Auditing A Practical Approach With Data Analytics, 2e Raymond Johnson, Laura Wiley
Auditing A Practical Approach With Data Analytics, 2e Raymond Johnson, Laura Wiley
com
AUDITING
A P R AC T I C A L A P P R O AC H W I T H D ATA A N A LY T I C S
2ND EDITION
Auditing
A Practical Approach with Data Analytics
Second Edition
DEDICATION
This book was set in Source Sans Pro-Regular 9.5/12.5 by Lumina Datamatics.
Founded in 1807, John Wiley & Sons, Inc. has been a valued source of knowledge and understand-
ing for more than 200 years, helping people around the world meet their needs and fulfill their
aspirations. Our company is built on a foundation of principles that include responsibility to the
communities we serve and where we live and work. In 2008, we launched a Corporate Citizenship
Initiative, a global effort to address the environmental, social, economic, and ethical challenges we
face in our business. Among the issues we are addressing are carbon impact, paper specifications
and procurement, ethical conduct within our business and among our vendors, and community and
charitable support. For more information, please visit our website: www.wiley.com/go/citizenship.
Copyright © 2022 John Wiley & Sons, Inc. All rights reserved. No part of this publication may be
reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic,
mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections
107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of
the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright
Clearance Center, Inc. 222 Rosewood Drive, Danvers, MA 01923, website www.copyright.com.
Requests to the Publisher for permission should be addressed to the Permissions Department, John
Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030-5774, (201)748-6011, fax (201)748-6008,
website http://www.wiley.com/go/permissions.
ISBN-13: 978-1-119-78608-5
The inside back cover will contain printing identification and country of origin if omitted from this
page. In addition, if the ISBN on the back cover differs from the ISBN on this page, the one on the
back cover is correct.
10 9 8 7 6 5 4 3 2 1
Brief Contents
1 Introduction and Overview of Audit and Assurance 1-1
GLOSS A RY G-1
I N D E X I-1
iii
In the area of technology, auditors and their clients are incorporating more technology
than ever before. You should not be concerned about mastering any specific technology or
software at this time, but you should be knowledgeable about how auditors are incorporating
various technologies, and you should be technologically nimble and willing to experiment
with using technology to analyze client data. To help you do this, we have:
• I ncluded a separate chapter on audit data analytics (ADA) and integrated the use of ADA
into many chapters.
• O
ffered IDEA-based cases, Tableau exercises, and Excel exercises in Wiley Course Re-
sources.
• A
dded discussions about clients’ digital mindset, automated tools for performing audit
procedures, artificial intelligence and machine learning, and cybersecurity.
The accounting and auditing skills you build in this course will serve you for the rest of
your life as you develop independence of thought and action. If you keep asking questions,
continue to explore the application of new technologies, and stay true to the importance of
integrity and independent thought and actions that will earn the public trust, you should have
a rich and rewarding career.
We are excited and honored to lead you on this “auditing” journey. We hope you dive
into the material and explore the resources provided in this text and Wiley Course Resources.
Above all else, we wish you great success in your auditing course and your career!
iv
vi
• NEW Professional Environment feature on AICPA evi- Chapter 12: Auditing the Purchasing and Payroll
dence from peer reviews on control testing. Processes
• HIGHLIGHTED AND EXPANDED example of New Mil- • NEW illustrations detailing the auditing steps for both
lennium Ecoproducts throughout. the purchasing and payroll processes.
Chapter 8: Audit Data Analytics (previously Chapter 7) • COMBINED some learning objectives for improved pre-
sentation of topics.
• NEW learning objective (and related EOC material) on
how artificial intelligence and machine learning may be Chapter 13: Auditing Cash, Inventory, and Related
used in an audit. Income Statement Accounts (previously
• NEW emphasis on how ADA fits into the five-step audit first half of Chapter 13)
decision-making framework with specific focus on use of • NEW discussions of understanding internal controls, de-
ADA as a risk assessment tool and as a substantive pro- veloping a preliminary audit strategy, and drawing a final
cedure. conclusion.
• NEW focus on how gathering data for ADA application • REVISED discussion of bank transfers for improved un-
involves two key steps: (1) accessing and preparing the derstanding.
data for ADA and (2) considering the relevance and reli- • NEW Professional Environment feature on bank confir-
ability of the data used. mations.
• NEW Professional Environment feature detailing a recent • NEW discussion on the three-step process of valuing in-
report on the use of technology in UK audit firms. ventory.
Chapter 9: Risk Response: Performing Substantive • NEW discussion of the use of ADA to count inventories.
Procedures
Chapter 14: Auditing Investing and Financing Activities
• NEW illustrations highlighting (1) dual-purpose tests, (previously second half of Chapter 13)
(2) using a substantive analytical procedure in the con-
• NEW discussions of how audit planning decisions affect
text of the audit decision-making framework, (3) an ex-
the assessment of inherent risk, understanding internal
ample of estimation uncertainty, (4) inherent risk factors,
controls, developing a preliminary audit strategy, and
and (5) an illustrative timeline of an event related to an
drawing a final conclusion.
estimate occurring before the date of the audit report.
• NEW section on auditing debt transactions.
• UPDATED discussion on auditing accounting estimates
from SAS 143, including a running case example to illus- • NEW Auditing Decision-Making Example on investing
trate application. and financing activities.
Chapter 10: Risk Response: Audit Sampling for Chapter 15: Completing the Audit (previously Chapter 14)
Substantive Procedures • ENHANCED discussions and explanations throughout.
• COMBINED discussions within Learning Objectives 1 • REVISED Professional Environment feature on forensic
with 2, and 4 with 5, for a more streamlined, focused ap- accounting.
proach.
Chapter 16: Reporting on the Audit (previously
• ADDED audit risk model depictions to illustrate example Chapter 15)
scenarios for improved understanding.
• UPDATED throughout to reflect 2020 ASB auditing
• NEW summary discussion of PPS sampling. standards.
Chapter 11: Auditing the Revenue Process • NEW audit reports from Amazon.com and Photronics,
• NEW section and assessment material on evaluating con- Inc.
trol activities in a paperless revenue system. • NEW discussion of preparation engagements.
• NEW discussions of the preliminary audit strategy as well
as drawing a final conclusion for revenues.
• NEW illustration on (1) the five-step process for auditing
revenues, (2) the lapping scheme, and (3) the ADA de-
cision tree for auditing allowance for doubtful accounts.
Hallmark Features
Auditing provides a unique pedagogical framework that helps students master the content and
prepare them for a successful career in accounting.
The Audit Process chart helps students see the big picture of
Overview of Audit and Assurance
(Chapter 1)
the audit process.
Professionalism and Professional Responsibilities
(Chapter 2)
Gaining an Understanding
Making Preliminary
of the System of Internal Control
Risk Assessments
(Chapter 6)
(Chapter 8)
Auditing the Auditing the Purchasing Auditing Cash and Auditing Investing and
Revenue Process and Payroll Processes Inventory Financing Activities c03RiskAssessmentPartI.indd Page 3-2 24/01/19 9:35 PM F-0590 /208/WB02435/9781119401810/ch03/text_s
(Chapter 11) (Chapter 12) (Chapter 13) (Chapter 14)
8-1
LO 4 Explain professional skepticism and apply the
audit risk model.
LO 1 Define management assertions about classes of LO 4 evaluate when it is appropriate for auditors to use
transactions, account balances, and presentation and the work of others.
5-6 C h a pt er 5 audit evidence
disclosure. LO 5 Document the details of evidence gathered in
LO 2 Discuss the characteristics of audit evidence. working papers.
assets and liabilities may exist but not be owned by the entity. For example, inventory held on
Auditing and Assurance Standards
c08AuditDataAnalytics.indd 1 7/23/21 8:18 AM
LO 3 apply the procedures for gathering audit evidence, consignment in the client’s warehouse exists, but it is not owned by the client. This inventory
including the use of audit data analytics. should not be listed as an asset because it does not meet the rights and obligations assertion
P C AO B AUDIT ING STA NDARD S B OARD
since it is not owned by the client.
