Auditing I Matterial
Auditing I Matterial
Course Content
1
Chapter II: The Auditing Profession 7hrs
4.1. Definition
4.2. Principles and elements of internal control system
4.3. Internal control and external audits
4.4. Internal control on revenues and purchases
4.5. Internal control on payroll, cash and other areas; Report to management
4.6. Internal auditing
2
Chapter V: Audit Report 8hrs
Konrath, Larry, Auditing Concepts & Applications: A Risk Analysis Approach, 4th
ed. South western College USA, 1999
Guy, Dan M. etal, Auditing, 4th ed. The Dryden Press, Florida
Meigs, Whittinton, Peny and Meigs, Principles of Auditing, 9th ed. Irwin Publishing
co.1989 USA.
David N.Richiute, Auditing Concepts and Standards. South -Western Publishing
co.1982 USA.
Willingtom and Carmichael, Auditing Concepts and Methods. 2nd ed. 1975 USA.
Whittington & Pany, Principles of Auditing, 11th edition, Irwin, 1995
Shekhar, Auditing, Vikas Publishing House, 2003
3
JOURNALS, PERIODICALS AND MAGAZINES
Various Proclamations, orders and other legal provisions that affects Accounting and
auditing practices in Ethiopia
Evaluation Policy
Assignments, quizzes & tests……………… 20%
Mid-term exam…………………………….. 30%
4
UNIT ONE
INTRODUCTION TO AUDITING
1.1. Historical Development and Evolution of Auditing
The development of auditing is closely related, to the development of organized systems of
accounting. In the early stages of civilization, the number of transactions was usually so
small that an individual was able to record the transactions himself/herself. However, with
the growth of civilization and consequential growth in volume and complexities of
transactions, it became necessary to entrust the job of recording the transactions to other
persons. The trend started with the maintenance of accounts of empires by public officials.
Almost simultaneously, a need was felt to institute a check on the fidelity of the persons
responsible for retaining the accounts. To accomplish this purpose, it became customary to
entrust a person with the responsibility to hear those who had maintained the accounts. In
the course of time, such persons came to be known as auditors-the term being derived from
the Latin word 'audre,' which means to 'hear'.
The available evidence indicates that a system of auditing existed even in times of ancient
civilizations. Mesopotamian relics of commercial transactions reveal tiny marks, dots, ticks,
and circles at the side of the figures. This indicates that those figures had been checked. In
ancient Egypt, two officials recorded fiscal receipts separately and other officials conducted
the audit. In Greece, the accounts of public officials were scrutinized at the expiring of their
terms of office. In the UK during the 12th century records revealed the existence of a system
of accounting and auditing of the transactions of the state. Special audit officers were
appointed at the time to ensure that the revenue and expenditure of the state were duly
accounted for. The audit of the accounting system of London towards the end of the 13 th
century was aimed at ensuring the absence of frauds, arithmetical accuracy of accounts and
compliance with the authority given to the custodian. The subsequent years witnessed the
gradual maintenance of accounts by individual agriculturists, estate owners, traders and
others. Mercantile account took definite plan in Europe during this period. Contemporarily
the legal provisions and growth of the current auditing scene have immeasurably enhanced to
understand its earlier origins and the economical situation.
The development of trade and commerce between medieval Italian cities and the east, which
fostered the sailing ships "joint venture" accounts to end the venture at the completion of the
voyage. Thus, responsibility for this function fell on the shoulder of the bookkeeper and the
lawyer. These events were further evolved by the growth of partnership and credit trade and
commerce. During the 1500s the practice of outside verification spread to the rapidly
developing limited liability companies (LLC) who were responsible for outside investors.
In a parallel development, English manorial auditing began during the medieval period when
records of large manors (farms) were reviewed annually by auditors who represented the lord
and the council. This became the foundation of the British statutory audit in the 19 th century
and later spread throughout Europe.
It is, however, the Industrial Revolution (1900) that the accentuated the need for the
verification of appropriate allocation of labor wages and proper determination of profits to
assess what is to be partaken by labour, government and owner.
This was the period where government regulation of business taxation and banking
regulation of business, and development in economic theory come to influence thoughts on
business, costs, and finance requiring more appropriate determination and evaluation of net
income, and valuation of balance sheet.
5
First, a voluntary company audit was instituted in to practice where companies were having
their accounts voluntarily audited. Then, in 1844 company audited by persons independent of
management become a requirement by law. Considerations of labor disputes, changes in
technology development in large scale enterprise (railways), and changes in economic
thought, emerging government regulatory bodies, income taxation and corporate entity
concept were influencing events preceding the stock market crash, all of which gave
prominence to financial control and accountability.
The stock market crash debacle in 1930 registered the establishment of the SEC, and the need
for investigation into false companies accompanied by new requirements on audits. Auditors'
responsibility in fraud detection was viewed in new perspective. The auditors' legal liability
and responsibility for third party, reliance and evidence was being affirmed through common
law.
By 1940, interest in internal management efficiency and performance, and the need of
information for planning and decision making brought the development of management
accounting and internal control. This event directed focus of development in internal audit. In
the 1950s and 60s system based approach to audit come to gain grounds and a new view on
attest function forged which stressed on disclosure requirement and social responsibility of
the auditor.
In the 1990s, risk based approach obtained wide acceptance and application in the auditing
practice. Area of focus is by risk weight. Risk assumed are guided by level of assurance
needed to obtain evidence and concomitant cost. Thus, the higher the risk objects, the more
intensive the audit is.
In general, these 20th century developments in auditing may be helpful to you in
understanding the direction in which auditing is moving. Among them, the most significant
developments are:
a) A shift in emphasis from the detection of fraud to the determination of fairness of
financial statements.
b) Increased responsibility of the auditors to third parties, such as governmental agencies,
stock exchanges and an investing public.
c) The change of auditing method from detailed examination of individual transaction, to
the use of sampling techniques, including statistical sampling.
d) Recognition of the need to consider internal control as a guide to the direction and
amount of testing and sampling to be preformed.
e) Development of new auditing procedures applicable to electronic data processing systems
and use of the computer as an auditing tool.
f) Recognition of the need for auditors to find means of protection from the current wave of
litigation
g) An increased demand for prompt disclosure of both favorable and unfavorable
information concerning any publicly owned company.
h) Increased concern with compliance by organizations with laws and regulations.
c)The institute of chartered accountants of India has defined auditing as "a systematic
independent examination of data, statements, records, operations and performances of an
enterprise for a stated purpose. In any auditing situation the auditor recognize propositions
before he/she programs for examination, collects evidence, evaluates the data and on this
basis formulates his/her judgment which is communicated through his/her audit report.
d)According to Arens and Loebbecke, auditing is defined as, the accumulation and
evaluation of evidence about information to determine and report on the degree of
correspondence between the information and established criteria. Auditing should be done by
a competent independent person.
The description of auditing by Arens and Loebbecke includes several key terminologies
which are discussed in this section briefly.
Information and established criteria: To do an audit, there must be information in a
verifiable form and some standards [criteria] by which the auditor can evaluate the
information. Information can and does take many forms. Auditors routinely perform
audits of quantifiable information, including companies’ financial statements and
individuals’ federal income tax returns. Auditors also perform audits of more subjective
information, such as the effectiveness of computer systems and the efficiency of
manufacturing operations. The criteria for evaluating information also vary depending on
the information being audited.
Accumulating and evaluating evidence: Evidence is defined as any information used by
the auditor to determine whether the information being audited is in accordance with the
established criteria. Evidence takes many different forms, including oral testimony of the
auditee, written communication with outsiders, and observations by the auditor. It is
important to obtain a sufficient quality and volume of evidence to satisfy the purpose of
the audit.
Competent, independent person: The auditor must be qualified to understand the criteria
used and competent to know the types and amount of evidence to accumulate to reach the
proper conclusion after the evidence has been examined. The auditor also must have an
independent mental attitude. It does little good to have competent person who is biased
performing the evidence accumulation when unbiased information and objective thinking
are needed for the judgments and decisions to be made.
7
Reporting: The final stage in the audit process is the audit report, which is the
communication of the findings to users. Reports differ in nature, but in all cases they
must inform readers of the degree of correspondence between information and
established criteria. Reports also differ in form and can vary from the highly technical
type report usually associated with financial statement audits to a simple oral report in the
case of an operational audit done of a small department’s effectiveness.
1.3. Difference Between Auditing and Accounting
Accounting is the recording, classifying and summarizing economic events in logical manner
for the purpose of providing information for decision making. The function of accounting is
to provide certain types of quantitative information that management and other can use to
make decision. To provide relevant information, accountant must have through
understanding of the principles and rules that provide base for preparing accounting
information. In addition accountant must develop a system to make sure that the activities,
economic events are properly recorded on timely basis at reasonable cost.
In auditing the accounting data, the concern is with determining whether the recorded
information properly reflects the economic events that occur during the accounting period.
Since the accounting rules are the criteria for evaluating whether the information is properly
recorded, any auditor involved with those data must thoroughly understand these rules that
govern the accountancy.
The difference between auditing and accounting is best summarized as follows:
Accounting Auditing of financial statement
Is the process of Is the process of obtaining and evaluating
identifying ,measuring, recording and evidences and determining the fairness of
communicating economic financial statement inconformity with
information about an organization in GAAS
conformity with GAAP
Deliver financial statements to users Deliver audit report(opinion) to users
precede auditing Begins when accounting ends
No prescribed qualification is legally The external auditor must be chartered
required for the accountant accountant(CPA)
All accountant may not have auditing Auditors must have accounting
knowledge knowledge
An accountant is an employee of the An auditor is independent professional
firm
Constructive and theoretical Critical aspect of accounting and
analytical in nature
Generally appointed by management Appointed by the shareholders or audit
and expected to perform according to committee of the organization and is
the rule and regulation set by independent
management
8
1.4. Nature, Purpose and Scope of Auditing
1.4.1. Nature of Auditing
Framework of Auditing and Assurance Standards and Guidance Notes on Related service
issued recently distinguishes audits from related services. Related services comprise reviews,
agreed-upon procedures and compilations. Audits and reviews are designed to enable the
auditor to provide high and moderate levels of assurance respectively, such terms being used
to indicate their comparative ranking.
Assurance in this context refers to the auditor's satisfaction as to the reliability of an assertion
being made by one party for use by another party. To provide such assurance, the auditor
assesses the evidence collected as a result of procedures conducted and expresses a
conclusion. The degree of satisfaction achieved and, therefore, the level of assurance which
may be provided is determined by the procedures performed and their results. In an audit
engagement, the auditor provides a high, but not absolute, level of assurance that the
information subject to audit is free of material misstatement expressed positively in the audit
report. In a review engagement, the auditor provides a moderate level of assurance that the
information subject to review is free of material misstatement. This is expressed in the form
of negative assurance. For agreed-upon procedures, auditor simply provides a report of the
factual findings, no assurance is expressed. Instead, users of the report draw their own
conclusions from the auditor's work. In a compilation engagement, although the users of the
compiled information derive some benefit from the involvement of a member of the Institute,
no assurance is expressed in the report. Objective of an audit is to enable the auditor to
express an opinion whether the financial statements are prepared, in all material respects, in
accordance with an identified financial reporting framework "give a true and fair view".
Absolute assurance in auditing is not attainable as a result of such factors as the need for
judgment, the use of test checks, the inherent limitations of any accounting and internal
control systems and the fact that most of the evidence available to the auditor is persuasive,
rather than conclusive, in nature. The objective of a review of financial statements is to
enable an auditor to state whether, on the basis of procedures which do not provide all the
evidence that would be required in an audit, anything has come to the auditor's attention that
causes the auditor to believe that the financial statements are not prepared, in all material
respects, in accordance with an identified financial reporting framework. While a review
involves the application of audit skills and techniques and the gathering of evidence, it does
not ordinarily involve on assessment of accounting and internal control systems, tests of
records and of responses to inquiries by obtaining corroborating evidence through inspection,
observation, confirmation and computation, the auditor attempts to become aware of all
significant matters, the procedures of a review make the achievement less likely than in an
audit engagement, thus the level of assurance provided in a review report is correspondingly
less than that given in an audit report. In an engagement to perform agreed-upon procedures
and auditor is engaged to carry out those procedures of an audit nature to which the auditor
and the entity and any appropriate third parties have agreed and to report on factual findings.
The report is restricted to those parties that have agreed to the procedures to be performed
since others, unaware of the reasons for the procedures, may misinterpret the results. In a
compilation engagement, a member of the Institute is engaged to use accounting expertise as
opposed to auditing expertise to collect, classify, and summaries financial information. The
procedures employed are not designed and do not enable the member to express any
assurance on the financial information. However, users derive some benefit as a result of the
member's involvement because the service has been performed with due professional skill
and care. An auditor is associated with financial information when the auditor attaches a
report to that information or consents to the use of the auditor's name in a professional
9
connection. If the auditor is not associated in this manner, third parties can assume no
responsibility of the auditor.
12
3. Operational audits /Performance Audits/
An operation audit is a systematic independent appraisal activity within an enterprise for a
review of the entire departmental performance as a service to management. The overall
objective of operational auditing is to assist all levels of management in the effective
discharges of responsibilities by furnishing them with objective analysis, appraisal,
recommendations and pertinent comments concerning the activities reviewed. It may be
noted that the terms, operation audit and performance audit often are used interchangeably.
The purpose of an operational audit usually includes the intention to appraise performance of
a particular organizational function or group activities. However, the broad statement must
be expanded to specify precisely the scope of the audit and the nature of the report. The
auditors must determine specifically which policies and procedures are to be appraised and
show their relation to the specific objectives of the enterprise or organization.
Before starting the operational audit, the auditors must obtain a comprehensive knowledge of
the objectives, organizational structure, and operating characteristics of the unit to be audited.
