Beruflich Dokumente
Kultur Dokumente
Audit Risk
CPA
9-1
Presentation Outline
Steps in Applying Materiality II. Risk in Auditing III. Planning Model Relationships IV. Evaluating Results I.
9-2
9-3
Permissible misstatements are often less for smaller clients. Although the FASB and AICPA are unwilling to provide specific materiality guidelines to practitioners, bases are needed for evaluating materiality. See Figure 9-2 on page 235. Qualitative factors can affect materiality. See factors on pages 234-235.
The preliminary judgment about materiality is the maximum amount the auditor believes the statements could be misstated and still not affect the decisions of reasonable users. Decided early in audit. 9 - 4
$50,000
9-6
$50,000 total inventory sampled $450,000 total recorded population value for inventory
One way to calculate the estimate of misstatement is to make a direct projection from the sample to the population.
9-7
Preliminary judgment about materiality $50,000 *estimate for sampling error is 50%
9-8
Account Cash Accounts receivable Inventory Total estimated misstatement amount Preliminary judgment about materiality $50,000 *estimate for sampling error is 50%
Tolerable Direct Sampling Misstatement Projection Error Total $ 4,000 $ 0 $ N/A $ 0 20,000 12,000 6,000* 18,000 36,000 31,500 15,750* 47,250
$43,500 $16,800 $60,300
9-9
Audit Risk
9 - 11
Susceptibility of an assertion to material misstatement assuming no related internal controls. Risk of misstatements not being detected by system of internal control. Risk of misstatements not being detected by the auditor. Misstatement that remains undetected by the auditor.
Caught by auditor
=
Undetected misstatement
Audit
Risk
The following factors mean that audit risk should be kept lower: 1. Reliance by External Users 2. Likelihood of Financial Failure 3. Integrity of Management 9 - 13
3. Integrity of Management
If a client has questionable integrity, the auditor is likely to assess acceptable audit risk lower. Indications of integrity problems include: Frequent disagreements with prior auditors, the IRS, and/or SEC Frequent turnover of key financial and internal audit personnel Ongoing conflicts with labor unions and employees
9 - 16
C. Inherent Risk
1. Nature of the Clients Business 2. Results of Previous Audits 3. Initial vs. Repeat Engagement 4. Related Parties 5. Nonroutine Transactions 6. Judgment Required 7. Make-up of the Population
9 - 17
Inherent risk is likely to vary from business to business for accounts such as inventory, accounts and loans receivable, and property, plant, and equipment. The nature of the business should have little effect on cash, notes payable, and mortgages payable.
9 - 18
Misstatements found in the previous years audit have a high likelihood of occurring again. Many types of misstatements are systematic in nature, and organizations are slow in making changes to eliminate them.
9 - 19
Most auditors use a larger inherent risk for initial audits than for repeat engagements in which no material misstatements had been found.
9 - 20
4. Related Parties
Examples of related party transactions are those between parent and subsidiary companies, and management or owners and the company. Increases inherent risk because there is a greater likelihood of misstatement.
9 - 21
5. Nonroutine Transactions
Transactions that are unusual for the client are more likely to be recorded incorrectly. Examples include fire losses, major property acquisitions, etc.
9 - 22
6. Judgment Needed
Many account balances require estimates and a great deal of management judgment including: Uncollectible accounts receivable Obsolete inventory Warranty liabilities
9 - 23
9 - 24
D. Control Risk
There are two basic phases to an auditors evaluation of control risk: 1. Obtain an understanding of internal control. This phase applies to all audits. 2. Test the internal controls for effectiveness. This phase only applies when the auditor chooses to assess control risk at below the maximum.
9 - 25
9 - 27
Direct
Inverse
Acceptable audit risk is the risk that the auditor is willing to take of giving an unqualified opinion when the financial statements are materially misstated. As acceptable audit risk increases, the auditor is willing to collect less evidence (inverse) and therefore accept a higher detection risk (direct). 9 - 28
Inherent risk
Inherent risk is the susceptibility of an assertion to material misstatement assuming no related internal controls. As inherent risk increases, the auditor must reduce detection risk (inverse) by collecting more audit evidence (direct).
9 - 29
Control risk
Control risk is the risk of misstatements not being detected by the clients system of internal control. As control risk increases, the auditor must reduce detection risk (inverse) by collecting more audit evidence (direct).
9 - 30
D. The Overall Relationship of Components in Planning the Audit Process Acceptable audit risk Inherent risk Control risk
I
Tolerable misstatement
D = Direct relationship; I = Inverse relationship
9 - 31
IR = Inherent risk
CR = Control risk
9 - 32
A. Audit Risk Model for Evaluating Results B. Reducing Achieved Audit Risk C. Revising Risks and Evidence
9 - 33
IR = Inherent risk
CR = Control risk
9 - 34
Great care must be used when revising the risk factors when the actual results are not as favorable as planned. When the auditor concludes that the original assessment of control risk or inherent risk was understated or acceptable audit risk was overstated, a two step approach should be used:
1. The auditor must revise the original assessment of the appropriate risk. 2. The auditor should consider the effect of the revision on evidence requirements , without the use of the audit risk model. Research shows that using the model in the evaluation stage often results in an insufficient increase of evidence. 9 - 36
Summary
Audit Process Applying Materiality Risk and Audit Planning Evaluating Results
Risk
Internal Control
9 - 37