1
CPAR Reviewers
Auditing
Theory
2 CPA REVIEW SCHOOL OF THE PHILIPPINES
Manila
AUDITING THEORY
CPA REVIEW
PREFACE TO PHILIPPINE STANDARDS ON QUALITY CONTROL, AUDITING, REVIEW, OTHER ASSURANCE AND RELATED SERVICES
PHILIPPINE FRAMEWORK FOR ASSURANCE ENGAGEMENTS
OBJECTIVE AND GENERAL PRINCIPLES GOVERNING AN AUDIT OF FINANCIAL STATEMENTS (PSA 200 [Amended as a result of PSA 700 (Revised)])
The Authority Attaching to Philippine Standards Issued by the AASC
STANDARDS APPLICATION
1. Philippine Standards on Auditing (PSAs) Audit of historical financial information 2. Philippine Standards on Review
Engagements (PSREs)
Review of historical financial information 3. Philippine Standards on Assurance
Engagements (PSAEs)
Assurance engagements dealing with subject matters other than historical financial information
4. Philippine Standards on Related Services (PSRSs)
Compilation engagements
Engagements to apply agreed-upon procedures to information
Other related services engagements as specified by the AASC
1. PSAs, PSREs, PSAEs and PSRSs are collectively referred to as the AASC’s Engagement Standards. 2. Philippine standards on Quality Control (PSQC) are to be applied for all services falling under the
AASC’s engagement standards.
3. Philippine Standards are applicable to engagements in the Public sector. The Authority Attaching to Practice Statements Issued by the AASC
1. Philippine Practice Statements are issued to:
Provide interpretive guidance and practical assistance o professional accountants in implementing Philippine Standards; and
Promote good practice
2. Professional accountants should be aware of and consider Practice Statements applicable to the engagement.
3. A professional accountant who does not consider and apply the guidance included in a relevant Practice Statements should be prepared to explain how the basic principles and essential procedures in the AASC’s Engagement Standard(s) addressed by the Practice Statement have been complied with.
PHILIPPINE FRAMEWORK FOR ASSURANCE ENGAGEMENTS
1. The Framework does not itself establish standards or provide procedural requirements for the performance of assurance engagements.
2. In addition to the Framework and PSAs, PSREs and PSAEs, practitioners who perform assurance engagements are governed by:
The Philippine Code of Ethics for Professional Accountants; and Philippine Standards on Quality Control (PSQCs)
ASSURANCE ENGAGEMENTS
1. “Assurance engagement” means an agreement in which a particular expresses a conclusion designed to enhance the degree of confidence of the intended users other than the responsible party about the outcome of the evaluation or measurement of a subject matter against criteria. 2. “Subject matter information” refers to the outcome of the evaluation or measurement of a
subject matter.
3. In some assurance engagements, the evaluation or measurement of the subject I performed by the responsible party, and the subject matter information is in the form of an assertion by the responsible party that is made available to intended users (assertion-based engagements). 4. In other assurance engagements, the practitioner either directly performs the evaluation or
3 has performed the evaluation or measurement that is not available to the intended users in the assurance report (direct reporting engagements)
TWO TYPES OF ASSURANCE ENGAGEMENT
1. Reasonable assurance engagement – the objective is a reduction in assurance engagement risk to an acceptably low level in the circumstances of the engagement as the basis for a positive form of expression of the practitioner’s conclusion.
2. Limited assurance engagement – the objective is a reduction in assurance engagement risk to a level that is acceptable in the circumstances of the engagement, but where the risk is greater than for a reasonable assurance engagement, as a basis for a negative form of expression of the practitioner’s conclusion.
SCOPE OF THE FRAMEWORK
The following are non-assurance engagements and therefore are not covered by the Framework: 1. Engagements covered by the PSRSs such as agreed-upon procedures engagements and
compilations of financial or other information.
2. The preparation of tax returns where no conclusion conveying assurance is expressed. 3. Consulting (or advisory) engagements, such as management and tax consulting. ELEMENTS OF AN ASSUARANCE ENGAGEMENT
1. A three-party relationship involving: A practitioner;
A responsible party; and Intended users.
2. An appropriate subject matter; 3. Suitable criteria;
4. Sufficient appropriate evidence; and
5. A written assurance report in the form appropriate to a reasonable assurance engagement or a limited assurance engagement.
OBJECTIVE AND GENERAL PRINCIPLES GOVERNING AN AUDIT OF FINANCIAL STATEMENTS
1. The OBJECTIVE of an audit of financial statements is to enable the auditor to express an opinion whether the financial statements are prepared, in all material respects, in accordance with an applicable financial reporting framework.
2. The auditor should comply with relevant ethical requirements relating to audit engagements. 3. The auditor should conduct the audit in accordance with PSAs.
4. “Scope of an audit” refers to the audit procedures that, in the auditor’s judgment and based on PSAs, are deemed appropriate in the circumstances to achieve the objective of the audit. 5. The auditor should plan and perform an audit with an attitude of PROFESSIONAL SKEPTICISM
recognizing that circumstances may exist that cause the financial statements to be materially misstated.
6. In forming the audit opinion, the auditor obtains sufficient appropriate evidence to be able to draw conclusions on which to base that opinion.
7. The auditor’s opinion enhances the credibility of financial statements by providing a high, but not absolute, level of assurance.
8. Absolute assurance in auditing is not attainable as a result of such factors as: The need for judgment;
The use of testing;
The inherent limitations of any accounting and internal control systems; and
The fact that most of the evidence available to the auditor is persuasive, rather than conclusive, in nature.
9. While the auditor is responsible for forming and expressing an opinion on the financial
statements, the responsibility for the preparation and presentation of the financial statements in accordance with the applicable financial reporting framework is that of the entity’s
4 ENGAGEMENTS TO REVIEW FINANCIAL STATEMENTS
1. The objective of a review of financial statements is to enable a practitioner to state whether, on the basis of procedures which do not provide all the evidence that would be require in an audit, anything has come to the practitioner’s attention that causes the practitioner to believe that the financial statements are not prepared, in all material respects, in accordance with an identified financial reporting framework (negative assurance)
2. A review comprises INQUIRY and ANALYTICAL PROCEDURES which are designed to review the reliability of an assertion that is the responsibility of one party for use by another party. 3. A review does not ordinarily involve an assessment of accounting and internal control systems,
tests of records and of responses to inquiries by obtaining corroborating evidence through inspection, observation, confirmation and computation, which are procedures ordinarily performed during an audit.