When considering (9) completeness, auditors search for assets, liabilities, andAS 1015items
equity Due Professional Care in the Performance of Work AU-C 200 Overall Objectives of the Independent
to ensure they have been recorded. This assertion is particularly important when auditors Auditor and the Conduct of an Audit in Accordance With
AS 1101 Audit Risk
believe there is a risk of understatement and the client has omitted some items from the bal- Generally Accepted Auditing Standards
Auditing and Assurance Standards
Auditing and Assurance
ance sheet. For example, a client may fail to record various accrued liabilities due AS to
1301 Communications with Audit Committees
an error AU-C 210 Terms of Engagement
or an attempt to improve reported financial ratios for the period. In addition, auditors
AS 2101 gather
Audit Planning
evidence that all related disclosures are included in the notes to the financial statements. AU-C 240 Consideration of Fraud in a Financial
PCAOB Au d i t i n g StA n dA r d SWhen
BOArdconsidering (10) accuracy, valuation and allocation, auditors search forAS 2105 that
evidence Consideration of Materiality in Planning and Statement Audit
Standards
AS 1105 audit evidence assets, liabilities, and equity items have been recorded at appropriate amounts and
Au-C 230 audit Documentation subsequent
Performing an Audit
allocation or valuation adjustments are appropriately recorded. Allocation refers to the alloca-
AU-C 300 Planning an Audit
AS 1205 part of the audit performed by Other Au-C 315 Understanding the entity and Its environment AS 2110 Identifying and Assessing Risk of Material
tion of historical cost over a period of time, such as depreciation of buildings and equipment. AU-C 315 Understanding the Entity and Its Environment
Independent auditors and assessing the risks of Material Misstatement Misstatement
Valuation refers to subsequent measurements that determine fair value or net realizable value. and Assessing the Risks of Material Misstatement
AS 1210 Using the Work of a Specialist Au-C 500 audit evidenceThis assertion is particularly important when auditors believe there is a risk of over- or under-
AS 2301 The Auditor’s Responses to the Risks of
throughout the discussion. For (11) classification, auditors gather evidence that assets, liabilities, and equity interests
down if it is impaired (risk of overstatement).
3-44 C h A pte R 3 Risk Assessment part I: Audit Risk and Audit Strategy
are recorded in the proper accounts. For example, a parking lot added to land should Cloud be clas-
9 - Continuing Case
sified in a separate account from land. A parking lot is considered a land improvement and is
subject to depreciation. Including the parking lot with the land account is improper classifica-
Continuing Case
Sharon and Josh have already discussed some specific client accep- and is part of professional ethics. Sharon also gives Josh the task
Cloud 9 - Continuing
CloudCase
9 Continuing Case tion because land is not depreciated. tance issues, such as independence threats and safeguards. Sharon of researching Cloud 9’s press coverage, with special focus on any-
explains they
When considering (12) presentation, auditors gather evidence that assets, liabilities, andalso must consider the overall integrity of the client thing that may indicate poor management integrity.
At the next planning meeting for Partners
the Cloud has
9 audit,
justSuzie the Januaryhandle
wonPickering the accounts receivable and inventory themselves.
uses the Second, (that is, management of Cloud 9). This means they need to perform Sharon emphasizes they must perform and document proce-
W&S 31, 2026, audit for equityW&Sinterests are
Partners appropriately aggregated
following or disaggregated
percentages as starting in the financial statements. For
presents the results of theCloud
analytical procedures
9. The audit teamperformed
assignedso
to far Sharon
this client is: is worried about how they for
points willthe
gather evidence
various regarding a
benchmarks: and document procedures that are likely to provide information dures to determine whether W&S Partners is competent to per-
example, liabilities are separated into current and long-term portions on the balance sheet. In
and a working draft of the audit program. The audit manager, subsidiary of Cloud 9 located in Vietnam. W&S Partners does not about the client’s integrity. Josh is a little skeptical. “Do you mean form the engagement and has the capabilities, time, and resources
have an office in Vietnam,addition, related disclosures foreffec-
long-term debt
Benchmark Threshold (%)should be relevant and understandable. In the
viii users (that is, stockholders, banks, etc.) of the accounts going
to be looking at?” For example, will stockholders be interested
a. Using the October 31, 2025, trial balance (in the appendix
to this text), calculate planning materiality, and include the
in profit figures that can be used to pay dividends and increase
justification for the benchmark that you have used for your
share price?
calculation.
W&S Partners’ audit methodology dictates that one plan-
ning materiality (PM)c05AuditEvidence.indd
amount is to be6 used for the financial b. Discuss how the planning materiality would be used to deter-
7/26/21 12:26 PM
statements as a whole. The benchmark selected for determin- mine performance materiality.
ing materiality is the one determined to be the key driver of the c. If the planning materiality amount is increased or decreased
business. later in the audit, how would that impact the audit?
Control Risk After assessing IR, the second step is to gain an understanding of the cli-
ent’s system of internal controls. The client should have controls in place to minimize the
risk of material misstatement caused by inherent risks. The auditors gain an understand-
control risk (CR) the risk that
a client’s system of internal con-
ing of internal controls for the purpose of assessing control risk. Control risk (CR) is the H A LLMA RK FEATU RES ix
risk that a client’s internal controls will not prevent or detect a material misstatement on
trols will not prevent or detect a a timely basis.
material misstatement on a Illustration 3.7 shows inherent and control risks for a jewelry store. An inherent risk
timely basis
for jewelry inventory is that it is susceptible to theft from both customers and employees. If
2-8 Chapter 2 professionalism and professional responsibilities 5-32 Ch a pt e r 5 audit evidence
jewelry is stolen without the client knowing, the inventory account will be overstated because
Conceptual Illustrations
of safeguards
No threats Threats not top-left corner of the lead schedule are the client name, period-end, and currency unit (in this
identified significant Professional Skepticism and Audit Risk 3-15 example, balances are rounded to the nearest thousand dollars). In the top center of the lead
schedule is section identification (C). In the top-right corner, details of the working paper pre-
Are threats Decline or parer and reviewers are documented. Next, details of the cash and cash equivalents balance
Professional Skepticism at an acceptable
No
terminate are listed. For each item listed in the lead schedule, the following are noted.
Real-World Illustrations
by generally
public practice should accepted
be alert auditingofstandards.
to, irrespective the services the CPA is engaged to perform. ILLUSTRATION 5.15 Working paper example: Cash lead schedule
Does maintaining
• Adverse interest threat. Anprofessional
adverse interest skepticismthreat mean auditors
is the threat should
that a CPAassumewillclient
not manage-
adverse interest threat the
ment is beingbecause
dishonest? Note that IR and CRis are dis-the client’s risks and Client:
exist separately fromEcoproducts
the audit of the
the The answer is no.areAuditors
opposedshould not assume management New Millennium Bell & Bowerman, LLP Prepared by: KM 1/21/2026
threat that a CPA will not act act with objectivity CPA’s interests to the client’s interests. For
honest, but at interest
the samethreat time,exists
auditors financial statements. In other words, the auditors have no control
Period-end: over a client’s inherent
12/31/2025
if a should notexpressed
assume management
an intention is to always
begin honest or C–LEAD Reviewed by: SO 1/22/2026
with objectivity because the example, an adverse client has Reference: C-Lead
correct. Using professional skepticism means and control risks. Inherentand Currency
risk is driven by industry, unit: $000and client factors that
economic, Reviewed by: MM 1/24/2026
of taxthat even if auditors believe management
Many illustrations, such as working
CPA’s interests are opposed to the litigation against the CPA regarding the quality work previously performed.
client’s interests those charged with governance are being honest, they should are gather outreliable
of the evidence
control of to the
sup-auditor. Control risk is impacted by the client’s design and
• Advocacyportthreat. An advocacy
management’s threat
responses toisauditor
the threat that a CPA
inquiries andwill promote a client’s inter-
implementation
to support amounts of internal
and disclosures
Lead schedule:
controls, which are also out of the auditor’s control. These two
advocacy threat the threat that
ests or in
position to the point that his orF-0590
her objectivity or independence is compromised. toFor
papers and confirmations, present
the
a CPA will promote a client’sc03RiskAssessmentPartI.indd Pagefinancial statements.
3-28 24/01/19 9:35 PMThroughout all phases of the audit,risks combine
auditors should form thethese
keep RMM. /208/WB02435/9781119401810/ch03/text_s Pre- Adjusted
example, an advocacy
questions in mind threat
whenexists if the CPA
gathering provides
audit evidence:expert witness
Is this services reliable?
information to a clientDoin we need to adjusted current-year Prior-year
interests or position to the point
that his or her objectivity or litigation or in a dispute with a customer regarding a licensing arrangement.
perform more audit procedures? When auditors exercise professional skepticism during the Once the CPA is Account balance balance balance %
Real-World Examples
as the CFO). A familiarity threat would also exist if a former partner or professional 10500 Short -Term Deposits 5,796 0 5,796 TB 5,600 PY 196 4% C05
accepting of the client’s work or
employeeAuditof an audit Reasoning
firm joined • Example
Poor cash flas
the client ows combined
CFO and with
itsProfessional high earnings.
had Skepticism
knowledge of the firm’s
product Total Cash and Cash $17,112 $0 $17,112 $16,410 $702 4%
policies and practices for the audit engagement.
• Pressure to meet market expectations and profit targets. Equivalents
management participation • Management An auditorparticipation
was auditing•threat.
aPlanning A management
recreational vehicle
to list on a(RV)
stock participation
dealership.
exchange. threat
The auditor had is the some
obtained Key to audit tick marks (TM):
threat the threat that a CPA threat thatinitial
a CPA will take
financial on the role
information fromofthe
client management
client or otherwise
showing unaudited assume
results for the endman-
of the third TB Agrees to client’s trial balance.
