Show Menu
Cheatography

Audit 3 exam Cheat Sheet (DRAFT) by

Exam 1, 2, and 3 combo

This is a draft cheat sheet. It is a work in progress and is not finished yet.

Assurance BROA­DEST

Assurance Def:
are indepe­ndent profes­sional services
 
that improve the quality of inform­ation
 
or its context
 
for decision makers
assurance services:
 
quality of a business process
 
reliab­ility of computer systems
 
(ICFR) Internal control over financial reporting
“Relia­bility” AICPA’s definition for Assurance services

Attest­ation MIDDLE

Definition
in which a practi­­tioner issues a report on subject matter or assertion that is the respon­­si­b­ility of another party
 
To provide assurance through a written report regarding reliab­­ility of manage­­ment’s assertion.
Examin­­ation =
high assurance
Review =
moderate assurance
nonis­­suers
AICPA: SSAE / AT-C standards
issuers
PCAOB: AT No.1 & 2 , && Interim Standards
financial attest­ation engage­ments
 
Agreed upon procedures
 
Pro forma financial inform­ation
 
Financial forecasts and projec­tions
non-fi­nancial attest­ation engage­ments
 
Compliance with contra­ctual requir­ements
 
Effect­iveness of internal control systems
 
Inventory quantities and locations

General Audit Info

Steps
1.
Assessing client acceptance and retention decisions
2.
Unders­tanding the client­-pl­anning
3.
Obtain evidence about internal control and determine impact on the financial statements
4.
Obtain substa­ntive evidence about account assertions
5.
Wrapping up the audit and making reporting decisi­ons-do we have enough evidence
WHY?
User demands:
reliable, relevant, timely info
conditions that increase user demand:
Comple­xity, Remote­ness, Time sensit­ivity, Conseq­uences
AAA Definition
Auditing is a systematic process of object­ively obtaining and evaluating evidence regarding assertions about economic actions and events to ascertain the degree of corres­pon­dence between the assertions and establ­ished criteria and commun­icating the results to interested users.
assertions
Financial Statements & footnotes
establ­ished criteria
GAAP
commun­icating the results
Auditor's Report/ Other Reports
interested users
Creditors && Investors
Audit Purpose:
provide users with an opinion by the auditor on whether the F/S are presented fairly, in all material respects in accordance with the AFRF
Audit Premise:
those charged with governance have respon­sib­ility for
 
The prepar­ation and presen­tation of the f/s in accordance with the AFRF
 
IC over financial reporting
 
Providing auditor with ALL inform­ation necessary and unrest­ricted access.
Inform­ation risk is the risk (proba­bility) that the inform­ation (mainly financial) dissem­inated by a company will be materially false or mislea­ding.

Nature of the Company

The company’s organi­zat­ional structure and management personnel.
The sources of funding of the company’s operations and investment activi­ties.
The company’s signif­icant invest­ments
The company’s operating charac­ter­istics, including its size and comple­xity.
The sources of the company’s earnings, including the relative profit­ability of key products and services, and key supplier and customer relati­ons­hips.
 
Where are the Risks of Material Missta­tement

Prel­imi­nary Analytical Procedures

beginning of an audit
compare to industry and previous years
"­rea­son­abl­eness tests"
1)Develop an expect­ation
2) Define a signif­icant differ­ence.
% OR $
3) Compare expect­ation with the recorded amount.
horizontal analysis // year to year
 
vertical analysis // % of whole
4) Invest­igate signif­icant differ­ences
"­att­ention direct­ing­"
5) Document each of the preceding steps

Stages of Audit "pe­rfo­rma­nce­"

1. Obtain Engagement
 
(1) perform procedures regarding the acceptance or contin­uance of the audit client relati­onship
 
-must attempt contact w/ predec­essor auditor
 
-when issuer changes auditors Form 8-K
Generally Include:
Obtaining and reviewing: annual reports, interim statem­ents, regist­ration statem­ents, Form 10-Ks, reports to regulatory agencies
 
criminal background checks of senior managers
 
Consid­ering the need for specia­lists
 
Evaluate the firm’s indepe­ndence
 
Requesting the client’s bankers, legal counsel, underw­riters, analysts to "­spill the tea"
 
Consid­ering if the engagement will involve unusual risks
 
(2) determine compliance with indepe­ndence and ethics requir­ements
 
(3) reach a contra­ctual unders­tanding with the client for the terms and conditions of the audit engagement
 
engagement letter has:
 
-objec­tives of the engagement
 
-manag­ement’s respon­sib­ilities
 
-auditors’ respon­sib­ilities
 
-any limita­tions
 
optional = termin­ation letter
2. Engagement Planning
 
Audit Plan engagement partner
 
develop and document a plan (NTE) to assess RMM
 
THEN plan the (NTE) control and substa­ntive tests that mitigate these risks to an acceptable level (kinda step 3)
 
Why audit plan?
 
