Study Notes
Study Notes
auditing
2014
Nadeem Mahomed
THE CODE OF PROFESSIONAL CONDUCT
• be straight-forward and honest Engagement Acceptance
Client Acceptance
• CA shall not knowingly be associated with • consider firm’s competence
• discourages conduct which discredits • consider if there is a threat to the
information he believes: to perform engagement
the profession fundamental principles
- materially false or misleading information - capabilities, resources,
• guidelines for advertising, recruiting, • apply safeguards
- furnished recklessly time
- omission is misleading responsibility to colleagues - obtain understanding from client
- experience in +
- secure commitment to improving
Integrity Professional knowledge of industry
governance
Behaviour - if cannot reduce threat
• apply safeguards
to an acceptable
Objectivity Fundamental level, decline Professional - obtain understanding
CA shall not compromise business Principles (s100.5) Appointment (s210) of client’s business
judgement through - agree on realistic time
- bias Confidentiality frame
- conflict of interest Change in Professional Appointment
CAs should refrain from • obtain permission to speak with
- undue influence Professional Competence & - disclosing information without
Identify threats
previous auditor
Due Care duty or legal obligation to do so • discuss reasons for not accepting client
Threat: Conflicts of Can threats be
- using information for personal • if permission is not given, consider
Interest • CAs to maintain professional
knowledge and skill
gain
declining acceptance eliminated or
• commitment to continuous reduced?
professional development
Apply safeguards
• financial interest in client CAs in public practice must consider:
• threats of dismissal, litigation • networks of firms
• fee dependence, concern over losing
• awarding of non-assurance work if Conclude on
client • public interest firms
opinion is positive whether violation
• contingent fee arrangements • those charged with governance
• pressure to reduce work to reduce fees of CPC has
• discovering errors in another engagement • documentation
• engagement period occurred
Self-Interest Intimidation
• mergers Independence
Threats Familiarity
in mind and appearance
Self-Review • member of team having a close
family member in a position that Specific threats:
• auditing controls you designed Advocacy • loans
can exert influence over the
• member of team is a director or • gifts + hospitality
subject matter
had influence over subject matter • firm promoting shares • audit partner having a long • provision of non-
• firm providing services that in client association with the client assurance services
directly affect subject matter • acting as advocate in
litigation
• resign from engagement • discussing ethical issues with those charged with governance
Safeguards • external review • disclosing to those charged with governance, the nature of services provided
• rotation of senior assurance team personnel • quality control with regards to client acceptance
THE AUDITING PROFESSION ACT Committee for Auditing Standards (s22)
Consists of:
IRBA (s4) Committee for Auditor Ethics (s21) - 5 RAs
Consists of: - 1 person with business experience
• General Functions - 3 RAs - Auditing lecturer from a university
- promote integrity of the auditing profession - 3 representatives of users - 1 representing the JSE
- protect public in dealings with RAs - 1 representing the JSE - Executive Officer of the FSB
- prescribe standards of competence, ethics, conduct - 1 advocate/attorney with 10 - Auditor General
- prescribe auditing standards yrs experience - Commissioner of SARS
• Accreditation of Professional bodies Establishment of - Registrar of Banks
• Registration of Auditors • determine what constitutes Committees
• Education, training and professional development improper conduct • develop, maintain, adopt, issue, prescribe
• Prescribe fees and charges • develops code of conduct auditing standards
Acceptance &
Continuance sufficient personnel with the
competence, capabilities, commitment
Firm must be competent to perform the Firm must consider the integrity of the client to ethical principles
engagement Must consider: necessary to: Human Resources
Must consider whether: - identity + reputation of owners, key • perform engagements
- firm has sufficient personnel management in accordance with standards
- firm personnel have appropriate - nature of client’s operations • enable firm/engagement partner to * monitor workload and
knowledge, experience - attitude of client’s owners + management issue appropriate reports availability of engagement
- firm is able to complete the engagement towards application of accounting standards + partners to ensure they have
within reporting deadline internal controls sufficient time to adequately
- firm can comply with ethical - indications of inappropriate limitation of discharge their responsibilities
requirements scope
- reasons for proposed appointment of firm
Recurring Audits:
assess whether circumstances require - avoid misunderstandings
Engagement Letters - address ‘Auditor Expectation Gap’
terms to be revised OR whether there is a
need to remind client of terms (par. 13)
shall agree terms in writing
with “those charged with
governance” (par. 9)
Audit Engagement
Terms
Shall include:
• objective + scope of audit Acceptance of Change in Terms:
• inherent limitation of audit * shall not agree to change where there is
• responsibilities of auditor no reasonable justification
• responsibilities of management
• fees - if changed, need a new engagement letter
• identification of applicable FR framework - if unable to change terms, auditor shall:
• expected form + content of reports issued by • withdraw from audit
auditor • determine whether there is an obligation
to inform other parties
Auditor is concerned with fraud that causes a MM
• resulting from fraudulent financial reporting ISA 240 MANAGEMENT: detect + prevent fraud
• resulting from misappropriation of assets AUDITOR’S RESPONSIBILITIES AUDITOR: obtain reasonable assurance that FS are free
RELATING TO FRAUD from error
risk of NOT detecting fraud is greater
∵ concealment and collusion
REQUIREMENTS
AT AN ASSERTION LEVEL
DOCUMENTATION
- significant decisions reached regarding RELATING TO MANAGEMENT OVERRIDE
susceptibility of FS to MM due to fraud • test appropriateness of journal entries
- identified + assessed ROMM due to fraud • review estimates for bias
- overall responses to assessed ROMM • assess if business rationale of unusual
- communications to management transactions suggests fraud
ISA 300
Why Planning is Essential PLANNING AN AUDIT
• identify important areas of audit
• organise and manage the engagement so that it is performed
effectively and efficiently • Identify the characteristics of engagement
• assisting in selection of engagement team of appropriate • Ascertain reporting objectives of engagement to plan timing of audit
capabilities and competence Audit Strategy • Consider factors that are significant in directing team’s efforts
• facilitating direction, supervision + review of team • Ascertain nature, timing, extent of resources necessary
• assisting in co-ordination of work done by auditors and
experts
Due to _____, consider making use of_____.