• Planning to raise debt or renegotiate a loan.
Audit Risk billion yen). What incentives and pressures were involved that led to the fraud? The technology
industry is extremely competitive and Toshiba’s upper management set aggressive profit targets.
The home electronics and appliances division was showing losses and the memory chip division
Audit risk is the risk that an auditor expresses an inappropriate audit opinion when financial
was feeling pressure because of decreasing demand from Chinese electronics companies.6 As an
statements are materially misstated (AU-C 200 Overall Objectives of the Independent Auditor
example, in September 2012, the head of the digital products and service division was told by the c05AuditEvidence.indd Page 5-20 1/15/19 9:44 PM f-1241 /208/WB02435/9781119401810/ch05/text_s
and the Conduct of an Audit in Accordance With Generally Accepted Auditing Standards and
CEO to improve a 24.8 billion yen loss into a 12 billion yen profit in just three days!7 Think about
AS 1101 Audit Risk). Thishow meansthe the audit
external reportwould
auditor stateslearn
the about
financial statements
the incentives aretopresented
given lower-level management. How
fairly, in all material respects,
might when in actuality
an internal the fiabout
auditor learn nancial
thesestatements
incentives?contain a material
error or fraud. While it is impossible to eliminate audit risk, auditors aim to reduce it to an
5-20 CH A PT E R 5 Audit Evidence
The Professional
Opportunities to Environment
Perpetrate a Fraud
After identifying one or more incentives or pressures to commit a fraud, auditors assess
Professional Environment Working with IT Auditors
Specialist IT auditors are often used in audits of clients with com- Finally, Brazel argues that the research findings demon-
whether a client’s employees have an opportunity to perpetrate a fraud. Auditors utilize their plex information technology (IT) environments because the effec- strated that auditors need to consider the implications of finding
Audit Decision-Making
However, because he believes the accounts are so material to the Josh plans to investigate any possible connections between
• A significant portion of the inventory is high in value, small in size, and susceptible to theft. audit and derivatives have become such a big issue in audits in recent the specialist and Cloud 9 that could adversely impact the special-
• Although internal controls may be strong overall, there is risk they may not be operating effectively years, he deems an external specialist’s opinion is also required. He ist’s objectivity before engaging him for this audit.
and uniformly in some locations.
• The weak gross margins in some stores may be evidence of inventory shrinkage or theft.
• Fraud risk may be high in some locations due to the opportunity offered by weak internal
controls.
Framework Using the Work of Internal Auditors
• The auditor needs to determine how internal controls affect audit strategy and whether the auditor
wants one audit strategy for part of the inventory and another audit strategy for another part of the internal auditors employees The role of the internal audit function was introduced in Chapter 1. Internal auditors are
inventory.
Each chapter concludes with an Audit
of the client who perform assur-
ance and consulting activities
employees of the client who perform assurance and consulting activities designed to evaluate
and improve the effectiveness of the entity’s governance, risk management, and internal con-
Perform the Analysis and Evaluate the Results designed to evaluate and improve
Engaging Students
The Auditing online homework system features a suite of teaching and learning resources
that were developed under close review of the authors. In the homework system, students can
access review content and practice assessment that will help them better understand course
material.
Student Practice
Each chapter includes practice questions
for each learning objective that students
can review to assess their understanding
of chapter topics.
Data Visualization
Assignments—Tableau
and PowerBI
Tableau and NEW PowerBI visual-
izations accompanied by assessments
are available with most chapters.
IDEA Cases
Select chapters include IDEA cases and case video
resources that allow students to use IDEA software
to analyze data. An IDEA casebook and accompany-
ing data sets, provided by Audimation Data Analytic
Software and Services, is also available.
Alteryx
NEW Alteryx cases and supporting video
resources are available with some chapters.
Gradable Excel
Select chapters include gradable Excel questions that
assess students’ understanding of Excel formulas.
ENGAGING STUDENTS xi
Relevant Accounting
Articles
Up-to-date accounting articles and videos
are posted to the Wiley accounting update
site, www.wileyaccountingupdates.com.
Many of these updates address auditing-
related topics.
Adaptive Assignments
Adaptive Assignments ignite students’ con-
fidence to persist so that they can succeed in
their courses and beyond. By continuously
adapting to each student’s needs and providing
achievable goals with just-in-time instruction,
Adaptive Assignments close knowledge gaps
to accelerate learning.
xii
Student Assessment
Each chapter of Auditing has over 300 assessment questions that can help keep your students
engaged and on track.
End-of-Chapter Assessment
Questions and Problems
Each Auditing text chapter concludes with over 40 assessment questions and problems you can
use to gauge students’ understanding and ability to apply auditing concepts, as follows:
Cases
Because no two audits are alike, Auditing uses a practical, case-based approach to help stu-
dents develop professional judgment, think critically about the auditing process, and develop
the decision-making skills necessary to perform a real-world audit. The best way for a student
to learn auditing is to actually do auditing. To help provide real-world application, we have
developed the following cases:
• A
udit Decision Cases—Three cases run through most of the text chapters and provide
a broad review of the audit process (King Companies, Inc., Mobile Security, Inc., and
Brookwood Pines Hospital). In addition, chapter-specific cases help you assess students’
understanding of topics that are the focus of a particular chapter.
• C
loud 9 Continuing Case—Requires students to apply chapter concepts to the ongoing
Cloud 9 case that is highlighted in the chapter.
To help you more easily identify what questions you want to assign, questions are tagged
with learning objectives, professional AICPA and AACSB outcome standards, Bloom’s
Taxonomy level, level of difficulty, and a recommended time of completion. You can track
student performance in the gradebook found in the Wiley online homework system.
Test Bank
Over 150 NEW, more challenging application and analysis questions were added to this edi-
tion’s test bank. Each chapter of the test bank has between 130 and 200 questions that you
can assign to students in an exam or as graded practice. Question types include true/false,
multiple-choice (NEW multiple-select), fill-in-the-blank, and short answer questions. To help
you more easily identify what questions you want to assign, questions are tagged with learning
objectives, professional AICPA and AACSB outcome standards, Bloom’s Taxonomy level, level
of difficulty, and a recommended time of completion. You can track student performance in
the gradebook.
xiii
Acknowledgments
Auditing has benefited tremendously from the input of students who have used this text’s ma-
terial in class. We are also very appreciative of the comments and suggestions we received from
instructors who reviewed and used the first edition of this textbook, as well as the instructors
who participated in development and authoring activities for this new edition. A special thank
you to Kathleen Bakarich. We greatly appreciate her contributions to our Alteryx resources.
xiv
We also want to thank several individuals for their help in We appreciate suggestions and comments from users—
moving this text from concept to publication. This work would instructors and students alike. Please send us your thoughts
not have come to fruition without the extensive support and and ideas about the text.