-quality control, superv­ision, (provable) docume­ntation
 
goals of audit planning
 
-firm has the requisite staff
 
-determine materi­ality
 
-outline the specific audit procedures to lessen RMM
3. Risk Assessment
 
-Internal control
 
-risk of material missta­tement
 
-inherent risk and control risk
4. Audit Evidence
 
-“suff­icient approp­riate”
 
-minutes of meetings, confir­mations with indepe­ndent third parties, invoices, analyst reports, and all other inform­ation that permits auditors to reach valid, logical conclu­sions
 
-Detection risk!!
5. Reporting (reporting principle)

Audit procedures for obtaining evidence

Why?
 
1) understand the client (& risks)
 
"risk assessment proced­ure­s"
 
2) to test the operating effect­iveness of IC
 
"­tests of contro­ls"
 
3) produce evidence about manage­ment’s assertions
 
evidence for PERCV/ASB assertions
Procedures
1) Inspection of Records and Documents
comple­teness (T/S), existence (v), occurrence (V)
 
vouching, tracing, scanning
 
hierarchy of evidence
2) Inspection of Tangible Assets
existence
3) Observ­ation
"test of contro­ls"
 
a general awareness of events in the client’s offices
4) Inquiry
"risk assessment proced­ure­s" / docume­ntation
 
written repres­ent­ations or management repres­ent­ations
 
“inquiry alone” is never enough
 
early planning stages of the engagement
5) Confir­mation
existence, R/O, Valuation, Cut-off depends on the info requested
Confir­mation letters:
printed on the client’s letterhead and signed by a client officer
 
seek inform­ation the recipient can supply
 
audit firm should control confir­mations
 
responses the audit firm || client
6) Recalc­ulation
existence & valuation
 
recalc­ulation of comput­ations || "test of contro­ls" & potential evidence
7) Reperf­ormance
any client control procedure
8) Analytical Procedures
REQUIRED during planning && final evaluation
 
optional: substa­ntive testing phase

Auditors are REQUIRED to Document

Risk Assessment process
in the workpapers
 
Discus­sions with engagement personnel.
 
Procedures to identify and assess risk.
 
Signif­icant decisions during discussion (team brains­torming sessions)
 
Specific risks identified and audit team responses.
 
Explan­ation of why improper revenue recogn­ition is not a risk, if so deemed.
 
Results of audit proced­ures, partic­ularly procedures regarding management override.
 
Other conditions causing auditors to believe that additional procedures are required.
 
Commun­ica­tions to management and those charged with govern­ance, such as the audit committee.

Audit Docume­ntation

PCAOB-AS 1215 "­audit docume­nta­tio­n":
The written record of the basis for the auditor’s conclu­sions that provides the support for the auditor’s repres­ent­ations, whether those repres­ent­ations are contained in the auditor’s report or otherwise
Permanent Files
"­con­tinuing audit signif­ica­nce­"
 
corporate or associ­ation charter, bylaws, or partne­rship agreement
 
continuing contracts such as leases, bond indent­ures, and royalty agreements
 
A history of the company, its products, markets, and backgr­ound.
 
minutes of meetings of stockh­olders and/or directors on matters of lasting interest.
 
Continuing schedules of accounts with balances that are carried forward for several years, such as owners’ equity, retained earnings, partne­rship capital, ect.
 
prior-­years’ financial statements and audit reports
 
Client organi­zation chart.
Current Files
"the year under audit"
 
planning memorandum = summary of current files
 
lead schedule = summary of accounts in "­account group"
 
Indexing = docs get index number
 
Cross-­ref­ere­ncing = basically a Foreign Key
 
Heading =name of the company, the balanc­e-sheet date, and a descri­ptive title
 
Signatures and initials =auditor who performs the work and the supervisor who reviews it must sign the audit docume­ntation
 
Dates of audit work = dates of perfor­mance and review are recorded
 
Audit marks (tick marks) and explan­ations = auditor’s shorthand comments about work preformed

