Question 1

Below are several of the ASB management assertions.
A. Occurrence
B. Completeness
C. Rights and obligations
D. Allocation or valuation
E. Classification
F. Existence
G. Cutoff
H. Accuracy
I. Understandability
For each of the following control activities, identify the management assertion that best applies by placing the correct letter in the blank space above.
____ 1. Match shipping documents with sales invoices before a sale is recorded.
____ 2. Balance total of individual customers' receivables with the control account.
____ 3. Sales manager approves taking discounts.
____ 4. Computer check for billing the quantity shipped, list price, and total.
____ 5. Account for numerical sequence of pre-numbered shipping documents

Accepted Answer

The answer of Below are several of the ASB management...

Question 2

In an audit of financial statements of a non-public company in accordance with generally accepted auditing standards,an auditor is required to
A) document the auditor's understanding of the entity's internal control.
B) search for significant deficiencies in the operation of the internal controls.
C) perform tests of controls to evaluate the effectiveness of the entity's accounting system.
D) determine whether control activities are operating effectively to prevent or detect material misstatements.

Accepted Answer

Documenting the auditor's understanding of the entity's internal control is a requirement in an audit of financial statements according to generally accepted auditing standards. This helps the auditor plan the audit and assess risks of material misstatement.

Question 3

Generally accepted auditing standards (GAAS)give auditors considerable discretion to decide the amount of work required to satisfy auditing standards guiding internal control evaluation and related audit planning.Which of the descriptions below best expresses the minimum amount of work permitted by GAAS for nonpublic companies?
A) Do not obtain an understanding of client environment, accounting, or control activities. Do not document the decision to assess control risk at maximum. Perform 100% substantive audit on all financial statement transactions and balances.
B) Obtain an understanding of client environment, accounting, and control activities. Document the decision to assess control risk at maximum. Perform an extensive but not 100% substantive audit on financial statement transactions and balances.
C) Obtain an understanding of client environment, accounting, and control activities, and perform detail tests of controls. Document the decision to assess control risk below the maximum. Perform restricted substantive audit on financial statement transactions and balances, considering the control risk assessment.
D) Obtain an understanding of client environment, accounting, and control activities, and perform detail tests of controls. Document the decision to assess control risk at zero. Perform no substantive audit on financial statement transactions and balances, since zero control risk means that no errors or fraud can reach the accounts.

Accepted Answer

GAAS requires auditors to obtain an understanding of the client's environment, accounting, and control activities. This understanding is crucial for assessing control risk and planning the audit. While auditors can decide to assess control risk at the maximum and still comply with GAAS, they must document this decision. This approach allows for a more extensive substantive audit, though not necessarily 100%, to ensure financial statement transactions and balances are accurately stated.

Question 4

After obtaining an understanding of internal controls and assessing control risk on the audit of a non-public company,an auditor decided to perform tests of controls.The auditor most likely decided that
A) it would be efficient to perform tests of controls that would result in a reduction in planned substantive tests.
B) additional evidence to support a further reduction in control risk is not available.
C) an increase in the assessed level of control risk is justified for certain financial statement assertions.
D) there were many internal control weaknesses that could allow errors to enter the accounting system.

Accepted Answer

The auditor likely decided to perform tests of controls to gain assurance about the effectiveness of the company's internal controls in preventing and detecting errors or fraud. If the tests of controls are successful, the auditor may be able to reduce the extent of substantive testing, which would result in a more efficient audit. Therefore, choice A is the best answer.

Question 5

Which of the following is a step in an auditor's decision to assess control risk at below the maximum?
A) Apply analytical procedures to both financial data and nonfinancial information to detect conditions that may indicate weak controls.
B) Perform tests of details of transactions and account balances to identify potential errors and fraud.
C) Identify specific internal control policies and activities that are likely to detect or prevent material misstatements.
D) Document that the additional audit effort to perform tests of controls exceeds the potential reduction in substantive testing.

Accepted Answer

In order to assess control risk at below the maximum, the auditor must identify specific internal control policies and activities that are likely to detect or prevent material misstatements. This involves gaining an understanding of the client's internal controls and evaluating their effectiveness. Analytical procedures and tests of details of transactions and account balances may be used to support this evaluation, but identifying specific internal controls is the crucial step in assessing control risk below the maximum. Option A may help in identifying weak controls, but it does not specifically address the decision to assess control risk below the maximum. Option B involves substantive testing, which is separate from the decision to assess control risk, and is used when control risk is assessed at the maximum. Option D is also not relevant to the decision to assess control risk below the maximum, as it pertains to the decision to use substantive testing instead of tests of controls.

Question 6

Which of the following areas can external auditors rely on internal auditors' work in auditing internal controls?
A) Evaluation of the auditing environment
B) Testing of low risk internal control activities
C) All testing of the operating effectiveness of internal control activities
D) As providing the principle evidence for the external auditors' opinion

Accepted Answer

External auditors can rely on internal auditors' work in testing of low risk internal control activities as it helps in reducing the overall audit workload and cost. However, they cannot rely solely on internal auditors' work for providing the principle evidence for the external auditors' opinion or for evaluating the auditing environment. Additionally, external auditors are responsible for testing the operating effectiveness of internal control activities themselves.