guidance of Emily Marcoux, Veronica Schram, Joel Hollen-
beck, Ed Brislin, Nicole Repasky, Natalie Munoz, Terry Ann Raymond Johnson Laura Wiley
Tatro, and Vimal Shanmugavelu. Sunriver, Oregon Baton Rouge, Louisiana
Table of Contents
1 Introduction and Overview of Audit 2.2 The Structure of the AICPA Code of Professional
Conduct 2-5
and Assurance 1-1 Purpose of the Code 2-5
Organization of the Code 2-6
1.1 Assurance, Attestation, and Audit Services 1-3 2.3 Conceptual Framework for Members
Audit Services 1-4 in Public Practice 2-7
Attestation Services 1-4 Steps in the Conceptual Framework 2-7
Assurance Services 1-5 Applying the Conceptual Framework: An Example 2-10
1.2 Different Assurance Services 1-6 2.4 Integrity and Objectivity 2-11
Financial Statement Audits 1-6 Conflicts of Interest 2-11
Compliance Audits 1-8 Subordination of Judgment 2-12
Operational (Performance) Audits 1-8 2.5 Independence 2-12
Internal Audits 1-8 Key Individuals and Independence Requirements 2-14
1.3 Demand for Audit and Assurance Services 1-9 Employment or Association with an Attest Client 2-18
Financial Statement Users 1-9 Nonattest Services 2-19
Demand for Audit and Assurance Services 1-10 SEC and PCAOB Independence Rules 2-22
1.4 Preparers and Auditors 1-11 2.6 General Standards 2-25
Preparer Responsibility 1-11 2.7 Other Rules of Conduct for Members in
Auditor Responsibility 1-12 Public Practice 2-26
Auditor Skills 1-12 Accounting Principles Rule 2-26
Assurance Providers 1-13 Fees and Other Types of Remuneration 2-27
1.5 The Role of Regulators and Regulations 1-14 Confidential Information 2-27
Securities and Exchange Commission (SEC) 1-14 2.8 Auditor Liability Under Common Law 2-28
Public Company Accounting Oversight Board (PCAOB) 1-15 Liability to Clients 2-29
American Institute of Certified Public Accountants Liability to Third Parties 2-31
(AICPA) 1-16 Burden of Proof and Common Law Defenses 2-34
Financial Accounting Standards Board (FASB) 1-19 2.9 Auditor Liability Under Statutory Law 2-35
Committee on Sponsoring Organizations of the Treadway The Securities Act of 1933 2-36
Commission (COSO) 1-19 The Securities Act of 1934 2-37
National Association of State Boards of Accountancy The Foreign Corrupt Practices Act of 1977 2-38
(NASBA) and State Boards of Accountancy 1-19 The Private Securities Litigation Reform Acts of 1995 and
1.6 Audit Report on Financial Statements 1-20 1998 2-38
Reasonable Assurance and the Financial Statements 1-20 The Sarbanes-Oxley Act of 2002 2-39
Materiality and the Financial Statements 1-21 Criminal Liability 2-41
The Auditorʼs Report on Financial Statements 1-21 Audit Decision-Making Example 2-45
1.7 Audit Report on Internal Controls over
Financial Reporting 1-27
Reasonable Assurance and Internal Controls 1-27 3 Risk Assessment Part I: Audit Risk
The Auditor’s Report on Internal Control over Financial
Reporting 1-28
and Audit Strategy 3-1
1.8 The Audit Expectation Gap 1-30
3.1 Client Acceptance and Continuance
Audit Decision-Making Example 1-33
Decisions 3-3
3.2 Phases of an Audit 3-8
2 Professionalism and Professional Risk Assessment Phase 3-9
Responsibilities 2-1 Risk Response Phase 3-10
Reporting Phase 3-10
2.1 Professionalism and Accounting 2-3 3.3 Materiality 3-11
Level of Expertise 2-3 Qualitative and Quantitative Factors 3-11
Concern for the Public Interest 2-4 Setting Materiality 3-12
xvi
6.5 Documenting Internal Controls 6-30 Step 2: What Is the Audit Problem You Are Trying to
6.6 Identifying Strengths and Weaknesses in a Solve? 8-5
System of Internal Controls 6-33 Step 3: Gather Information and Evidence 8-6
Internal Controls and Audit Strategy 6-33 Step 4: Perform the Analysis and Evaluate
Evaluating Internal Control Weaknesses 6-33 the Results 8-7
6.7 Use of a Service Organization by an Audit Client 6-34 Step 5: Draw an Audit Conclusion 8-8
Significant User Entity Controls over the Service Audit Documentation 8-9
Organization 6-35 8.2 Steps Associated with Accessing and Preparing
User Auditor Obtains a Systems Organization and Data for Audit Data Analytics 8-11
Controls (SOC) 1 Report 6-36 Are the Data Complete? 8-11
What Is a Soc 2 Report and How Does It Differ from a Do the Data Need to Be Cleaned? 8-12
SOC 1 Report? 6-38 Key Questions to Be Addressed in Evaluating
Audit Decision-Making Example 6-40 the Relevance and Reliability of Data Used in
Audit Data Analytics 8-12
7 Risk Response: Performing Tests 8.3 Using Audit Data Analytics as a Risk
Assessment Procedure 8-13
of Controls 7-1
Understanding the Risk Analysis Decision Tree 8-14
What Do We Mean by Notable Items? 8-15
7.1 Identify Relevant Transaction-Level Controls and
Tools for Searching for Notable Items 8-15
Determine Preliminary Audit Strategy 7-3
What to Do When ADA Identifies a Large Number of
Preventive and Detective Controls 7-4
Items for Further Consideration 8-16
Manual and Automated Controls 7-7
8.4 Applying Audit Data Analytics as a Risk Assessment
Determine Preliminary Audit Strategy 7-8
Procedure 8-18
7.2 Procedures for Testing Controls 7-10
Cluster Analysis 8-18
Inquiry 7-10
Matching Information in Key Data Fields 8-26
Observation 7-10
Regression Analysis 8-31
Inspection of Physical Evidence 7-10
Visualization 8-35
Reperformance 7-11
8.5 Using Audit Data Analytics as a Substantive
Tests of Software Controls 7-11
Procedure 8-38
7.3 Selecting and Designing Tests of Controls 7-12
8.6 Applying Audit Data Analytics as a Substantive
Selecting the Controls for Testing 7-13
Procedure 8-39
Selecting Audit Procedures 7-15
Validating Sales Revenue and Accounts Receivable with
The Extent of Tests of Controls 7-16
Subsequent Cash Receipts 8-39
Timing of Tests of Controls 7-20
8.7 Artificial Intelligence and Machine Learning 8-44
Benchmarking 7-21
Examples from Audit Practice 8-45
Selecting and Designing Tests of Controls—A Summary 7-22
The Role of Professional Judgment in the AI
7.4 Results of the Auditor’s Testing 7-25
Environment 8-46
Tests of Controls and Audit Strategy 7-27
Audit Decision-Making Example 8-48
Classifying Control Exceptions 7-27
7.5 Using a Soc 1, Type 2 Report 7-29
Section 1: Independent Service Auditor’s Report 7-31 9 Risk Response: Performing
Section 2: Management’s Assertion 7-34 Substantive Procedures 9-1
Section 3: Management’s Description of the System 7-36
Section 4: Control Descriptions, Related Controls, 9.1 Audit Risk and Substantive Procedures 9-3
and Tests of Operating Effectiveness 7-38 9.2 Risk Response at the Financial Statement Level 9-5
7.6 Documenting Conclusions 7-41 Auditor’s Understanding of the Entity’s Control
7.7 Management Letters 7-43 Environment 9-6
Audit Decision-Making Example 7-46 Risk of Material Misstatement Due to Fraud 9-6
9.3 Nature of Substantive Procedures 9-7
8 Audit Data Analytics 8-1 Determining the Purpose of an Audit Procedure 9-7
Determining the Type of Substantive Procedure 9-8
8.1 Applying the Audit Decision-Making Initial Procedures 9-9
Framework to Audit Data Analytics 8-3 Substantive Analytical Procedures 9-10
Step 1: Obtain Company Background Information Tests of Details 9-14
and Data 8-4 ADA and Substantive Procedures 9-15
9.4 Timing of Substantive Procedures 9-17 10.7 Applying Nonstatistical Sampling for
During an Interim Period 9-17 Substantive Procedures 10-27
During Year-End 9-18 Step 5: Choose the Audit Sampling
9.5 Extent of Substantive Procedures 9-19 Technique 10-27
Auditing an Entire Population 9-20 Step 6: Determine Sample Size Using
Auditing Select Items from a Population 9-21 Professional Judgment 10-27
9.6 Auditing Accounting Estimates 9-22 Step 7: Judgmentally Select Representative
Inherent Risk Factors 9-22 Sample 10-28
Possible Management Bias 9-23 Step 8: Apply Audit Procedures 10-28
Risk Assessment Procedures for Step 9: Evaluate Results Judgmentally 10-29
Accounting Estimates 9-24 Step 10: Document Conclusions 10-31
Identifying and Assessing the Risks of Material Appendix 10A: Applying Classical Variables
Misstatement 9-26 Sampling for Substantive Procedures 10-32
Risk Response Procedures for Accounting Estimates 9-26 Step 5: Apply Classical Variables Sampling 10-32
Overall Evaluation and Documentation 9-28 Step 6: Determine the Sample Size 10-33
9.7 Documenting Results of Substantive Step 7: Select a Random Sample 10-37
Procedures 9-30 Step 8: Apply Audit Procedures 10-37
Audit Decision-Making Example 9-33 Step 9: Evaluate the Sample Results 10-37
Step 10: Document Results 10-39
10 Risk Response: Audit Sampling for Audit Decision-Making Example 10-42
Substantive Procedures 10-1
11 Auditing the Revenue Process 11-1
