At Notes (Sir Brad's Lecture)
At Notes (Sir Brad's Lecture)
OVERVIEW OF AUDIT
Scope of Practice CAREER PATH OF AN AUDITOR
1. Public – works in a CPA Firm (Audit Firm)
2. Private – employed in a private company Managing (President / CEO)
3. Academe – teaching CPALE subjects Partner Senior
4. Government – ex. auditor of COA, CPA in BIR Junior
Example
SGV
A
Market Groups (MG) Cluster – Partner B
C
1. Manufacturing
2. Mining Partner (1)
3. Telco Managers (3)
MG 5, Cluster B
4. Airline / Hotel Sr. Associates (5)
5. Banking Associates (10)
6. Entertainment
7. Food
8. Outsourcing
Investors/Shareholders
Suppliers
Unaudited FS Audited FS Lenders
BDO Audit Firm Users
Customers
(Client/Management/Preparer) (SGV)
A (cash, AR, inventory) Government
Attractive FS BS L (SEC, BSP, BIR)
↑ asset, ↑ revenues, ↑ NI IS E faithful representation
Expectation gap (conflict of interest) SCF
Information risk
GW Impairment
Non-assurance Agreed Upon Procedures Derivatives Factual Findings
Sales
w/o opinion
no assurance
Compilation Preparation of FS Compilation Report (FS)
Tax Compliance Filing of ITR
Planning (Merger, Estate) Tax Advice
Audit
Financial
Review
Inquiry, Analytical Procedure
ASSURANCE ASSURANCE > ATTESTATION > AUDIT
Financial Other Assurance Non-financial Similarity:
& non-financial Often used interchangeably because they
encompass the same decision-process.
Absolute assurance is not attainable due to: Main Difference:
Use of judgment. Scope of Services.
Use of testing.
Inherent limitations of internal control.
Most evidence available to the practitioner is persuasive rather than conclusive.
In some cases, the characteristics of the subject matter.
Assertion-based Engagement
Also known as attestation engagements.
Evaluation or measurement of the subject matter
Performed by the responsible party
Subject matter information is in the form of an assertion by the responsible party
Made available to the interested users.
GAAP (Audit)
ATTESTATION
Non-GAAP (Cash Basis)
Pure financial
engagement
Generally refers to an expert's written communication of a conclusion about the reliability of someone
else's assertions.
AUDIT
Historical FS (GAAP)
b. Responsible Party
responsible for the subject matter or the assertion (subject matter information)
c. Intended Users
person, persons or class of persons for whom the practitioner prepares the assurance
report
they are the users to whom the practitioner usually addresses the report
Physical characteristics
for example, capacity of a facility
Behavior
for example, corporate governance, compliance with regulation, human resource
practices
Characteristics
Relevance
contribute to conclusions that assist decision-making by the intended users.
Completeness
criteria are sufficiently complete when relevant factors that could affect the
conclusions in the context of the engagement circumstances are not omitted.
Reliability
allows reasonably consistent evaluation or measurement of the subject matter
when used in similar circumstances by similarly qualified practitioners.
Neutrality
contribute to conclusions that are free from bias
Understandability
Conclusions are clear, comprehensive, and not subject to significantly different
interpretations
Professional skepticism
an attitude that includes a questioning mind, being alert to conditions which may indicate
possible misstatement due to error or fraud, and a critical assessment of evidence.
Evidence
refers to the information obtained by the practitioner in arriving at the conclusions on
which the conclusion is based.
Sufficiency
refers to the measure of the quantity of evidence.
Appropriateness
refers to the measure of the quality of evidence, that is, its relevance and its reliability.
Types of Audit
Other pronouncements:
Philippine Standards on Quality Control (PSQCs) – to be applied for all services that fall under the
AASC’s engagement standards, namely, audit, review, other assurance, and related services.
o Sets out characteristics that must be exhibited before a practitioner can accept an assurance
engagement.
o Does not itself establish standards or provide procedural requirements for the performance of
assurance engagements.
