《如何成为合格的审计咨询师09》由会员分享，可在线阅读，更多相关《如何成为合格的审计咨询师09（43页珍藏版）》请在金锄头文库上搜索。
1、Internal Control and Control Risk,Chapter 9,Learning Objective 1,Contrast managements need for internal control with the auditors need to consider internal control when designing an audit.,Inherent Limitations,Reasonable Assurance,Managements Responsibility,Key Concepts,Clients Concerns,Compliance w
2、ith applicable laws and regulations,Reliability of financial reporting,Efficiency and effectiveness of operations,Auditor Concerns,Controls over classes of transactions,Controls related to reliability of financial reporting,Sales Transaction-Related Audit Objectives,Sales Transaction-Related Audit O
3、bjectives,Objective General Form,Related Audit Objectives,Transactions are properly classified (classification).,Sales transactions are properly classified.,How Frauds Have Been Discovered,Notification by employee,Internal controls,Internal auditor,Customer notification,Accidental discovery,Manageme
4、nt investigation,How Frauds Have Been Discovered,Anonymous reporting,Hot line notification,Employee investigation,Government notification,External auditor,Other sources,Learning Objective 2,Describe how information technology affects internal control.,Effect of Information Technology on Internal Con
5、trol,Information Technology,Risks Associated With the Use of Information Technology,Programmed errors,Processing incorrect data,Unauthorized access,Learning Objective 3,Explain the five components of internal control.,Control Environment,Five Components of Internal Control,Risk Assessment,Control Ac
6、tivities,Information and Communication,Monitoring,The Control Environment,Integrity and ethical values,Commitment to competence,Board of directors or audit committee participation,Managements philosophy and operating style,The Control Environment,Organizational structure,Assignment of authority and
7、responsibility,Human resources policies and practices,Risk Assessment,Identify factors affecting risk.,Assess significance of risks and likelihood of occurrence.,Determine actions necessary to manage risk.,Control Activities,1. Adequate separation of duties,2. Proper authorization of transactions an
8、d activities,3. Adequate documents and records,4. Physical control over assets and records,5. Independent checks on performance,Adequate Separation of Duties,Proper Authorization of Transactions and Activities,General authorization,Specific authorization,Adequate Documents and Records,Prenumbered co
9、nsecutively,Prepared at the time of transaction,Designed for multiple uses,Constructed to encourage correct preparation,Simple enough to ensure understanding,Physical Control over Assets and Records,Physical precautions,Controls related to IT equipment, programs, and data files,Independent Checks on
10、 Performance,The need for independent checks arise because internal control tends to change over time unless there is a mechanism for frequent review.,Information and Communication,The purpose of an accounting information and communication system is to,initiate, record, process, and report the trans
11、actions and to maintain accountability for the related assets.,Monitoring,Managements ongoing and periodic assessment of the quality of internal control performance ,to determine whether controls are operating as intended and modified when needed.,Learning Objective 4,Explain methods used to obtain
12、an understanding of internal control.,Understanding Internal Control and Assessing Control Risk,Obtain Understanding of Internal Control: Design and Operation,Assess Control Risk,Test Controls,Decide Planned Detection Risk and Substantive Tests,Reasons for Sufficiently Understanding Internal Control
13、,SAS 55 (as amended by SAS 78 and 594 plus AU319) requires the auditor to obtain an understanding of internal control for every audit.,Minimum audit planning matters,Auditability Potential material misstatements Detection risk Design of test,Procedures to Determine Design and Placement,Update and ev
14、aluate auditors previous experience with the entity.,Make inquires of client personnel.,Read clients policy and systems manuals.,Examine documents and records.,Observe entity activities and operations.,Documentation of the Understanding,Narrative,Flowchart,Internal control questionnaire,Learning Obj
15、ective 5,Assess control risk by linking strengths and weaknesses of internal control to transaction- related audit objectives.,Assess Control Risk,Obtain sufficient understanding for planning.,Assess whether the entity is auditable.,Determine assessed control risk.,Assess if a lower control risk cou
16、ld be supported.,Determine the appropriate assessed control risk.,Assess Control Risk,Identify transaction-related audit objectives.,Identify specific controls.,Identify and evaluate weaknesses.,Identify and Evaluate Weaknesses,Identify existing controls.,Identify the absence of key controls.,Determine misstatements that could result.,Consider compensating controls.,The Control Risk Matrix,Auditors use the control risk matrix to identify both controls and weaknesses a