4. The level of assurance provided in a review report is less that that given in an audit report. ENGAGEMENTS TO PERFORM AGREED-UPON PROCEDURES REGARDING FINANCIAL INFORMATION
1. In an engagement to perform agreed-upon procedures, an auditor is engaged to carry out those procedures of an audit nature to which the auditor and the entity and any appropriate third parties have agreed and to report on FACTUAL FINDINGS.
2. The recipients of the report must form their own conclusion from the report of the auditor. 3. The report is restricted to those parties that have agreed to the procedures to be performed
since others, unaware of the reasons for the procedures, may misinterpret the results. ENGAGEMENTS TO COMPILE FINANCIAL INFORMATION
1. In a compilation engagement, the accountant is engaged to use accounting expertise as opposed to auditing expertise to collect, classify, and summarized financial information. 2. It ordinarily entails reducing detailed data to manageable and understandable form without a
requirement to test the assertions underlying that information.
3. The procedures performed are not designed and do not enable the accountant to express any assurance on the financial information.
4. Users of compiled financial information derived some benefit as a result of the accountant’s involvement because the service has been performed with due professional skill and care. SUMMARY
Nature of service Audit Review Agreed-upon
Procedures
Compilation Level of Assurance
Provided
High, but not absolute assurance
Moderate assurance
No assurance No assurance
Report provided Positive assurance on assertion(s) (Audit Report) Negative assurance on assertion(s) (Review Report) Factual findings of procedures Identification of information compiled (Compilation Report)
5 CPA REVIEW SCHOOL OF THE PHILIPPINES
Manila
AUDITING THEORY
CPA REVIEW
PSQC1 QUALITY CONTROL FOR FIRMS THAT PERFORM AUDITS AND REVIEWS OF HISTORICAL FINANCIAL INFORMATION, AND OTHER ASSURANCE AND RELATED SERVICES
PSA 220 (REVISED)
QUALITY CONTROL FOR AUDITS OF HISTORICAL FINANCIAL INFORMATION PSA 210 [AMENDED BY PSA 700(REVISED)]
TERMS OF AUDIT ENGAGEMENTS
PSQC 1
1. The firm should establish a System of Quality Control to provide it with reasonable assurance that:
a. The firm and its personnel comply with professional standards and regulatory and legal requirements; and
b. The reports issued by the firm or engagement partners are appropriate in the circumstances.
2. Elements of a System of Quality Control
a. Leadership responsibility for quality within the firm b. Ethical requirements
c. Acceptance and continuance of client relationships and specific engagements. d. Human resources
e. Engagement performance f. Monitoring
PSA 220 (Revised)
1. The engagement team should implement quality control procedures that are applicable to the individual audit engagement.
2. The engagement partner should
a. Take responsibility for the overall quality on each audit engagement to which that partner is assigned.
b. Consider whether members of the engagement team have complied with ethical requirements.
c. Be satisfied that appropriate procedures regarding the acceptance and continuance of client relationships and specific audit engagements have been followed, and that conclusions reached in this regard are appropriate and have been documented. d. Be satisfied that the engagement team collectively has the appropriate capabilities,
competence and time to perform the audit engagement in accordance with professional standards and regulatory and legal requirements, and to enable an auditor’s report that is appropriate in the circumstances to be issued.
e. Take responsibility for the direction, supervision and performance of the audit engagement in compliance with professional standards and regulatory and legal requirements, and for the auditor’s report that is issued to be appropriate n he circumstances.
f. Be satisfied that sufficient appropriate audit evidence has been obtained to support the conclusions reached and for the auditor’s report to be issued.
PSA 210 [AMENDED BY THE PSA 700 (REVISED)]
1. The purpose of this standard is to establish standards and provide guidelines on: a. Agreeing the terms of the engagement with the client; and
b. The auditor’s response to a request by a client to change the terms of an engagement to one that provides a lower level of assurance.
2. Audit Engagement Letters
It is in the interest of both client and auditor that the auditor sends an engagement letter, preferably before the commencement of the engagement, to help in avoiding misunderstandings with respect to the engagement.
6 Principal Contents
An engagement letter would generally include reference to: The objective of the audit of financial statements.
Management’s responsibility for the financial statements. The financial reporting framework adopted by management in
preparing the financial statements.
The scope of the audit, including reference to applicable legislation, regulations or pronouncements of professional bodies to which the auditor adheres.
The form of any reports or other communication of results of the engagement.
The fact that because of the test nature and other inherent limitations of an audit, together with the inherent limitations of any accounting and internal controls system, there is an
unavoidable risk that even some material misstatement may remain undiscovered.
Unrestricted access to whatever records, documentation and other information requested in connection with the audit. 3. Acceptance of a Change in Engagement
1. An auditor who, before the completion of the engagement, is requested to change the engagement tone which provides a lower level of assurance, should consider the appropriateness of doing so.
2. A request from the client for the auditor to change the engagement may result from:
a. A change in circumstances affecting the need for the service;
b. A misunderstanding as to the nature of an audit or related service originally requested; or
c. A restriction on the scope of the engagement, whether imposed by management or caused by circumstances.
(NOTE: A or B would ordinarily be a reasonable basis for requesting a change in the engagement)
3. A change would not be considered reasonable if it appeared that the change relates
to information that is incorrect, incomplete or otherwise unsatisfactory.
4. Before agreeing to change an audit engagement to a related service, an auditor
would also consider any legal or contractual implications of the change.
5. If the auditor concludes that there is reasonable justification to change the
engagement and if the audit work performed complies with the PSAs applicable to the change engagement, the report issued would be that appropriate for the revised terms of the engagement.
6. In order to avoid confusing the reader, the report would not include reference to:
a. The original engagement; or
b. Any procedures that may have been performed by the original engagement, except where the engagement is changed to undertake agreed-upon procedures.
7. Where the terms of the engagement are changed, the auditor and the client should
agree in the new terms.
8. The auditor should not agree to a change of engagement where there is no
reasonable justification for doing so.