Accounting Audit
5. Engagement Performance
Auditors must comply w/ the PSAs
Teamwork between Associates & Sr. Associates must always be present
Communication must be present
6. Monitoring
Evaluation
Engagement Quality Control Review (EQCR) one partner auditing another partner
Required for listed companies
Spot check
illustration:
RCBC Money Heist
1. Opened 4 dollar accounts (RCBC – Jupiter)
$500 per account
2. $81M RCBC – Jupiter
A $30M
Bank of Bangladesh B $20M
Federal Reserves in NY C $25M
D $6M Not yet covered by AMLA
4. Bank of Bangladesh
$58M withdraw
5. Aftermath
- Branch Manager 32 – 56 years imprisonment
to pay $109M
- AMLA included casinos to covered transactions
- President of RCBC resigned
Management / BOD
prevention & detection of fraud
Responsibilities in terms of Fraud
Auditor
provides reasonable assurance that the FS are free from
material misstatements whether due to fraud or error
Illustration:
RCBC 2008 Financial Crisis
SEC, BIR, PSE, BSP Basel III to ensure capital adequacy of bank
liquidity of banks
capital adequacy ratio (CAR)
Materiality
1. Unqualified FS is reliable
2. Qualified
3. Adverse
4. Disclaimer
Illustration:
Wirecard Aftermath:
280,000 corporate clients Share price ↓ 72%
2018: $29B ($117/share $1.5/share)
2019: Whistleblower issues found: inflated earnings 2020 Bankruptcy
$2B cash non-existent Outstanding debt $4B creditors
EY (more than 10 years) Auditor Thousands of employees laid-off
2016 – 2018 unqualified
2019 EY did not sign-off
BPI
PH Employee falsified deposit certificate
BDO
AR = IR x CR x DR
Risk of giving an Internal controls of the client will not be able to
incorrect opinion prevent, detect, correct misstatements in the FS
AR = IR x CR x DR
Controlled? ✖ ✖ ✔
Level Desired Assessed Assessed Acceptable
RoMM Inquiry
Observation
Risk Assessment Procedure
Inspection
Stage Planning IC ST Analytical Procedure
Step 1: Set the desired level of audit risk Ex. (1%, 5%, 10%)
AR = 1 – Confidence Level
Illustration:
KPMG Coins PH
- Fintech
- Blockchain
Remittance
Bills payment
- Services
Fund transfer
Loading
- Management
- BOD
↑ ↑ ↓
AR = IR x CR x DR
10% = 60% x 60% x DR
AR 10%
DR = = = 27.8%
IR x CR 60% x 60%
Bank Recon
Cash Proof of Cash
Confirmation
N: More effective
Legal docs
↓ DR T: Year-end
IA Recompute GW
E: Larger sample size
IAS 38
Illustration:
Luckin Coffee
Beijing, China
2017: Founded, Listed in NASDAQ, $17/share, $2.9B
2018: 1,300 stores $50
apps, kiosk
2019: Muddy Waters Research
$310M (fictitious sales) 80%
Overstated advertising expense (150%)
2020: 4,500 stores
US SEC $180M
CEO & CFO fired
2021: Bankruptcy
2. Risk Assessment
- Management’s identification & assessment of risk (business risk)
- Value at Risk (VAR)
- Courses of action in mitigating risk
4. Monitoring
- Assessment of internal control performance
- Internal auditors
d. Performance Reviews
Evaluation of performance
Variance analysis
Illustration:
Lending
P&A BDO Banking Industry Investment Banking
Sy Family Asset Management
1,400 Branches
(HK, SG) Annual FS:
IFRS 9 SMIC
I/S
IFRS 13 45%
BDO Int. Income
Unibank - Int. Expense
(BDO Private Bank, BDO Network Banks, BDO Capital) Net Int. Income
- OPEX
IR NI
CR
Inherent Limitations
1. Management override
2. Collusion among employees
3. Cost-benefit relationship
4. Human errors
Types of Controls
Procedures:
1. Inquiry
2. Inspection
3. Observation
