Auditing I CH I-3
Auditing I CH I-3
Auditing I CH I-3
PRACTICE I
By dereje mekoya
CONTENT OF THE COURSE
1) The Nature, Purpose, Scope of Audit and Assurance Services
2) The Auditing Profession
3) Materiality and Risk Assessment
4) Client Acceptance and Planning the Audit
5) Audit Responsibility, Objectives, Evidence and Recording the Audit
6) Internal Control
7) Audit Reports
CHAPTER ONE
THE NATURE, PURPOSE, SCOPE OF AUDIT AND ASSURANCE SERVICES
Auditing, a staple of the accounting practice, is the process of examining the accuracy of financial
statements and a company's financial reporting.
Auditing is the process of assessment and ascertaining of financial, operational, and strategic goals and
processes in organizations to determine whether they are in compliance with the stated principles in
addition to them being in conformity with organizational and more importantly, regulatory requirements.
Audit is the examination or inspection of various books of accounts by an auditor followed by physical
checking of inventory to make sure that all departments are following documented system of recording
transactions. It is done to ascertain the accuracy of financial statements provided by the organization.
It is to check and verify the accounts by an independent authority to ensure that all books of accounts are
done in a fair manner and there is no misrepresentation or fraud that is being conducted.
Auditing encompasses both an investigating process and a reporting process.
MEANING OF AUDIT
1. Controls over and risks related to investments, including policies related to derivatives…
Involves: Assessing the processes in a company’s investment practices to identify risks and to determine the
effectiveness of those processes.
2. Assess risks of accumulation, distribution, and storage of digital information…
INVOLVES: Assessing security risks and related controls over data and other information stored electronically,
including the adequacy of backup and off-site storage.
NO ASSURANCE SERVICES PROVIDED
BY CPAS
2. Tax services
If the bank makes the loan, it will charge a rate of interest determined primarily by three
factors:
1. Risk-free interest rate: : Is the rate the bank could earn by investing in treasury notes
for the same length of time as the business loan.
2. Business risk for the customer: : possibility that the business will not be able to repay its
loan because of economic or business conditions,
3. Information risk: Information risk reflects the possibility that the information upon
which the business risk decision was made was inaccurate.
THE ECONOMIC DEMAND FOR AUDITING
(CONT’D)
If the bank officer is satisfied that there is minimal information risk because
a borrower’s financial statements are audited, the bank’s risk is
substantially reduced and the overall interest rate to the borrower can be
reduced.
The reduction of information risk can have a significant effect on the
borrower’s ability to obtain capital at a reasonable cost.
IMPORTANT OF AUDIT FOR ORGANIZATION
1. Control Mechanism
2. Conflict of Interest
The agency relationship that exists between an owner and manager
produces a natural conflict of interest because of the information
asymmetry that exists between the manager and the absentee owner.
Information asymmetry means that the manager generally has
more information about the "true" financial position and results of
operations of the entity than the absentee owner does.
IMPORTANT OF AUDIT FOR ORGANIZATION
3. Consequences
Accounting provides information for economic decision-making.
This Information is used for decisions that have serious and substantial economic consequences.
Thus, the need for an audit is verifying the accuracy of information before they are used in decisions.
4. Remoteness of information
Because of the separateness of the management from the owners; information is prepared in a place far
from the user.
The user is prevented from directly assessing the quality of information he/she obtains.
Thus, the need for auditor services is to assess the information on the users' behalf.
5. Regulatory Requirements
Many business laws, memorandum of association and regulatory
agencies acts make audits annual requirements to be complied/act in
accordance with for renewal of license or authorize. For example the
security exchange commission (SEC) in the US; the Commercial Code of
Ethiopia (1966), and latter the Public Financial Regulation of Procl 163/1999 in
Ethiopia make the filing of audited financial statements annually.
1.3. WHY AUDITS ARE CONDUCTED
If the bank makes the loan, it will charge a rate of interest determined primarily
by three factors:
1. Risk-free interest rate: Is the rate the bank could earn by investing in treasury
notes for the same length of time as the business loan.
2. Business risk for the customer: possibility that the business will not be able to
repay its loan because of economic or business conditions,
3. Information risk :reflects the possibility that the information upon which the
business risk decision was made was inaccurate.