This familiarization process might begin with a study of organizational charts statements of
the function and responsibilities assigned are management polices and directives and
operating polices and procedures.
In attempting to meet, managerial needs, operational auditors sample the work performance to see
whether it is in accordance with approved procedures. They verify the accuracy and consistency
of the information obtained in operating reports, and they study the format of the reports to
determine whether the information is presented in a meaningful form. The auditor's responsibility
for seeing that the enterprise's assets are safeguarded against fraud is expanded to a responsibility
for providing protection against all kinds of waste. An enterprise having a strong system of
internal control over its cash, inventory, and other personal property will never suffer a serious
loss from fraud or theft.
Now-a-days economic pressures are forcing companies and government enterprises at all
levels to economize, resulting in an increased demand for the information provided by
operational audits. The demand has been so pronounced that operational auditing has become
an extension of the internal auditing function of most large enterprises. Also governmental
auditors engage extensively in evaluating the economy, effectiveness and efficiency of
various government programs.
Objectives of Operational Audits
Internal auditors often perform operational audits. The main users of operational audit
reports are managers at various levels including the board of directors. Decision makers
need assurances that every component of an enterprise is working to attain the organization's
goals. For example, the management needs the following information.
Assessment of the unit performance in relation to management's objectives or other
appropriate criteria.
Assurance that its plans are comprehensive, consistent and understood at the operating
levels.
Objective information on how well its plans and policies are being carried out in al
areas of operation's and opportunities for improvement in effectiveness, efficiency and
economy.
Information on weakness in operating controls, particularly as to possible sources of
waste.
Reassurance that all operating reports can be relied on as basis for action.
In every audit, it is important to state clearly the boundaries of the examination. These
boundaries identify the economic entity to be examined and the time period to be covered.
13
Thus, the boundaries serve to define and to limit the auditors' responsibilities. The economic
entity to be audited may be a sole proprietorship, a partnership, a corporation and its
subsidiaries.
1.5. Types of Auditors
Auditors are often viewed as falling into three main types
1. Independent financial auditor /Certified Public Accountant/
2. Internal auditors
3. government auditors
1. Independent financial auditor: Independent/financial auditor or certified public
accountant is a person licensed by the state to practice public accounting as a profession
based on having passed the uniform CPA examination and having met certain education
and experience.
Including public accounting profession, all of the recognized professions have many common
characteristics. The most important of these characteristics are a responsibility to serve the public,
of a complex knowledge, standards of admission to the profession and a need for public
confidence. To Certified Public Accountants, public confidence is of special significance.
Credibility is the product of the certified public accountants. Without public confidence in the
attester, the attest function serves no useful purpose. To attest to financial statements means to
provide assurance as to their fairness and dependability. The attest function includes, first, the
independent public accountant, must carry out an examination to provide the objective evidence
that enables the auditors to express an informed opinion on the financial statements. Second, the
attest function is the issuance of the auditor's report, which conveys to users of the financial
statements the auditor opinion as to the fairness and dependability of the financial statements.
Reliable financial information is essential to the very existence of society. Thus, good accounting
and audited financial statement aid society in allocation its resources in the most efficient manner.
The goal is to allocate limited resources to the production of those goods and services for which
demand is greatest. Economic resources tend to be attracted to the industries, and the
organizational entities that are shown by accounting measurements to be capable of using more
resources to the best advantage. Inadequate and inappropriate accounting result on the other hand,
conceal waste and inefficiency and thereby prevent resources from being allocated in a rational
manner. It is the report by the independent auditors that gives credibility to a set of financial
statements and makes acceptable to investors, bankers, government and other users.
2. Internal Auditors: Although most auditing literatures interest is primarily in the audit of
financial statements by Certified Public Accountants, other professional groups carry on
large scale auditing. These well known types of auditors are internal auditors.
The standard definition adapted by the Institute of Internal Auditors of United States of America,
however is that internal auditing is an independent appraisal activity established within an
organization or enterprise to examine and evaluate its activities as a service to the organization in
the effective discharge of their responsibilities by furnishing their analysis, appraisals,
recommendations and counsel. In performing these functions internal auditors can be considered
as a part of the organization's internal control structure. They represent high level control that
functions by measuring and evaluating the effectiveness of other internal control policies and
procedures.
Internal auditors are not merely concerned with the organization's financial controls. Their work
encompasses the entire internal control structure of the organization or enterprise. They evaluate
and test the effectiveness of internal control policies and procedures designed to help the
organization or enterprises to meet all of its objectives.
14
The internal auditing head often accordingly reports to the general manager or board of directors
or president or another high executive. This strategic placement high in the organizational
structure helps assure the internal auditors will have ready access to all units of the business and
that their recommendations will be given prompt attention by department heads. This reporting
standard provides guidance for the head of internal auditing in managing the internal auditing
functions. The head of internal auditing is responsible for properly managing the departments to
help assured that, the audit work is preformed in accordance with professional standards and
fulfills the general purposes and responsibilities developed by management of the organization
and the resources of the internal auditing department are efficiently and effectively employed.
A large part of the internal auditors consists of operational audits in addition; they may conduct
numerous compliance audits. The number and kind of investigative activities varies from year to
year. Unlike the certified public accountants who are committed to verify each significant item in
the annual financial statements the internal auditors are not obliged to repeat their audits in annual
basis.
3. Government Auditors: A government audit is conducted primarily to ensure that financial
transactions are recorded with proper sanction and authorization. In Ethiopia, the office of auditors
General and office of control has been given the responsibility to conduct the audit of the central
government and the state government. Government auditors examine and make that
Transactions are correctly recorded and activities conform to the rules and regulations
Ensure that public funds are not misused
Examine the efficiency and effectiveness of selected projects or program run by
government.
To sum up, auditors and type of auditing area or audit emphasis are summarized as follows.
Audit Auditors
Internal auditors Independent Auditors Government
Auditors
Operational Primary Nominal Primary
Audit
Financial Audit Secondary Primary Nominal
Compliance Primary Secondary Primary
Audit
UNIT TWO
AUDITING PROFESSION
2.1. Profession
A profession is a vocation of the highest standing. It calls on its members to serve the public
by offering to them highly technical and always confidential advise and services, which
require a different standard of conduct from the tradesman. Its members stand in a different
relationship altogether from the man doing ordinary business….
Considered in this definition, most criteria for a profession include a requirement for a
professional code of conduct.
Characteristics of Profession
Profession may be defined from various perspectives but is expected to contain basic
elements regardless of whatever perspective it is defined.
Encyclopedia of sociology sets five criterions for profession: esoteric knowledge,
autonomy on the job, authority over clients, altruistic and public recognition of the
occupation as a profession.
15
On the other hand, concise Oxford Dictionary of sociology defines profession using four
criterions: central regulatory body, code of conduct, careful management of knowledge
and control on members in the profession.
Encyclopedia of Education sets six criterion: an essential social function to be performed,
lengthy period of training and experience to enter the profession, practitioners are service
oriented (altruistic), official recognition of professional status by the government, the
nature of service rendered makes the clients incapable of appraising it and there are
standards of competence.
There seems to be a level of consensus on major factors in the definition of a profession.
Hence, a profession can satisfy be characterized by the following elements:
Specialized body of knowledge,
Standard of qualification for admission,
Standard of conduct of behavior,
Level of status recognition, and
Acceptance of social responsibility and legal liability
Specialized Body of Knowledge
A highly developed profession has a very highly specialized written body of knowledge. The
more the profession is highly developed the more specialized the body of knowledge and,
requiring longer period of time to absorb. The body of knowledge is dynamic and is in
constant development and growth and not static. The body of knowledge here goes far
beyond general educational knowledge.
Standard of qualification of admission
A profession to be a profession must have well- recognized and accepted predetermined
criterion of qualification for admission in to the profession. The standards include
educational requirements as well as other normal and legal criteria fulfillment. The
educational requirements are, composed of theoretical knowledge and practical experience.
Usually, the fulfillment of these requirements is measured through tests of qualifying
examinations to prove the consumption of the accumulated body of knowledge that exists in
the profession, and competence in it.
Standard of Conduct of behavior
A profession has standard of conduct of behavior to be observed by the professional through
prescribed code of ethics that attempt to enforce general rule conduct, and maximum and
mini mum rules on competency and responsibility to client and colleagues. Good example of
such code of conduct is the "Oath of Hippocrates" which is sworn by medical doctors at their
graduation.
Level of status recognition
The quality and level of professional services demanded y society determines the level of
status and recognition to the profession. The level of status and recognition earned in a
society is a function of the quality f professional service rendered which in turn are a function
of standard of professional qualification and the degree of the social, moral and legal
responsibility assumed. The more rigorous are standard of qualification and cod of ethics
needed for rendering the professional services, the higher will be the level of status and
recognition given to the profession.
Acceptance of social responsibility and legal liability
A profession to be a Profession must accept responsibility for the consequences of its action.
Not only legal responsibility which arises out of the contractual obligation, but also moral
responsibility to the profession itself and the profession to the society at large. The profession
16
itself has responsibility to assure the society of the quality of services demanded and accept
sanction for failure to do so.
One can find these characteristics in different stages of growth and development in various
professions. Some profession more than others seem to have attempted to fulfill some
elements better. The roll of professional associations in this regard is crucial. An association
is a body of professional and it is this body that place important roll in prescribing the
professional standards and policing their implement ability.
1.2. Professional Ethics
Broadly defined, the term ethics represents the moral principles or values of conduct
recognized by an individual or group of individuals. Ethics apply when individual has to
make decision from various alternatives regarding moral principles. All societies and
individuals possess a sense of ethics in that they can identify what is "good" or "bad". As
C.S. Lewis Observed, "Human beings all over the earth have some sort of agreement as to
what right and wrong are."
Ethical conduct is determined by each individual. Each person uses moral reasoning to
decide whether some thing is ethical or not. Ethics are a moral code of conduct that requires
an obligation by us to consider not only ourselves but others. There are a number of ways
that individuals can receive ethical guidance in making moral decisions. Sources for ethical
guidance include our family, friends, religion, and role models.
The purpose of professional ethics in the auditing profession as well as in any other
profession is to build the public confidence, to judge the quality of audit work and means of
grounding guidance of conduct for practitioners.
The advantage of prescribing professional ethics is to emphasize positive activity and
encourage high level of performance while preventing mal-practices. However, there is
difficulty in concretizing them. First, they can only be prescribed in general terms to avoid
prescribing unacceptable behavior, and it's difficult to enforce general ideas of behavior.
Second it is difficult to interpret behavior with out reference to specific situation at which
point it requires interpretation of rulings according to circumstances. However, important
parts of ethics in auditing are in relation to:
Maintenance of mental and physical independence
General competence and technical standards
Responsibility to client and colleagues and
Other responsibilities and Practices that have bearing on ethical conduct include acts
discreditable to the profession, i.e. commission, incompatible occupation, soliciting etc.
These are best maintained by following some guidance called code of professional conduct
Auditors serve in many different capacities and should demonstrate their objectivity in
varying circumstances. They undertake assurance engagements, and render tax and other
management advisory services. As professional accountants, they prepare financial
statements as a subordinate of others, perform internal auditing services, and serve in
financial management capacities in industry, commerce, the public sector and education.
They also educate and train those who aspire to admission into the profession. Regardless of
service or capacity, auditors should protect the integrity of their professional services, and
maintain objectivity in their judgment.
In selecting the situations and practices to be specifically dealt within ethics requirements
relating to objectivity, adequate consideration should be given to the following factors:
Auditors are exposed to situations which involve the possibility of pressures being
exerted on them. These pressures may impair their objectivity.
It is impracticable to define and prescribe all such situations where these possible
pressures exist. Reasonableness should prevail in establishing standards for identifying
relationships that are likely to, or appear to, impair auditor’s objectivity.
Relationships should be avoided which allow prejudice, bias or influences of others to
override objectivity.
Auditors have an obligation to ensure that personnel engaged on professional services
adhere to the principle of objectivity.
Auditors should neither accept nor offer gifts or entertainment which might reasonably
be believed to have a significant and improper influence on their professional judgment
or those with whom they deal.
19
Professional Competence
Auditors should not portray themselves as having expertise or experience they do not
possess.
Professional competence may be divided into two separate phases:
21
Self-Review Threat: Occurs when
Any product or judgment of a previous assurance engagement or non-assurance
engagement needs to be re-evaluated in reaching conclusions on the assurance
engagement or
Member of the assurance team was previously a director or officer of the assurance
client, or was an employee in a position to exert direct and significant influence over the
subject matter of the assurance engagement.
Examples of circumstances that may create this threat include, but are not limited to:
A member of the assurance team being, or having recently been, a director or officer of
the assurance client;
A member of the assurance team being, or having recently been, an employee of the
assurance client in a position to exert direct and significant influence over the subject
matter of the assurance engagement;
Performing services for an assurance client that directly affect the subject matter of the
assurance engagement; and
Preparation of original data used to generate financial statements or preparation of other
records that are the subject matter of the assurance engagement.
Advocacy Threat: Occurs when a firm, or a member of the assurance team, promotes, or
may be perceived to promote, an assurance client’s position or opinion to the point that
objectivity may, or may be perceived to be, compromised. Such may be the case if a firm or a
member of the assurance team were to subordinate their judgment to that of the client.
Examples of circumstances that may create this threat include, but are not limited to:
Dealing in, or being a promoter of, shares or other securities in an assurance client; and
Acting as an advocate on behalf of an assurance client in litigation or in resolving
disputes with third parties.
Familiarity Threat: Occurs when, by virtue of a close relationship with an assurance client,
its directors, officers or employees, a firm or a member of the assurance team becomes too
sympathetic to the client’s interests.