4. Reperformance
Transaction Cycles:
1. Revenue Cycle
Revenues / sales, cash receipt
2. Expenditure Cycle
Purchases, AP, cash disbursement
3. Inventory
Physical count, costing
4. Payroll / HR (personnel)
Salaries, OT
5. PPE Cycle
Acquisition, disposal, depreciation
6. Investment
Debt, equity, income
7. Financing
Issuance of debt, equity, interest expense, dividends
Control Deficiencies
Material (more severe)
Significant deficiency (less severe) Reportable Conditions BOD (Audit Committee)
TOC vs ST
IC Testing / Auditing
Processes the amounts (Cash, AR)
FS / Management Assertions
representations or claims by the management that are embodied in the FS
B/S I/S
1. Existence Cut-off
Items in the FS really exists
Assets (cash, AR, inventory, PPE)
Overstatement
2. Completeness Completeness
All transactions are recorded
Liabilities (AP, NP, LP)
Understatement
AUDIT EVIDENCE
supports the opinion
Sufficient Quantity
Characteristics Relevant Professional Judgement
Appropriate Quality
Reliable
Corroborating Information / Other information / Source Documents PO, RR, Bank Statement
indirect
Substantive Procedures AR
Test of Transactions Beg bal Collections
Test of Details small volume Cr Sales Write-off
Types Test of Balances End bal
large balances
Analytical Procedures
Inquiry
Inspection
Observation
Reperformance
Recalculation / Recomputation
Confirmation
Analytical Procedures
Generalizations:
More reliable if:
1. Obtained from independent source outside the entity
2. Internal controls are effective
3. Obtained directly by the Auditor
4. Documentary form (written) than obtained orally
5. Original documents than photocopy
Directional Testing
PO GJ
1. Tracing Source Accounting Test Completeness Assertion
Documents Records Liabilities Understatement
GJ PO
2. Vouching Accounting Source Test Existence Assertion
Records Documents Assets Overstatement
Positive customer should reply whether or not they agree (blank amount)
AR Confirmation 1st try, 2nd try, Alternative Procedure
Negative customer should reply only if they disagree (amounts are indicated)
Nonstatistic Subjective
al Professional Judgement
Sampling Risk
risk that the result from the sample population
Types: TOC ST Sacrificed
1. Alpha Risk Risk of assessing CR too high Risk of incorrect rejection Efficiency
(Type 1 Error) Sample: CR↑ Sample: DL misstated (under
Population: CR↓ Population: DL is correct reliance)
DR ↓, ST ↑ ST ↑, ↑ evidence
2. Beta Risk Risk of assessing CR too low Risk of incorrect acceptance Effectiveness
(Type 2 Error) Sample: CR ↓ Sample: DL is correct (over reliance)
Population: CR ↑ Population: DL is misstated (✖ opinion)
DR ↑, ST ↓, ↓ evidence
2. Systematic Sampling
Sampling interval
1,000 transactions
Ex. 100 samples
= 10 intervals
5. Haphazard
Does not follow any mathematical / structural approach
Ex.
All deposit except 15th & 30th
All deposits from 1-3 PM
6. Discovery Sampling
Used when the auditor believes that the deviation is zero
100% complete review if the auditor finds an exception.
7. Block Selection
Least desirable; biased
8. Stop-or-Go Sampling
Auditor expects few errors
Sufficient evidence stop
Sample Size
TOC ST Relationship to Sample Size
1. Acceptable SR Acceptable SR (ASR) Inverse
Prior experience
Projection
30
1. TOC 1,000 Deposits 100
= 30% sample deviation rate
100 samples + 5% acceptable sampling risk
30 deviations 35%
ASR 5%
2.