help auditor:
• plan audit
• identify types of potential misstatements
• consider factors that affect risk
• design tests of control and substantive procedures
Understanding the Entity & Its Environment Understanding the Entity’s Internal Control
• Industry, Regulatory & Financial Reporting Framework • Design & Implementation of Controls
- operations
- culture created by management
• Nature of Entity - ownership, governance • Control Environment- strengths
- structure
- identifying risks
• Accounting Policies -- selection, application
reasons for changes
• Entity’s Risk Assessment Process -- estimating significance
assessing likelihood of occurrence
- actions
• Objectives, Strategies, Business Risks • Information System relevant to Financial Reporting
MONITORING - performed by management to assess effectiveness of internal control performance over time
Proper Authorisation
CONTROL Design (what objective
needs to be met)
Adequate Documents & pre-printed, pre-numbered , logically + simply designed, prepared at time of
transaction, designed for multiple use
Records
ACTIVITIES Implementation
Physical control over
Assets
Independent Checks on checking whether or not controls are observed and whether or not changes
Performance are necessary
- management responsible for identifying factors that may increase risk (int + ext) + determining actions necessary to manage
risks
RISK ASSESSMENT - have to consider significance + likelihood of risk
- risks affect: survival, competitiveness, financial strength, public image, quality of products + people
- cannot be eliminated, only managed
- actions, policies + procedures that reflect attitude of management about internal control and its importance
- sets tone, influences control consciousness of employees
CONTROL • communication + enforcement of ethical values
• commitment to competence
ENVIRONMENT • assignment of authority + responsibility
• HR policies + practices
RISK What is the RISK?
Did it increase/decrease? Is it significant?
OVERALL ASSERTION
Why is it a RISK? (“as a result of…”)
- can never be 0:
INHERENT RISK CONTROL RISK • sampling risk
(IR) (CR) • inappropriate procedure used/procedure not
done properly
susceptibility of an risk that MM is not
assertion to MM prevented, detected,
before considering corrected by controls
controls
gives good
sufficient +
needed to used to understanding
appropriate
give determine of client limits ability of business to achieve the goals
Opinion Evidence Risk can determine
BUSINESS RISK and objectives
- operations
- compliance
- reliability of financial reporting
ISA 320
MATERIALITY
qualitative
misstatement/omissions that, individually or in - nature of misstatement
aggregate, reasonably expected to influence
decisions of users quantitative
- amount of misstatement
shaped by auditor’s RM RM
PROFESSIONAL JUDGEMENT
on what’s important to users
* can have specific PM for specifically risky assertions or Conclude with your estimate of materiality
accounts
Compute the Performance Materiality
ISA 540 OBJECTIVE obtain sufficient evidence that
- accounting estimates are reasonable
AUDITING ACCOUNTING ESTIMATES - related disclosures are adequate
Communication with a Sub- Auditor’s Responsibilities Significant Findings from the Audit
group - the auditor is responsible for - significant qualitative aspects of
- auditor must determine if expressing an opinion on FS accounting practices
it is necessary to - audit does not relieve - significant difficulties encountered
communicate with management or TCwG of their during audit
governing body Those Charged with responsibilities - matters raised with management
Governance - written representations requested
the auditor shall determine Matters to be
When all are involved in
the appropriate persons with Communicated
Management whom to communicate Auditor Independence
- do not need to
for listed entities
communicate to same Planned Scope & Timing
- engagement team has complied with
person in their governance of Audit
ethical requirements regarding
role
independence
- must be satisfied that
- all relationships that may reasonably
communication to
thought to bear on independence
management adequately
- safeguards that have been
informs TGwC
implemented to eliminate/reduce
identified threats to independence
Forms of Communication
Timing of Communication
- in writing if, in the auditor’s
- communication should be made on a
professional judgement, oral
ISA 265
timely basis COMMUNICATING DEFICIENCIES IN INTERNAL CONTROL
communication would be inadequate
Communication The auditor shall communicate, in writing, significant
Process deficiencies in internal control identified to TCwG
the auditor shall - inform management of intention to communicate
communicate to TCwG the significant deficiencies to TCwG