Examples of circumstances that may create this threat include, but are not limited to:
A member of the assurance team having an immediate family member or close family
member who is a director or officer of the assurance client;
A member of the assurance team having an immediate family member or close family
member who, as an employee of the assurance client, is in a position to exert direct and
significant influence over the subject matter of the assurance engagement;
A former partner of the firm being a director, officer of the assurance client or an
employee in a position to exert direct and significant influence over the subject matter
of the assurance engagement;
Long association of a senior member of the assurance team with the assurance client;
and
Acceptance of gifts or hospitality, unless the value is clearly insignificant, from the
assurance client, its directors, officers or employees.
Intimidation Threat: Occurs when a member of the assurance team may be deterred from
acting objectively and exercising professional skepticism by threats, actual or perceived,
from the directors, officers or employees of an assurance client.
Examples of circumstances that may create this threat include, but are not limited to:
Threat of replacement over a disagreement with the application of an accounting
principle; and
Pressure to reduce inappropriately the extent of work performed in order to reduce fees.
22
Safeguards
The firm and members of the assurance team have a responsibility to remain independent by
taking into account the context in which they practice, the threats to independence and the
safeguards available to eliminate the threats or reduce them to an acceptable level.
When threats are identified, other than those that are clearly insignificant, appropriate
safeguards should be identified and applied to eliminate the threats or reduce them to an
acceptable level. This decision should be documented.
The nature of the safeguards to be applied will vary depending upon the circumstances.
Consideration should always be given to what a reasonable and informed third party having
knowledge of all relevant information; including safeguards applied, and would reasonably
conclude to be unacceptable. The consideration will be affected by matters such as the
significance of the threat, the nature of the assurance engagement, the intended users of the
assurance report and the structure of the firm.
Safeguards fall into three broad categories. These are:
1. Safeguards created by the profession, legislation or regulation;
2. Safeguards within the assurance client; and
3. Safeguards within the firm’s own systems and procedures.
The firm and the members of the assurance team should select appropriate safeguards to
eliminate or reduce threats to independence, other than those that are clearly insignificant, to
an acceptable level.
1. Safeguards created by the profession, legislation or regulation, include:
Educational, training and experience requirements for entry into the profession;
Continuing education requirements;
Professional standards and monitoring and disciplinary processes;
External review of a firm’s quality control system; and
Legislation governing the independence requirements of the firm.
2. Safeguards within the assurance client include:
When the assurance client’s management appoints the firm, persons other than
management ratify or approve the appointment;
The assurance client has competent employees to make managerial decisions;
Policies and procedures that emphasize the assurance client’s commitment to fair
financial reporting;
Internal procedures that ensure objective choices in commissioning non assurance
engagements; and
A corporate governance structure, such as an audit committee, that provides
appropriate oversight and communications regarding a firm’s services.
3. Safeguards within the firm’s own systems and procedures.
Audit committees can have an important corporate governance role when they are
independent of client management and can assist the Board of Directors in satisfying them
selves that a firm is independent in carrying out its audit role.
There should be regular communications between the firm and the audit committee (or other
governance body if there is no audit committee) of listed entities regarding relationships and
other matters that might, in the firm’s opinion, reasonably be thought to bear on
independence.
23
alleging professional “mal practice”. Therefore, auditors must approach any engagement
with the prospect that they may be required to defend their work in court.
In court of defending legal action which may be astronomical are not limited to monetary
measures. For instance
Law suit can be extremely damaging professional reputation which, if once
damaged is difficult to return back.
The auditor may even be detained criminally for “mal practice”.
24
A typical lawsuit involves a claim that the auditor did not discover an employee defalcation
(theft of assets) as a result of negligence in the conduct of the audit. The lawsuit can be for
breach of contract, a tort action for negligence, or both. Tort action (wrongful act or damage
(not involving breach of contract) for which an evil action can be brought) can be based on
ordinary negligence, gross negligence or fraud. Tort actions are common because the
amounts recoverable under them are normally larger than under breach of contract.
The principal issue in cases involving alleged negligence is usually the level of care required.
Although it is generally agreed that no body is perfect, not even a professional, in most
instances any significant error or mistake in judgment will create at least a presumption of
negligence that the professionals will have to rebut. In the auditing environment, failure to
meet generally accepted auditing standard is often conclusive evidence of negligence.
Auditors Defense against Client Suit
The CPA firm normally one or a combination of four defense mechanisms when there are
legal claims by clients: Lack of duty to perform the service, non negligent performance,
contributory negligence and absence of causal connection.
1. Lack of Duty: Lack of duty to perform the service means that the CPA firm claims there
was no implied or expressed contract. For example, the CPA firm might claim that errors
were not uncovered because the firm did a review service, not an audit. A common ways
for CPA firm to demonstrate a lack of duty to perform the service is by use of an
engagement letter. Many litigation experts believe well-written engagement letters are
one of the most important ways CPA firm can reduce the likelihood of adverse legal
action.
2. Non-negligent Performance: For nonnegligent performance in an audit, the CPA firm
claims that the audit was performed in accordance with Generally Accepted Auditing
Standards (GAAS). Even if there were undiscovered mistakes (errors) or intentional
misstatements or misrepresentations (irregularities), the auditor is not responsible if the
audit was properly conducted. SAS 47 ( AU 312) and SAS 53 ( AU 316) make clear
that an audit in accordance with GAAS is subject to limitations and cannot be relied upon
for complete assurance that all errors and irregularities will be found. Requiring the
auditors to discover all material errors and irregularities would, in essence, make them
insurers or guarantors of the accuracy of the financial statement which is not possible in
general.
3. Contributory Negligence: A defense of contributory negligence by the client means that
the CPA firm claims that if the client had performed certain obligations, the loss would
not have occurred. For example, suppose the client claims that the CPA firm was
negligent in not uncovering an employee theft of cash. A likely contributory negligence
defense is the auditor's claim that the CPA firm informed management of a weakness in
the system of internal control that enhanced the likelihood of the fraud but management
did not correct it. Management often does not correct the internal control weakness
because of cost considerations, attitude about employee honesty, or procrastinations. In
this event of lawsuit of the nature described, the auditor is unlikely to loss the suit,
assuming a strong contributory negligence defense, if the client was informed in writing
of the internal control weaknesses.
4. Absence of Causal connection: To succeed in an action against the auditor, the client
must be able to show that there is a close causal connection between the auditor's breach
of the standard of due care and the damages suffered by the client. For example, assume
an auditor failed to complete an audit the agreed- upon date. The client alleges that this
caused a bank not to renew an outstanding loan, which caused damages. A potential
auditor defense is that the bank refused to renew the loan for other reasons, such as the
weakening financial condition of the client.
25
2.4.2. Auditor Liability to Third Party
A CPA firm may be liable to third parties if a loss was incurred by the claimant due to
reliance on misleading financial statements. Third parties include actual and potential
stockholders, vendors, bankers, and other creditors, employees, and customers. A typical suit
might occur when a banker can claim that misleading audited financial statements were
relied upon in making the loan, and that the CPA firm should be held responsible because it
failed to perform the audit with due care.
Auditors Defense against Third Party Suit
Three of the four defenses available to auditor in suit by client are also available in third
party lawsuit. These are:
1. Non-negligence performance
2. Lack of duty to Perform the Services
3. Absence of Causal Connection
Contributory negligence is ordinary not available because the third party is not in apposition
to contribute to misstated financial statement. The preferred defense in third party suit is
nonnegligent performance. If the auditor conducted the audit in accordance with GAAS, the
other defenses are unnecessary. On the other hand, nonnegligent performance is difficult to
demonstrate to the court, especially if it is jury trial and the jury is made up of lay people.
A lack of duty defense in third-party suits contends lack of privity of contract. The extent to
which privity of contract is an appropriate defense depends heavily on the judicial
jurisdiction.
Absence of causal connection in third-party suits usually means non reliance on the financial
statements by the user. For example, assume the auditor can demonstrate that a lender relied
upon an ongoing banking relationship with a customer, rather than the financial statements,
in making a loan. The fact that the auditor was negligent in the conduct of the audit would
not be relevant in that case. Of course, it is difficult to prove nonreliance on the financial
statements.
Auditors Responsibility for detecting Misstatements
The auditors have responsibility to plan and perform the audit to obtain reasonable assurance
about whether the financial statements are free of material misstatement of whether caused
by error or fraud.
Reasonable Assurance: Assurance is a measure of level certainty that the auditor has
obtained at the completion of the audit. Reasonable assurance is not defined in the literature,
but it is presume less than certainnity or absolute assurance and more than low level of
assurance.
Why not absolute assurance?
Nature of audit (limitations) and the characteristics of the fraud, auditors are not in a position
to provide an absolute assurance.
2.6. Materiality and the Auditor
Materiality is an essential consideration in determining the appropriate type of report for a
given set of circumstances. So what is the concept of materiality?
The common definition of materiality as it applies to accounting and, therefore, to the audit
is:
A misstatement in the financial statement can be considered material if knowledge of the
misstatement would affect a decision of a reasonable user of the statement.
In applying this definition, three gradation of materiality are used for determining the type of
opinion to issue.
26
Amounts are immaterial : When a misstatement in the financial statements exist, due to of
the two conditions (1) scope restricted by client or by circumstances or (2) statements are not
in accordance with GAAP, but is unlikely to affect the decisions of a reasonable user, it is
considered to be immaterial.
Amounts are material but do not overshadow the financial statement as a whole: The
second level of materiality exists when a misstatement in the financial statement would affect
a users' decision, but the overall statements are still fairly stated, and therefore, useful. For
example, knowledge of a large misstatement in permanent assets might affect a user's
willingness to loan money to a company if the assets were the collateral. A misstatement of
inventory does not mean that cash, accounts receivable, and other elements of the financial
statements, or financial statements as a whole, are materially incorrect.
Amounts are so material or so pervasive that overall fairness of statements is in
question: The highest level of materiality exists when users are likely to make incorrect
decision if they rely on the overall financial statements.
The auditor's responsibility therefore, is to determine whether financial statements are
materially misstated. If the auditor determines that there is a material misstatement, he/she
will bring it to the client's attention so a correction can be made. If the client refuses to
correct the statements, a qualified or adverse opinion must be issued, depending on how
material the misstatement is. Auditors must, therefore, have a through knowledge of the
application of materiality.
27
- Mistake in application of GAAP
- Unintentional omission of amount
- Informative disclosure on financial statement.
Fraud: Fraud represents an intentional misstatement of the financial statement which can be
material or immaterial. The misstatement due to fraud may occur due to either of:
1. Misappropriation of assets defalcations or employee fraud. E.g. theft of cash or another
asset.
2. Fraudulent financial reporting often called management fraud. E.g. intentional
misstatement of sales near the balance sheet date to increase reported earning.
2.8 Truth and Fairness
The term truth and fairness are essential elements of audit report. There is no statutory or
professional definition of truth and fairness. Truth and fair is a technical in the phrase to be
looked at as entirely. In general, the word "true" means, information is factual confirms to
reality, not false. The information confirms with standards.
Fairness means; clear distinct and plain
- Impartial, not biased or
- Just and equitable
To show true and fairness accounts must be prepared
- In accordance with GAAP
- On constant basis so as net to be misleading
- The accounts must be taken from books and records.
2.9: Appointment, Remuneration and Removal of auditors in Ethiopia
The Commercial Code of Federal Democratic Republic of Ethiopia set how auditors are
appointed, remunerated, and removed and also their responsibilities to third parties and the
clients. The following section deals with the appointment remuneration and revocation of
auditors especially those of auditors appointed to the public.
Article 368 Appointment of auditors
(1) The general meeting of every company limited by shares shall elect one or more
auditors and one or more assistant auditors
(2) Shareholders representing not less than 20 % of the capital may appoint an auditor
selected by them
(3) Where there is more than one auditor, they may exercise their duties jointly or
separately
(4) A body corporate may act as auditor
Art. 369- Nomination and term of Appointment
(1) Auditors shall be elected by the meeting of subscribers and thereafter by the annual
general meeting
(2) Auditors elected by the meeting of subscribers shall hold office until the first annual
meeting. Auditors elected at an annual general meeting hold office for three years
(3) When signing as auditor, an auditor shall add the name of the company whose
accounts he is auditing.
Art.370. Persons Not Competent
(1). the following persons may not be elected as auditors
(a) Founders, contributors in kind, beneficiaries holding special benefits, directors of the
company or of one of its subscribers or of its holding companies
28
(b) Spouses or relatives by consanguinity of affinity to the fourth degree inclusive, of the
person mentioned in sub-art-(1) (a)
(c) Person who receives from the persons mentioned in sub- art. (1) (a) a salary or
periodical remuneration in connection with duties other than those of an auditors.
(2) Auditor may not be appointed directors or managers of the company which they audit,
nor of one of its subscribers or its or of its holding company with in three years
from the date of the termination of their functions.
(3) Reports submitted by an auditor and adopted by the annual general meeting shall not,
save in the case of fraud, be invalid merely by reason of the fact that the provisions
of this Article have not been observed.
2. Ratings and Public Records: The financial ratings and public records of a company
should be reviewed before an audit client is accepted. Review credit reports, legal history, tax
problems, litigation records, regulatory actions, bankruptcy issues, consumer complaints and
professional liability claims. Require the company to provide business references for review.
A solid review of a company's professional and public dealings will provide good insight into
the stability and functioning of the company.
3. Reputation: Your reputation as an auditing firm is partly based off the companies
you audit. Ensure the image of your auditing firm by only accepting clients who share the
same ethical and business integrity foundation as your firm. Interview senior management
and executives to gain an understanding of their business principles. Look into the
29
background of the key players in the business for any criminal or legal problems and at their
personal reputation in the business community. Determine if the company pays their bills on
time and honors contracts and agreements. Avoid any client that has a long history of
litigations as a defendant or as a plaintiff.
