Comprehensive Risk Assessment and Documentation Guidelines for Audit Engagements
Learn about Sarah Winchester's legacy in risk assessment standards and documentation requirements for audit engagements. Understandings, engagements, significant risks, and communication guidelines are detailed for effective audit procedures.
Comprehensive Risk Assessment and Documentation Guidelines for Audit Engagements
E N D
Presentation Transcript
RISK ASSESSMENT STANDARDS SAS 103-114 DOCUMENTATION REQUIREMENTS
FOUR MAIN FOCUS AREAS • Understanding – the client, the environment, the processes • Meetings - staff discussion on fraud and the risk of material misstatement • Actions - things we are supposed to do • Communications-with management and those charged with governance
UNDERSTANDINGS TO DOCUMENT • Engagement Letter • Services to be performed • Objectives of the engagement • Management’s responsibilities • Auditor’s responsibilities • Limitations of the engagement • Other considerations
ENGAGEMENT ACCEPTANCE AND CONTINUANCE • Evaluate the prospective or continuing client relationship • Evaluate the audit firm’s independence • Commercial questionnaires are available • PPC • Wiley • AICPA ppc.thomson.com
Entity, Environment, Internal Control • Use risk assessment procedures to gather and document understanding: • Inquiry • Observation • Preliminary Analytical Procedures • Inspection REMEMBER! Inquiry Alone is not Sufficient!
ASPECTS TO CONSIDER • Industry, Regulatory, External Factors • Market & competitors • Cyclical or seasonal activities • Technology changes • Availability and cost of supplies • Regulatory requirements and changes • General overall economic conditions • Availability and cost of credit
NATURE OF THE ENTITY • Key customers, clients, suppliers • Geographical locations • Types of products, revenues • Number of employees • Compensation arrangements • Related party transactions • Sources of financing
BUSINESS RISKS • Industry developments • Technology • Skilled labor force
BUSINESS RISKS • New Products • Warranties • Liabilities
RESULTS OF OPERATIONS • Key ratios and operating statistics • Key performance indicators • Employment incentives • Use of reports – budgets, variances, etc. • Analyst reports – credit agency ratings, competitor reports
INTERNAL CONTROL • Document an understanding of all five elements: • CONTROL ENVIRONMENT • RISK ASSESSMENT • INFORMATION & COMMUNICATION • CONTROL ACTIVITIES • MONITORING OF CONTROLS
SIGNIFICANT RISKS • DOCUMENT SIGNIFICANT RISKS • Risk of fraud • Accounting or economic developments • Complex transactions • Non-routine transactions • Related party transactions • Manual or management intervention • Subjective measurements (estimates) • Litigation
MEETINGS TO DOCUMENT • Team Discussions • “Brainstorming” re: fraud Revenue Recognition Fraud Management’s Override of Controls
RMM-Risk of Material Misstatement • Due to error or fraud • Financial statement level • Relevant assertion level
TEAM DISCUSSIONS • Can be only one discussion if both topics are considered! FRAUD? ERROR? MATERIAL MISSTATEMENT?
ACTIONS TO DOCUMENT • MATERIALITY AND ANY CHANGES MADE
ACTIONS TO DOCUMENT • AGREEMENT OF FS TO UNDERLYING ACCOUNTING RECORDS =
ACTIONS TO DOCUMENT • EXAMINE MATERIAL AND CLOSING JOURNAL ENTRIES
ACTIONS TO DOCUMENT • Development of an audit strategy • Characteristics of the engagement • Reporting objectives • Focus of team efforts • Less detailed than an audit plan • For small entities, need not be complex
ACTIONS TO DOCUMENT • RISK ASSESSMENT • Evaluate the risk of material misstatement due to error or fraud • at the financial statement level • at the relevant assertion level MUST LINK AUDIT PROCEDURES TO RISK ASSESSMENT
ACTIONS TO DOCUMENT • SUBSTANTIVE TESTING • For all relevant assertions • For all significant risks • RESOLVE CONTRADICTIONS • Evidence which conflicts • Disagreements among staff
ACTIONS TO DOCUMENT • Must evaluate known and likely misstatements • Must distinguish between known and likely • Must request management correct • Must consider the effects individually and in the aggregate of uncorrected known and likely misstatements
COMMUNICATIONS WHICH MUST BE DOCUMENTED • Engagement Letter • Significant Deficiencies and Material Weaknesses • Known & Likely Misstatements • Corrected • Uncorrected
COMMUNICATIONS WHICH MUST BE DOCUMENTED THOSE CHARGED WITH GOVERNANCE • auditor’s responsibilities • overview of the scope and timing of the audit • to obtain information relevant to the audit • provide timely observations relevant to oversight • auditor determines the appropriate person
COMMUNICATIONS WHICH MUST BE DOCUMENTED THOSE CHARGED WITH GOVERNANCE • auditor’s view of the qualitative aspects of the • entity’s accounting practices • difficulties encountered during the audit • uncorrected misstatements • material corrected misstatements • representations requested from management • management’s consultation with other auditors • significant issues encountered