Question 7

The overall attitude and awareness of an entity's board of directors concerning the importance of the client's internal control usually is reflected in its
A) computer-based control activities.
B) system of separation of duties.
C) control environment.
D) safeguards over access to assets.

Accepted Answer

The control environment, which includes the tone at the top and the overall attitude of the board of directors and management, has a significant impact on the effectiveness of an entity's internal control system. Therefore, the overall attitude and awareness of the board of directors concerning the importance of client's internal control is reflected in the control environment.

Question 8

Management's report on internal controls must include each of the following except
A) a statement that management is responsible for establishing and maintaining adequate internal control over financial reporting.
B) a statement identifying the framework management uses to evaluate the effectiveness of the company's internal control.
C) a statement providing management's assessment of the effectiveness of the company's internal control.
D) a statement providing management's evaluation of the company's control environment.

Accepted Answer

The management's report on internal controls must include a statement that management is responsible for establishing and maintaining adequate internal control over financial reporting, a statement identifying the framework management uses to evaluate the effectiveness of the company's internal control, and a statement providing management's assessment of the effectiveness of the company's internal control. However, it does not need to include a statement providing management's evaluation of the company's control environment.

Question 9

In testing control activities,an auditor ordinarily selects from a variety of techniques,including
A) inquiry and analytical procedures.
B) reperformance and observation.
C) comparison and confirmation.
D) inspection and verification.

Accepted Answer

Reperformance involves the auditor independently performing the control activity to ensure that it is operating effectively, while observation involves physically watching the control activity being performed by others. Both of these techniques provide first-hand evidence about the effectiveness of control activities, making them the best choices for testing these controls. While inquiry, analytical procedures, comparison, confirmation, inspection, and verification may also be used in testing control activities, they do not provide the same level of direct evidence as reperformance and observation.

Question 10

Assessing control risk at below the maximum level most likely would involve
A) performing more extensive substantive tests with larger sample sizes than originally planned.
B) reducing inherent risk for most of the assertions relevant to significant account balances.
C) changing the timing of substantive tests by omitting interim-date testing and performing the tests at year end.
D) identifying specific internal control activities that are relevant to specific financial statement assertions.

Accepted Answer

Assessing control risk at below the maximum level would involve identifying specific internal control activities that are relevant to specific financial statement assertions. This would ensure that the controls are designed and operating effectively to provide assurance regarding the relevant assertions. Performing more extensive substantive tests (A) may not be necessary if control risk is assessed at a lower level. Reducing inherent risk (B) is not an appropriate way to assess control risk. Changing the timing of substantive tests (C) may not be appropriate if the substantive test timing is already planned appropriately.

Question 11

If a control total were to be computed on each of the following data items,which would best be identified as a hash total for a payroll IT application?
A) Hours worked
B) Total debits and total credits
C) Net pay
D) Department numbers

Accepted Answer

A hash total is a control total that does not have a direct financial meaning but is used to ensure data integrity. Department numbers work well for this purpose as they can be added together to create a non-financial total that can be used to check that all data has been processed correctly, unlike hours worked, total debits and credits, or net pay, which are financial figures.

Question 12

When auditing financial statements of a private company,the minimum work an auditor must perform in connection with a company's internal control is best described by which of the following statements.
A) Perform exhaustive tests of accounting controls and evaluate the company's control system effectiveness.
B) Determine whether the company's control policies are designed well enough to prevent material misstatements.
C) Prepare auditing working papers that document the auditor's understanding of the company's internal control.
D) Design procedures to search for significant deficiencies in the actual operation of the company's internal control.

Accepted Answer

The minimum work an auditor must perform in connection with a company's internal control is to prepare auditing working papers that document the auditor's understanding of the company's internal control. While options A, B, and D are important components of auditing internal controls to ensure the accuracy and reliability of financial statements, they are not the minimum work required.

Question 13

Which of the following most likely would not be considered an inherent limitation of the potential effectiveness of an entity's internal controls?
A) Incompatible duties
B) Management override
C) Mistakes in judgment
D) Collusion among employees

Accepted Answer

Incompatible duties are not an inherent limitation of internal controls; rather, they represent a flaw in the design of the control environment. Inherent limitations, such as management override, mistakes in judgment, and collusion among employees, acknowledge that even well-designed internal controls can fail or be circumvented.

Question 14

In an audit of financial statements,an auditor's primary consideration regarding an internal control policy or activity is whether the policy or activity
A) reflects management's philosophy and operating style.
B) affects management's financial statement assertions.
C) provides adequate safeguards over access to assets.
D) enhances management's decision making processes.

Accepted Answer

The primary consideration of an auditor regarding internal control policy or activity is whether it affects management's financial statement assertions, as it directly impacts the accuracy and reliability of the financial statements. While management's philosophy and operating style, safeguards over asset access, and decision-making processes are also important factors, they are secondary considerations.

Question 15

A report on internal control effectiveness by the management team of public companies is required by
A) the Sarbanes-Oxley Act of 2002.
B) the PCAOB.
C) the AICPA.
D) the auditors.