10.1 Audit Sampling versus Audit Data Analytics 10-3
10.2 Sampling Risk and Nonsampling Risk 10-4 11.1 Understanding the Revenue Process 11-3
Risk of Incorrect Acceptance 10-5 Understand the Nature of the Revenue Process 11-4
Risk of Incorrect Rejection 10-5 Revenue Transactions 11-4
Nonsampling Risk 10-5 11.2 How Audit Planning Decisions Affect the
10.3 Statistical versus Nonstatistical Sampling 10-7 Assessment of Inherent Risk 11-5
Population and Sampling Unit 10-7 Understanding the Entity and Its
Sampling Methods 10-8 Environment 11-6
10.4 Factors That Influence the Sample Determining Inherent Risk in the Revenue
Size—Substantive Procedures 10-10 Process 11-10
Tolerable Misstatement 10-10 11.3 Control Activities for Credit Sales 11-14
Desired Level of Assurance 10-11 Example Transaction Flows—Credit Sales 11-15
Expected Misstatement in the Population 10-11 Evaluate What Can Go Wrong (WCGW) and Identify
Stratification of the Population 10-12 Key Controls—Credit Sales and Accounts
10.5 A Basic Framework for Audit Sampling 10-12 Receivable 11-17
Step 1: Determine the Objectives of the Substantive 11.4 Control Activities for Cash Receipts 11-20
Procedure 10-14 Example Transaction Flows—Cash Receipts 11-20
Step 2: Determine the Substantive Procedures to Evaluate WCGW and Identify Key Controls—Cash
Perform 10-14 Receipts 11-22
Step 3: Determine Whether to Audit a Sample 11.5 Control Activities in a “Paperless” Revenue
or the Entire Population 10-14 System 11-24
Step 4: Define the Population and Sampling Unit 10-15 Initiating an ERS Transaction 11-25
10.6 Applying Probability-Proportionate-to-Size Shipping Goods 11-25
Sampling for Substantive Procedures 10-15 Recording Sales and Receivables 11-25
Step 5: Choose the Audit Sampling Technique 10-15 Electronic Cash Receipt 11-25
Step 6: Determine Sample Size 10-16 Internal Controls in an ERS System 11-26
Step 7: Randomly Select Representative Sample 10-18 11.6 Control Activities for Sales Adjustments
Step 8: Apply Audit Procedures 10-20 and Revenue Process Disclosures 11-27
Step 9: Evaluate Results Statistically and Granting Sales Returns and Allowances 11-27
Judgmentally 10-20 Determining Uncollectible Accounts 11-28
Step 10: Document Conclusions 10-25 Other Controls in the Revenue Process 11-28
Summary of PPS Sampling 10-26 Preliminary Audit Strategy 11-29
11.7 Tests of Controls in the Revenue Process and 12.8 Substantive Procedures for the Purchasing
Audit Strategy 11-30 Process 12-29
Tests of Controls in the Revenue Process 11-30 Initial Procedures 12-30
Fraud Risk Assessment 11-31 Substantive Analytical Procedures 12-31
Audit Data Analytics as a Risk Assessment Procedure 11-32 Audit Data Analytics as a Substantive Procedure 12-31
The Risk of Material Misstatement and Audit Strategy 11-32 Tests of Details of Transactions 12-31
11.8 Substantive Procedures for the Revenue Tests of Details of Balances 12-33
Process 11-33 Tests of Details of Presentation 12-33
Initial Procedures 11-36 Draw a Final Conclusion 12-34
Substantive Analytical Procedures 11-36 Appendix 12A: Auditing Payroll 12-35
Audit Data Analytics as a Substantive Procedure 11-36 12.9 Explain the Nature of Payroll Transactions and
Tests of Details of Transactions 11-37 Balances 12-36
Tests of Details of Balances 11-38 Understand the Nature of the Payroll Process 12-36
Tests of Details of Presentation 11-43 Payroll Transactions 12-36
Draw a Final Conclusion 11-44 12.10 How Audit Planning Decisions Affect
Audit Decision-Making Example 11-46 the Assessment of Inherent Risk 12-37
Understanding the Entity and Its Environment 12-37
12 Auditing the Purchasing and Determining Inherent Risk in the Payroll Process 12-39
12.11 Control Activities for Payroll 12-40
Payroll Processes 12-1 Example Transactions Flows—Payroll Transactions 12-40
Evaluate What Can Go Wrong (WCGW) and Identify Key
12.1 Auditing Purchase Transactions and Balances 12-2 Controls—Payroll 12-42
Overview of Auditing Purchases 12-2 Preliminary Audit Strategy 12-44
Understand the Nature of the Purchasing Process 12-3 12.12 Tests of Controls in the Payroll Process and Audit
Purchase Transactions 12-4 Strategy 12-45
12.2 How Audit Planning Decisions Affect the Tests of Controls for Payroll 12-45
Assessment of Inherent Risk 12-5 Fraud Risk Assessment 12-46
Understanding the Entity and Its Environment 12-5 Audit Data Analytics Used in Fraud Risk Assessment 12-46
Determining Inherent Risks in the Purchasing Process 12-9 The Risk of Material Misstatement and Audit Strategy 12-46
12.3 Control Activities for Purchases 12-12 12.13 Substantive Procedures for the Payroll
Example Transaction Flows—Credit Purchases 12-12 Process 12-47
Evaluate What Can Go Wrong (WCGW) and Identify Key Initial Procedures 12-48
Controls—Purchases and Accounts Payable 12-15 Substantive Analytical Procedures 12-49
12.4 Control Activities for Cash Disbursements 12-18 Audit Data Analytics as a Substantive Procedure 12-49
Example Transaction Flows—Cash Disbursements 12-18 Tests of Details of Transactions 12-49
Evaluate What Can Go Wrong (WCGW) and Tests of Details of Balances 12-50
Identify Key Controls—Cash Disbursements 12-20 Tests of Details of Presentation 12-50
12.5 Evaluated Receipt Settlement (ERS) 12-21 Draw a Final Conclusion 12-51
Initiating an ERS Transaction 12-22 Audit Decision-Making Example 12-53
Receiving Goods 12-22
Recording Payables 12-22
Electronic Payment 12-22
13 Auditing Cash, Inventory, and
Internal Controls in an ERS System 12-23 Related Income Statement
12.6 Control Activities for Purchase Adjustments and Accounts 13-1
Purchasing Process Disclosures 12-24
Purchase Returns and Allowances 12-24 13.1 Auditing Cash and Cash Equivalents 13-3
Other Controls in the Purchasing Process 12-25 How Audit Planning Decisions Affect the Assessment of
Preliminary Audit Strategy 12-25 Inherent Risk 13-3
12.7 Tests of Controls in the Purchasing Process and Understanding Internal Controls and Developing a
Audit Strategy 12-26 Preliminary Audit Strategy 13-4
Tests of Controls in the Purchasing Process 12-26 Assessing Control Risk, Fraud Risk, and RMM and
Fraud Risk Assessment 12-27 Determining a Final Audit Strategy 13-5
Audit Data Analytics as a Risk Assessment Procedure 12-28 Substantive Procedures for Cash and Cash
The Risk of Material Misstatement and Audit Equivalents 13-6
Strategy 12-28 Draw a Final Conclusion 13-13
15.1 Audit Procedures for Loss Contingencies 15-3 Cloud 9 Inc. Audit A-1
APPENDIX A
Accounting for Loss Contingencies 15-3 Cloud 9 Inc. Company Background A-1
Auditing Loss Contingencies 15-4 Personnel A-2
Legal Letter 15-4 Financial Information A-2
15.2 Subsequent Events 15-7 Transcript of Meeting with David Collier A-4
Accounting for Subsequent Events 15-8
AUDITING AND ASSURANCE STANDARDS AS-1
Auditing Subsequent Events 15-9
15.3 Engagement Wrap-Up 15-11 GLOSSARY G-1
Final Analytical Procedures 15-11 INDEX I-1
Final Evaluation of Audit Findings 15-12
Completion of Working Paper Review 15-17
Engagement Quality Review 15-18
Completion of Documentation 15-19
15.4 Going Concern 15-20
Management Responsibility 15-20
Auditor Responsibility 15-21
Audit Procedures to Evaluate Going Concern 15-21
CHAPTER 1
Introduction and Overview of
Audit and Assurance
The Audit Process
Gaining an Understanding
Making Preliminary
of the System of Internal Control
Risk Assessments
(Chapter 6)
(Chapter 8)
Performing Tests of Controls Performing Substantive Procedures
(Chapter 7) (Chapter 9)
Auditing the Auditing the Purchasing Auditing Cash and Auditing Investing and
Revenue Process and Payroll Processes Inventory Financing Activities
(Chapter 11) (Chapter 12) (Chapter 13) (Chapter 14)
1-1
Learning Objectives
LO 1 Differentiate among assurance, attestation, and LO 6 Explain the concepts of reasonable assurance and
audit services. materiality, and the nature of an unqualified/
unmodified report on the audit of financial statements.
LO 2 Describe the different types of assurance
services. LO 7 Explain the concept of reasonable assurance and
the nature of an unqualified report on internal controls
LO 3 Explain the demand for audit and assurance
over financial reporting.
services.
LO 8 Discuss the audit expectation gap.
LO 4 Discuss the different roles of the financial
statement preparer and the auditor.
LO 5 Identify the roles of different regulators and
organizations that affect the audit profession.
This text is designed to provide you with the opportunity to learn about auditing by using a practical, problem-based approach.
