F8 Audit and Assurance: Abdul Majid Khan
F8 Audit and Assurance: Abdul Majid Khan
F8 Audit and Assurance: Abdul Majid Khan
AUDIT PLANNING
All audits start by: Planning Understanding
After that the auditor can assess the risk of material misstatements and responded to that risk. We will see later how the risk of material misstatements can be broken down, but for example if you are dealing with a relatively new company with an experienced staff with high value, with portable inventory and many cash transactions. You will probably see that the risk of material misstatements is relatively high. If the auditors concluded that is the case then you have to arrange your audit to try and reduce the risk of material misstatements finding its way to the financial statements. The audit approach then divides: Left hand branch. Here, the auditor has reason to expect that there are effective internal controls operating. If there are effective internal controls then the auditor puts a lot of reliance on employees of the company checking on one another of reconciliations and comparisons being performed. So the chances of errors getting through into the financial statements are relatively remote. Therefore rather than test the high volume of transactions auditors tend to test the effectiveness of controls. Right hand branch. If the auditors do not expect there to be effective internal controls then the only way the auditors will be able to get assurance that the financial statements are free of material misstatement will be to carry out what are known as substantive tests which means very high volume testing.
Of course one can start off going down the left hand part of this diagram expecting there to be internal controls and then once the test being finding those internal controls are not operating satisfactory which case one will have to change ones approach and go down across the right hand part of the diagram and carry out full substantial tests almost certainly a report. Management will be written to with an outline of why the controls are ineffective or are operating unsatisfactorily. Hopefully managerial will take action so that in the following year the problems are less. After all the detailed testing either of the transactions themselves or of the controls there is an overall review of the financial statements as a whole, taken as a whole, do we think they show a true and fair view, and finally the auditors report can be issued.
These are the reasons why planning is important: If u doesnt plan it you wont carry out effectively. You would know something is obvious is when the year-end is, how many branches or factories a company has, how many staff members you may need to conduct the audit. You have to think both of a general strategy in a detailed approach. For Example, in some very large companies auditors do not visit all the branches every year. They may visit only a quarter of the branches one year, another quarter the next year and so on. They have to decide whether not to attend and inventory stock take. They may have to decide whether not opinions from other experts are required. For Example, on the adequacy of the companys pension scheme.
The planning objectives are: To give appropriate attention to important areas. Is there a high inventory? Is there a high volume of cash transactions? Are debtors particularly significant? To identify potential problems. For Example, if the company has recently changed its computerized accounting system there may well have been problems at the switch-over time and staff may indeed still be inexperienced. To carry out the work expeditiously that really means reasonably quickly and efficiently. To ensure that the right numbers of staff are present with the right skills. We have to timetable them in so that work for this client and other clients can be accommodated. To coordinate, if necessary, with other parties. For example, the internal audit department of the company. To facilities review. The work performed in an audit is subjected to many reviews. The audit staff member in-charge of the audit first of all reviews them. All of this has to be timetabled and time must also be left to clear the review points, for example, if additional work is required.
UNDERSTANDING THE ENTITY Pretty much inseparable from the planning process is the process of gaining an understanding of the entity. This includes:
WHY PLAN (ISA-300) Enables the audit to be carried out in an effective and timely manner. To reduce audit risk. To determine the audit approach. To decide how much audit work. To facilitate review.
Knowledge of the business. Understanding accounting and internal control systems. Risk and materiality. Nature, extent and timing of procedures. Coordination, direction, supervision and review. Other matters.
In the exam you might use the mnemonic MARE Materiality Accounting treatment problems more likely where there is Complexity Estimation Judgment Risk Evidence practical problems
INTERIM AND FINAL AUDIT INTERIM AUDIT MEANING It is voluntary. Conducted in between two final audits (during an accounting period) Errors and frauds are discovered at an early stage. Books and records of clients are always up to date. Reduces workload for final audit. Audited figures may be altered. Not relevant for small entities. High cost. FINAL AUDIT Done after the end of the accounting period
ADVANTAGES
Allocation of work to staff becomes easier. Costs are lower. No duplication of work
DISADVANTAGES
Delay in presentation of final accounts and completion of work May overlook some detailed aspects
Contents of the audit planning memorandum Risk assessment. Audit approach (see below). Sampling. Planned audit procedures. Key audit risks.
Credit card sales 1. Payments by credit cards are authorized online as the customers purchase their tickets. 2. Computers in each ticket office record the sales information which is transferred electronically to the accounts office. 3. Credit card sales are recorded for each credit card company in a receivables ledger. 4. When payment is received from the credit card companies, the accounts clerks agree the total sales values to the amounts received from the credit card companies, less the commission payable to those companies. The receivables ledger is updated with the payments received. You are now commencing the planning of the annual audit of B-Star. The date is 3 June 2009 and B-Stars year end is 30 June 2009.
