Guide to Using International Standards on Auditing in - IFAC

Guide to Using International Standards on Auditing in - IFAC Guide to Using International Standards on Auditing in - IFAC

17.03.2014 Views

108 ong>Guideong> ong>toong> ong>Usingong> ong>Internationalong> ong>Standardsong> on Auditing in the Audits of Small- and Medium-Sized Entities Volume 1—Core Concepts Possible Overall Responses ong>toong> Assessed Risks at the Financial Statement Level Changes in the Audit Approach Consider the understanding obtained of the control environment. If the control environment is effective, the audiong>toong>r may have more confidence in internal control and the reliability of audit evidence generated internally within the entity. This could mean: • More audit work conducted at an interim date rather than at the period end; and • An approach that uses tests of controls as well as substantive procedures (combined approach). If the control environment is ineffective, it could result in: • Conducting more audit procedures as of the period end rather than at an interim date; • Obtaining more extensive audit evidence from substantive procedures; and • Increasing the number of locations ong>toong> be included in the audit scope. Review Accounting Policies being Used Evaluate whether the selection and application of accounting policies by the entity, particularly those related ong>toong> subjective measurements and complex transactions, may be indicative of fraudulent financial reporting resulting from management’s effort ong>toong> manage earnings. CONSIDER POINT Timing Overall responses can be developed at the planning stage and then incorporated inong>toong> the overall audit strategy. In new engagements, the overall responses can be developed on a preliminary basis during planning, and later confirmed or changed based on the results of the risk assessment. Documentation Establishing the overall audit response and audit strategy in a small entity need not be a complex or time-consuming exercise. In some cases, both steps could be completed by preparing a brief memorandum at the completion of the previous audit (assuming it covers all the required matters), which can be updated later based on discussions with management.

109 ong>Guideong> ong>toong> ong>Usingong> ong>Internationalong> ong>Standardsong> on Auditing in the Audits of Small- and Medium-Sized Entities Volume 1—Core Concepts Management Override Paragraph # Relevant Extracts from ISAs 240.26 When identifying and assessing the risks of material misstatement due ong>toong> fraud, the audiong>toong>r shall, based on a presumption that there are risks of fraud in revenue recognition, evaluate which types of revenue, revenue transactions or assertions give rise ong>toong> such risks. Paragraph 47 of ISA 240 specifies the documentation required where the audiong>toong>r concludes that the presumption is not applicable in the circumstances of the engagement and, accordingly, has not identified revenue recognition as a risk of material misstatement due ong>toong> fraud. (Ref: Para. A28-A30) 240.32 Irrespective of the audiong>toong>r’s assessment of the risks of management override of controls, the audiong>toong>r shall design and perform audit procedures ong>toong>: (a) Test the appropriateness of journal entries recorded in the general ledger and other adjustments made in the preparation of the financial statements. In designing and performing audit procedures for such tests, the audiong>toong>r shall: (i) Make inquiries of individuals involved in the financial reporting process about inappropriate or unusual activity relating ong>toong> the processing of journal entries and other adjustments; (ii) Select journal entries and other adjustments made at the end of a reporting period; and (iii) Consider the need ong>toong> test journal entries and other adjustments throughout the period. (Ref: Para. A41-A44) (b) Review accounting estimates for biases and evaluate whether the circumstances producing the bias, if any, represent a risk of material misstatement due ong>toong> fraud. In performing this review, the audiong>toong>r shall: (i) Evaluate whether the judgments and decisions made by management in making the accounting estimates included in the financial statements, even if they are individually reasonable, indicate a possible bias on the part of the entity’s management that may represent a risk of material misstatement due ong>toong> fraud. If so, the audiong>toong>r shall reevaluate the accounting estimates taken as a whole; and (ii) Perform a retrospective review of management judgments and assumptions related ong>toong> significant accounting estimates reflected in the financial statements of the prior year. (Ref: Para. A45-A47) (c) For significant transactions that are outside the normal course of business for the entity, or that otherwise appear ong>toong> be unusual given the audiong>toong>r’s understanding of the entity and its environment and other information obtained during the audit, the audiong>toong>r shall evaluate whether the business rationale (or the lack thereof) of the transactions suggests that they may have been entered inong>toong> ong>toong> engage in fraudulent financial reporting or ong>toong> conceal misappropriation of assets. (Ref: Para. A48) 240.33 The audiong>toong>r shall determine whether, in order ong>toong> respond ong>toong> the identified risks of management override of controls, the audiong>toong>r needs ong>toong> perform other audit procedures in addition ong>toong> those specifically referred ong>toong> above (that is, where there are specific additional risks of management override that are not covered as part of the procedures performed ong>toong> address the requirements in paragraph 32).

109<br />

<str<strong>on</strong>g>Guide</str<strong>on</strong>g> <str<strong>on</strong>g>to</str<strong>on</strong>g> <str<strong>on</strong>g>Us<strong>in</strong>g</str<strong>on</strong>g> <str<strong>on</strong>g>Internati<strong>on</strong>al</str<strong>on</strong>g> <str<strong>on</strong>g>Standards</str<strong>on</strong>g> <strong>on</strong> <strong>Audit<strong>in</strong>g</strong> <strong>in</strong> the Audits of Small- and Medium-Sized Entities Volume 1—Core C<strong>on</strong>cepts<br />