4. Business Structure: Review the business structure of a potential client. Look for red
flags such as overseas plants or operating facilities, high turnover in upper management and a
short operating history. Also review the company's legal counsel to see if they a have stable,
well-known legal firm, or unknown or shady representation. Review the company's physical
business presence. How long a business has stayed in the same location is an indication of
stability.
Approval: Once all the relevant procedure and information gathering takes place the
company can put forward for approval. The engagement partner will have completed a client
acceptance form and this along with any other relevant documents will be submitted to the
managing partner or which ever partner is in over all charge of accepting clients.
2.11 Engagement Letter
Engagement letter is the letter that summarizes contractual relationship between the auditor
and the client. It defines clearly the extent of the auditors’ responsibility and so minimizes
the possibility of any misunderstanding between the client and the auditors.
2.12 proclamations related to auditors liability to third parties and the client
Art. 380 of the commercial code of the Ethiopian constitution deals with the auditor's liability
to third parties and to the client.
(1) Auditors shall be civilly liable to the company and third parties for any fault in the
exercise of their duties which occasioned loss
(2) An auditor who knowingly gives or confirms an untrue report concerning the position of
the company of fails to inform the public prosecutor of an offence which he knows to
have been committed shall be punished under Art.438 of Art. 664 of the Penal code, as
the case may be.
Offences and Penalty
1. Any person who:
Fails to produce or make available books, documents, ledgers, vouchers or any other
documentary or oral evidence which the Federal Auditor General Directly or through his
employees or his representatives requires for auditing; or
Gives to the Federal Auditor General, the Auditors of the office of the Federal Auditor
General or its representatives any information which he knows to be false or which he has no
reason to believe to be true; or
Obstructs the proper carrying out of the functions of the Federal Auditor General; or
Fails to, take measures, within 30 days from the date of delivery, on recommendations and
comments included in the audit report of the Federal Auditor General; or fails to comply with
the provisions of this Proclamation when he is required to do so;
Shall be punished with imprisonment from 5 to 7 years or with a fine of Birr 10,000 (ten
thousand Birr) or with both such fine and imprisonment.
2. Any Auditor who:
In consideration for the performance or for the omission of an act in violation of the duties
proper to his office solicits, exacts a promise of or receives a gift, money or any other
advantage; or
accepts any auditable document as genuine where he knows that is not or unduly rejects any
valuable document submitted to him by the one to be audited; or
30
a. defrauds or cooperates with others by creating conducive conditions so that they can
defraud or conspires in defrauding money of the federal Government; or
b. with intent to obtain or procure undue advantage for himself or to a third person or to
cause a harm on any other person, causes to disappear or falsify or cause to be falsified or
forges any books, documents, ledgers, vouchers or any other evidence submitted to him
by the one to be audited:
c. Shall be punished with imprisonment from 5 to 10 years and with a fine from 10,000 up
to Birr 15,000 (ten thousand up to fifteen thousand Birr).
UNIT THREE
AUDITING PRINCIPLES AND TOOLS
Auditing profession in many countries have attempted to embody these guidelines in their
professional association emblem. For example, in USA and UK, Truth, Fairness, and Objectivity
were identified as basic auditing principles. Others have tried to base their auditing principles on
accounting principles themselves. In Ethiopia, for example, the Ethiopian professional association
of Accountants and Auditors (EPAAA) had the following as principle guidelines in its emblem
“Forth Rightness or Uprightness above all”
Standards are authoritative rules for measuring the quality of performance. They serve as rods
against which work performed is compared and thus principles are translated in to more practical
and adherable terms. In this regard standards are more specific than principles. The American
Institute of certified Public accountants (AICPA) has formulated the following 10 generally
Accepted Auditing Standards (GAAS) categorized in to three. The following diagram depicts the
10 GAASs categorized in to three broad classifications.
Generally Accepted
Auditing Standards
31
A. GENERAL STANDAREDS
1. Adequate Training and Proficiency: The audit is to be performed by a person or persons
having adequate technical training and proficiency as an auditor. How does the independent
auditor achieves the adequate technical training and proficiency required by the first general
standard? This requirement is usually interpreted to mean college or university education in
accounting and auditing, substantial public accounting experience, ability to use procedures
suitable for computer based systems, and participation in continuing education program. A
technical knowledge of the industry in which the client operates is also part of the personal
qualification of the auditor. It follows that a CPA firm must not accept an audit engagement
without first determining that members of its staff have the technical training and proficiency
needed to function effectively in particular industry.
3. Due Professional Care: the third general standard requires due professional care in the
conduct of an audit and in the preparation of the audit report. This standard requires the
auditor to carry steps of the audit engagement in an alert and diligent manner. Full
compliance with this standard would rule out any negligent acts or material omissions by the
auditors. Of course, auditors, as well as members of other profession, inevitably make
occasional errors in judgment, but this human element doesn’t justify indifference or
inattention to professional responsibility.
B. STANDAREDS OF FIELD WORK
4. Adequate Planning and Supervision: adequate planning is essential to a satisfactory
audit. Some portion of the examination can be performed prior to the end of the year under
audit: some information may be completed by the client’s staff and made available for the
auditors review. The appropriate number of audit staff of various levels of skill and the time
required of each need to be determined in advance of filed work. These are but a few of the
elements of planning the audit. Most of the filed work of an audit is carried out by staff
members with limited experience. The key to successful use of relatively new staff members
is close supervision at every level. This concept extends from providing specific written
instruction to staff members all the way to an overall review by the partner in charge of the
engagement.
32
evidence required is much less than if control were weak. Thus, the auditor’s assessment of
internal control has great impact on the length and nature of the audit process.
C. STANDARDS OF REPORTING
There are four reporting standards that require the auditor to prepare a report on the financial
statement taken as a whole, including informative disclosure. The reporting standards
requires that the report states whether the statements are presented in accordance with GAAP
and also identify any circumstances in which GAAP have not been consistently applied in the
current year compared with the previous one.
7. In Accordance with GAAP: The report shall state whether the financial statements are
presented in accordance with Generally Accepted Accounting Principles.
8. Deviations from GAAP: The report shall identify those circumstances in which such
principles haven’t been consistently observed in the current period in relation to the
preceding period.
9. Adequate Disclosure: Informative disclosures in the financial statements are to be
regarded as reasonably adequate unless otherwise stated in the report.
10. Expression of Opinion: The report shall either contain an expression of opinion
regarding the financial statements, taken as a whole, or an assertion to the effect that an
opinion cannot be expressed; the reasons therefore, should be stated. In all cases where an
auditor’s name is associated with financial statements, the report should contain a clear-cut
indication of the character of the auditor’s work, if any, and the degree of responsibility the
auditor is taking.
The above 10 standards are also acceptable by the Canadian institute of chartered accountant
and more or less by many UK professional public accounting associations (ACCA and CA).
Therefore we can say that these standards are acceptable worldwide
Auditing techniques can be used to uncover these issues in order to ensure ethical business
practices and to minimize waste or possible oversights within an organization. The applied
techniques can determine if any income is hidden or improperly categorized or reported;
transactions are being completed between the organization and regulated or prohibited
persons, groups, or countries; uncovering of environmental waste discrepancies; finding of
data inconsistencies; or any other business practice that can be considered as a process error,
oversight, or violation of ethics, regulations, and laws.
Defensive Approach: In this approach, the auditor is very cautious; she/he is suspicious that
there is always fraud or an error, which might be concealed from her/him, or someone is
trying to hide from being discovered. Thus, the auditor is prepared to fight fraudulent efforts
to conceal and becomes highly keen on methods that help detect fraud. Hence, the auditor
may at times not be satisfied unless manages to find one. The auditor adapts an attitude that
the auditee is guilty unless proven innocent. The drawback of this approach is it may further
all the negative image on an auditor in the public.
Positive Approach: In this case, the auditor has a constructive attitude: based on the premise
that a person is innocent until proven guilty. Rather than directing efforts to detecting error,
efforts are directed to establishing its conditions, which lead to what should be acceptable.
She/he looks for explanations and possibilities that lead to conclusion. This approach may
lead the auditor to be easily fooled unless she/he is careful.
Inventory Approach: this approach directs the auditor to find evidences by retracting to or
corroborating figures with physical evidence and reconciling documentary evidences to
physical evidences. Such techniques are usually applicable in cash, and inventory counts
Transaction Approach: the auditor in this case concentrates the efforts on transactions or
events, reconstructing accounts of transactions or tracing amounts back to initial events.
Analytical Approach: In this approach, the auditor performs the audit work through the
review of internal control analysis. This approach involves studying and analyzing
circumstantial evidences or indirect evidences, which leads to developing techniques of
evaluating internal control system and procedures.
Business Approach: the auditor’s attitude in this approach is not just to establish figures by
tracing to books, but rather to assess whether the figures on financial statements and accounts
make sense from the point of view of market conditions, business and economic sense.
Vouching Approach: Under the vouching approach, the auditor looks for supporting
documentary evidences, whether of primary or secondary sources. Usually she/he relies on
source documents.
34
System Based Approach: as its name designates, the process involves systematic approach
to understanding the operational system and its control devices; and testing whether the
system works as it should, or audits or controls itself, to establish its strength and weakness
and determines reliability of its inputs and out results. Internal control review is part and
parcel of this process although the development and use of this approach has become popular
with information technology development and flow charting
Risk Based Approach: This is the most recent approach to audit. Risk associated with
various audits activates and related decisions are assessed to select audit procedures to
determine time to be applied and identify quality of supporting evidence. This is important to
establish extent of audit program and plans. Area of focus is by risk weight. Risks assumed
are guided by the level of assurance needed to obtain evidence and concomitant cost. Thus
the higher the risk object, the more intensive the audit is, and costly too.
1. Validity: the validity objective relates to the existence or occurrence assertion and is
concerned with whether the transactions included in the account are valid or that they exist.
The auditor’s main concern is that the account balances are not overstated due to fictitious
amounts. For example, to test the validity of account receivable, the auditor might confirm
the customers balance. A customer’s acknowledgment that the amount is owed provides
evidence on the validity of the recorded accounts receivable.
2. Completeness: the completeness objective relates to the management assertion of
completeness and address whether all transaction are included in the account. For example, if
the client fails to record sales or purchase transaction, the financial statement will be
misstated. Note that, the auditor’s concern with completeness is opposite to the concern for
validity. Failure to meet the completeness objective results in an understating an account,
while invalid recorded amount results in an account being overstated. For example, to test the
completeness objectives for accounts receivable, the auditor compares the total of the
accounts receivable subsidiary ledger to the account receivable control account in the general
ledger. If the totals do not agree, some sales transactions and the related account receivables
may not have included in the clients accounting records.
3.Cutoff: the cutoff objectives is primarily related to the completeness assertion and is
concerned with whether the transaction included in the account, if valid are recorded in the
proper period. The audit procedure must ensure that transactions occurring near the year end
are recorded in the financial statement in the proper period.
4. Ownership: this objective addresses whether the asset and liability belong to the entity
and relates to management’s assertion about right and obligation. If the entity does not have
rights to an asset, or if a liability is not the entity’s obligation, it should not be included in the
financial statements.
5. Accuracy: the accuracy objective relates to the valuation or allocation assertion and
addresses proper accumulation of transaction and amounts from journals and ledgers. For
example, auditors frequently use aged trail balances to document the detailed in accounts
receivable subsidiary ledger. To test the aged trail balance accuracy, the auditors foot the
aged trail balances and traces selected customer accounts from the aged trail balances to the
account receivable subsidiary ledger for proper amount and aging
6. Valuation: the valuation objective relates to the valuation or allocation assertion and is
concerned with ensuring that the account shown in the financial statements are recorded at
the proper amount. Generally accepted accounting principles establish the valuation method
for a particular transaction or account balance. For example, account receivable are
accounted for at net realizable value; that is, the allowance for doubtful accounts is used to
adjust gross account receivable to the balance excepted to be collected. The auditor tests the
adequacy of the allowance for uncollectible accounts by examining the entities past bad debt
experience relatives to the current balance in the allowance account.
36
8. Classification: it is important that transaction be included in the correct account and the
account is properly presented in the financial statements. For example, in auditing accounts
receivable, the auditor examines the listing of account receivables to ensure that receivables
from affiliates, officers, directors, or other related parties are classified separately form trade
receivables. The classification objectives relates to the presentation and disclosure assertions.
9. Disclosure: This audit objective relates directly to the presentation and disclosure
assertion and is concerned with ensuring that all required financial statements and footnote
disclosures are made. For example, if account receivables are pledged as security for debt,
such information should be disclosed in the financial statements. Similarly, if a long term
debt agreement contains major covenant (such as limits on payments of dividend or issuance
of additional debt), that information should be disclosed.
The following table shows management assertions, general audit objectives and specific audit
objectives for inventory.
Management General Specific Audit Objective
Assertion Objective
Existence or Validity All recorded inventory exist at the balance sheet date
Occurrence
Completeness Completeness All existing inventory has been included in the account
Rights and Obligations Ownership The company has title to all inventory items listed
Valuation or Valuation Inventory quantity agrees with items physical on hand
Allocation Price used to value inventory are correct
classification Inventory items are properly classified to raw material,
work in process and finished goods
Cutoff Purchase and sales cut off at the end is proper
Mechanical Total of inventory items agree with general ledger
accuracy
Presentation and Disclosure The pledge and consignment of inventory is disclosed
Disclosure
3.6 Audit Planning
The first Generally Accepted Auditing Standards of fieldwork requires adequate planning to
be made before auditing is carried out. Reasons for proper audit plan includes
To enable the auditor obtain sufficient competent evidence
To help keep audit costs reasonable
To avoid misunderstanding with the client
Obtaining sufficient competent evidence is essential if the CPA wants to minimize legal
liability and maintain a good reputation in the business community keeping costs reasonable.
