Chapter 2 The Concept of Audit Syllabus 2023
Chapter 2 The Concept of Audit Syllabus 2023
CONCEPTS OF AUDIT
CHAPTER 2
A. Errors
B. Management Fraud
C. Consideration of Fraud in a Financial Statement Audit
D. Reasons Auditors Fail to Detect Fraud
E. Auditor Responsibility for Detecting Errors, Frauds, and Illegal Acts
©2002 by the McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill/Irwin
ERRORS
Errors are
unintentional
misstatements or
omissions of
amounts or
disclosures in
financial
statements.
Management fraud is
intentional
misstatements or
omissions of
amounts or
disclosures in
financial statements
Yes
Errors Yes No (Audit No
Committee)
Yes Yes
Fraud Yes No (Audit (One level
Committee) above)
Yes
Illegal Yes No Yes (One level
Acts (Direct Effect) (Audit above)
Committee)
©2002 by the McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill/Irwin
TYPES OF FRAUD
Fraudulent Financial Reporting—An intentional misstatement
or omission of amounts or disclosures with the intent to deceive
users.
• Most cases involve an attempt to overstate income, but can also
understate income.
• Earnings management involves fraud to meet earnings goals.
• Income smoothing is a form of earnings management that shifts
income from year to year to reduce fluctuations.
Misappropriation of Assets—Fraud that involves theft of an
entity’s assets. Normally perpetrated by lower level employees,
but can involve upper management.
Internal Controls
Accounting
Events, Financial
Information
Statements
Transactions System Substantive
Procedures
INHERENT RISK
The likelihood that, CONTROL RISK
in the absence of The likelihood that an error DETECTION RISK AUDIT RISK
internal controls, or fraud will not get caught by the The likelihood that The likelihood that
an error or fraud client’s internal controls. an error or fraud an error or fraud will occur,
will enter the accounting will not be caught and not get caught
information system by the auditor’s by either the internal controls
procedures. or auditor’s procedures.
Risk of Material Misstatement (RMM)
3-29
ARM CONCEPTS
• The auditor cannot affect inherent risk or control risk. The
auditor can only ASSESS them.
• The auditor can only affect detection risk—generally by
examining more evidence.
• Detection risk is inversely related to control risk and
inherent risk.
• Detection risk is inversely related to competence and
reliability of evidence.
3-30
INHERENT RISK
• Inherent Risk (IR) is the likelihood that, in the absence of internal
controls, a material misstatement could occur. In other words, it is a
measure of the susceptibility of an account to misstatement.
• Factors affecting account inherent risk include:
• Dollar size of the account
• Liquidity
• Volume of transactions
• Complexity of the transactions
• New accounting pronouncements
• Subjective estimates
3-31
OTHER FACTORS AFFECTING
OVERALL INHERENT RISK
• Competition
• Economy
• Nature of Industry
• Management Style
• Leverage
3-32
INHERENT RISK:
GENERAL CATEGORIES OF ERRORS AND
FRAUDS
• Invalid transactions are recorded.
• Valid transactions are omitted from the accounts.
• Unauthorized transactions are executed and
recorded.
• Transaction amounts are inaccurate.
• Transactions are classified in the wrong accounts.
• Transaction accounting and posting is incorrect.
• Transactions are recorded in the wrong period.
3-33
INHERENT RISK:
GENERAL CATEGORIES OF ERRORS AND FRAUDS
Error Examples Fraud Examples
Invalid transactions are recorded A computer malfunction causes a sales transaction to Fictitious sales are recorded and charged to
be recorded twice nonexistent customers
Valid transactions are omitted from the Shipments to customers are never recorded because Shipments are made to an employee’s friend
accounts of problems in the company’s information processing and purposely never recorded
system
Unauthorized transactions are executed A customer’s order is not approved for credit yet the Unauthorized purchases are made and
and recorded goods are shipped, billed, and charged to the shipped to an employee’s house
customer without requiring payment in advance
Transaction amounts are inaccurate An employee calculates depreciation incorrectly A company “short ships” a shipment to a
customer and bills the customer for the full
amount ordered
Transactions are classified in the wrong Sales to a subsidiary company are recorded as sales A loan to the company’s CEO (not permitted
accounts to outsiders instead of intercompany sales or the under Sarbanes-Oxley) is classified as an
amount is charged to the wrong customer account account receivable to conceal the transaction
receivable record
Transaction accounting and posting are Sales are posted in total to the accounts receivable Capital leases are accounted for as operating
incorrect control account, but some are not posted to individual leases in order to keep related liabilities off
customer account records the balance sheet
Transactions are recorded in the wrong The company fails to record a shipment that was sent Shipments made in January (of the next
period by a supplier FOB shipping point in December, but fiscal year) are backdated and recorded as
the shipment was not received (or recorded) until sales in December
January
3-34
CONTROL RISK
• Control Risk (CR) is the likelihood that a material
misstatement would not be caught by the client’s internal
controls.
• Factors affecting control risk include:
• The environment in which the company operates (its “control
environment”).
• The existence (or lack thereof) and effectiveness of control
procedures.
• Monitoring activities (audit committee, internal audit function, etc.).
3-35
DETECTION RISK
• Detection risk (DR) is the risk that a material
misstatement would not be caught by audit procedures.
• Factors affecting detection risk include:
• Nature, timing, and extent of audit procedures
• Sampling risk
• Risk of choosing an unrepresentative sample.
• Nonsampling risk
• Risk that the auditor may reach inappropriate conclusions based upon
available evidence.
3-36
Detection Risk and the Nature, Timing, and
Extent of Audit Procedures
Control Risk
MORE EXAMPLES
AR IR CR DR?
MATERIALITY
• Materiality refers to an amount (or transaction) that
would influence the decisions of users (i.e., an amount
(or event) that would make a difference). The emphasis
is on user, rather than management or the audit team.
• Materiality Criteria:
Quantitative Criteria: Qualitative Criteria
• Absolute size • Nature of the item or issue
• Relative size • Circumstances
• Cumulative effects • Uncertainty
• Ultimately, materiality is a matter of professional judgment.
EXHIBIT 3.9 3-41
MATERIALITY TABLE
Larger of Client
Total Revenues or Total Assets is …
VOUCHING/TRACING
Q: Did all Summary Listing
recorded sales [Sales Journal]
actually occur?
Tracing
Vouching
(Completeness)
(Existence or Occurrence)
AUDIT PROGRAMS
• A list of the audit procedures the auditors
need to perform to gather sufficient
appropriate evidence on which to base their
opinion on the financial statements.
• Each audit program is based, in part, on the
output of Audit Risk Model.
• Generally one for each major cycle or group of
related accounts.
• Revenue and collection (Chapter 7)
• Acquisition and expenditure (Chapter 8)
• Production (Chapter 9)
• Financing and investing (Chapter 10)
• Signed off as procedures are performed.
OBJECTIVE 2-2
Identify the four audit evidence
decisions that are needed to create
an audit program.