After testing a client's internal control activities, an auditor discovers a number of significant deficiencies in the operation of a client's internal controls. Under these circumstances the auditor most likely would:

Question

Quizplus · Accepted Answer

Choice "B" is correct. The auditor uses tests of controls to evaluate control risk. In situations where there are a number of significant deficiencies in the operation of the client's internal controls, the auditor would increase the assessment of control risk (and the risk of material misstatement) and revise substantive testing accordingly (for example, by increasing the extent of substantive tests). Choice "A" is incorrect. An auditor is required to communicate significant deficiencies to management and those charged with governance, and a disclaimer of opinion on the effectiveness of controls would be included in this communication. However, such disclaimer would not be part of the auditor's report on the financial statements. Choice "C" is incorrect. Since the auditor's report provides an opinion on the financial statements (and not on internal control), significant deficiencies in internal control do not result in a qualified opinion. Choice "D" is incorrect. The auditor need not withdraw from an audit simply because internal controls are ineffective, but rather would increase the assessment of control risk and revise substantive testing accordingly.

After Testing a Client's Internal Control Activities, an Auditor Discovers