It helps the firm remains competitive and thereby retains or expands its client base, assuming
the firm has a reputation for doing high-quality work. Avoiding misunderstanding with the
client is important for good client relations and for facilitating high-quality work at
reasonable cost. The followings are the elements of audit planning:
1. Preplanning
2. Obtain background information
3. Obtain information about clients legal obligation
4. Perform preliminary analytical procedures
5. Set materiality, and assess acceptable audit risk and inherent risk
6. Understand internal control and assess control risk
7. Develop overall audit plan or audit program
As shown above, there are seven major parts of Audit planning. Each of the first six parts are
intended to help the auditor develop the last part, an effective and efficient overall audit plan
and audit program.
37
1. Preplan the Audit: Preplanning the audit involves four things, all of which should be
done early in the audit.
A decision whether to accept a new client or continue serving an existing one
Identification of why the client needs an audit
Obtaining an understanding with the client about the terms of engagement to
avoid misunderstandings.
Select staff for engagement
Investigation of new client and reevaluation of existing ones is important to assess the
integrity of the client and to assess the acceptable financial risk it will assume. If the CPA
firm decides that acceptable risk is extremely low, it may choose not to accept the
engagement. If the CPA firm concludes that acceptable audit risk is low but the client is still
acceptable, it is likely to affect result and the fee proposed to the client, Audits with low
acceptable audit risk will normally result in higher audit costs, which should be reflected in
higher audit fees.
Obtaining an understanding with the client is expressed by the use of engagement letter,
even though it is not required. Engagement letter is an agreement between the CPA firm and
the client for the conduct of the audit and related services. It should specify whether the
auditor will perform an audit, a review, or a compilation, plus any other service such as tax
returns or management consulting. It should also state any restriction to be provided for the
audit, an agreement on fees. The engagement letter is also a means of informing the client
that the auditor cannot guarantee that all acts of fraud will be discovered. Selection of staff
for engagement involves the assignment of appropriate staff to the engagement if the CPA
firm decides to accept the client and conduct the audit. Selection of audit staff is important to
meet the first requirement of generally accepted auditing standard and to promote audit
efficiency. The first GAAS stats “that the audit is performed by a person or persons having
adequate technical training and proficiency as an auditor”.
5. Audit Risk Assessment and Materiality: Audit risk represent the risk that the auditor
will conclude that financial statement are fairly stated and unqualified opinion can be issued
when in fact they are misstated. Audit risk refers to the possibility that the auditor may
unknowingly fail to appropriately modify their opinion on financial statement that is
materially misstated.
Audit risks are divided in to four:
a) Inherent Risk
b) Control Risk
c) Detection Risk
d) Acceptable Audit Risk
a. Inherent Risks: is a measure of the sensitivity or susceptibility of the financial statement
account to material misstatement before considering the effectiveness of internal control,
accounting controls, policies or procedures. Internal control is ignored in setting inherent risk
because they are considered separately in audit risk assessment as control risk.
b. Control Risk: is the risk that a material misstatement will not be prevented or detected on
timely basis by the clients internal control structure. Control risk represent an assessment of
whether clients internal control structure is effective for prevention or detecting error and the
more effective the internal control, the lower the control risk
c. Detection Risk: is the audit risk that the auditor will fail to detect material misstatement
with their audit procedures. It is the possibility that audit procedures will lead them to
conclude that a material misstatement does not exist in an account, in fact such misstatement
does exist. Detection risk is a function of the procedures auditors perform for testing
assertions.
d. Acceptable Audit Risk: is the measure of how willing the auditor is to accept that the
financial statement may be martially misstated after the audit is completed and unqualified
opinion has been issued. When the auditor decides on lower acceptable risk, the auditor
wants to be more certain that the financial statement will not materially misstated. Zero
39
acceptable risk would be high certainty and 100% acceptable audit risk would be complete
uncertainty. The primary way that the auditors deal with risk in planning audit evidence is
through the application of the audit risk model. The audit risk model is used primarily for
planning purposes in deciding how much evidence to accumulate in each cycle.
PDR = __AAR_
IR X CR
Where:
PDR = planned Detection risk
AAR = acceptable audit risk
IR = inherent risk
CR = control risk
Example: Assume that the auditor have assessed inherent risk for a particular assertion at
50% and control risk at 40%. In addition, they have performed audit procedures that they
believe have a 20% risk of failing to detect a material misstatement in the assertion. Compute
the acceptable audit risk.
Solution
PDR = __AAR_
IR X CR
0.20 = __AAR_
0.50 X 0.40
AAR = 0.04 = 4%
7. Develop an Over All Audit Plan
The last step in the planning the audit is to develop an over all strategy. This involve about
the nature, extent, and timing of audit test to be conducted. The audit strategy is normally
documented in an audit plan and audit program containing specific audit procedures. The
audit program for most audits is designed in three parts:
1. Test of transactions
2. Analytical procedures
3. Test of details of balance
3.7Auditor’s Working Paper
Working papers are the records kept by the auditor of the procedures applied, the test
performance, the information obtained and the pertinent conclusions reached in the
engagement. The over all objectives of working paper are to aid the auditor in providing
reasonable assurance that an adequate audit was conducted in accordance with GAAS. The
working papers as they pertains to the current years has the following purpose
Provide a base for planning the audit, because the working papers describe
information about internal control structure, a time budget for individual audit
areas, the audit program and the results of the preceding year’s audit.
A record of the evidence accumulated and the result of the test
Data for determining the proper type of audit
Basis for review by supervisor and partner. The working papers are the primary
frame of reference used by supervisory personal to evaluate weather sufficient
competent evidence was accumulated to justify audit reports.
Working papers contain virtually every thing involved in the examination. The filling of
working paper is classified in to the following.
1. Permanent Files: are intended to contain data of a historical or continuing nature
pertinent to the current examination. The permanent files typically include the following.
Extracts or copies such as articles of in corporation, by laws and contracts.
40
Analysis from previous years of accounts that have continuing importance to the
auditor such as long term debt, stock holders equality accounts, good will and
fixed asset.
Information related to the understanding of the internal control structure and
assessment of control risks such as organization charts, flowcharts questioners etc.
Result of analytical procedures from previous year’s audit such as ratio and
percentage computed by the auditor.
Total balance for selected accounts.
2. Current Files: The current files include all working papers applicable to the years
under audit. The types of information included in the current file are:
Audit program
General information like planning memos, copies of minutes, agreements notes on
discussion with client etc.
Working trial balance, listing of the general ledger account and their year end
balance including subsidiary balance and account.
Adjusting and reclassification entries
Supporting schedule such as analysis of account trail balance, reconciliation of
amounts, test of reasonableness, summary of procedures, examination of
supporting documents, outside documentation.
The working paper prepared during the engagement, including those prepared by the
client for the auditor are the property of the auditor. The only time any one including the
client has legal right to examine the paper is, when they are subpoenaed by the court as
legal evidence. At the completion of the engagement, working paper is kept at the
auditors premise for future reference. The working paper can be provided to some one
else with expressed permission of the client
UNIT FOUR
COSO’s definition of internal control emphasizes that internal control is a process, or a means to
an end, and not an end by itself. The process is effected by individuals, not merely policy manuals,
documents, and forms. By including the concept of reasonable assurance, the definition
recognizes that internal control cannot realistically provide absolute assurance that an
organization’s objectives will be achieved. Reasonable assurance recognizes that the cost of an
organization’s internal control system should not exceed the benefit expected to be obtained.
The American Institute of Certified Public Accountants [AICPA] defined internal control as
follows:
This definition possibly is broader than the meaning sometimes attributed to the term. It
recognizes that a system of internal control extends beyond those matters that relate directly to the
function of the accounting and finance departments. Such a system might include budgetary
control, standard costs, periodic operating reports, statistical analysis and the dissemination
thereof, a training program designed to aid personnel in meeting their responsibilities, and an
internal audit staff to provide additional assurance to management as to the adequacy of its
outlined procedures and the extent to which they are being effectively carried out. It properly
comprehends activities in other fields as, for example, time and motion studies that are an
engineering nature and use of quality control through a system of inspection, which fundamentally
is production function. This is an extremely useful definition of internal control, giving us an
understanding of the number and variety of means open to management to control the actions of
its employees.
Internal control extends beyond the accounting and financial functions. Its scope is organization
wide and touches all activities of the organization. It includes the methods by which management
delegate authority and assigns responsibility for such functions as selling, purchasing, accounting,
and production. Internal control also includes the program for preparing, verifying and distributing
to various levels of supervision those reports and analyses that enable executives to maintain
control over the variety of activities and functions that constitute a large enterprise. The use of
budgetary techniques, production standards, inspection laboratories, time and motion studies, and
employee training programs involve engineers and many other technicians far removed from
42
accounting and financial activities, yet all of these devises are part of the mechanism now
conceived as a system of internal control.
To accomplish these objectives, management needs an adequate and reliable system of internal
control, for which management bears the primary and sole responsibility.
To the external auditors, internal control is of equal importance. The quality of the internal
controls enforces, more than any factor, and determines the pattern of their examination. Thus,
both auditors and management need a system of internal control to perform their respective
functions. However, the auditors’ objective for internal control is not the same as management’s.
The external auditors’ objective in their study and evaluation of the system of internal control is to
determine the nature, extent and timing of the audit work necessary to express an opinion as to the
fairness of the financial statements.
Systems of internal control vary significantly form one organization to the next. The specific
control features in any system depend upon such factors as size, organizational structure, and
nature of operations and objectives of the organization for which it was designed.
An auditor obtains information about internal control and uses that information as a basis for audit
planning. The auditor considers internal control by first obtaining an understanding of internal
control, which is then used to initially assess control risk. When the auditor’s control risk
assessment is below maximum, the auditor considers how those results affect planned detection
risk and substantive testing. The following are reasons for studying internal control.
To be satisfied that sufficient, competent evidence is available to support the audit of
financial statement
To identify potential material misstatement
To assess control risk for each objective, which affect planned detection risk and planned
audit procedures
Allow the auditor to design effective test of financial statement balances and analytical
procedures.
4.3 Scopes and Types of Internal Controls
The system of internal control involves the plan of organization and various other methods and
procedures. The plan of organization refers to the organizational structure and the method of
assigning authorities and responsibilities. Appropriate plan of organization is significant for
effective operation of the entire internal control system. Similarly, proper authorities and
responsibilities can be allocated in such a manner that no single person has control over all the
phases of any significant transactions. This minimized the possibilities of errors and frauds.
The plan of organization refers to the study of authority, responsibilities and duties among
members of an organization. A well-designed organization plan is a first step to assure that
transactions are executed in conformity with company polices, to enhance the efficiency of
operations to safeguard assets, and to promote the reliability and timely preparation of accounting
data. These objectives may be achieved in large part through adequate separation of responsibility
43
for initiation of approval of transactions, custody of assets and record keeping. When accounting
and custodial departments are relatively independent, the work of each department serves to verify
the accuracy of the work of the other. Periodic comparison should be made for accounting records
and physical assets on hand. Investigation as to the cause of any discrepancy will uncover
weakness either in the procedures for safeguarding assets or in the procedures to maintain the
related accounting records. If the accounting records were not independent of the custodial
department, the records could be manipulated to conceal waste, loss or theft of the related assets.
An internal control system has a wide coverage that extends beyond those matters, which relate
directly to the functions of the accounting system. From this angle, internal control can be divided
into two broad categories, accounting and administrative controls.
Auditors are primarily interested in internal control of an accounting nature, those controls bearing
directly upon the dependability of accounting records and the financial statements. For example,
preparation of monthly bank reconciliation by an employee not authorized to issue checks or
handle cash is an internal accounting control that increases the probability that cash transactions
are presented fairly in the accounting records and financial statements. Some internal controls
have no bearing on the financial statements and consequently are not of direct interest to
independent public accountant. Controls of this nature are often referred to as administrative
controls. Management is interested in maintaining strong internal control over, factory operations
and sales activities as well as over accounting and financial functions. Accordingly, management
will establish administrative controls, to provide operational efficiency and adherence to
prescribed policies in all departments of the enterprise.
Statement of Auditing Standards states that administrative control includes, but not limited to the
plan of organization and the procedures and records that are concerned with the decision processes
leading to management’s authorization of transactions. Such authorization is a management
function directly associated with the responsibility for achieving the objectives of the organization
and is the starting point for establishing accounting control of transactions.
Accounting control comprises the plan of organization and procedures and records that are
concerned with the safeguarding of assets and the reliability of financial records and consequently
are designed to provide reasonable assurance that:
Transactions are executed in accordance with management’s general or specific
authorization.
Transactions are recorded as necessary to permit preparation of financial statements in
conformity with generally accepted accounting principles or any other criteria applicable
to such statement and to maintain accountability to assets.
Access to assets is permitted only in accordance with management’s authorization.
The recorded accountability for assets is compared with the existing assets at reasonable
intervals and appropriate action is taken with respect to any differences.
Both accounting and administrative controls are derived form the organization’s policies
established by management, they are the means by which company policies are satisfactorily
accomplished. Therefore, auditors should be aware of these policies and review them in terms of
their impact on internal control.