Case 1: 20% vs 35% ↑ CR
TDR
Case 2: 40% vs 35% ↓ CR
10k
3. ST ₱1M 1,000 withdrawals x 1M = 200k
50k
₱50k 100 samples 50k acceptable sampling risk
Misstatement ₱10k 250k
ASR ₱50k
Projection (ST):
1. Mean per unit (MPU) Estimation
2. Ratio estimation
3. Difference estimation
16 (owned) Air PH
Fleet 97 Corp
81 (leased)
Pasay (MOA)
2. Planning
Overall audit strategy SGV
Initial audit program 1 Partner
Setting materiality level 4 Members
Computing AR 8 Sr. Associations
IR 10 Associates
4. Testing of Controls
Operating effectiveness
IC with direct effect FS
I, I, O, R
N
↓ DR T
E
5. Substantive Testing
Inquiry, inspection, observation, reperformance, confirmation, recalculation, analytical procedure
Audited Balance propose AJE
Responsibilities:
Management:
1. Assess the entity’s ability to continue as a going concern
2. Disclose the assessment
Auditor:
1. Evaluate the appropriateness of management’s use of going-concern assumption
2. Evaluate if properly disclosed
3. Identify, based on management’s assessment,
Events & conditions that may give rise to business risk
Management’s mitigating factors (plans)
Content:
1. Management acknowledges its responsibility on the FS
2. Management approved the FS
3. Management acknowledges its responsibility on the IC
4. Management believes that the uncorrected misstatements are immaterial
5. Management has made available all financial record (evidence)
signed by top management (CEO & CFO)
addressed to the auditor
date coincides with the date of auditor’s report
7. Review adequacy of disclosures
- Disclosure checklist
9. Forming an Opinion
Auditor’s Report
1. Title
Independent Auditor’s Report
2. Addressee
Stockholders & BOD; with address
3. Opinion
Client
FS, periods
In accordance with PFRS
6. Management’s Responsibilities
FS & Internal Control
7. Auditor’s Responsibilities
Obtain reasonable assurance
Issue an opinion
General description of the audit
2. Consistency of Performance
CIS functions exactly as programmed
3. Concentration of Duties
Authorization, Recording, Custody properly segregated
Effect on Audit:
Same - objectives
Real-time
- responsibilities Data Processing
Batch
- stages
3. Access Controls
5. Monitoring of Controls
Application of Controls
1. Key Verification
Data is to be entered twice
3. Check Digit
Ex. Add Supplier 7530261 6
= 24 2+4 = 6
4. Hash Total
Adding numbers without meaning
Ex. Customer A ₱5,000 #101
B 3,000 #102
C 2,000 #103
₱10,000 306
5. Limit Check
Ex. ₱50k / day
Test of Control
1. Auditing around the computer
- Input is reconciled with output
- Black box approach 1. Test Data
- Auditor gets a copy of the program
2. Auditing with the computer - Auditor installs the program
- Audit software - Auditor inputs erroneous / fictitious
transactions
3. Auditing through the computer
- Computer Assisted Audit Techniques 2. Integrated Test Facility (ITF)
- White box approach - Auditor uses the actual system used by
the clients
- Risk of contamination
3. Parallel Simulation
- Auditor codes or writes the program
Part 1: Compliance with the Code distinguishing mark, responsibility to act in public interest
Fundamental Principles Applies to all CPA
Conceptual Framework
Part 2: CPAs in Business (employed, owners, managers)
Part 3: CPAs in Public Practice (audit firm)
Fundamental Principles
1. Integrity
- Straight forward & honest in all professional and business relationship
- Fair dealing and truthfulness
- Ex. Correct Opinion
2. Objectivity
- Fair, intellectually honest and free of conflict of interest
4. Confidentiality
- Respect the confidentiality of information acquired
- Except when, legally required to disclose, with client consent
- Ex. inside information
5. Professional Behavior
- To comply with relevant laws & regulations
- To avoid misconduct that might discredit the profession
Threats Examples:
Material ✖
Direct
Immaterial ✖
Financial Interest
Material ✖
Indirect
Immaterial ✔
1. Objectives (Sec. 3)
Accounting education
Board exam
Practice of accountancy
Sec. 9(A)
Sec. 30
APO PICPA
Renewal
Ex. 3 years
Approval July 31, 2022
Expiration Dec. 31, 2024
Renewal Sept. 30, 2024 2025 – 2027
Renewal Sept. 30, 2027