9. If the auditor is unable to agree to a change of engagement and is not permitted to
continue the original engagement, the auditor should withdraw and consider whether there is any obligation, contractual or otherwise, to report to other parties, such as the board of directors or shareholders, the circumstances necessitating the withdrawal.
7 CPA REVIEW SCHOOL OF THE PHILIPPINES
Manila
AUDITING THEORY
CPA REVIEW
PSA 300 (Rev.) PLANNING AN AUDIT OF FINANCIAL STATEMENTS
PSA 315
UNDERSTANDING THE ENTITY AND ITS ENVIRONMENT AND ASSESSING
THE RISKS OF MATERIAL MISTATEMENT
PSA 300 (Rev.)
PLANNING AN AUDIT OF FINANCIAL STATEMENTS 1. Planning an audit involves:
establishing the overall audit strategy for the engagement and developing an audit plan,
in order to reduce audit risk to an acceptably low level. Preliminary Engagement Activities
2. The auditor should perform the following activities at the beginning of the current audit engagement:
Perform procedures regarding the continuance of the client relationship and the specific audit engagement.
Evaluate compliance with ethical requirements, including independence. Establish an understanding of the terms of the engagement.
Planning Activities
3. The auditor should establish the overall audit strategy for the audit. The overall audit strategy sets the scope, timing and direction of the audit, and guides the development of the more detailed audit plan
4. The establishment of the overall audit strategy involves:
a.) Determining the characteristics of the engagement that define its scope;
b.) Ascertaining the reporting objectives of the engagement to plan the timing of the audit and the nature of the communication required; and
c.) Considering the important factors that will determine the focus of the engagement team’s efforts.
5. The auditor should develop an audit plan for the audit in order to reduce audit risk to an acceptably low level.
6. The audit plan is more detailed than the overall audit strategy and includes the nature, timing and extent of audit procedures to be performed by engagement team members in order to obtain sufficient appropriate audit evidence to reduce audit risk to an acceptably low level.
7. The audit plan includes:
A description of the nature, timing and extent of planned risk assessment procedures sufficient to assess the risks of material misstatement as determined under PSA 315, “Understanding the Entity and its Environment and Assessing the Risks of Material Misstatement.”;
A description of the nature, timing and extent of planned further audit procedures at the assertion level for each material class of transactions, account balance, and disclosure, as determined under PSA 330, “The Auditor’s Procedures in Response to Assessed Risks,”; and Such other procedures required to be carried out for the engagement in order to comply with
PSAs
Changes to Planning Decisions during the Course of the Audit
The overall audit strategy and the audit plan should be updated and changed as necessary during the course of the audit.
8 Direction, Supervision and Review
1. The auditor should plan the nature, timing and extent of direction and supervision of engagement team members and review their work.
2. The nature, timing and extent of the direction and supervision of engagement team members and review of their work vary depending on many factors, including:
The size and complexity of the entity; The area of audit;
The risks of material misstatement; and
The capabilities and competence of personnel performing the audit work.
3. The auditor plans the nature, timing and extent of direction and supervision of engagement team members based on the assessed risk of material misstatement.
Documentation
The auditor should document the overall audit strategy and the audit plan, including any significant changes made during the audit engagement.
Communications with Those Charged with Governance and Management
1. The auditor may discuss elements of planning with those charged with governance and the entity’s management.
2. Discussions with those charged with governance ordinarily include the overall audit strategy and timing of the audit, including any limitations thereon, or any additional requirements.
3. When discussion of matters included in the overall audit strategy or audit plan occur, care is required in order not to compromise the effectiveness of the audit.
Additional Considerations in Initial Audit Engagements
The auditor should perform the following activities prior to starting an initial audit:
1. Perform procedures regarding the acceptance of the client relationship and the specific audit engagement.
2. Communicate with the previous auditor, where there has been a change of auditors, in compliance with relevant ethical requirements.
PSA 315
UNDERSTANDING THE ENTITY AND ITS ENVIRONMENT AND ASSESSING THE RISKS OF MATERIAL MISSTATEMENT
1. The auditor should obtain an understanding of the entity and its environment, including its internal control, sufficient to identify and assess the risks of material misstatement of the financial
statements whether due to fraud or error, and sufficient to design and perform further audit procedures.
2. The auditor should perform the following risk assessment procedures to obtain an understanding of the entity and its environment, including its internal control:
a.) Industry, regulatory, and other external factors, including the applicable financial reporting framework.
b.) Nature of the entity, including the entity’s selection and application of accounting policies. c.) Objectives and strategies and the related business risks that may result in a material
misstatement of the financial statements.
d.) Measurement and review of the entity’s financial performance. e.) Internal control.
9 INTERNAL CONTROL
1. Internal control is the process designed and effected by those charged with governance,
management, and other personnel to provide reasonable assurance about the achievement of the entity’s objectives with regard to:
Reliability of financial reporting;
Effectiveness and efficiency of operations; and Compliance with applicable laws and regulations. 2. The auditor uses the understanding of internal control to:
Identify types of potential misstatements;
Consider factors that affect the risks of material misstatement; and Design the nature, timing and extent of further audit procedures. 3. Internal control consists of the following components:
1.) The control environment.
2.) The entity’s risk assessment process.
3.) The information system, including the related business processes, relevant to financial reporting, and communication.
4.) Control activities. 5.) Monitoring of controls.
The control environment includes the governance and management functions and the attitudes, awareness, and actions of those charged with governance and management concerning the entity’s internal control and its importance in the entity.
Elements of control environment:
a) Communication of enforcement of integrity and ethical values. b) Commitment to competence.
c) Participation by those charged with governance. d) Management’s philosophy and operating style. e) Organizational structure.
f) Assignments of authority and responsibility. g) Human resource policies and practices.
The auditor should obtain an understanding of the entity’s risk assessment process, i.e., the entity’ process for identifying business risks relevant to financial reporting objectives and deciding about actions to address those risks, and the results thereof.
The auditor should obtain an understanding of the information system, including the related business processes, relevant to financial reporting, including the following areas:
The classes of transactions in the entity’s operations that is significant to the financial statements.
The procedures, within both IT and manual systems, by which those transactions are initiated, recorded, processed and reported in the financial statements.
The related accounting records, whether electronic or manual, supporting information, and specific accounts in the financial statements, in respect of initiating, recording, processing and reporting transactions.
How the information system captures events and conditions, other than classes of transactions that are significant to the financial statements.