The accounting system must be able to measure the performance and efficiency of the
individual organizational units. An accounting system with this should include:
1. Adequate documentation
2. Chart of accounts
3. Manual of accounting policies an procedures
4. Financial forecasts
In general, accounting controls related to the accounting system are:
44
a) Executing of transaction in accordance with the management’s
authorization
b) Prompt recording of transaction in proper manner
c) Maintained accountability to safeguard assets
Accounting controls should further include:
Proper segregation of duties relating to accounting function
Rotation of duties
Periodic reconciliation
Checking the arithmetical accuracy of the records
Maintenance of control accounts and preparation of periodic trial balance
Approval and control of documents
Comparison with external sources of information
Comparison of the results of physical inspection of fixed assets, cash
investments and inventories
Comparison of actual figures with budgets
Accounting controls, policies and procedures generally fall into:
Segregation of duties
Authorization of transactions
Maintenance of adequate records and documents
Accountability and safeguarding of assets
Independent checks on performance
4.4 Components of Internal Control
Internal control varies significantly from one organization to the other, depending on such
factors as their size, nature of operations, and objectives. Internal controls of large-scale
organizations, however, have certain common characteristics tanned as components of
internal control. The five components of internal control are:
2. Control activities
3. Risk assessments
5. Monitoring
1. The Control Environment - The control environment consists of actions, policies and
procedures that reflect the overall attitudes of top management, directors, and owners of the
entity about control and its importance to the entity. The auditors need to consider the
following to assess and understand the control environment.
Integrity and ethical values - Are product of the entity's ethical (code of Conduct) and
behavioral values and how they are communicated and reinforced in practice.
Effectiveness of internal control depends directly on the integrity and ethical values
of the personnel who are responsible for creating, administering and monitoring
controls. It includes management action to remove or reduce incentive and
temptations that might prompt personnel to engage in dishonest, illegal or unethical
acts.
45
Commitment to competence - Competence is the knowledge and skill necessary to
accomplish tasks that define the individual's job. Employees should posses the skill
and knowledge essential to perform their job for that they might be ineffective if they
lack the necessary skill and knowledge. Thus, management should be committed to
hiring employees with appropriate level of education and experience, and providing
them with adequate supervision and trainings.
Human resource policies and practices - The most important aspect of internal
control is personnel. If employees are competent and trustworthy, other controls can
be absent and reliable financial, reports will still result from the system, as honest and
efficient people are able to perform at high level even when there are a few other
controls to support them. Because of the importance of competent and trust worthy
personnel in providing effective control, the policies and practices by which persons
are hired, trained, oriented, evaluated plays a significant role.
2. Control Activities - are the policies and procedures, in addition to those included in the
other four components that help ensure that the necessary actions are considered to address
risks in the achievements of the entity's objectives. Although there are several such control
activities in an entity, they fall into the following five categories:
46
3. Adequate documents and records
Adequate separation of duties- the following four general guidelines for separation of duties
to prevent both frauds and errors are of significant importance to auditors:
Separation of the custody of assets from accounting - The reason for not permitting
the person who has temporary or permanent custody of an asset to account for that
asset is to protect the firm against defalcation. When on person performs both
functions, there is an excessive risk of that person's disposing of that asset for
personal gain and adjusting the records to relief himself or herself of the
responsibility.
Adequate documents and records - documents and records are the physical objects upon
which transactions are entered and summarized. Documents perform the function of
transmitting information throughout the client's organization and between different
organizations. The documents must be adequate to reasonable assurance that all assets are
properly controlled and all transactions correctly recorded.
Physical control over assets and records - are those controls that provide physical security
over both records and other assets. Activities that safeguard assets include maintaining
control at all times over unissued pre-numbered documents, as well as other journals and
ledgers, and restricting access to computer programmers and data file. Only authorized
47
persons should have access to company's valuable assets. Direct physical access to assets
may be controlled through the use of safes, locks, fences, and guards. Improper indirect
access to assets, generally accomplished by falsifying financial records, must also be
prevented. Periodic comparisons should be made between accounting records and the
physical assets on hand to detect the waste, loss or theft of the related assets.
Independent check on performance - It is continuous and careful review of the other four
control activities (i.e. an internal verification). The need for independent checks arises
because personnel are likely to forget or intentionally fail to follow procedures, or become
careless unless come one observes and evaluates their performance. An essential
characteristic of the persons performing internal verification procedure is independence from
the individuals originally responsible for preparing the data.
3. Risk assessment - Management should carefully identify and analyze the factors that
affect the risk that the organization's objectives will not be attained, and then attempt to
manage those risks. The scope of the management's risk assessment is comprehensive in that
it involves considerations of all the factors that affect the organization's objectives. Auditors
are concerned only with those risks associated with the objective of reliable financial
reporting threats to preparing financial statements in accordance with generally accepted
accounting principles. The following factors might be indicatives of increases risk of
financial reporting for an organization:
48
reports on control activities, reports by regulatory agencies, and feedback from operation
personnel and complaints from customers.
Three commonly used methods of documenting the understanding of internal control are
narratives, flow chart, and internal control questioners
1. Narrative is a written description of client’s internal control system. A proper narrative of an
accounting system and related control includes four characteristics;
The description should state where customer order come from and how sales invoice are
generated
All processes that takes place
The dispossion of every document and record in the system
An indication relevant to the assessment of control risk.
2. Flow Chart: an internal control flowchart is a symbolic, diagrammatical representation of the
client’s document and their sequential flow in the organization. An adequate flowchart includes
the four characteristics identified for narrative. Flow chart is advantageous primarily because it
provides a concise overview of the clients system which is useful to the auditor as analytical tool
in evaluation. A well prepared flowchart aids in identifying inadequacy by facilitating a clear
understanding of how the system operates. For most uses, it is superior to narratives as a method
of communicating the characteristics of a system, especially to show adequate separation of duties
3. Internal Control Questionnaire: an internal control questioner asks a series of questions
about the control in each audit area as means of indicating to the audit aspect of internal control
that may be inadequate. In most cases, it is designed to require yes or no response, with no
response indicating potential internal control deficiencies. The primary advantages of using a
questioner are the ability to thoroughly cover each audit area responsible quickly at the beginning
of the audit. The primary disadvantage is that individual parts of the clients system are examined
with out providing an over all view
4.6 Internal Control and Auditors
Internal audit as we will study in some detail later is means of management control
mechanism established internally and arising out of need for verification, evaluation
and compliance of internal operation. It is designed for management internal purposes.
As such internal audit is part of the internal control system in the organization, while
at the same time internal audit (or auditor), is responsible for the surveillance of the
effectiveness of the internal control system and involves its weakness and strength. As
mentioned earlier, the external auditor’s interest in internal control is in order to help him
determine the extent of reliability of organization’s results, and effectiveness of control of its
operations. To this end, he reviews the internal control (a) to understand the existing control
systems and procedures, (b) to evaluate their adequacy in fulfilling internal control objectives, by
identifying strengths and weaknesses. It is worth noting here that the study and review of internal
control is part of the independent auditor’s standard of fieldwork. He accomplishes this objective
through:
(a) Internal control questionnaire
(b) Interview
(c) Testing (compliance test)
(d) Study of organization charts, manuals and procedures.
49
Through compliance testing, he tries to identify weaknesses. If the compliance test proves to be
reliable it decreases the need for substantive test or vice versa too. The compliance test determines
if internal control systems and procedures are actually present and effective, and thus establishes
the congruence in the procedures of system. It must be distinguished that there is preliminary
review as well as extensive review, one that goes during the examination process.
4.7Internal Auditing
Internal auditing is a service function established within an organization to examine and evaluate
its activities. Internal audits may focus on financial reporting (financial audits); compliance with
policies, procedures, laws, or regulations (Compliance audits); fraud detection (fraud audits); or
operational efficiency and effectiveness (operational audits). The following diagram shows the
different components clearly
Internal Auditing
ting
Most internal audit staffs engage in all of these endeavors. To guide the practice of internal
auditing, the Institute of Internal Auditors has established general and specific standards. Although
not enforceable in the same sense as the AICPA auditing and attestation standards, they do
provide helpful guidance for the internal auditor concerning such maters as maintaining necessary
independence, required proficiency, audit scope, performing the audit, and administering the
internal audit function. Since the other types of auditing are discussed before, we will briefly
discuss operational auditing as follows
Operational Audit, as a subset of internal auditing, reviews an entity's activities for efficiency and
effectiveness and may evaluate any type of activity at any level within the organization. Unlike
financial auditing, operational auditing focuses on activities rather than financial statement
assertions. The audited activates may be related to a function (e.g., why is ABC plant producing a
high percentage of defective parts?). The overall objective, common to all operational audits, is
maximizing organizational welfare.
Management auditing is a subset of operational auditing that attempts to measure the effectiveness
with which an organizational unit is administered, and that concentrates more on effectiveness
than on efficiency. Efficiency may be viewed as an input measure that relates to cost control and is
concerned with the performance of recurring functions at a minimum of cost to the entity.
Effectiveness is output oriented; it is viewed as a measure of productivity in utilizing the firm's
resources and in terms of long-run profitability.
50
The internal auditing function includes verification, evaluation and compliance of operations.
Among others the following are specifiable.
Review and appraise internal control procedure
Ascertain effectiveness and efficiency of operations
Verify compliance to policies and procedures
Ascertain reliability of data and documents
Evaluate quality of performance
Recommend improvements in better management controls.
The internal auditor can perform his work either through functional approach, operational
approach, or financial approach.
The independence of the internal auditor again depends on his place in the organization, the extent
of responsibility and authority required for performing his function and the desire to enhance his
competence and independence in reporting to whom. Here, it must be appreciated that the desire
to have independence in the internal auditing function may not necessarily be attainable or be as
high as in the external auditing function. The matter of qualification for the internal auditor is also
dependent on the above factors. Of course, these factors are definitely much more clearly
demarcated in a large organization than in small.
There are arguments that propagate that if there is external auditing why there is a need for
internal auditing, or vice-versa. However, an in-depth understanding of the objectives and
51
purposes of internal and external auditing can show that they should be rather complementary and
not competitive. If the internal auditing function is strong and wide, and performed by qualified
persons then the results of the operation of the organization can be reliable, which in turn assists in
decreasing the scope of audit work by the external auditor, and thus reduce the cost of external
audit fee? But the purposes of audit of the external and internal auditor are quite distinct and
cannot be a substitute for each other’s responsibility.
UNIT FIVE
AUDIT REPORT
The remainder of the scope paragraph discusses the audit evidence accumulated and states
that the auditor believes that the evidence accumulated was appropriate for the circumstance
to express the opinion presented. The word test basis indicates that sampling is used rather
than an audit of every transaction and amount on the statement. The scope paragraph states
that the auditor evaluates the appropriateness of those accounting principles, estimates and
financial statements disclosures and presentations given.
5. Opinion Paragraph: The final paragraph in the standard report states the auditors
conclusions based on the results of the audit. This part of the report is so important that often
52
the entire audit report is referred to simply as the auditor’s opinion. The opinion paragraph is
stated as an opinion rather than as a statement of absolute fact or a guarantee. The intent is to
indicate that the conclusions are based on professional judgment. The phrase in our opinion
indicates that may be some information risk associated with the financial statement, even
though the statements have been audited.
The opinion paragraph is directly related to the first and the fourth generally accepted
auditing reporting standards. The auditor is required to state an opinion about financial
statement taken as a whole, including the conclusion about whether the company followed
Generally Accepted Accounting Principles. Financial statements are presented fairly when
the statements are in accordance with generally accepted accounting principles but that it is
also necessary to examine the substance of transactions and balances for possible
misinformation.
6. Name of CPA Firm: the name identifies the CPA firm or practitioner who performed the
audit. Typically, the firms name is used because the entire CPA firm has the legal and
professional responsibility to ensure that the quality of the audit meets professional
standards.
7. Audit Report Date: The appropriate date for the report is one on which the auditor has
completed the most important auditing procedures in the field. This date is important to users
because it indicates the last date of the auditor’s responsibility for the review of significant
events that occurred after the date of financial statements. For example, if the balance sheet is
dated December 31, 1998, and the audit report is dated march 6, 1999. This indicates that the
auditor has searched for material unrecorded transactions and events that occurred up to
March 6, 1999.
To: Stockholders
ABC Company, Inc.
We have audited the accompanying balance sheet of ABC Company, Inc. as of December 31,
2009 and the related statements of income, retained earnings, Balance sheet and cash flows
for the year then ended. These financial statements are the responsibility of the Company's
management. Our responsibility is to express an opinion on these financial statements based
on our audit.
We conducted our audit in accordance with auditing standards generally accepted in (the
country where the report is issued). Those standards require that we plan and perform the
audit to obtain reasonable assurance about whether the financial statements are free from
material misstatement. An audit includes examining, on a test basis, evidence supporting the
amounts and disclosures in the financial statements. An audit also includes assessing the
accounting principles used and significant estimates made by management, as well as
evaluating the overall financial statement presentation. We believe that our audit provides a
reasonable basis for our opinion.
In our opinion, the financial statements referred to above presents fairly, in all material
respects, the financial position of the Company as of December 31, 2009, and the results of
its operations and its cash flows for the year then ended in accordance with accounting
principles generally accepted in (the country where the report is issued).
AUDITOR’S SIGNATURE
Auditor’s name and address
54
5.2.2Unqualified Audit Report with Explanatory Paragraph or
Modified Wording
In certain situation, an unqualified audit report is issued, but the wording deviates from the
standard unqualified report. The unqualified audit report with explanatory paragraph or
modified wording meets the criteria of a complete audit with satisfactory results and financial
statements that are fairly presented, but the auditor believes it is important or is required to
provide additional information. The followings are the most important causes of the addition
of an explanatory paragraph or a modification in the wording of the standard unqualified
report.
As discussed in the note to the financial statements, the company changed its method of
computing depreciation in 2009.