Each chapter begins with some information about an example audit client—Cloud 9 Inc. (Cloud 9). The chapter then provides the
underlying concepts and background information needed to deal with this client’s situation and the problems facing its auditor. As
you work through the chapters, you will gradually build your knowledge of auditing by studying how the contents of each chapter are
applied to Cloud 9. The end-of-chapter exercises and problems also provide you with the opportunity to study other aspects of Cloud
9’s audit, in addition to applying the knowledge gained in the chapter to other practical examples.
Ron asks for some time. He tells Chip that he first needs to talk has never bothered with sophisticated financial arrangements. He
to his family and will then get back to him. When Ron puts the phone is still running his business as a sole proprietor (not a corporation),
down, he immediately calls his friend Ernie Black, who is a CPA. For and his wife does all the tax returns. Ron is in a panic—he wants to
years, Ernie has been suggesting to Ron that his business affairs need sell Stotez Shoes, but what is he going to do about Chip’s request for
attention. Ron is good at making deals and working hard, but he audited financial statements?
The terms assurance, attestation, and auditing are sometimes used interchangeably, but they
actually represent different types of services. The services have the following characteristics
in common.
• A
n independent accounting firm is taking information prepared by someone else and
then comparing it to an established set of criteria.
• T
he independent accounting firm provides a written report about the results of the ser-
vice performed.
• T
he services add credibility, or integrity, to the information, which makes it more useful
for decision making.
An everyday example of this process would be needing a physical exam from a medical doctor
before joining a sports team. The doctor would be the independent professional. The doctor
would conduct the physical exam and compare your results to standards considered accept-
able for someone of your age and height. At the completion of the physical exam, the doctor
would provide you with written documentation stating that you were in good physical condi-
tion to play on the sports team. The service provided by the doctor improves the “integrity” of
your claim that you are in good condition to participate on the team.
The relationship of assurance, attestation, and auditing services is shown in Illustra-
tion 1.1 and resembles overlapping umbrellas. We will refer to Illustration 1.1 as we discuss
the three services in more detail.
ILLUSTRATION 1.1
Relationship of assurance, Assurance Services
attestation, and auditing Website security
services
Attestation Services
Review of historical financial statements
System and Organization Controls (SOC) Report
Risk advisory Data
services Examination Audit Services integrity
Historical Internal
of financial Agreed-upon
financial controls
forecast procedures
statements
Attestation Services
Companies produce financial information that goes beyond historical financial statements.
Examples include financial forecasts and detailed schedules for specific accounts. When CPAs
are hired to report on the integrity of this type of financial information, it is called an attesta-
attestation services services tion service. Attestation services are performed when an independent practitioner, or CPA,
performed when an independent is engaged to issue a report on subject matter that is the responsibility of another party.
practitioner, or CPA, is engaged As depicted in Illustration 1.1, audit services fall under the umbrella of attestation ser-
to issue a report on subject matter vices, but so do other services that involve a CPA reporting on other financial information.
that is the responsibility of an- Note the use of the term practitioner in the definition of attestation services. The term practitioner
other party
is used rather than auditor because attestation services encompass more than just the audit of
historical financial statements and internal controls.
Assurance Services
The largest umbrella in Illustration 1.1 represents assurance services. Assurance services are assurance services indepen-
independent professional services that improve the quality of information, or its context, for dent professional services that
decision makers. Let’s discuss some key concepts in this definition: improve the quality of informa-
tion, or its context, for decision
• Independent. This term is common to audit, attestation, and assurance services. It im- makers
plies that the service is performed by someone who was not involved with the creation
of the information and who is objective in the evaluation of the information. (Chapter 2
covers independence in more depth.)
• Quality. This refers to the relevance and reliability of the information.
• Information. This refers to subject matter that can be financial or nonfinancial, histori-
cal or prospective, standalone or entire systems of data, internal or external to a company.
Essentially, the concept of assurance services encompasses any service that a professional pro-
vides that involves improving the quality of information that was prepared by someone else.
Both attestation and audit services fall under the broad term of assurance services, and there-
fore are depicted under the assurance umbrella in Illustration 1.1.
While the audit of a company’s historical financial statements and internal controls is
the focus of this text, there are other types of audit and assurance services that warrant some
discussion. The next section provides a description of these different types of services.
1
American Institute of Certified Public Accountants, The Uniform CPA Examination: Purpose and Structure (2018).
Before You Go On
1.1 Who are intended users of assurance services?
1.2 What does “independent” mean in the context of assurance services?
1.3 What is an example of an “applicable financial reporting framework”?
In this section, we provide an overview of the most common types of assurance services that
a practitioner can provide. We will discuss financial statement audits, compliance audits, op-
erational (performance) audits, and internal audits.
https://browsegrades.net/documents/2
86751/ebook-payment-link-for-instant-
download-after-payment
Integrated Audit
Certain public companies in the United States are also required to have an audit of internal AS 2201 An Audit of Internal
control over financial reporting (ICFR). The objective in an audit of ICFR is to express an opin- Control Over Financial Reporting
ion on the effectiveness of the company’s system of internal controls over financial reporting That Is Integrated with An Audit
(AS 2201.03). The reason for requiring an audit of ICFR is because effective internal control of Financial Statements
provides reasonable assurance regarding the reliability of financial reporting and the prepara-
tion of financial statements for external purposes (AS 2201.02). Therefore, public companies
are required to have two audits every year, one on the financial statements and one on the
effectiveness of the company’s internal controls.
For efficiency purposes, these two audits are performed at the same time. This is called
an integrated audit. The objectives of the audits are not identical, however, and the auditor integrated audit an audit that
must plan and perform the work to achieve the objectives of each audit (AS 2201.06). Private combines the financial statement
companies are not required by the government to have an audit of ICFR. As mentioned above, audit with an audit of the effec-
other interested users, such as a lender, may require a private company to have an audit of ICFR tiveness of ICFR
along with an audit of the financial statements as a condition for being approved for a loan.
Limitations of an Audit
A financial statement audit is conducted to enhance the reliability and credibility of the
information included in the financial statements. It is not a guarantee that the financial
statements are free from error or fraud. The limitations of an audit are caused by (1) the nature
of financial reporting, (2) the nature of audit procedures, and (3) the need for the audit to be
conducted within a reasonable period of time at a reasonable cost (AU-C 200.A49).
Nature of Financial Reporting The nature of financial reporting refers to the use of
j udgment when preparing financial statements. Since you have taken financial accounting cours-
es, think about the estimates that are included in preparing a set of financial statements. Can
you list a few? And think about the judgment required when selecting and applying accounting
methods. For example, depreciating a piece of equipment is an estimate that requires judgment
in selecting a depreciation method and determining a useful life and salvage value. While an
estimate may not be precise, the auditor must evaluate whether the estimate is fairly presented.
Nature of Audit Procedures The nature of audit procedures refers to the reliance on
evidence provided by the client and its management. For example, what if client management
withholds or hides important documents from the auditors? If auditors are unaware of this
situation, they may arrive at an inappropriate conclusion based on incomplete facts. Evidence
may be withheld or modified by perpetrators of fraud. It can be difficult for an auditor to
determine whether a fraud has occurred because documents altered by those committing the
fraud generally hide evidence. Also, auditors often use sampling techniques when gathering
audit evidence. If a sample is not representative of all items available for testing, an auditor
may arrive at an incorrect conclusion.
The nature of audit procedures also refers to the concept of materiality. The Financial materiality the ability of in-
Accounting Standards Board (FASB) defines materiality as follows. formation to influence decisions
that reasonable users make on the
Materiality is entity specific. The omission or misstatement of an item in a financial basis of the financial information
report is material if, in light of surrounding circumstances, the magnitude of the item of a specific reporting entity
is such that it is probable that the judgment of a reasonable person relying upon the
report would have been changed or influenced by the inclusion or correction of the item.
(SFAC No. 8, para QC11)
Need for a Timely Audit The timeliness and cost of an audit refer to the pressures au-
ditors face to complete their audit within a certain time frame at a reasonable cost. While it is
important that auditors do not omit procedures in an effort to meet time and cost constraints,
they may be under some pressure to do so. This pressure will come from clients wanting to is-
sue their financial statements by a certain date, from clients refusing to pay additional fees for
additional audit effort, and from within the accounting firm because of pressures to complete
all audits on a timely basis to avoid incurring costs that may not be recovered. By taking the
time to plan the audit properly, auditors can ensure that adequate time is spent where the risks
of a material error or fraud are greatest.
Compliance Audits
compliance audit an audit A compliance audit involves gathering evidence to determine whether the person or entity
to determine whether the entity under review has followed the rules, policies, procedures, laws, and regulations with which
has conformed with regulations, they must conform. One of the best examples of a compliance audit is an income tax audit.
rules, or processes The Internal Revenue Service (IRS) may conduct an audit of an individual or a company to
determine if tax laws have been followed and the correct amount of tax paid.