The financial reporting process used to prepare the entity’s financial statements, including significant accounting estimates and disclosures.
10 Control activities are the policies and procedures to help ensure that management directives are carried out. Examples of control activities include those relating to the following:
Authorization
Performance reviews. Information processing. Physical controls. Segregation of duties.
Monitoring of controls involves assessing the design and operation of controls on a timely basis and taking the necessary corrective actions modified for changes in conditions.
4. Obtaining an understanding of internal control involves: a) Evaluating the design of a control; and
b) Determining whether it has been implemented. ASSESSING THE RISKS OF MAERIAL MISSTATEMENT
1. The auditor should identify and assess the risks of material misstatement at the financial statements level, and at the assertion level for classes of transactions, account balances, and disclosures.
2. The auditor:
Identifies risks throughout the process of obtaining an understanding of the entity and its environment, including relevant controls that relate to the risks, and by considering the classes of transactions, account balances, and disclosures in the financial statements; Relates the identified risks to what can go wrong at the assertion level;
Considers whether the risks are of a magnitude that could result in a material misstatement of the financial statements; and
Considers the likelihood that the risks could result in a material misstatement of the financial statements.
11 CPA REVIEW SCHOOL OF THE PHILIPPINES
Manila
AUDITING THEORY
CPA REVIEW
PSA 330
THE AUDITOR’S PROCEDURES IN REPONSE TO ASSESSED RISKS Overall responses
1. The auditor should determine overall responses to address the risks of material misstatement at the financial statement level. Such responses may include:
Emphasizing to the audit team the need to maintain professional skepticism n gathering and evaluating audit evidence
Assigning more experienced staff or those with special skills or using experts Providing more supervision
Incorporating additional elements of unpredictability in the selection of further audit procedures to be performed
Making general changes to the nature, timing or extent of audit procedures Audit Procedures Responsive to Risks of Material Misstatement at the Assertion Level
1. In designing further audit procedures, the auditor considers the following: The significance of the risk
The likelihood that the material misstatement will occur
The characteristics of the class transactions, account balance, or disclosure involved.
The nature of the specific controls used by the entity and in particular whether they are manual or automated
Whether the auditor expects to obtain audit evidence to determine if the entity’s controls are effective n preventing, or detecting and correcting, material misstatements
2. Considering the nature, timing and extent of further audit procedures The nature of further audit procedures refers to their:
a. Purpose- tests of controls or substantive procedures
b. Type - inspection, observation, inquiry, confirmation, recalculation, reperformance, or analytical procedures.
Timing refers to when audit procedures are performed or the period or date to which the audit evidence applies.
Extent includes the quantity of a specific audit procedure to be performed. TESTS OF CONTROLS
1. The auditor is required to perform tests of controls when:
a. The auditor’s risk assessment includes an expectation of the operating effectiveness of controls; or
b. When the substantive procedures alone do not provide sufficient appropriate audit evidence at the assertion level
2. Tests of the operating effectiveness of controls are performed only on those controls that the auditor has determined are suitably designed to prevent, or detect and correct, a material misstatement in an assertion
3. Testing the operating effectiveness of controls includes obtaining evidence about: a. How controls were applied at relevant times during the period under audit; b. The consistency with which they were applied; and
c. By whom or by what means they were applied. SUBSTANTIVE PROCEDURES
1. Substantive test procedures are performed in order to detect material misstatements at the assertion level, and include:
Tests of details of classes of transactions, account balances, and disclosures; and Substantive analytical procedures
12 2. The auditor’s substantive procedures should include the following audit procedures related to
the financial statement closing process:
Agreeing or reconciling the financial statements with accounting records; and Examining material journal entries and other adjustments made during the
course of preparing the financial statements
3. The auditor should perform audit procedures to evaluate whether the overall presentation of the financial statements, including the related disclosures, are in accordance with the applicable financial reporting framework.
Evaluating the sufficiency and appropriateness of audit evidence obtained
1. Based on the audit procedures performed and the audit evidence obtained, the auditor should evaluate whether the assessments of the risks of material misstatement at the assertion level remain appropriate.
2. The auditor should conclude whether the assessments of the risks of material misstatement in the financial statements.
3. If the auditor has not obtained sufficient appropriate audit evidence as to a material financial statement assertion, the auditor should attempt to obtain further audit evidence. If the auditor is unable to obtain further audit evidence, the auditor should express a qualified opinion or a disclaimer of opinion.
Documentation
1. The auditor should document:
The overall responses to address the assessed risks of material misstatement at the financial statement level and the nature, timing, and extent of the further audit procedures;
The linkage of those procedures with the assessed risks at the assertion level; and
The results of the audit procedures
2. If the auditor plans to use audit evidence about the operating effectiveness of controls obtained in prior audits, the auditor should document the conclusions reached with regard to relying on vcfsuch controls that were tested in a prior audit.
3. The auditor’s documentation should demonstrate that the financial statements agree or reconcile with the underlying accounting records.
13 CPA REVIEW SCHOOL OF THE PHILIPPINES
Manila
AUDITING THEORY
CPA REVIEW
PSA 320 AUDIT MATERIALITY (amended by PSA 240 [Revised 2005]) PSA 520 ANALYTICAL PROCEDURES
PSA 550 RELATED PARTIES
PSA 610 CONSIDERING THE WORK OF INTERNAL AUDIT PSA 620 USING THE WORK OF AN EXPERT
PSA 320
AUDIT MATERIALITY
1. Materiality should be considered by the auditor when:
Determining the nature, timing and extent of audit procedures; and Evaluating the effect of misstatements
2. There is an inverse relationship between materiality and the level of audit risk
3. In evaluating whether the financial statements are prepared, in all material respects, in
accordance with an applicable financial reporting framework, the auditor should assess whether the aggregate of uncorrected misstatements that have been identified during the audit is material.
4. If the auditor concludes that the aggregate of uncorrected misstatements may be material, the auditor needs to consider:
Reducing audit risk by extending audit procedures; or
requesting management to adjust the financial statements for the misstatements identified
5. If management refuses to adjust the financial statements and the results of extended audit procedures do not enable the auditor to conclude that the aggregate of uncorrected
misstatements is not material, the auditor should consider the appropriate modification to the auditor’s report.