It is implicit in the explanatory paragraph in the above table that, the auditor concurs with the
appropriateness of the change in accounting principles. If the auditor does not so concur, the
change is considered a violation of Generally Accepted Accounting and his or her opinion
must be qualified
2. Consistency versus Comparability
The auditor must be able to distinguish between changes that affect consistency and those
that may affect comparability but don’t affect consistency. The following are examples of
changes that affect consistency and therefore require explanatory paragraph if they are
material
Change in accounting principles, such as change from FIFO to LIFO inventory
valuation
Changes in reporting entities, such as the inclusion of an additional company in
combined financial statements
55
Correction of errors involving principles, by changing from an accounting principle
that is not generally acceptable to one that is generally acceptable, including
correction of the resulting error
Changes that affect comparability but not consistency and therefore need not be included in
the audit report includ the following
Changes in estimates, such as a decrease in the life of an asset for depreciation
purposes
Error corrections not involving principles such as a previous years mathematical error
Variation in format and presentation of finical information
Changes because of substantially different transactions or events, such as new
endeavors in research and development or the sales of subsidiary.
Items that materially affect the comparability of financial statements generally require
disclosure in the footnotes. A qualified audit report for inadequate disclosure may be required
if the client refuses to properly disclose the items
3. Substantial Doubt about Going Concern
Even though the purpose of an audit is not to evaluate the financial health of the business, the
auditor has a responsibility to evaluate whether the company is likely to continue as a going
concern. For example, the existence of one or more of the following factors causes
uncertainty about the ability of a company to continue as a going concern:
Significant recurring operating losses or working capital deficiencies
Inability of the company to pay its obligation as they come due
Loss of major customers, the occurrence of uninsured catastrophes such as an
earthquake or flood, or unusual labor difficulties
Legal proceedings, legislation, or similar matters that have occurred that might
jeopardize the entity’s ability to operate
When the auditor concluded that there is substantial doubt about the entity’s ability to
continue as a going concern, unqualified opinion with an explanatory paragraph is required,
regardless of the disclosure in the financial statement. The following table provides an
example in which there is substantial doubt about going concern.
Independent auditor’s opinion
(Same introductory, scope, and opinion paragraph as the standard report)
The accompanying financial statements have been prepared assuming that ABC Company
continues as going concern. As the discussion in the note to the financial statements, ABC
Company has suffered recurring losses from operations and has a net capital deficiency that
raises substantial doubt about the company’s ability to continue as a going concern.
Managements plan in regard to these matters are also described in the note. The financial
statements don’t include any adjustments that might result from the outcomes of this
uncertainty.
1. The scope of the audit has been restricted: when the auditor has not accumulated
sufficient evidence to conclude whether financial statements are stated in accordance with
GAAP, scope restriction exists. The scope restrictions can be caused by the client or
circumstances beyond the client or the auditor. An example of client restriction is
management’s refusal to permit the auditor to confirm material receivables or to physically
examine inventory. An example of restriction caused by circumstances is when the
engagement is not agreed on until after the client year end. It may not be possible to
physically observe inventories, confirm receivables or perform other important procedures
after the balance sheet date
2. Financial statements have not been prepared in accordance with generally accepted
accounting principles. For example, if the client insists on using replacement costs for fixed
or value inventory at selling price rather than historical cost, departure form unqualified
report is required.
3. The auditor is not independent: when any of the rules of the code of professional
conduct related to independence you have discussed in unit two are violated, the auditor is
said to be dependent
When any of the three conditions requiring a departure from unqualified report exists and is
material, a report other than unqualified report must be issued. Three main types of audit
reports are issued under this condition:: Qualified, Adverse opinion, and Disclaimer of
opinion.
1. Qualified Opinion Report
57
A Qualified Opinion report is issued when the auditor encountered one of the two types of
situations which do not comply with generally accepted accounting principles, however, the
rest of the financial statements are fairly presented. This type of opinion is very similar to an
unqualified or “clean opinion”, but the report states that the financial statements are fairly
presented with a certain exception which is otherwise misstated. The two types of situations
which would cause an auditor to issue this opinion over the unqualified opinion are:
Deviation from GAAP – this type of qualification occurs when one or more areas of
the financial statements do not conform with GAAP (e.g. are misstated), but do not
affect the rest of the financial statements from being fairly presented when taken as a
whole. Examples of this include a company dedicated to a retail business that did not
correctly calculate the depreciation expense of its building. Even if this expense is
considered material, since the rest of the financial statements do conform with GAAP,
then the auditor qualifies the opinion by describing the depreciation misstatement in
the report and continues to issue a clean opinion on the rest of the financial
statements.
Limitation of Scope - this type of qualification occurs when the auditor could not
audit one or more areas of the financial statements, and although they could not be
verified, the rest of the financial statements were audited and they conform with
GAAP. Examples of this include an auditor not being able to observe and test a
company’s inventory of goods. If the auditor audited the rest of the financial
statements and is reasonably sure that they conform with GAAP, then the auditor
simply states that the financial statements are fairly presented, with the exception of
the inventory which could not be audited.
The wording of the qualified report is very similar to the unqualified opinion, but an
explanatory paragraph is added to explain the reasons for the qualification after the scope
paragraph but before the opinion paragraph. The introductory paragraph is left exactly the
same as in the unqualified opinion, while the scope and the opinion paragraphs receive a
slight modification in line with the qualification in the explanatory paragraph.
The scope paragraph is edited to include the following phrase in the first sentence, so that the
user may be immediately aware of the qualification. This placement also informs the user
that, except for the qualification, the rest of the audit was performed without qualifications:
“Except as discussed in the following paragraph, we conducted our audit...”
The opinion paragraph is also edited to include an additional phrase in the first sentence, so
that the user is reminded that the auditor’s opinion explicitly excludes the qualification
expressed. Depending on the type of qualification, the phrase is edited to either state the
qualification and the adjustments needed to correct it or state the scope limitation and that
adjustment could have but not necessarily been required in order to correct it.
For a qualification arising from a deviation from GAAP, the following phrase is added to the
opinion paragraph, using the depreciation example mentioned above:
“In our opinion, except for the effects of the Company’s incorrect determination of
depreciation expense, the financial statement referred to in the first paragraph
presents fairly, in all material respects, the financial position of…”
For a qualification arising from a scope limitation, the following phrase is added to the
opinion paragraph, using the inventory example mentioned above:
“In our opinion, except for the effects of such adjustments, if any, as might have been
determined to be necessary had we been able to perform proper tests and procedures
58
on the Company’s inventory, the financial statement referred to in the first paragraph
presents fairly, in all material respects, the financial position of…”
Due to the phrases added to the scope and opinion paragraphs, many refer to this report as the
Except-For Opinion.
Generally, an adverse opinion is only given if the financial statement pervasively differs from
GAAP. An example of such a situation would be failure of a company to consolidate a
material subsidiary.
The wording of the adverse report is similar to the qualified report. The scope paragraph is
modified accordingly and an explanatory paragraph is added to explain the reason for the
adverse opinion after the scope paragraph but before the opinion paragraph. However, the
most significant change in the adverse report from the qualified report is in the opinion
paragraph, where the auditor clearly states that the financial statements are not in accordance
with GAAP, which means that they, as a whole, are unreliable, inaccurate, and do not present
a fair view of the auditee’s position and operations.
“In our opinion, because of the situations mentioned above (in the explanatory
paragraph), the financial statements referred to in the first paragraph do not present
fairly, in all material respects, the financial position of…”
Although this type of opinion is rarely used, the most common examples where disclaimers
are issued include audits where the auditee willfully hides or refuses to provide evidence and
information to the auditor in significant areas of the financial statements, where the auditee is
facing significant legal and litigation issues in which the outcome is uncertain (usually
59
government investigations), and where the auditee has going concern issues (the auditee may
not continue operating in the near future). Investors, lending institutions, and governments
typically reject an auditee’s financial statements if the auditor disclaimed an opinion, and will
request the auditee to correct the situations the auditor mentioned and obtain another audit
report.
A disclaimer of opinion differs substantially from the rest of the auditor’s report because it
provides very little information regarding the audit itself, and includes an explanatory
paragraph stating the reasons for the disclaimer. Although, the report still contains the
letterhead, the auditee’s name and address, the auditor’s signature and address, and the
report’s issuance date, every other paragraph is modified extensively, and the scope
paragraph is entirely omitted since the auditor is basically stating that an audit could not be
realized.
In the introductory paragraph, the first phrase changes from “We have audited” to “We were
engaged to audit” in order to let the user know that the auditee commissioned an audit, but
does not mention that the auditor necessarily completed the audit. Additionally, since the
audit was not completely and/or adequately performed, the auditor refuses to accept any
responsibility by omitting the last sentence of the paragraph. The scope paragraph is omitted
in its entirety since, effectively, no audit was performed. Similar to the qualified and the
adverse opinions, the auditor must briefly discuss the situations for the disclaimer in an
explanatory paragraph. Finally, the opinion paragraph changes completely, stating that an
opinion could not be formed and is not expressed because of the situations mentioned in the
previous paragraphs. The following is a draft of the three main paragraphs of a disclaimer of
opinion because of inadequate accounting records of an auditee, which is considered a
significant scope limitation:
We were engaged to audit the accompanying balance sheet of ABC Company, Inc.
(the “Company”) as of December 31, 2009 and the related statements of income and
cash flows for the year then ended. These financial statements are the responsibility
of the Company's management.
The Company does not maintain adequate accounting records to provide sufficient
information for the preparation of the basic financial statements. The Company’s
accounting records do not constitute a double-entry system which can produce
financial statements.
Because of the significance of the matters discussed in the preceding paragraphs, the
scope of our work was not sufficient to enable us to express, and we do not express,
an opinion of the financial statements referred to in the first paragraph.
1. Amounts are Immaterial: When a misstatement in the financial statement exists but
is unlikely to affect the decision of a reasonable user, it is considered to be
immaterial. Unqualified opinion is therefore appropriate. For example, assume that
management recorded unexpired insurance as an asset in the previous year and
decides to expense it in the current year to reduce record keeping costs; management
has failed to follow GAAP but if the amounts are small, the misstatement would be
immaterial and standard unqualified audit report would be appropriate.
2. Amounts are material but don’t overshadow the financial statements as a whole:
The second level of materiality exists when a misstatement in the financial statement
would affect a user’s decision but the overall statements are still fairly stated and
therefore useful. For example, knowledge of a large misstatement in fixed assets
might affect a user’s willingness to loan money to accompany if the asset were the
collateral. When the auditor concludes that a misstatement is material but doesn’t
overshadow the financial statements as a whole, a qualified opinion using except for
is appropriate.
3. Amounts are so material or so pervasive that overall fairness of the statements is
in question. The highest level of materiality exists when users are likely to make
incorrect decisions if they rely on the overall financial statements when the highest
level of materiality exists, the auditor must issue either a disclaimer of opinion or an
adverse opinion, depending on which conditions exist.
The following table summarizes the relation ship between materiality and type of opinion
issued
Materiality level Significance in terms of reasonable user
decision Type of opinion
Immaterial users decisions are unlikely to be affected Unqualified
User’s decisions are likely to be affected only if
the information in question is important to the
specific decisions being made. The overall
Material financial statement are presented fairly Qualified
Most or all users decision based on the financial Disclaimer or
Highly material statements are likely to be significantly affected Adverse
Level of Materiality
Conditions requiring departure from Material but not Material and
unqualified report Immaterial overshadow overshadow
Scope restricted by client or conditions Unqualified Qualified Disclaimer
Financial statements not prepared in
accordance with GAAP Unqualified Qualified Adverse
The auditor is not independent - Disclaimer -
Auditors often encounter situations involving more than one of the conditions requiring a
departure from an unqualified report or modification of the standard unqualified report. In
this circumstance, the auditor should modify his or her opinion for each condition unless one
has the effect of neutralizing the others. For example, if there is a scope limitation and a
situation in which the auditor is not independent, the scope limitation should not be revealed.
The following situations are examples when more than one modification should be included
in the report:
The auditor is not independent and the auditor know that the company has not
followed GAAP
There is a scope limitation and there is substantial doubt about the company’s ability
to continue as a going concern
There is a substantial doubt about the company’s ability to continue as going concern,
and information about the cause of uncertainty is not adequately disclosed in a
footnote
There is a deviation in the statements preparation in accordance with GAAP and other
accounting principles was applied on a basis that was not consistent with that of the
preceding year.
62
Many readers interpret the number of paragraphs in the report as an important signal as to
whether the financial statements are correct. A three paragraph report originally indicates that
there are no exceptions in the audit. However, three paragraph reports are also issued when a
disclaimer of opinion is issued due to a scope limitation or for an unqualified shared report
involving other auditors. More than three paragraphs indicate some type of qualification or
requiring explanation. The table below summarizes the type of reports issued for the audit of
financial statements, the number of paragraphs for each type, the standard wording,
paragraph modified, and the location of additional paragraph.
UNIT SIX
AUDIT EVIDENCE
6.1. Nature of Evidence
Audit evidence is any information used by the auditor to determine whether the information
being audited is stated in accordance with the established criteria. The information varies
greatly in the extent to which it persuades the auditor whether the financial statements are
stated in accordance with Generally Accepted Accounting Principles. Evidence includes
information that is highly persuasive, such as the auditor's count of marketable securities, and
less persuasive information, such as response to questions of client employees.
A major decision facing every auditor is determining the appropriate types and amounts of
evidence to accumulate to be satisfied that the components of the client's financial statements
and the overall statements are fairly stated. This judgment is important because of the
prohibitive cost of examining and evaluating all available evidence. For example, in an audit
of financial statement, of most organizations, it is impossible for CPA firm to examine the
contents of all computer files or available evidence such as cancelled checks, vendors'
invoices, customer orders, payroll time cards, and the many other types of documents and
orders. The auditor's decision on evidence accumulation can be broken down into the
following four sub decisions.