Materi­ality &

Lower the materi­ality level if
high complexity + low balance = higher risk
if materi­ality is lower
test more
RMM and detection risk are inversely related
IC risk won't change.
Firm sets this.
control risk goes up
detection risk goes down
we control
Detection risk

Cycles

Voucher packet
approvals, accounts, and amounts to be recorded
 
supporting purchase order
 
receiving report
 
vendor invoice
 

Entities

PCAOB Public
Public Company Accounting Oversight Board
 
ASs-Au­diting Standards
AICPA Private
American Institute of Certified Public Accoun­tants
 
ASB - Auditing Standards Board
 
SASs - Statements on Auditing Standards
GAO Gov.
U.S. Government Accoun­tab­ility Office
 
The “Yellow Book” - Government Auditing Standards
IFAC Foreign
Intern­ational Federation of Accoun­tants
 
IAASB - Intern­ational Auditing and Assurance Standards Board
 
ISAs - Intern­ational Standards on Auditing
Domestic AFRF (appli­cable financial reporting framework) GAAP
Foreign AFRF (appli­cable financial reporting framework) IFRS

Detection risk

 
Need for Suff. & App.
Detection Risk
Poor Controls
Good Controls

Detection Risk (pic)

ASB Assertions

ASB Assertions
Evaluates what?
Procedures
Existence
do assets exist?
assets Inspection of tangible assets
Occurrence
transa­ctions actually occur?
Inspection of records or documents (vouching)
Rights and obliga­tions
ownership & legal respon­sib­ilities
indepe­ndent Confir­mations
Comple­teness
financial statements (footnotes too) complete?
Inspection of records or documents (tracing)
Cutoff
proper period
Inspection of records or documents (tracing or vouching)
Valuation or allocation
accounts valued correctly?
Reperf­ormance
Accuracy
transa­ctions recorded accura­tely?
Inspection of records or documents (tracing or vouching)
Presen­tation
approp­riately presented & clearly described?
Management Inquiry
Classi­fic­ation
in the proper accounts?
Analytical procedures

PERCV

Presen­­tation & Disclosure
Presen­­tation
footnotes
 
Disclosure
disclose inventory methods
Existence && Occurrence
Existence
assets
 
inspection of tangible assets
 
Balance sheet (vouch)
Occurrence
transa­ctions
 
push/pull revenue
 
income statement
 
Purchase Journal Receiving Reports
 
Vouching
Rights && Obliga­­tions
Rights
Balance sheet
 
inventory consig­­nment
 
Obliga­­tions
Balance sheet
 
consig­­nment
Comple­­teness
 
liabil­­ities and revenue
 
accrued liabil­­ities
 
Receiving Reports Purchase Journal
 
Tracing
Valuation OR Allocation
Valuation
credit ratings
 
ASC 606 accuracy
Allocation

GAAS “Princ­iples”

Respon­sib­ilities
 
1. Competence
education, training, experience
 
2. Indepe­ndence
fact and appear­­ance
 
3. Due profes­­sional care (GAAS)
perfor­mance of the audit AND the prepar­ation of the report
 
Perfor­mance
To express an opinion, Obtain reasonable assurance that financial statements are free of material missta­­tement whether due to error or fraud
obtain reasonable assurance:
 
Planning and superv­­ision
   
Prepare an audit program & plan including timing
   
Supervise the audit work
   
Obtain knowledge of the client
   
Have a system in place to settle disagr­eements
 
Determ­­ining materi­­ality
Nature, Timing, Extent
 
Risk assessment
risk of material missta­tement
   
inherent risk and control risk
 
based on an unders­tan­ding:
   
the entity
   
operating enviro­nment
   
internal control
 
in order to determine the
Nature, Timing, Extent
 
Evidence Gathering
sufficient & approp­­riate
   
Sufficient #
   
Approp­riate quality (R&R)
   
relevance - the assertion being tested
   
Reliab­­ility — source and nature of the evidence
 
obtained
through audit procedures
   
to afford a reasonable basis for an opinion
Reporting
conclusion and commun­­ic­ation
 
State whether financial statements follow GAAP
Explicit The report shall state whether the financial statements are presented in accordance with GAAP
 
Identify incons­­is­t­e­ncies
 
Address adequacy of disclo­­sures
 
Express an opinion or explain why none is given
approp­­riate: Relevance & Reliab­­ility
Relevance — the assertion being tested
Reliab­­ility — source and nature of the evidence

Fraud

What is FRAUD
 
1) knowingly making material misrep­res­ent­ations of fact
 
2) with the intent of inducing someone to believe the falsehood && and act on it
 
3) causing victim to suffer a loss or damage
Types
Employee Fraud
"­mis­app­rop­ria­tions of assets"
Embezz­­lement
employees or nonemp­­loyees wrongfully taking money or property entrusted to them, by cover-up
Larceny
theft of an employer’s property that is not entrusted to an employee
Defalc­ation
Misuse of funds by a fiduciary
Management fraud
"­Fra­udulent financial reporting"
 
deliberate fraud committed by management that injures investors and creditors through materially misstated inform­ation.
 
