of Change in computer systems on audit program
alter part of audit trail
relevance of various types of controls to a financial audit
Controls over the reliability of financial reporting are ordinarily most directly relevant to an audit, but other controls may also be relevant
An auditor should obtain sufficient knowledge of an entity’s information system to understand
financial reporting process used to prepare FS
Control Risk
Assessing control risk and obtaining an understanding of an entity’s internal control structure may be performed concurrently
Internal control structure
assessed level of control risk can never be sufficiently low as to eliminate all substantive tests on a significant account balance
primary criterion of any system of internal control is the cost-benefit relationship
difficult internal control issue for an auditor to detect
An intentional circumvention of controls associated with collusion involving employees in different departments would be particularly difficult to detect
After obtaining an understanding of internal control and assessing control risk, an auditor will perform tests of controls, if
it is believed that such performance will efficiently result in a reduction in planned substantive tests
Test for Completeness of cash receipts for sales
observe consistency of employees’ use of cash registers and tapes
when control risk assessed below max level, auditor documents
understanding of
- Entity’s control activities that help ensure management directives are carried out.