1) Which audit procedure to use
2) What sample size to select for a given procedure
3) Which items to select from the population
4) When to perform the procedure
1. Audit Procedure: an audit procedure is the detailed instruction for the collection of audit
evidence that is to obtain at some time during the audit. In designing audit procedures, it is
common to spell them out in sufficiently specific to permit their use as instructions during
the audit. For example, the following is an audit procedure for the verification of cash
disbursements:
63
Obtain the cash disbursements journal and compare the payer name, amount, and date
on the cancelled checks with the disbursements journal
2. Sample size: Once an audit procedure is selected, it is possible to vary the sample size
from one to all the items in the population being tested. In the audit procedure above,
suppose 6,600 checks are recorded in the cash disbursement journal. The auditor may select
a sample size of 200 checks for comparison with the cash disbursement journal. The
decision of how many items to test must be made by the auditor for each audit procedure.
The sample size for any given procedure is likely to vary from audit to audit.
3. Items to select: After the sample size has been determined for an audit procedure, it is still
necessary to decide which items in the population to test. If the auditor decides, for
example, to select 200 cancelled checks fro population of 6,600 for comparison with the
cash disbursement journal, several deferent methods can be used to select the specific
checks to be examined. The auditor could (1) select a week and examine the first 200
checks (2) select the 200 checks with the largest amounts, (3) select the checks randomly,
or (4) select those checks that the auditor thinks are most likely to be in error. Or a
combination of these methods could be used.
4. Timing: Auditor of financial statements usually covers a period such as a year, and an
audit is usually not completed until several weeks or months after the end of the period.
The timing of audit procedures can therefore vary from early in the accounting period to
long after it has ended. In part, the timing decision is affected by when the client needs the
audit to be completed.
65
6.3.2. Sufficiency: The quantity of evidence obtained determines its sufficiency. Sufficiency
of evidence is measured primarily by the sample size the auditor selects. For a given audit
procedure, the evidence obtained from a sample size of 200 would ordinarily be more
sufficient than from a sample of 100. Several factors determine the appropriate sample size in
audit.
The two most important ones are:
1. The auditor's expectation of misstatement
2. Effectiveness of internal control
If the auditor concludes that there is a high likelihood of obsolete inventory because of the
nature of the client's industry, the auditor would sample more inventories for obsolescence in
an audit such as this than one where the likelihood of obsolescence was low. Similarly, if the
auditor concludes that the client's internal control is effective, over fixed assets, a smaller
sample size in the audit of acquisition of fixed assets is warranted.
In addition to sample size, the individual items tested affect the sufficiency of evidence.
Samples containing population items with larger dollar values, items with a large likelihood
of misstatement, and items that are representative of the population are usually considered
sufficient. In contrast, most auditors would usually consider samples insufficient that contain
only the largest dollar items from the population unless these items make up a large portion
of the total population amount.
Persuasiveness of evidence can be evaluated only after considering the combination of
competence and sufficiency, including the effects of the factors influencing competence and
sufficiency. A large sample of evidence provided by an independent party is not persuasive
unless it is relevant to the audit objective being tested. A large sample of evidence that is
relevant but not objective is not persuasive. Similarly, a small sample of only one or two
piece of highly competent evidence also typically lacks persuasiveness. The auditor must
evaluate the degree to which both competence and sufficiency, including all factors
influencing them, have been met when determining the persuasiveness of evidence.
Persuasiveness and cost: in making decisions about evidence for a given audit, both
persuasiveness and cost must be considered. It is rare when only one type of evidence is
available for varying information. The persuasiveness and cost of all alternatives should be
considered before selecting the best type or types. The auditor's goal is to obtain a sufficient
amount of competent evidence at the lowest possible total cost. However, cost is never an
adequate justification for omitting a necessary procedure or not gathering sample size.
To be considered reliable evidence, confirmations must be controlled by the auditor from the
time they are prepared until they are returned. If the clients controls the preparation of the
confirmation, does the mailing, or, receives the responses, the auditor has lost control and
with it independence; thus, the reliability of the evidence is reduced.
6.4.3. Documentation: Documentation is the auditor's examination of the client's documents
and records to substantiate the information that is or should be included in the financial
statements. The documents examined by the auditor are the records used by the client to
provide information for conducting its business in an organized manner. Because each
transaction in the client's organization is normally supported by at least one document, there
is a large volume of this type of evidence available. For example, the client often retains a
customer order, a shipment document, and duplicate sales invoices for each sales transaction.
These same documents are useful evidence for verification by the auditor of the accuracy of
the client's records for sales transaction. Documentation is form evidence widely used in
every audit because it is usually readily available to the auditors at a relatively lower cost.
Some times it is the only reasonable type of evidence available.
Documents can be conveniently classified as internal and external.
An internal documents is one that has been prepared and used within the client's organization
and is retained without ever going to outside party such as a customer or a vendor. Examples
of internal documents include duplicate sales invoices, employees' time reports, and
inventory receiving reports.
An external document is one that has been in the hands of some one outside the client's
organization who is a party to the transaction being documented, but which is either currently
in the hands of the client or readily accessible. Example of this type of external documents
vendors' invoices, cancelable notes payable and insurance policies.
The primary determinants of the auditor's willingness to accept a document as reliable
evidence is whether it is internal or external and, when internal, whether it was created and
processed under condition of good internal control . Internal documents created and
processed under condition of weak internal control may not constitute reliable evidence.
Because external documents have been in the hands of both the client and another party to
the transaction, there is some indication that both members are in agreement about the
information and the condition stated on the documents. Therefore, external documents are
considered more reliable evidence than internal once.
When auditors use documentation to support recorded transactions or amounts it is often
called Vouching.
68
6.4.4. Observation: Is the use of the senses to assess certain activities. Throughout the audit,
there are many opportunities to exercise sight, hearing, touch, and smell to evaluate a
wide range of items. For example, the auditor may tour the plant to obtain a general
impression of the client's facilities, observe whether equipment is rusty to evaluate
whether it is obsolete, and which watch individuals perform accounting tasks to
determine whether the person assigned responsibility is performing it. Observation is
rarely sufficient by itself because, there is a risk that the client personnel involved in
those activities are aware of the auditor's presence. Therefore, they may perform their
responsibilities in accordance with company policy, but resume normal activities once the
auditor is not incite.
6.4.5. Inquiries of the client: Inquiry is the obtaining of written or oral information from
the client in response to questions from the auditor. Although considerable evidence is
obtained from the client through inquiry, it usually cannot be regarded conclusive
because it is not from an independent source and may be biased in the client's favor.
Therefore, when the auditor obtains evidence through inquiry, it is normally necessary to
obtain further corroborating evidence though other procedures.
6.4.6. Re-performance: As the word implies, re-performance involves rechecking a sample
of the computations and transfer of information made by the client during the period
under audit. Rechecking of computation consists of testing the client's arithmetical
accuracy. It includes such procedures as extending sales invoices and inventory, adding
journals and subsidiary records, and checking the calculation of depreciation expense and
prepaid expenses. Rechecking of transparence of information consists of tracing amounts
to be confident that when the same information is included in more than one place, it is
recorded at the same amount each time.
Analytical Procedures: Analytical procedures are defined by SAS (AU 329) as evaluations
of financial information made by a study of relationships among financial and non financial
data…..involving comparisons of recorded amounts to expressions developed by auditors. It
uses comparisons and relationships to assess whether account balances or other data appears
reasonable. An example is comparing the gross margin percent in the current year with the
preceding years. The auditing standard board has concluded that analytical procedures are so
important that they required during the planning and completion phase on all audit.
Importance of Analytical Procedures
1. Enable to understand client's industry and business
Generally, an auditor considers knowledge and experience about a client company obtained
in prior years as a starting point for planning the audit for the current year. By conducting
analytical procedures in which the current year's unaudited information is compared with
prior years' audited information, changes are highlighted. The changes represent important
trends or specific events, all of which will influence audit planning.
For example, a decline in gross margin percentages overtime may indicate increasing
competition in the comp65any's market area, and the need to consider inventory pricing more
carefully during the audit. Similarly, an increase in the balance in fixed assets may indicate a
significant acquisition that must be reviewed.
2. Enable to assess the entity's ability to continue as going concern
Analytical procedures are often useful as an indication that the client company encountering
severe financial difficulty. The likelihood of financial failure must be considered by the
auditor in the assessment of audit related risks, as well as in connection with management's
use of the ongoing concern assumptions in preparing the financial statements. For example, if
a higher than normal ratio of long-term debt to net worth is combined with a lower than
average ratio, of profits to total assets, a relatively high risk of financial failure may be
69
indicated. Not only would such condition affect the audit plan, they may indicate that
substantial doubt exists about the entity's ability to continue as going concern, which could
require a report modification.
3. It indicates the presence of possible misstatement in the financial statements
Significant unexpected difference between the current year's unaudited financial data and
other data used in comparisons are commonly called unusual fluctuations. Unusual
fluctuations occur when significant difference are not expected but do exist or when
significant differences are expected but do not exist. In either case, one of the possible
reasons for unusual fluctuations is the presence of an accounting misstatement. Thus, if the
unusual fluctuation is large, the auditor must determine the reason for it and must be satisfied
that the cause is a valid economic event and not a misstatement. For example, in comparing
the ratio of the allowance for uncollectible accounts receivable to gross accounts receivable,
with that of the previous year, suppose that the ratio had decreased while, at the same time,
accounts receivable turnover also decreased. The combination of these two pieces of
information would indicate a possible understatement of the allowance. This aspect of
analytical process is often called attention directing because it results in more detailed
procedures in the specific audit areas where misstatements might be found.
4. Reduced Detailed audit test: When the analytical procedure reveals no unusual
fluctuations, the implication is that the possibility of a material misstatement is minimized. In
that case, the analytical procedure constitutes substantive evidence in support of the fair
statement of the related account balances, and it is possible to perform fewer detailed tests in
connection with those accounts.
When to perform analytical Procedures? /Timing of analytical procedures
Analytical procedures may be performed at any of three times during an engagement. Some
analytical procedures are required to be performed in the planning phase to assist in
determining the nature, extent, and timing of work to be performed. Performance of
analytical procedures during planning helps the auditor identify significant matters requiring
special consideration later in the engagement.
Analytical are often done during the testing phase of the audit in conjunction with other audit
procedures. For example, the prepaid portion of each insurance policy might be compared
with the same policy for the previous year as a part of doing test of prepaid insurance.
Analytical procedures are also required to be done during the completion phase of the audit.
Such tests are useful at that point as final review for material misstatements or financial
problems are, and to help the auditor take a final "objective look" at the financial statement
that have been audited. It is common for a partner to do analytical procedures during the final
review of working papers and financial statements. Typically a partner has good
understanding of the client and its business because of ongoing relationships. Knowledge
about the client's business combined with effective analytical procedure is a way to identify
possible oversight in an audit.
Client Industry
Items 2002 2001 2002 2001
Industry turnover 3.40 3.50 3.90 3.40
Gross margin (Percent) 26.30 26.40 27.30 26.20
If we look only at client information for the two ratios shown, the company appears to be
stable with no apparent indication of difficulties. However, if the auditor uses industry data to
develop expectations about the two ratios, for 2002, the auditor would expect both ratios for
the client to increase. Although these two ratios by them selves may not indicate significant
problems, the example illustrates how developing expectations using industry data may
provide useful information about the client's performance. For example, the company may
have lost market share, its pricing may not be competitive, and it may have incurred
abnormal costs, or may have obsolete items in inventory.
The most important benefits of using industry comparison are as an aid to understanding the
client's business and as an indication of the likelihood of financial failure.
A major weakness in using industry ratios for auditing is the difference between the
nature of the client's financial information and that of the firms making up the industry totals.
Because, the industry data are broad averages, the comparison may not be meaningful. Often
the client's line of business is not the same as the industry standards. In addition, different
comparisons follow different accounting methods and this affects the comparability of the
data.
II. Compare client data with similar prior period data
This is concerned with comparing the current data with the past data of the client. Suppose
that the gross margin percent for a company has been between 26 and 27 percent for each of
the past four years, but is 23 percent in the current year. This decline in the gross margin a
concern to the auditor if there is no expectation of a decline. The cause of the decline would
be a change in economic condition. However, it could also be caused by misstatements in the
financial statements such as sales or purchase cutoff errors, unrecorded sales, overstated
account payable, or inventory costing error. The auditor should determine the cause of the
decline in gross margin and consider the effect, if any, on evidence accumulation.
There are a wide variety of analytical procedures in which client data are compared with
similar data from one or more prior periods. These are:
Comparing the current year's balance sheet with that of the preceding year.
Comparing the detail of total balance sheet with similar detail for the preceding years.
Compute ratios and percentages relation ships for comparison with previous years.
III. Compare client data with client determined expected results
Most Companies prepare budgets for various aspects of their operations and financial results.
Because budgets represent the client's expectation for the period, an investigation of the most
significant areas in which differences exist between the budgeted and the actual result may
indicate potential misstatements. In the audit of the local, state or federal governmental units
71
use this type of analytical procedure. When the client's data are compared with the budgets,
there are two special concerns.
i. The auditor must evaluate whether the budgets were realistic plans. In some organizations,
budgets are prepared with little care and therefore, are not realistic expectations. Such
information has little value as audit evidence. Hence, discussing budget procedures with the
client personnel is used to satisfy this concern.
ii.The possibility that current financial information was changed by client personnel to confirm
to the budget. If that is occurred, the auditor will find no difference in comparing actual data
with budgeted data even if there are misstatements in the financial statement. Therefore,
assessment of control risk and detailed audit tests of actual data are usually done to minimize
the likelihood of this concern.
73