6. If the auditor has identified a material misstatement resulting from error, the auditor should communicate the misstatements to the appropriate level of management on a timely basis, and consider the need to report it to those charged with governance.
PSA 520
ANALYTICAL PROCEDURES
1. “Analytical procedures” means the analysis of significant ratios and trends including the
resulting investigation of fluctuations and relationships that are inconsistent with other relevant information or which deviate from predicted amounts.
2. Analytical procedures also include consideration of comparisons of the entity’s financial statements:
a. Comparable information for prior periods
b. Anticipated results of the entity, such as budgets or forecasts, or expectations of the auditor, such as an estimation of depreciation
c. Similar industry information
3. Analytical procedures also include consideration of relationships:
a. Among elements of financial information that would be expected to conform to a predictable patter based on the entity’s experience, such as gross margin
percentages.
b. Between financial information and relevant no-financial information, such as payroll costs to numbers and employees
4. The auditor should apply analytical procedures at the planning stage to assist in understanding the business and in identifying areas of potential risk. Analytical procedures in planning the use both financial and non-financial information.
5. The auditor should apply analytical procedures at or near the end of the audit when performing an overall conclusion as to whether the financial statements as a whole are consistent with the auditor’s knowledge of the business.
6. The application of analytical procedures is based on the expectation that relationships among data exist and continue in the absence of known conditions to the contrary. The presence of these relationships provides audit evidence as to the completeness, accuracy and validity of the data produced by the accounting system
7. The extent of reliance that the auditor places on the results of analytical procedures depends on the following factors:
14 a. Materiality of the items involved
b. Other audit procedures directed toward the same audit objectives
c. Accuracy with which the expected results of analytical procedures can be predicted. 8. When analytical procedures identify significant fluctuations or relationships that are
inconsistent with other relevant information or that deviate from predicted amounts, the auditor should investigate and obtain adequate explanations and appropriate corroborative evidence.
9. The investigation of unusual fluctuations and relationships ordinarily begins with inquiries of management, followed by:
a. Corroboration of management responses; and
b. Consideration of the need to apply other audit procedures based on the results of such inquiries, if management is unable to provide an explanation or if the explanation is not considered adequate.
PSA 550
RELATED PARTIES
1. Management is responsible for the identification and disclosure of related parties and transactions with such parties.
2. The auditor should perform audit procedures designed to obtain sufficient appropriate audit evidence regarding the identification and disclosure by management of related parties and the effect of related party transactions that are material to the financial statements. However, an audit cannot be expected to detect all related party transactions.
3. The auditor needs to have a sufficient understanding of the entity and its environment to enable identification of the events, transactions and practices that may result in a risk of material misstatement regarding related parties and transactions with such parties.
4. When obtaining an understanding of the entity’s internal control, the auditor should consider the adequacy of control activities over the authorization and recording of related party transactions.
5. In examining the identified related party transactions, the auditor should obtain sufficient appropriate audit evidence as to whether these transactions have been properly recorded and disclosed.
6. The auditor should obtain a written representation from management concerning:
a. The completeness of information provided regarding the identification of related parties; and
b. The adequacy of related party disclosures in the financial statements
7. The auditor is unable to obtain sufficient appropriate audit evidence concerning related parties and transactions with such parties or concludes that their disclosure in the financial statements is not adequate; the auditor should modify the audit report appropriately.
PSA 610
CONSIDERING THE WORK OF INTERNAL AUDIT
1. The external auditor should obtain a sufficient understanding of internal audit activities to identify and assess the risks of material misstatement of the financial statements and to design and perform further audit procedures.
2. The external auditor should perform an assessment of the internal audit function when internal auditing is relevant to the external auditor’s risk assessment.
3. When obtaining an understanding and performing a preliminary assessment of the internal audit function, the important criteria are:
a. Organizational status b. Scope of the function c. Technical competence d. Due professional care
4. When planning to use the work of internal auditing, the external auditor will need to consider internal auditing’s tentative plan for the period and discuss it as early a stage as possible. 5. Where the work of internal auditing is to be a factor in determining the nature, timing and
extent of the external auditor’s procedures, it is desirable to agree in advance the timing of such work, the extent of audit coverage, materiality levels and proposed methods of sample
selection, documentation of the work performed and review and reporting procedures.
6. A liaison with internal auditing is more effective when meetings are held at appropriate intervals during the period.
15 7. When the external auditor intends to use specific work of internal auditing, the external auditor
should evaluate and perform audit procedures on that work to confirm its adequacy for the external auditor’s purposes.
8. The evaluation of specific work of internal auditing involves consideration of the adequacy of the scope of the work and related programs and whether the preliminary assessment of the internal auditing remains appropriate.
9. The nature, timing and extent of audit procedures performed on the specific work of internal auditing will depend on:
The external auditor’s judgment as to the risk of material misstatement of the area concerned;
The assessment of internal auditing; and
The evaluation of the specific work by internal auditing.
10. The external auditor would record conclusions regarding the specific internal auditing work that has been evaluated and the audit procedures performed on the internal auditor’s work.
PSA 620
USING THE WORK OF AN EXPERT
1. “Expert’ means a person or firm possessing special skill, knowledge and experience in a particular filed other than accounting and auditing.
2. An expert may be:
a. Contracted by the entity; b. Contracted by the auditor; c. Employed by the entity; or d. Employed by the auditor.
3. When determining the need to use the work of an expert, the auditor would consider: a. The materiality of the financial statement item being considered;
b. The risk of misstatement based on the nature and complexity of the matter being considered; and
c. The quantity and quality of other audit evidence available
4. When planning t use the work of an expert, the auditor should evaluate the professional competence and objectivity of the expert.
5. The risk that an expert’s objectivity will be impaired increases when the expert is: a. Employed by the entity; or
b. Related in some other manner to the entity.
6. The auditor should obtain sufficient appropriate audit evidence that the scope of the expert’s work is adequate for the purposes of the audit. Audit evidence may be obtained through a review of the terms of reference which are often set out in written instructions from the entity to the expert.
Such instructions to the expert may cover matters such as: a. The objectives and scope of the expert’s work
b. A general outline as to the specific matters the auditor expects the expert’s report to cover
c. The intended use by the auditor of the expert’s work, including the possible communication to third parties of the expert’s identity and extent f involvement d. The extent of the expert’s access to appropriate records and files
e. Clarification of the expert’s relationship with the entity, if any. f. Confidentiality of the entity’s information
g. Information regarding the assumptions and methods intended to be used by the expert and their consistency with those used in prior periods.