Internal Audits
internal audit a unit within an Internal audits are conducted to provide assurance about various aspects of an organi-
entity which generally evaluates zation’s activities. The internal audit function is typically conducted by employees of the
and improves risk management, organization being audited but can be outsourced to an accounting firm. The purpose of an
internal control procedures, internal audit is determined by those charged with governance and management within
and elements of the governance the organization. While the purposes of internal audits vary widely from one organization to
process
another, they are often concerned with evaluating and improving risk management, internal
those charged with control procedures, and elements of the governance process.
governance persons with The internal a uditors often conduct operational audits, compliance audits, internal con-
responsibility for overseeing the
trol assessments, and r eviews. Many internal auditors are members of the Institute of Internal
strategic direction of the entity
Auditors (IIA). The IIA is an international organization with more than 120,000 members that
and the obligations related to the
accountability of the entity provides guidance and standards to aid internal auditors in their work. When conducting the
financial statement audit, the external auditor may rely on the work done by internal auditors
when evaluating the evidence needed to form an opinion on the financial statements or on
ICFR. A more detailed discussion of how internal auditors may assist with the external audit
is provided in Chapter 5.
Before You Go On
2.1 What is the objective of a financial statement audit?
2.2 Explain the inherent limitations of a financial statement audit.
2.3 What are the three elements of an operational audit?
2.4 What are the most common functions of the internal auditors?
In this section, we provide an overview of the primary financial statement users followed by a
description of why these users may demand an audit of the financial statements.
Investors
Investors generally read financial statements to determine whether they should invest in
the company. They are interested in the return on their investment and are concerned that
the entity will remain a going concern (continue operating) into the foreseeable future.
Investors may also be interested in the capacity of the company to pay a dividend. Pro-
spective investors read financial statements to determine whether they should buy shares
in the entity.
Suppliers
Suppliers may read financial statements to determine whether the company can pay for goods
or services supplied. They are also interested in whether the company is likely to remain a
going concern (is likely to continue to be a customer of the supplier) and continue to pay its
debts when they come due.
Customers
In many business-to-business transactions, customers may read financial statements to d
etermine
whether a company they rely on is likely to remain a going concern and meet their needs.
Lenders
Lenders may read financial statements to determine whether an entity is sufficiently credit-
worthy to qualify for a loan and whether it can pay the interest and principal as they come due.
Employees
Employees may read financial statements to determine whether the entity can pay their wages
or salaries and other benefits (for example, pensions). They may also be interested in assessing
the future stability and profitability of the entity, as these affect job security.
Governments
Governments may read financial statements to determine whether the company is comply-
ing with regulations, to evaluate if the company is paying a fair amount of taxes given its
reported earnings, and to gain a better understanding of the company’s activities. A company
in receipt of government grants often must provide a copy of its audited financial statements
when applying for a grant and when reporting on how grant funds have been spent.
• R emoteness. Most financial statement users do not have access to the company under
review. This makes it difficult to determine whether the information contained in the
financial statements is a fair presentation of the entity and its activities for the relevant
period.
• Complexity. Financial statements are complex, the amounts are often affected by signifi-
cant estimates, and the disclosures often require significant knowledge and experience to
evaluate. Most financial statement users do not have the accounting and legal knowledge
to assess the reasonableness of complex accounting and disclosure choices being made
by the company.
• Competing incentives. Company managers have an incentive to disclose the informa-
tion contained in the financial statements in a way that presents their performance in the
best possible light. Users may find it difficult or impossible to identify when management
is presenting biased information.
• Reliability. Financial statement users are concerned with the reliability of the infor-
mation contained in the financial statements. Since they use that information to make
decisions that have real consequences, it is very important that users can rely on the
information contained in the financial statements.
Before You Go On
3.1 Who are the main users of company financial statements?
3.2 Why might financial statement users demand an audit?
3.3 Explain why auditors, or CPAs, are the appropriate professionals to conduct an audit.
In this section, we explain and contrast the different responsibilities of financial statement
preparers and auditors. We provide details of the role that each group plays in ensuring the
financial statements are an accurate representation of the company. Following this discussion
is an overview of the different firms that provide assurance services.
Preparer Responsibility
As you know from your financial accounting courses, the financial statements include the
balance sheet (statement of financial position), income statement (statement of earnings),
statement of cash flows, statement of changes in equity, and accompanying notes. It is the
responsibility of management, with oversight from those charged with governance, to prepare
the financial statements. Specifically, management is responsible for the following.
1. Ensuring the information included in the financial statements is presented fairly and
complies with the applicable financial reporting framework, which in the United States
is most often GAAP.
Auditor Responsibility
The auditor’s responsibility is to provide an opinion on whether the financial statements
are presented fairly in accordance with the applicable financial reporting framework. It is
important to emphasize the auditor is not responsible for preparing the financial statements.
Preparation of financial statements is management’s responsibility. Auditors are responsible
for the following.
1. Conducting the audit in accordance with the appropriate auditing standards.
Auditing standards provide minimum requirements and guidance for the performance of
an audit. Later in this chapter, we discuss the auditing standards that apply to financial
statement audits.
professional skepticism an 2. P
lanning and performing the audit with professional skepticism. Professional
attitude that includes a question- skepticism is an attitude adopted by auditors when conducting an audit. It means
ing mind, being alert to condi- auditors remain independent of the entity, its management, and its staff when com-
tions that may indicate possible pleting the audit work. In a practical sense, it means auditors maintain a question-
misstatement due to fraud or ing mind and thoroughly investigate all evidence presented by their client. Auditors
error, and a critical assessment of
must seek independent evidence to corroborate, or confirm, information provided by
audit evidence
their client. Auditors must be suspicious when evidence contradicts documents held
by their client or inquiries made of client personnel, including management and those
charged with governance.
professional judgment the 3. P
lanning and performing the audit with professional judgment. Professional
application of relevant training, judgment relates to the application of relevant training, knowledge, and experience that
knowledge, and experience in auditors use while making informed audit decisions in conducting an audit. Auditors must
making informed decisions about use their judgment throughout the entire audit. For example, auditors must use judgment
the courses of action that are when determining if an information source is reliable. They must also use judgment when
appropriate in the circumstances
deciding if enough audit evidence has been gathered to support the audit opinion.
of the audit engagement
The concepts of professional skepticism and professional judgment will be addressed through-
out this text as we learn about the process used by auditors to arrive at their opinion.
It is important to note that the auditor’s opinion on the financial statements is not meant
to be a predictor of the future success of the company. Also, the opinion is not a reflection of
how effectively management is performing its role of running the company. The auditor’s
opinion is simply a report on whether the financial statements are fairly presented in accor-
dance with the applicable financial reporting framework (AU-C 200.A1).
Auditor Skills
Being an auditor requires a broad skill set. Most importantly, an auditor must have exten-
sive knowledge of accounting and auditing standards. When you finish college, you will have
a good foundation of accounting and auditing standards, but your knowledge will become
deeper and more extensive with work experience.
As an auditor, most of your time is spent analyzing client data and making decisions based
on that data. Because accounting firms want to hire individuals who have good analytical
and critical-thinking skills, one of our goals in this text is to assist in developing these skills.
Illustration 1.2 outlines a framework for audit decision making.
Throughout the text, we will use this framework to critically analyze audit problems. At the end of
every chapter, you will find an Audit Decision-Making Example that uses the framework to walk you
through an audit issue.
? !
Step 1: Step 2: Step 3: Step 4: Step 5:
Obtain company What is the audit Gather Perform the analysis Draw an audit
background information problem you are information and and evaluate the conclusion.
and data. trying to solve? evidence. results.
Employers also want new hires to possess technology skills, especially in the area of data
analytics. You may be familiar with software like Excel, Tableau, or Power BI that is used to
manipulate data and create visualizations. These types of technologies are being used more
frequently in auditing, along with audit software such as Idea and ACL.
It is important to understand that data analytics skills are a subset of critical-thinking skills.
For example, referring to the framework in Illustration 1.2, auditors must first understand what
data are available to assist in solving an audit problem and then determine the best way to an-
alyze and evaluate the data. In some situations, auditors may analyze data without the use of
specialized software. In other instances, it may be best to use data analytics or audit software.
Throughout the text, we discuss situations when auditors may use data analytics or audit
software as a tool to help solve an audit problem. Chapter 8 will dive more deeply into the
concept of audit data analytics after you understand the key audit topics of audit risk, audit
evidence, and the reliability of data.
Assurance Providers
Assurance services are provided by accounting and other consulting firms. The largest
accounting firms in the United States are known collectively as the “Big 4” firms: Deloitte,
Ernst & Young (EY), KPMG, and PricewaterhouseCoopers (PwC). These four firms
operate internationally through a network of affiliate companies, and dominate the assurance
market throughout the world.
