What is the purpose of audit planning?
To ensure the audit is efficient, focused on high-risk areas, and completed on time.
What are the main steps in audit planning?
Understanding the entity, assessing risks, determining materiality, developing an audit strategy and detailed plan.
What is materiality in auditing?
The level at which misstatements, individually or in aggregate, could influence users’ economic decisions.
What is the purpose of risk assessment in an audit?
To identify areas where material misstatements are more likely so that audit work can be targeted effectively.
What are the three components of audit risk?
Inherent risk, Control risk, Detection risk.
Define audit risk.
The risk that the auditor expresses an inappropriate opinion when the FS are materially misstated.
What is the audit risk model?
AR = IR × CR × DR.
What is the relationship between detection risk and substantive testing?
Higher detection risk = less substantive work; lower detection risk = more substantive work.
What is the purpose of internal control systems?
To help ensure orderly and efficient operations, safeguard assets, prevent and detect fraud/error, ensure accuracy of accounting records.
What are the five components of internal control (COSO framework)?
Control environment, Risk assessment, Control activities, Information & communication, Monitoring.
What is the auditor’s responsibility regarding internal controls?
To understand and evaluate them to plan the audit; not to give an opinion on effectiveness (unless required).
What is a test of control?
An audit procedure to test the operating effectiveness of a control (e.g. re-performance, inspection).
What is a substantive procedure?
Audit test designed to detect material misstatements at assertion level (e.g. confirmations, recalculations, substantive analytics).
What audit evidence is required?
Sufficient, appropriate evidence to support the auditor’s opinion.
What determines the sufficiency of audit evidence?
The quantity needed, based on assessed risks and quality of controls.
What determines the appropriateness of audit evidence?
Relevance and reliability of the evidence.
What is external vs internal evidence?
External (from third parties) is generally more reliable; internal is less reliable.
What is professional scepticism?
An attitude of questioning mind, alert to conditions which may indicate misstatement due to error or fraud.
What is the purpose of using analytical procedures?
To identify unusual relationships, assess risks, and gather substantive evidence.
At what stages are analytical procedures used?
Planning (risk assessment), Substantive testing, Overall review at completion.
Give examples of analytical procedures.
Trend analysis, ratio analysis, reasonableness tests, data analytics.
What must an auditor assess regarding professional ethics and ISAs in relation to the acceptance/continuance of audit engagements?
Decline or discontinue if ethical or professional issues threaten objectivity (ISA 220, ISQM 1).
What are the preconditions for an audit according to ISA 210?
Management must meet these conditions for an audit to proceed.
What is the process by which an auditor obtains an audit engagement?
This process must be completed before the audit starts.