7. The auditor should evaluate the appropriateness of the expert’s work as audit evidence regarding the financial statement assertion being considered. This will involve assessment of whether the substance of the expert’s findings is properly reflected in the financial statements or supports the financial statement assertions, and consideration of:
a. Source data used.
b. Assumptions and methods used and their consistency with prior periods
c. Results of the expert’s work in the light of the auditor’s overall knowledge of the business and of the results of other audit procedures.
8. When considering whether the expert has used source data which is appropriate in the circumstances, the auditor would consider the following procedures:
a. Making inquiries regarding any procedures undertaken by the expert to establish whether the source data is sufficient, relevant and reliable.
16 9. If the results of the expert’s work do not provide sufficient audit evidence or if the results are
not consistent with other audit evidence, the auditor should resolve the matter. This may involve:
a. Discussions with the entity and the expert b. Applying additional audit procedures
c. Including possibly engaging another expert; or d. Modifying the auditor’s report
10. When issuing an unmodified auditor’s report, the auditor should not refer to the work of an expert. Such a reference might be misunderstood to be a qualification of the auditor’s opinion or a division of responsibility, neither of which is intended.
11. If as a result of the work of an expert, the auditor decides to issue a modified auditor’s report, in some circumstances it may be appropriate, in explaining the nature of the modification, to refer to or describe the work o the expert (including the identity of the expert and the extent of the expert’s involvement). In these circumstances, the auditor would obtain the permission of the expert before making such a reference. If permission is refused and the auditor believes a reference is necessary, the auditor may need to seek legal advice.
17 CPA REVIEW SCHOOL OF THE PHILIPPINES
Manila
AUDITING THEORY
CPA REVIEW
PSA 500(REVISED) AUDIT EVIDENCE
PSA 501 AUDIT EVIDENCE – ADDITIONAL CONSIDERATIONS ON SPECIFIC ITEMS
PSA 505 EXTERNAL CONFIRMATIONS
PSA 230 AUDIT DOCUMENTATION
PSA 500(REVISED) AUDIT EVIDENCE
1. The auditor should obtain sufficient appropriate audit evidence to be able to draw reasonable conclusions on which to base the audit opinion
2. “Audit Evidence” is all the information used by the auditor in arriving at the conclusions on which the opinion is based, and includes the information contained in the accounting records underlying the financial statements and other information
3. Accounting records generally include:
The records of initial entries and supporting records, such as checks and records of electronic fund transfers;
Invoices Contracts
The general and subsidiary ledgers, journal entries and other adjustments to the financial statements that are not reflected in formal journal entries; and
Records such as work sheets and spreadsheets supporting cost allocations, computations, reconciliations and disclosures
4. Other information that the auditor may use as audit evidence includes: Minutes of the meetings
Confirmations from third parties Analysts’ reports
Comparable data about competitors (benchmarking) Control manuals
Information obtained by auditors from such audit procedures as inquiry, observation, and inspection; and
Other information developed by, or available to, the auditor that permits the auditor to reach conclusions through valid reasoning
Sufficient appropriate evidence
1. Sufficiency is the measure of the quantity of audit evidence
2. Appropriateness is the measure of the quality of audit evidence; that is, its relevance and its reliability in providing support for, or detecting material misstatements in, the classes of transactions, account balances, and disclosures and related assertions.
3. The following generalizations can be made about the reliability of audit evidence: a. Audit evidence I more reliable when it is obtained from independent sources
outside the entity
b. Audit evidence that is generated internally is more reliable when the related controls imposed by the entity are effective
c. Audit evidence obtained directly by the auditor (for example, observation of the application of a control) is more reliable than audit evidence obtained indirectly or by inference (for example, the inquiry about the application of control)
d. Audit evidence is more reliable when it exists in a documentary form, whether paper, electronic, or other medium (for example, contemporaneously written record of a meeting is more reliable than a subsequent oral representation of the matters discussed)
e. Audit evidence provided by original documents is more reliable than audit evidence provided by photocopies or facsimiles
4. An audit rarely involves the authentication of documentation, nor is the auditor trained as or expected to be an expert in such authentication
18 5. When information produced by the entity is used by the auditor to perform audit procedures,
the auditor should obtain audit evidence about the accuracy and completeness of the information
6. In forming an audit opinion, the auditor does not examine all the information available because conclusions ordinarily can be reached by using sampling approaches and other means of selecting items for testing.
The use of assertions in obtaining audit evidence
1. Management is responsible for the fair presentation of financial statements that reflect the nature and operations of the entity.
2. In representing that the financial statements are presented fairly, in all material respects, in accordance with the applicable financial reporting framework, management implicitly or explicitly makes assertions regarding the recognition, measurement, presentation, and disclosure of the various elements of financial statements and related disclosures 3. The auditor should use assertions for classes of transactions, account balances, and
presentation and disclosures in sufficient detail to form a basis for the assessment of risks of material misstatement and the design and performance of further audit procedures
CATEGORIES OF ASSERTIONS
a. Assertions about classes of transactions and events for the period under audit:
