Guide to Using International Standards on Auditing in - IFAC

Guide to Using International Standards on Auditing in - IFAC Guide to Using International Standards on Auditing in - IFAC

17.03.2014 Views

134 ong>Guideong> ong>toong> ong>Usingong> ong>Internationalong> ong>Standardsong> on Auditing in the Audits of Small- and Medium-Sized Entities Volume 1—Core Concepts Paragraph # Relevant Extracts from ISAs 330.14 If the audiong>toong>r plans ong>toong> use audit evidence from a previous audit about the operating effectiveness of specific controls, the audiong>toong>r shall establish the continuing relevance of that evidence by obtaining audit evidence about whether significant changes in those controls have occurred subsequent ong>toong> the previous audit. The audiong>toong>r shall obtain this evidence by performing inquiry combined with observation or inspection, ong>toong> confirm the understanding of those specific controls, and: (a) If there have been changes that affect the continuing relevance of the audit evidence from the previous audit, the audiong>toong>r shall test the controls in the current audit. (Ref: Para. A36) (b) If there have not been such changes, the audiong>toong>r shall test the controls at least once in every third audit, and shall test some controls each audit ong>toong> avoid the possibility of testing all the controls on which the audiong>toong>r intends ong>toong> rely in a single audit period with no testing of controls in the subsequent two audit periods. (Ref: Para. A37-A39) 330.29 If the audiong>toong>r plans ong>toong> use audit evidence about the operating effectiveness of controls obtained in previous audits, the audiong>toong>r shall include in the audit documentation the conclusions reached about relying on such controls that were tested in a previous audit. Rotational Testing of Controls Assuming that the facong>toong>rs outlined in the exhibit below do not apply, it is possible that the tests of operating effectiveness of internal controls may only need ong>toong> be performed once every third audit. The actual period of reliance will be based on professional judgment, but cannot exceed two years. Facong>toong>rs that would rule out the use of rotational testing are outlined below. Exhibit 10.5-6 Use of control testing performed in prior years is NOT permitted when: Reliance on the control is required ong>toong> mitigate a “significant risk”; The operation of the internal control has changed during the period, or the risk being mitigated by the control has changed; A weak control environment exists; The ongoing moniong>toong>ring of internal control operation is poor; There is a significant manual element ong>toong> the operation of relevant controls; Personnel changes have occurred that significantly affect the application of the control; Changing circumstances indicate the need for changes in the operation of the control; and/or General IT controls are weak or ineffective. Before audit evidence obtained in prior audits can be used, the continuing relevance of such evidence needs ong>toong> be established each period. This will include confirming the understanding of those specific controls through: • Inquiry of management and others about changes; and • Observation or inspection of the internal control ong>toong> determine its continuing implementation.

135 ong>Guideong> ong>toong> ong>Usingong> ong>Internationalong> ong>Standardsong> on Auditing in the Audits of Small- and Medium-Sized Entities Volume 1—Core Concepts When there are a number of controls where evidence could be used from prior audits, the reliance should be staggered so that some testing of internal control is performed during each audit. Testing at least a few controls each period also provides collateral evidence about the continuing effectiveness of the control environment. In general, the higher the risks of material misstatement or the greater the reliance placed on internal control, the shorter the time period should be between tests of controls.

135<br />

<str<strong>on</strong>g>Guide</str<strong>on</strong>g> <str<strong>on</strong>g>to</str<strong>on</strong>g> <str<strong>on</strong>g>Us<strong>in</strong>g</str<strong>on</strong>g> <str<strong>on</strong>g>Internati<strong>on</strong>al</str<strong>on</strong>g> <str<strong>on</strong>g>Standards</str<strong>on</strong>g> <strong>on</strong> <strong>Audit<strong>in</strong>g</strong> <strong>in</strong> the Audits of Small- and Medium-Sized Entities Volume 1—Core C<strong>on</strong>cepts<br />

When there are a number of c<strong>on</strong>trols where evidence could be used from prior audits, the reliance should be<br />

staggered so that some test<strong>in</strong>g of <strong>in</strong>ternal c<strong>on</strong>trol is performed dur<strong>in</strong>g each audit. Test<strong>in</strong>g at least a few c<strong>on</strong>trols<br />

each period also provides collateral evidence about the c<strong>on</strong>t<strong>in</strong>u<strong>in</strong>g effectiveness of the c<strong>on</strong>trol envir<strong>on</strong>ment.<br />

In general, the higher the risks of material misstatement or the greater the reliance placed <strong>on</strong> <strong>in</strong>ternal c<strong>on</strong>trol,<br />

the shorter the time period should be between tests of c<strong>on</strong>trols.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!