Management Override<br />

Paragraph #<br />

Relevant Extracts from ISAs<br />

240.26 When identify<strong>in</strong>g and assess<strong>in</strong>g the risks of material misstatement due <str<strong>on</strong>g>to</str<strong>on</strong>g> fraud, the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r<br />

shall, based <strong>on</strong> a presumpti<strong>on</strong> that there are risks of fraud <strong>in</strong> revenue recogniti<strong>on</strong>, evaluate<br />

which types of revenue, revenue transacti<strong>on</strong>s or asserti<strong>on</strong>s give rise <str<strong>on</strong>g>to</str<strong>on</strong>g> such risks. Paragraph<br />

47 of ISA 240 specifies the documentati<strong>on</strong> required where the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r c<strong>on</strong>cludes that the<br />

presumpti<strong>on</strong> is not applicable <strong>in</strong> the circumstances of the engagement and, accord<strong>in</strong>gly, has<br />

not identified revenue recogniti<strong>on</strong> as a risk of material misstatement due <str<strong>on</strong>g>to</str<strong>on</strong>g> fraud. (Ref: Para.<br />

A28-A30)<br />

240.32 Irrespective of the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r’s assessment of the risks of management override of c<strong>on</strong>trols, the<br />

audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r shall design and perform audit procedures <str<strong>on</strong>g>to</str<strong>on</strong>g>:<br />

(a) Test the appropriateness of journal entries recorded <strong>in</strong> the general ledger and other<br />

adjustments made <strong>in</strong> the preparati<strong>on</strong> of the f<strong>in</strong>ancial statements. In design<strong>in</strong>g and<br />

perform<strong>in</strong>g audit procedures for such tests, the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r shall:<br />

(i) Make <strong>in</strong>quiries of <strong>in</strong>dividuals <strong>in</strong>volved <strong>in</strong> the f<strong>in</strong>ancial report<strong>in</strong>g process about<br />

<strong>in</strong>appropriate or unusual activity relat<strong>in</strong>g <str<strong>on</strong>g>to</str<strong>on</strong>g> the process<strong>in</strong>g of journal entries and<br />

other adjustments;<br />

(ii) Select journal entries and other adjustments made at the end of a report<strong>in</strong>g period;<br />

and<br />

(iii) C<strong>on</strong>sider the need <str<strong>on</strong>g>to</str<strong>on</strong>g> test journal entries and other adjustments throughout the<br />

period. (Ref: Para. A41-A44)<br />

(b) Review account<strong>in</strong>g estimates for biases and evaluate whether the circumstances<br />

produc<strong>in</strong>g the bias, if any, represent a risk of material misstatement due <str<strong>on</strong>g>to</str<strong>on</strong>g> fraud. In<br />

perform<strong>in</strong>g this review, the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r shall:<br />

(i) Evaluate whether the judgments and decisi<strong>on</strong>s made by management <strong>in</strong> mak<strong>in</strong>g the<br />

account<strong>in</strong>g estimates <strong>in</strong>cluded <strong>in</strong> the f<strong>in</strong>ancial statements, even if they are <strong>in</strong>dividually<br />

reas<strong>on</strong>able, <strong>in</strong>dicate a possible bias <strong>on</strong> the part of the entity’s management that<br />

may represent a risk of material misstatement due <str<strong>on</strong>g>to</str<strong>on</strong>g> fraud. If so, the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r shall<br />

reevaluate the account<strong>in</strong>g estimates taken as a whole; and<br />

(ii) Perform a retrospective review of management judgments and assumpti<strong>on</strong>s related<br />

<str<strong>on</strong>g>to</str<strong>on</strong>g> significant account<strong>in</strong>g estimates reflected <strong>in</strong> the f<strong>in</strong>ancial statements of the prior<br />

year. (Ref: Para. A45-A47)<br />

(c) For significant transacti<strong>on</strong>s that are outside the normal course of bus<strong>in</strong>ess for the entity,<br />

or that otherwise appear <str<strong>on</strong>g>to</str<strong>on</strong>g> be unusual given the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r’s understand<strong>in</strong>g of the entity<br />

and its envir<strong>on</strong>ment and other <strong>in</strong>formati<strong>on</strong> obta<strong>in</strong>ed dur<strong>in</strong>g the audit, the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r shall<br />

evaluate whether the bus<strong>in</strong>ess rati<strong>on</strong>ale (or the lack thereof) of the transacti<strong>on</strong>s suggests<br />

that they may have been entered <strong>in</strong><str<strong>on</strong>g>to</str<strong>on</strong>g> <str<strong>on</strong>g>to</str<strong>on</strong>g> engage <strong>in</strong> fraudulent f<strong>in</strong>ancial report<strong>in</strong>g or <str<strong>on</strong>g>to</str<strong>on</strong>g><br />

c<strong>on</strong>ceal misappropriati<strong>on</strong> of assets. (Ref: Para. A48)<br />

240.33 The audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r shall determ<strong>in</strong>e whether, <strong>in</strong> order <str<strong>on</strong>g>to</str<strong>on</strong>g> resp<strong>on</strong>d <str<strong>on</strong>g>to</str<strong>on</strong>g> the identified risks of management<br />

override of c<strong>on</strong>trols, the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r needs <str<strong>on</strong>g>to</str<strong>on</strong>g> perform other audit procedures <strong>in</strong> additi<strong>on</strong> <str<strong>on</strong>g>to</str<strong>on</strong>g> those<br />

specifically referred <str<strong>on</strong>g>to</str<strong>on</strong>g> above (that is, where there are specific additi<strong>on</strong>al risks of management<br />

override that are not covered as part of the procedures performed <str<strong>on</strong>g>to</str<strong>on</strong>g> address the requirements<br />

<strong>in</strong> paragraph 32).

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!