1. OCCURRENCE - transactions and events that have been recorded have occurred and pertain to the entity
2. COMPLETENESS - all transactions and events that should have been recorded have been recorded.
3. ACCURACY - amounts and other data relating to recorded transactions and events have been recorded appropriately
4. CUTOFF - transactions and events have been recorded in the correct accounting period
5. CLASSIFICATION - transactions and events have been recorded in the proper accounts
b. Assertions about account balances at the period end:
1. EXISTENCE -assets, liabilities, and equity interests exist 2. RIGHTS AND OBLIGATIONS - the entity holds or controls the right to assets,
and liabilities are obligations of the entity
3. COMPLETENESS - all assets, liabilities, and equity interests that should have been recorded have been recorded
4. VALUATION AND ALLOCATION - assets, liabilities and equity interests are included in the financial statements at appropriate amounts and any resulting valuation or allocation adjustments are appropriately recorded
c. Assertions about presentation and disclosure:
1. OCCURRENCE AND RIGHTS AND OBLIGATIONS
Disclosed events, transactions, and other matters have occurred and pertain to the entity
2. COMPLETENESS
All disclosures that should have been included in the financial statements have been included
3. CLASSIFICATION AND UNDERSTANDABILITY
Financial information is appropriately presented and described and disclosures are clearly expressed
4. ACCURACY AND VALUATION
Financial and other information are disclosed fairly and at appropriate amounts
Audit procedures for obtaining audit evidence 1. RISK ASSESSMENT PROCEDURES
Obtain an understanding of the entity and its environment, including its internal control, to assess the risk of material misstatement at the financial statement and assertion levels
2. TESTS OF CONTROLS
When necessary or when the auditor has determined to do so, test the operating effectiveness of controls in preventing, or detecting and correcting, material misstatements at the assertion level
19 3. SUBSTANTIVE PROCEDURES
Detect material misstatements at the assertion level. These include analytical review procedures and tests of details
Examples of audit procedures 1. INSPECTION
Consists of examining records and documents, whether internal or external in paper form, electronic form, or other media. Inspection of tangible assets consists of physical examination of the assets.
2. OBSERVATION
Consists of looking at a process or procedure being performed by others 3. INQUIRY
Consists of seeking information of knowledgeable persons, both financial and nonfinancial, throughout the entity or outside the entity
4. CONFIRMATION
The process of obtaining a representation of information or of an existing condition directly from a third party
5. RECALCULATION
Consists of checking the mathematical accuracy of documents or records 6. REPERFORMANCE
The auditor’s independent execution of procedures or controls that were originally performed as part of the entity’s internal control, either manually or through the use of CAATs
7. ANALYTICAL PROCEDURES
Consists of evaluations of financial information made by a study of plausible relationships among both financial and nonfinancial data. It also encompasses the investigation of identified fluctuations and relationships that are inconsistent with other relevant information or deviate significantly from predicted amounts.
PSA 501
AUDIT EVIDENCE – ADDITIONAL CONSIDERATIONS ON SPECIFIC ITEMS Attendance at Physical Inventory Counting
1. When inventory is material to the financial statements, the auditor should obtain sufficient appropriate audit evidence regarding its existence and condition by attendance at physical inventory counting unless impracticable.
2. If unable to attend the physical inventory count on the date panned due to unforeseen
circumstances, the auditor should take or observe some physical counts on an alternative date and, when necessary, perform tests of intervening transactions.
3. Where attendance is impracticable, due to factors such as the nature and location of the inventory, the auditor should consider whether alternative procedures provide sufficient
appropriate audit evidence of existence and condition to conclude that the auditor need not make reference to a scope limitation.
4. In planning attendance at the physical inventory count or the alternative procedures, the auditor would consider:
The nature of the accounting and internal control systems used regarding inventory. Inherent, control, and detection risks, and materiality related to inventory.
Whether adequate procedures are expected to be established and proper instructions issued for physical inventory counting.
The timing of the count.
The locations at which inventory is held. Whether an expert’s assistance is needed.
5. The auditor would review management’s instructions regarding:
The application of control procedures, for example, the collection of used stocksheets, accounting for unused stocksheets, and count and recount procedures.
20 Accurate identification of the stage of completion of work in progress, of slow moving,
obsolete or damaged items and inventory by a third party, for example, on consignment. Whether appropriate arrangements are made regarding the movement of inventory between
areas and the shipping and receipt of inventory before and after the cutoff date.
6. To obtain assurance that management’s procedures are adequately implemented the auditor would observe employee’s procedures and perform test counts.
7. The auditor would also consider cutoff procedures including details of the movement of inventory just prior to, during, and after the count so that the accounting for such movements can be checked at a later date.
8. The auditor would test the final inventory listing to assess whether it accurately reflects actual inventory counts.
9. When inventory is under the custody and control of a third party, the auditor would ordinarily obtain direct conformation from the third party as to the quantities and condition of inventory held on behalf of the entity. Depending on the materiality of this inventory, the auditor would consider:
The integrity and independence of the third party.
Observing, or arranging for another auditor to observe, the physical inventory count. Obtaining another auditor’s report on the adequacy of third party’s accounting and internal
control systems for ensuring that inventory is correctly counted and adequately safeguarded. Inspecting documentation regarding inventory held by third parties, for example, warehouse
receipts, or obtaining confirmation from other parties when such inventory has been pledged as collateral.
Procedures regarding litigation and claims
1. The auditor should carry out procedures in order to become aware of any litigation and claims involving the entity, which may have a material effect on the financial statements.
Such procedures would include:
Make appropriate inquiries of management including obtaining representations. Review board minutes and correspondence with the entity’s lawyers.
Examine legal expense accounts.
Use any information obtained regarding the entity’s business including information obtained from discussions with any in–house legal department.
2. When litigation or claims have been identified or when the auditor believes they may exist, the auditor should seek direct communication with the entity’s lawyers.
3. The letter, which should be prepared by management and sent by the auditor, should request the lawyer to communicate directly with the auditor. When it is considered unlikely that the lawyer will respond to a general inquiry, the letter would ordinarily specify:
A list of litigation and claims.
Management’s assessment of the outcome of the litigation or claim and its estimate of the financial implications, including costs involved.
A request that the lawyer confirms the reasonableness of management’s assessments and provides the auditor with further information if the list is considered by the lawyer to be incomplete or incorrect.
4. The auditor considers the status of legal matters up to date of the audit report.
5. If management refuses to give the auditor permission to communicate with the entity’s lawyers, this would be a scope limitation and should ordinarily lead to a qualified opinion or a disclaimer of opinion.
21 Valuation and disclosure of long-term investments
1. When long-term investments are material to the financial statements, the auditor should obtain sufficient appropriate audit evidence regarding their valuation and disclosure.
2. Audit procedures ordinarily include considering evidence as to whether the entity has the ability to continue to hold the investments on a long-term basis and discussing with management whether the entity will continue to hold the investments as long-term investments and obtaining written representations to that effect.
3. Other procedures would ordinarily include considering related financial statements and other information, such as market quotations, which provide an indication of value and comparing such values to the carrying amount of the investments up to the date of the auditor’s report.
Segment information
1. When segment information is material to the financial statements, the auditor should obtain sufficient appropriate audit evidence regarding its disclosure in accordance with the applicable financial reporting framework.