form, timing, expected
Adequacy of Communication - communicate to management other deficiencies that merit
content of communications
- evaluate whether there has been management’s attention
adequate two-way communication
- evaluate the effect on auditor’s Communication should make it clear that:
assessment of ROMM and ability to • purpose of audit was to express opinion over FS
obtain evidence • audit included consideration of control to design procedures
• matters reported are limited to those identified
AUDIT EVIDENCE
Procedures for obtaining evidence
External Analytical
Inspection Observation Re-calculation Re-performance Inquiry
Confirmation Procedures
Reliability of Provides evidence * need permission Checking of Independent Analysis of plausible Seeking of
documents depends about performance of mathematical execution of a relationships among information in
on: a process/procedure Not restricted to accuracy of procedure that were non/financial data formal/informal form
• nature BUT only at that time account balances only calculations already performed - evaluation of
• source - must first evaluate responses is
• effectiveness of accuracy of inputs integral
controls
• Warehouse Foreman
Ordering
• Dispatch
• Order Form • Security Guard
• Policy Documents
• Delivery Note
• GL • Gate Register
• Senior Manager Delivery
• authorisation
REVENUE CYCLE • compare goods to order form and
delivery note
• regular review of age Bad Debts • goods checked at gate against
analysis register
• follow up on long overdue
balances
• recon of stock on hand and stock
delivered
• adjustment of credit limit • access/security to warehouse
• provision policy
consistently applied • goods never reach customer
• orders shipped incorrectly
• sales made to doubtful debtor Returns & Invoicing & • orders received not delivered
• inadequate provision Allowances Recording • customer claims goods never
received
•• Manager
Creditors Dept.
Receiving
Ordering
• [Invoice]
• Creditor Sub-ledger
• [Credit Note]
• Remittance Advice
• Creditors Dept.
PURCHASING & PAYMENTS CYCLE • quantity agreed to
GRN and price agreed
• processed against sub-
ledger Returns & to PO
• recon of statement
• deducted from
Refunds Recording and sub-ledger +
remittance advice
review
Payment
• Clock cards
• Authorised Overtime forms
• Unclaimed Wage register • Payroll journal
Pay-out
• safe-guarding of assets
Purchase Order
Raw Materials
Storing
REVENUE CYCLE
INVENTORY CYCLE
Shipping 𝐶𝑂𝑆𝑇 = 𝑃𝑅𝐼𝐶𝐸 × 𝑄𝑈𝐴𝑁𝑇𝐼𝑇𝑌
Finished RM OH
L
Goods Stock Count
Processing
• obsolescence, damage
(NRV)
• incorrect application of
accounting policy
Storing •• complex accounting for manufacturers
standard costing
• safe-guarding of assets PAYROLL CYCLE • Labour: completeness, occurrence
• Insurance • calculation of overheads to be absorbed
• stock count (design important)
- movement halted
- consignment stock considered
- sufficient staff
- counted stock tagged
- diff followed up on
- adjustments made
Dividends
• verify validity of authorisation
- recorded dividends validly occurred
• Inspect for payment of debts outstanding in PY, debts not recorded O - paid to shareholders that exist
• confirm existence, due dates, interest rate, security with institution
• trace cash received to deposit slip - existing dividends recorded
• determine reasonableness of interest expense in relation to principal amount
C - dividends payable recorded
• re-calculate computations of interest expense
• evaluate compliance with debt provisions A dividends and dividends payable are accurately recorded
• evaluate disclosure (current portion, restrictions imposed by agreement,
security pledged etc.) • authorisation of transactions
• record-keeping and segregation of duties
•• proper authorisation
understatement of debt
• shares issued in accordance with Companies Act
- delivered at least 15 days before meeting – Ltd., NPC 25% of voting rights
(10 days in any other case) AND if total SHs > 2, at least 3 SHs
Additional Audit Procedures when events are identified Audit Conclusions & Reporting
need to determine if material uncertainty exists:
• analyse in detail mgmt’s assessment must determine whether material uncertainty exists to cast material uncertainty exists when magnitude of
• obtain cash flow forecast (ISA 540 – Use of Estimates) doubt over going-concern potential impact and likelihood of occurrence makes
• evaluate mgmt’s plans to improve the situation disclosure necessary
• request written representations over plans where there is a delay in issuing FS: for
indication that new info has come to attention of mgmt • FS to be a fair representation
casting doubt over the going-concern ⇒ need to do • FS not to be misleading
procedures again
Signature of Auditor
Date of Report
Address of Auditor