SOLUTION SECTION OF DOCUMENT Characteristics of engagement PURPOSE This section of audit strategy identifies the key characteristics of the client which helps the auditor to develop basic knowledge about the client (number of locations, financial reporting framework, etc) This section of audit strategy identifies the types of communication the auditor needs to have with the client management, component auditor and team members This section of audit strategy identifies the significant areas of client which includes significant changes in business, high risky areas, quality of internal controls, etc. This section of audit strategy identifies the time and work allocation among team members normally in high risky areas. EXAMPLE FROM B-STAR Use of IT (ticket sales are recorded on computer)
Reporting objectives
N/A
Significant factors
Senior audit staff will be allocated to the audit of cash sale (risky areas identified above)
RISK
The sources of risk International standard on auditing 315, states that the auditor should: Obtain an understanding of the entity and its environment sufficient to identify and assess the risk of a material misstatement in the financial statements. The total risk of material misstatement can be split into two: Business risks. Audit risks.
Business risks result from significant conditions, events, circumstance, actions or inactions that could adversely affect the entities ability to achieve its objectives and execute its strategies. The business risks can itself be split into: Financial risk Operational risk, and Compliance risk.
Financial risks, for example, could arise because of high borrowings and a rise in interest rates. This will put to business under severe pressure and could increase the risk of material misstatement, perhaps with regards to going concern problems. Operational risks could arise from operational errors. The products are made incorrectly, that there might be warranty claims, that there is a loss of reputations or indeed the products simply become old-fashioned and an insufficient investing has been made historical in research and development to have new products coming online. Compliance risks arises from a failure to comply with regulations, this can mean that the business has got large penalties or fines to pay or it may result in the business been prevented from continuing to trade. The auditor does not have a responsibility to identify or assess all business risks, but an understanding of business risks increases a likelihood of identifying risks of material misstatement. Other than potential implications for going concern assumptions, business risk is not something to worry about at the F8 stage.
AUDIT RISK The second component of total risk is the audit risk, and that is a risk that the auditor gives an inappropriate opinion on the financial statements. For example, the audit report states the financial statement show a true and fair view when in fact they contain a material misstatement. Audit risk comprises two elements: The risk that the financial statements actually contained the material misstatement. The risk that the auditors have failed to detect it. This is detection risk.
In turn, we can ask why the financial statements might contain a material misstatement and that depends on two other risks: The risk that the error occurs in the first place, that is inherent risk The risk that the clients own procedures dont pick up and correct that error that is known as control risk.
The client's procedures and staff must not have picked that up and corrected it
The audit risk equation The risks found of an audit can be expressed as an equation. This equation is saying that the audit risk depends on inherent risks, the control risks, and the detections risk. AR = IR x CR x DR
Dont look upon it too mathematically. What it is saying is auditors will want the audit risk to be low: they dont want to make an error in their audit opinion. If you want the audit risk being low then the terms on the right hand side of the equation, or at least some of them, have to be low.
The detections risk itself depends on two components: Sampling risk Non-sampling risk.
Sampling risk arises because, in most audits, auditors only look at a very small proportional of transactions and documents. There is always a risk that they happen to look at all the documents and transactions which are correct and dont find any which are incorrect. That can just be bad luck in sampling and could lead the auditor to do too little work. Sampling risk can be reduced by examining larger samples. Non-sampling risk arises from reasons other than sampling. For example, if the staff and the audit were inappropriately qualified then there is a high risk because they wouldnt properly understand what was going on or detect the regularities in the financial statements. Nonsampling risk can be reduced by batter planning of the audit, and ensuring that audit staff are better trained, have appropriate skills and that their work is well-supervised and reviewed. Examples of three types of risk Lets look at the three types of risks in a little bit more detail.
Inherent risk is the risk that there is a misstatement that could be material, if there were no
related internal controls which could identify and trap that misstatement. Inherent risks can be increased by complex transactions which are difficult to understand, inexperience staff, a cashbased business (because cash is usually more difficult to record that bank transfers) a pressure to perform which may mean that some staff members who have optimistic view of sales and costs, and short reporting deadlines.
Control risk is the risk that material misstatement, having occurred, will not be prevented,
detected, or corrected by internal control system. The three elements which effects which affect control risk are the control environment (that is really the status that the internal control system has in the organization), the design of the internal control system itself, and finally how well and consistently the internal control system operates.