2. The auditor considers segment information in relation to the financial statements taken as a whole, and is not ordinarily required to apply auditing procedures that would be necessary to express an opinion on the segment information standing alone.
3. Audit procedures regarding segment information ordinarily consist of analytical procedures and other audit test appropriate in the circumstances.
4. The auditor would discuss with management the methods used in determining segment
information, and consider whether such methods are likely to result in disclosure in accordance with GAAP and test the application of such methods.
PSA 505
EXTERNAL CONFIRMATIONS
1. External confirmation is the process of obtaining and evaluating audit evidence through a direct communication from a third party in response to a request for information about a particular item affecting assertions made by management in the financial statements.
Use of positive and negative external confirmations
2. A positive external confirmation request asks the respondent to reply to the auditor in all cases either by indicating the respondent’s agreement with the given information, or by asking the respondent to fill in the information.
3. A negative external confirmation request asks the respondent to reply only in the event of disagreement with the information provided in the request.
4. Negative confirmation requests may be used to reduce the risk of material misstatement to an acceptable level when:
The assessed risk of material misstatement is lower. A large number of small balances are involved. A substantial number of errors are not expected.
The auditor has no reason to believe that respondents will disregard these requests.
5. When performing confirmation procedures, the auditor should maintain control over the process of selecting those to whom a request will be sent, the preparation and sending of confirmation requests, and the responses to those requests.
6. The auditor should perform alternative procedures where no response is received to a positive external confirmation request. The alternative audit procedures should be such as to provide the evidence the evidence about the financial statement assertions that the confirmation request was intended to provide.
22 7. When the auditor forms a conclusion that the confirmation process and alternative procedures
have not provided sufficient appropriate audit evidence regarding an assertion, the auditor should undertake additional procedures to obtain sufficient audit evidence.
8. The auditor should evaluate whether the results of the external confirmation process together with the results from any other procedures performed, provide sufficient appropriate audit evidence regarding the assertion being audited.
PSA 230 (Revised)
AUDIT DOCUMENTATION
1. The auditor should prepare, on a timely basis, audit documentation that provides: a sufficient and appropriate record of the basis for the auditor’s report; and
evidence that the audit was performed in accordance with PSAs and applicable legal and regulatory requirements
2. “Audit documentation” means the record of audit procedures performed, relevant audit evidence obtained, and conclusions the auditor reached (terms such as “working papers” or “work papers” are also sometimes used).
3. “experience auditor” means an individual (whether internal or external to the firm) who has reasonable understanding of
Audit processes;
PSAs and applicable legal and regulatory requirements The business environment in which the entity operates; and
Auditing and financial reporting issues relevant to the entity’s industry 4. Audit documentation may be recorded on paper or on electronic or other media
5. The auditor should prepare the audit documentation so as to enable an experiences auditor, having no precious connection with the audit, to understand:
the nature, timing , and extent of the audit procedures performed to comply with PSAs and applicable legal and regulatory requirements
the results of the audit procedures and the audit evidence obtained; and significant matters arising during the audit and the conclusions reached thereon 6. in documenting the nature, timing and extent of audit procedures performed, the auditor
should record the identifying characteristics of the specific items or matters beig tested
7. the auditor should document discussions of significant matters with management and others on a timely basis
8. where, in exceptional circumstances, the auditor judges it necessary to depart from a basic principle or an essential procedure that is relevant in the circumstances of the audit, the auditor should document how the alternative audit procedures performed achieved the objective of the audit, and, unless otherwise clear, the reasons for the departure
9. the auditor should record:
who performed the audit work and the date such work was completed
who reviewed the audit work performed and the date and extent of such review Assembly of the final audit file
10. The auditor should complete the assembly of the final audit file on a timely basis after the date of the auditor’s report. As PSQC 1 indicates, 60 days after the date of the auditor’s report is ordinarily an appropriate time limit within which to complete the assembly of the final audit file
23 CPA REVIEW SCHOOL OF THE PHILIPPINES
Manila
AUDITING THEORY
CPA REVIEW
PSA 240 (REVISED 2006)
THE AUDITOR’S RESPONSIBILITY TO CONSIDER FRAUD IN AN
AUDIT OF FINANCIAL STATEMENTS
PSA 250 CONSIDERATIONS OF LAWS AND REGULATIONS IN AN AUDIT OF FINANCIAL STATEMENTS
PSA 260
COMMUNICATIONS OF AUDIT MATTERS WITH THOSE CHARGED
WITH GOVERNANCE
PSA 240 (REVISED 2006)
THE AUDITOR’S RESPONSIBILITY TO CONSIDER FRAUD IN AN AUDIT OF FINANCIALSTATEMENTS FRAUD refers to an intentional act by one party or more individuals among management, those charged with governance, employees or third parties, involving the use of deception to obtain an unjust or illegal advantage
Fraud involves:
Incentive or pressure to commit fraud A perceived opportunity to act or to do so Some rationalization of the act
Management fraud - fraud involving one or more members of management or those charged with governance
Employee fraud - fraud involving only employees of the entity
(In either case, there may be collusion within the entity or with third parties outside of the entity) TWO TYPES OF FRAUD
1. FRAUDULENT FINANCIAL REPORTING
Involves intentional misstatements including omissions of amounts or disclosures in financial statements to deceive financial statement users
often involves management override of controls that otherwise may appear to be operating effectively
can be caused by the efforts of management to manage earnings in order to deceive financial statements users by influencing their perceptions as to the entity’s
performance and profitability
may be accomplished by the following
manipulation, falsification (including forgery), or alteration of accounting records or supporting documentation from which the financial statements are prepared
misrepresentation in, or intentional omission from, the financial statements of events, transactions or other significant information intentional misapplication of accounting principles relating to amounts,
classifications, manner of presentation, or disclosure 2. MISAPPROPRIATION OF ASSETS
Involves the theft of an entity’s assets and is often perpetrated by employees in relatively small and immaterial amounts
Can also involve management who are usually more able to disguise or conceal misappropriations in ways that are difficult to detect
Often accompanied by false or misleading records or documents in order to conceal the fact that the aspects are missing or have been pledged without proper authorization Can be accompanied in a variety of ways including:
o Embezzling receipts
o Stealing physical assets or intellectual property
o Causing an entity to pay for the goods and services not received o Using an entity’s assets for personal use