A likely cause of the information risk is the possibility of inaccurate financial
statements.
THE ECONOMIC DEMAND FOR AUDITING
(CONT’D)
Auditing has no effect on either the risk-free interest rate or business risk,
But it can have a significant effect on information risk.
If the bank officer is satisfied that there is minimal information risk
because a borrower’s financial statements are audited, the bank’s risk
is substantially reduced and the overall interest rate to the borrower can
be reduced.
The reduction of information risk can have a significant effect on the
borrower’s ability to obtain capital at a reasonable cost.
1.4 TYPES OF AUDIT
Employe Intern
e Benefit Financial
Plan al Audit
Audits audit
Forens
External
ic
Audit Aud audit
Governm
it
ent or Pay
IRS
audits Strategic audit
audit,
operational
and IT audit
TYPES OF AUDIT (CONT’D)
1. FINANCIAL AUDIT
Financial auditing is the process of examining an organization’s (or individual’s) financial records to determine if they are
accurate and in accordance with any applicable rules (including accepted accounting standards), regulations, and laws.
are the most popular followed by operational and strategic audits and in addition to the emerging practice of IT
(Information Technology) audits.
are also the first point of evaluation as to whether the companies are stating the truth and whether they are hiding or
covering up some aspect that can be uncovered and revealed in a forensic audit.
Three Main Types of Financial Audits are:
1. An internal audit is typically done in-house, focusing on process assessments, control assessments, the safety of
assets, and legal compliance. It is designed to improve an organization’s operations and add value to the company.
2. An external audit is carried out by an independent party, such as a tax agency or the IRS, following standards that differ
from the company’s.
3. An Internal Revenue Service (IRS) tax Audits: performs routine audits to verify a taxpayer’s specific transactions and
returns. to make sure your company did not overpay or underpay taxes.
TYPES OF AUDIT (CONT’D)
External audits are done by independent and third party agencies and companies that are especially
tasked with assessing and evaluating an organizations’ compliance with the regulatory norms.
Further, some organizations also hire external auditors to “hold a mirror to themselves” in the sense that
any deficiencies and irregularities can be found that are otherwise not “visible” to the senior leadership
and management during the course of conducting the everyday operational business.
Moreover, external audits are also mandatory due to regulatory and compliance reasons as well as due
to the shareholder requirements which mandate that external audits need to be done annually, quarterly,
and half yearly to be presented in the Annual General Meetings, and meetings of the Board of Directors.
In addition, external audits might also be required in case of contingencies wherein the regulators who
suspect that “something is amiss” in the companies might mandate those companies to be audited by
independent and third party auditors to ascertain the “true picture” of the finances and operational details
of those companies.
TYPES OF AUDIT
4. STRATEGIC, OPERATIONAL, AND IT AUDITS
This audits that have become popular in recent years mainly due to the
increasing complexity of organizational processes as well as the IT
infrastructure and the fast paced external marketplace which needs an
evaluation of whether the organizations are aligning their internal
processes and strategies with that of the external strategic drivers and
imperatives.
IT audits are being sought to assess and evaluate the readiness of the
organizations’ IT infrastructure and systems and IT processes to meet
the stated goals and objectives in addition to being able to withstand IT
risks and security breaches.
TYPES OF AUDIT
A forensic audit assesses and evaluates a person’s or company’s financial information to obtain facts to
support a legal case. It is used to uncover criminal behavior such as fraud or embezzlement.
Pay audits allow you to identify pay discrepancies among your employees. A pay audit can help you spot
unequal pay at your company. During a pay audit, analyze things like disparities due to race, religion, age, and
gender. Pay audits can also help you ensure workers are paid fairly based on your business’s industry and
location.
A payroll audit examines your business’s payroll processes to ensure they are accurate. When conducting
payroll audits, look at different payroll factors, such as pay rates, wages, tax withholdings, and employee
information. It is typically internal. Conducting internal payroll audits helps prevent possible external audits in
the future. Businesses should conduct internal payroll audits annually to check for errors in their payroll
processes and remain compliant.