The next tier of accounting firms is known as the mid-tier. The firms that comprise the
mid-tier have a significant presence nationally, and most have international affiliations. The
mid-tier firms in the United States include, among others, Grant Thornton, BDO USA,
RSM, CBIZ/MHM, and Crowe. These firms service medium-sized and smaller clients.
The next tier of accounting firms are regional and local accounting firms. Regional
firms have a significant presence across multiple states in a geographical region. For exam-
ple, a regional firm might have offices located in the southeastern states of Georgia, Flor-
ida, Alabama, and Mississippi. The regional offices could be as large as some of the national
firms, with just as many partners and professional staff. Like the national firms, the regional
firms service m edium-sized and smaller clients. Local accounting firms service clients in their
local areas and range in size from a single-partner firm to several-partner firms. Local firms
primarily service small-company clients and individuals.
Many of these accounting firms provide non-assurance (or non-audit) services as well as
assurance services. Independence is not required to provide non-assurance services. These
non-assurance services include management consulting, business valuation, mergers and
acquisitions, tax, and accounting. In Chapter 2, we will discuss rules regarding what types of
non-assurance services, if any, can be provided to audit clients.
Finally, note that accounting firms are not the only providers of assurance services. A num-
ber of consulting firms provide assurance services in areas such as website security and envi-
ronmental sustainability reporting. Consulting firms employ staff with a variety of expertise
including, for example, engineers, accountants, IT professionals, scientists, and economists.
Before You Go On
4.1 Describe management’s responsibilities in terms of the financial statement audit.
4.2 What is professional skepticism?
4.3 What are non-audit services? Provide several examples of non-audit services provided by
accounting firms.
In this section, we discuss the regulators and other organizations that impact the audit process
and the profession.
• T
he Securities Act of 1933 regulates the disclosure of financial information in a compa-
ny’s initial public offering of stock and requires that the financial information be audited.
• T
he Securities Exchange Act of 1934 regulates the ongoing trading of securities after the
initial public offering and requires the annual audit of a public company’s financial state-
ments and the quarterly review of interim financial information.
• T
he Sarbanes-Oxley Act of 2002 (SOX) was passed to help restore investor confidence after
a series of corporate accounting scandals were revealed in the late 1990s and early 2000s.
The SOX Act enhanced financial disclosures for public companies and placed more empha-
sis on corporate responsibility. It also created the Public Company Accounting Oversight
Board, or PCAOB, which oversees the audits of public companies.
Source: www.pcaobus.org/standards/auditing.
in that particular chapter. You will also see references to the PCAOB standards within each
chapter. The reference will begin with “AS” followed by the standard number, a decimal, and
then a paragraph number, such as “AS 2201.06.”
Accounting firms that want to audit public companies must register with the PCAOB.
Registration involves paying fees to the board, complying with the Auditing Standards, and
having their audit work inspected by the board. The PCAOB has disciplinary authority over
registered firms and can impose punishment on accounting firms that do not adhere to stan-
dards. Punishments can include revoking a firm’s registration, imposing monetary fines, and
banning an individual within a firm from auditing public companies.
ILLUSTRATION 1.4
Principles underlying an audit Purpose of an Audit
conducted in accordance with The purpose of an audit is to provide financial statement users with an opinion by the auditor on
generally accepted auditing whether the financial statements are presented fairly, in all material respects, in accordance with
standards (GAAS) the applicable financial reporting framework. An auditor’s opinion enhances the degree of confi-
dence that intended users can place in the financial statements.
a. for the preparation and fair presentation of the financial statements in accordance with the
applicable financial reporting framework; this includes the design, implementation, and
maintenance of internal control relevant to the preparation and fair presentation of financial
statements that are free from material misstatements, whether due to fraud or error.
b. to provide the auditor with:
i. all information, such as records, documentation, and other matters that are relevant to
the preparation and fair presentation of the financial statements;
ii. any additional information that the auditor may request from management, and where
appropriate, those charged with governance; and
iii. unrestricted access to those within the entity from whom the auditor determines it
necessary to obtain audit evidence.
To obtain reasonable assurance, which is a high, but not absolute, level of assurance, the auditor:
The auditor is unable to obtain absolute assurance that the financial statements are free of
material misstatement because of inherent limitations, which arise from:
and professional skepticism. The principles describe the responsibilities of management, and
those charged with governance of an entity, for the financial statements. The auditor responsi-
bilities also address the important concepts of compliance with ethical requirements (includ-
ing independence requirements) and the use of professional judgment. Take a few minutes to
read the principles in Illustration 1.4.
The SASs are interpretations of the principles underlying an audit conducted in accor-
dance with GAAS. The SASs explain the nature and extent of an auditor’s responsibility and
offer guidance to an auditor in performing the audit of a private company. Compliance with
the SASs is mandatory for AICPA members, who must justify any departures from the stan-
dards. The SASs are numbered in the order in which they are issued by the ASB. Then the
standards are organized by topical content using the AU numbering system. (Note that the
“AU” stands for auditing standards, but these are not to be confused with the Auditing Stan-
dards (AS) from the PCAOB.) The AU-C topical order (the “C” denotes the clarified standards)
is listed in Illustration 1.5.
ILLUSTRATION 1.5
AU-C Section General Topic Auditing Standards Board
AU-C 200–299 General Principles and Responsibilities AU-C topical content
Source: AICPA.
Throughout the text, we will be learning some of the specific ASB auditing standards in
the different topical categories. The beginning of each chapter will list which ASB standards
will be discussed in that chapter. You will also see references to the ASB standards within the
text. The reference will begin with “AU-C” followed by the standard number, a decimal, and
then a paragraph number, such as “AU-C 200.05.”
The ASB also issues Statements on Standards for Attestation Engagements (SSAE) and State-
ments on Quality Control Standards (SQCS) for AICPA member firms. Another standing commit-
tee of the AICPA is the Accounting and Review Services Committee. This committee is tasked with
issuing Statements on Standards for Accounting and Review Services (SSARS). The SSARS provide
guidance for services provided on historical financial statements that are less extensive than an
audit. An example that we discussed earlier is a review of historical financial statements. A more
detailed discussion of accounting and review services is provided in Chapter 16.
To help summarize the audit standard-setting environment in the United States, Illus-
tration 1.6 provides a diagram of the current audit standard setting-structure for the audits of
public and private companies.
Statements on
Statements on Statements on
Standards for Auditing Standards
Auditing Standards Quality Control
Attestation (AS)
(SAS) Standards (SQCS)
Engagements (SSAE)
2
International Federation of Accountants website (accessed June 5, 2020), www.ifac.org.
3
International Auditing and Assurance Standards Board website (accessed June 5, 2020), www.iaasb.org.
Before You Go On
5.1 What is the SEC and what is its role?
5.2 Which organization sets the standards for the audits of public companies? For the audits of
private companies?
5.3 What are the main functions of a state board of accountancy?
In this section, we introduce you to the independent auditor’s report, which is the “end product”
of the financial statement audit. The independent auditor’s report is used to communicate the
auditor’s opinion about a company’s financial statements to interested users. We will revisit the
independent auditor’s report in more depth in Chapter 16, but it is helpful to understand this
report from the perspective of a financial statement reader as you begin to learn the audit process.
• Reasonable assurance is a high, but not absolute, level of assurance (AU-C 200.06).
• I n other words, the a uditor does not “guarantee” or “certify” that the financial statements
are 100% accurate because that is considered absolute assurance, which is not possible
with content that is subjective.
In addition, an audit could not be completed in a reasonable amount of time if auditors had
to provide absolute assurance. For some accounts and transactions, auditors use sampling
techniques when gathering audit evidence and therefore do not examine 100% of a company’s
transactions for the period under audit. So, how do auditors know when they have gathered
enough evidence? Ultimately, that is a matter of professional judgment. Since judgment is
involved, there will always be a risk the auditors will give the wrong opinion. This is called audit risk the risk that an au-
audit risk. ditor expresses an inappropriate
Audit risk is affected by client characteristics as well as actions of the auditor. For exam- audit opinion when the finan-
ple, when a client implements a new accounting standard, audit risk increases because there cial statements are materially
misstated
is increased risk for error when implementing a new process. The internal control system of
the client also impacts audit risk. If the client has strong internal controls, it is more likely the
internal controls will prevent, or detect and correct, material misstatements, which decreases
audit risk. Auditors impact audit risk by the decisions made in how to conduct the audit. The
concept of audit risk is covered in depth in Chapter 3.
We will devote considerable attention throughout the text to the concept of audit risk and
determining how auditors make important professional judgments about collecting sufficient,
appropriate evidence to achieve reasonable assurance and support the auditor’s opinion.
https://browsegrades.net/documents/2
86751/ebook-payment-link-for-instant-
download-after-payment