(1) overst­ating revenues and assets
 
(2) unders­tating expenses and liabil­ities
 
(3) giving disclo­sures that are misstated or that omit important inform­ation
Prevention
 
Tone at the top
Deterrent
 
Internal Controls
Motives
Psycho­logical
for the hell of it
Egocentric
prove they can
Ideolo­gical
moral justif­ication
Economic
need for $$
Triangle
Incentive
Opport­unity
Attitu­de/­Rat­ion­ali­zation
Capability
Suscep­tib­ility
 
Dollar size of the account.
 
Liquidity.
 
Volume of transa­ctions
 
Complexity of the transa­ctions
 
Subjective estimates.

Control Stages

Custody
Author­ization
Recording
Reconc­ili­ation

Confir­mations

Types
Positive
 
small number of accounts are involved
 
Individual balances are large
 
large number of errors are antici­pated
Negative
 
a large number of small balances are involved
 
the combined assessed level of inherent and control risk is low
 
the auditor has no reason to believe that the recipients of the requests are unlikely to give them consid­era­tion.
Blank
 
should be used if the recipient is likely to return a positive confir­mation without verifying the accuracy of the inform­ation.
 
consid­era­tions
 
positive and blank confir­mations > negative non-re­sponses
 
Recipients of accounts receivable confir­mations might not report unders­tat­ements
Non-re­sponse to Positi­ve/­blank
Follow up with 2nd & 3rd
 
lower than expected response rate = fictitious customer accounts
Non-re­sponse to negative
Altern­ative procedures are not necessary
 
Only limited evidence
Assertions
 
existence
 
occurrence

Inspection of Firms

Issuers
PCAOB is charged with monitoring
"­ins­pec­tio­ns"
>100 issuer audits
annual inspec­tions
<100 issuer audits
triennial inspec­tions
Non-Is­suers
AICPA
"peer review­s"
AICPA National Peer Review Committee
Triennial peer reviews

Plans

audit plan
a compre­hensive list of the "­spe­cific audit proced­ure­s" that the audit team needs to perform to gather sufficientapprop­riate evidence
internal control audit plan
a list of "­spe­cific proced­ure­s" needed to obtain an unders­tanding of the client’s internal control system and test that unders­tanding for those controls
substa­ntive audit plan
a list of "­audit proced­ure­s" for gathering evidence
 
(1) substa­ntive analytical procedures
 
-more efficient
 
(2) tests of details
 
-more effective

System of Quality Control //AICPA // Audit firm

quality control standards
QC
Purpose
provide the firm reasonable assurance that the firm and its personnel
1. Leadership respon­sib­ilities
“tone at the top”
2. Relevant ethical requir­ements
indepe­ndence, Compet­ence, Due profes­­sional care, Skepticism
3. Acceptance and contin­uance of client relati­onships
adequately perform the engage­ment, integrity of the client, firm’s ability to comply with legal and ethical requir­ements
4. Human resources (audit firm)
Hire quality personnel, Assign staff to engage­ments based on their capabi­lities, Provide profes­sional develo­pment opport­uni­ties, Effect­ively evaluate, compen­sate, and promote staff
5. Engagement perfor­mance
engagement quality control reviews
6. Monito­ring.
either an ongoing postis­suance review of engagement docume­ntation or targeted inspection procedures for a sample of engage­ments
 
-appro­pri­ateness of the firm’s guidance materials
 
-compl­iance with policies and procedures on indepe­ndence
 
- effect­iveness of continuing profes­sional education
 
-decisions regarding the acceptance and contin­uance

Balanc­e-Sheet / Operations Ratios

Assessing the Client

Directions

Source
TRACING
Accounting Docs
     
Accounting Docs
VOUCHING
Source
     
CAATs
Scanning
Accounting Docs
     

Control Signals

“absence of controls”
inherent risk
“internal control effect­­iv­e­ness”
control risk
“suffi­­cient approp­­riate evidence”
detection risk
“more internal control”
lower control risk
“less effective controls”
increase procedures