A compliance audit examines your business’s policies and procedures to see if they comply with internal or external
standards. It can help determine whether or not your business is compliant with paying workers’ compensation or
shareholder distributions. And, they can help determine if your business is compliant with IRS regulations.
TYPES OF OPERATIONAL AUDIT
Reporting Standards
1. Whether statements were prepared in accordance with GAAP
2. Circumstances when GAAP not consistently followed
3.Adequacy of informative disclosures
4. Expression of opinion on financial statements
PROFESSIONAL QUALIFICATION
REQUIREMENTS
- Contingent fess: - The AICPA code of professional conduct prohibits a CPA firm from
rendering any professional services on a contingent fee basis.
- Responsibilities to colleagues: - The auditor should promote cooperation and good
relations with other members of the profession.
- Advertising: - The advertising should not be false or misleading,” should not contravene “professional
good taste,” should not make “unfavorable reflection on the competence or integrity of the profession,”
and should not” involve a statement the contents of which” cannot be substantiated.
LEGAL RESPONSIBILITY AND
LIABILITY OF AUDITORS
Expression of an opinion
Reasonable assurance (word/ declaration) that material
misstatements are absent:
Includes errors (faults/mistakes), fraud/fake and other
irregularities
Plan and perform the audit in accordance with GAAS
STRUCTURE OF PRONOUNCEMENT
ISSUED BY THE IAASB
IESBA Code of Ethics for Professional Accountants (including
International Independence Standards)
Engagements Governed by the Standards of the IAASB
ISQCs 1–99 International Standards on Quality Control
International Framework for Assurance Engagements
Audits and Reviews of Historical Financial Information
ISAs 100–999 International Standards on Auditing
ISREs 2000–2699 International Standards on Review Engagements
Other Assurance Engagements
ISAEs 3000-3699 International Standards on Assurance Engagements
Related Services
ISRS 4000–4699 International Standards on Related Services
THE AUTHORITY ATTACHING TO INTERNATIONAL
STANDARDS ISSUED BY THE IAASB
Audit risk —The risk that the auditor expresses an inappropriate audit opinion when the
financial statements are materially misstated. Audit risk is a function of the risks of
material misstatement and detection risk.
Audit Risk (AR); Misstatement that remains undetected by the auditor. Caught by
auditor.
A. Inherent Risk (IR): Susceptibility of an assertion to material misstatement assuming
no related internal controls.
B. Control Risk (CR) Risk of misstatements not being detected by system of internal
control. Caught by internal controls.
C. Detection risk —The risk that the procedures performed by the auditor to reduce
audit risk to an acceptably low level will not detect a misstatement that exists and that
could be material, either individually or when aggregated with other misstatements. Risk
B. ACCEPTABLE AUDIT RISK
There is a greater chance of having to defend the quality of the audit when
there is a financial failure. Failure indicators include:
Shortage of funds
Declining net income or continued losses
Risky industries such as technology
Management lacking competency to deal with financial difficulties
3. INTEGRITY OF MANAGEMENT
Inherent risk is likely to vary from business to business for accounts such as
inventory, accounts and loans receivable, and property, plant, and
equipment.
The nature of the business should have little effect on cash, notes payable,
and mortgages payable.
4. Related Parties
Examples of related party transactions are those between parent and subsidiary
companies, and management or owners and the company.
Increases inherent risk because there is a greater likelihood of misstatement.
5. Non-routine Transactions
Transactions that are unusual for the client are more likely to be recorded
incorrectly.
Examples include fire losses, major property acquisitions, etc.
6. JUDGMENT NEEDED
Many account balances require estimates and a great deal of management judgment
including:
Uncollectible accounts receivable
Obsolete inventory
Warranty liabilities
Voluminous Data:
As organizations become larger, so does the volume of their exchange
transactions. This increases the likelihood that improperly recorded information is
included in the records—perhaps buried in a large amount of other information.
User Verifies Information
The user may go to the business premises to examine records and obtain
information about the reliability of the statements. Normally, this is impractical
because of cost. In addition, it is economically inefficient for all users to verify the
information individually.
CHAPTER FOUR
4. CLIENT ACCEPTANCE AND PLANNING THE AUDIT