Accepted Answer

The Sarbanes-Oxley Act of 2002 requires management to report on the effectiveness of internal controls over financial reporting, including a description of any material weaknesses. This requirement is in Section 404 of the Act. The other options (B, C, and D) may be involved in evaluating or assessing internal controls, but they are not the specific requirement for management to report on their effectiveness.

Question 16

Which of the following is not an objective of internal controls over financial reporting as defined by the Sarbanes-Oxley Act?
A) Policies and procedures that pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of the assets of the registrant.
B) Policies and procedures that provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and receipts and expenditures of the registrant are being made only in accordance with authorizations of management and directors of the registrant.
C) Policies and procedures that provide reasonable assurance regarding the compliance with applicable laws and regulations.
D) Policies and procedures that provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of the registrant's assets that could have a material effect on the financial statements.

Accepted Answer

Explanation: The Sarbanes-Oxley Act focuses on the accuracy and reliability of financial reporting and the prevention of fraudulent activities within corporations. While it does emphasize compliance with laws and regulations as part of its broader objectives, the specific objective of ensuring compliance with all applicable laws and regulations is not directly stated as an objective of internal controls over financial reporting. The primary focus is on the accuracy of financial records, authorization of transactions, and safeguarding of assets.

Question 17

Proper separation of duties reduces the opportunities to allow persons to be in positions to both
A) journalize entries and prepare financial statements.
B) record cash receipts and cash disbursements.
C) establish internal controls and authorize transactions.
D) perpetrate a fraud and then conceal it in the books.

Accepted Answer

Proper separation of duties is a key internal control that helps prevent fraud by ensuring no single individual has control over all aspects of a financial transaction. This makes it harder for someone to commit and then conceal fraudulent activities, as it would require collusion between multiple parties. Options A, B, and C describe functions that can be separated to enhance controls, but they do not directly address the dual aspects of committing and concealing fraud as effectively as option D does.

Question 18

Which of the following would most likely be classified as a material weakness?
A) Absence of appropriate separation of duties
B) Absence of appropriate reviews and approvals of transactions
C) Evidence of failure of control activities
D) Ineffective oversight of the financial reporting process by the company's audit committee

Accepted Answer

The answer of Which of the following would most likely...

Question 19

As part of understanding the internal control,an auditor is not required to
A) consider factors that affect the risk of material misstatement.
B) ascertain whether internal control policies and activities have been placed in operation.
C) identify the types of potential misstatements that can occur.
D) obtain knowledge about the operating effectiveness of the client's internal control activities.

Accepted Answer

Understanding the internal control system as part of an audit involves considering factors that affect the risk of material misstatement, ascertaining whether internal control policies and activities have been implemented, and identifying the types of potential misstatements. However, obtaining knowledge about the operating effectiveness of the client's internal control activities goes beyond understanding the system and involves testing the controls, which is not required for all audits.

Question 20

The primary objective of procedures performed to obtain an understanding of the entity's internal control is to provide an auditor with
A) knowledge necessary for audit planning.
B) evidential matter to use in assessing inherent risk.
C) a basis for modifying tests of controls.
D) an evaluation of the consistency of application of management's policies.

Accepted Answer

The primary objective of procedures performed to obtain an understanding of the entity's internal control is to provide an auditor with knowledge necessary for audit planning. Understanding the entity's internal control helps an auditor in planning the audit procedures and assessing the risk of material misstatement. It provides the auditor with knowledge of key control areas and potential weaknesses that must be considered in planning substantive testing procedures.

Quiz 5: Risk Assessment: Internal Control Evaluation

In an audit of financial statements of a non-public company in accordance with generally accepted auditing standards,an auditor is required to

After obtaining an understanding of internal controls and assessing control risk on the audit of a non-public company,an auditor decided to perform tests of controls.The auditor most likely decided that

Which of the following is a step in an auditor's decision to assess control risk at below the maximum?

Which of the following areas can external auditors rely on internal auditors' work in auditing internal controls?

The overall attitude and awareness of an entity's board of directors concerning the importance of the client's internal control usually is reflected in its

Management's report on internal controls must include each of the following except

In testing control activities,an auditor ordinarily selects from a variety of techniques,including

Assessing control risk at below the maximum level most likely would involve

If a control total were to be computed on each of the following data items,which would best be identified as a hash total for a payroll IT application?

When auditing financial statements of a private company,the minimum work an auditor must perform in connection with a company's internal control is best described by which of the following statements.

Which of the following most likely would not be considered an inherent limitation of the potential effectiveness of an entity's internal controls?

In an audit of financial statements,an auditor's primary consideration regarding an internal control policy or activity is whether the policy or activity

A report on internal control effectiveness by the management team of public companies is required by

Which of the following is not an objective of internal controls over financial reporting as defined by the Sarbanes-Oxley Act?

Proper separation of duties reduces the opportunities to allow persons to be in positions to both

Which of the following would most likely be classified as a material weakness?

As part of understanding the internal control,an auditor is not required to

The primary objective of procedures performed to obtain an understanding of the entity's internal control is to provide an auditor with