Detections risk is the failure of the auditor to detect the material misstatement in the
financial statements. This will be increased if the auditor was relatively inexperienced, if it was a new client, if there was a lot of time and fee pressure, if planning was poor so the entity was poorly understood, and if the auditor was straying into an industry where they had little previous experience or expertise.
WHERE THE AUDIT RISK CAN BE FOUND Audit risk has to be reduced to an acceptable amount of both the Financial statement level Assertion levels.
Dealing first with the assertion level, essentially any single figure which appears in the financial statements is making an assertion is saying something about its size, its accuracy, its valuation. There are some figures, for example, directors emoluments which in the overall scheme of thing may not be terribly material, but which by law are required to be disclosed accurately and relatively a material misstatement would mean that the accounts are not showing a true and fair view. Dealing with the financial statement level, all the figures appearing in the financial statements could be true, but overall the financial statements could still not how a true and fair view. For example, liquidity issues could be concealed or in some way the overall effect of the accounts is to be misleading. To get a higher assurance at the assertion levels audit procedures must be designed and performed in line with the assessed risks of material misstatement. For example, if you are worried about debtors valuations you have to do a lot more work verifying the debtors are recoverable. Perhaps you could try to wait for several months after year end to see which customers actually pay. At a financial statement level just to doing more work as such is probably insufficient. You need more experienced and batter staff. Misstatements at the financial statement level are potentially more subtle and require a higher level of skill to detect.
AUDIT RISK
AR = IR x CR x DR Definitions are in the open book glossary of terms. Audit risk Inherent risk Control risk Detection risk
Risk is determined at the planning stage as it affects the nature, extent and timing of work to be done.
Materiality ISA 320 Information is material if its misstatement or omission would influence the decision of users of the financial statements. This can result from size or nature.
Qualitative considerations Effect on use e.g. descriptions of accounting policies should not be misleading. Some items are capable of precise determination e.g. cash, share capital. Directors transactions must be accurate.
Quantitative considerations Auditor must use their judgment Some rules of thumb: - 1% revenue 1 2% gross assets 5 10% profit before tax
SOLUTION Materiality is defined as follows: Misstatements, including omissions, are considered to be material if they, individually or in the aggregate, could reasonably be expected to influence the economic decisions of users taken on the basis of the financial statements. In assessing the level of materiality there are a number of areas that should be considered. Firstly the auditor must consider both the amount (quantity) and the nature (quality) of any misstatements, or a combination of both. The quantity of the misstatement refers to the relative size of it and the quality refers to an amount that might be low in value but due to its prominence could influence the users decision, for example, directors transactions. In assessing materiality the auditor must consider that a number of errors each with a low value may when aggregated amount to a material misstatement. The assessment of what is material is ultimately a matter of the auditors professional judgment, and it is affected by the auditors perception of the financial information needs of users of the financial statements. In calculating materiality the auditor should also consider setting the performance materiality level. This is the amount set by the auditor, it is below materiality, and is used for particular transactions, account balances and disclosures. As per ISA 320 materiality is often calculated using benchmarks such as 5% of profit before tax or 1% of gross revenue. These values are useful as a starting point for assessing materiality.
DECEMBER 2009 QUESTION 1 (a) Explain the importance of audit planning and state TWO matters that would be included in an audit plan. (6 marks)
(5) Audit procedures required to be carried out for the engagement in order to comply with ISAs, for example, the use of external confirmations to obtain sufficient appropriate evidence at the assertion level.
IDENTIFICATION OF RISK Smoothbrush supplies 60% of its goods to Homewares at a significantly reduced selling price, hence inventory may be overvalued.
EXPLANATION OF RISK Per IAS 2 Inventories, inventory should be stated at the lower of cost and net realizable value (NRV). Therefore, as selling prices are much lower for goods sold to Homewares, there is a risk that the NRV of some inventory items may be lower than cost and hence that inventory could be overvalued. Smoothbrush has extended its credit terms to Homewares from one month to four months. Hence there is an increased risk as balances outstanding become older, that they may become irrecoverable. The production facility has a large amount of unused plant and equipment. As per IAS 16 Property, Plant and Equipment and IAS 36 Impairment of Assets, this plant and equipment should be stated at the lower of its carrying value and recoverable amount, which may be at scrap value depending on its age and condition. This situation might result in an inappropriate recognition of exchange gain/loss. Smoothbrush will need to identify appropriate amount of exchange gain/loss resulting from fluctuation in exchange rates. However, the management might be interested in showing a picture of exchange gains to support profitability of Smoothbrush. The situation might result in an inappropriate value at which the redundant plant needs to be recorded if the financial statements of Smoothbrush Co. Redundant plants need to be recorded at a lower of recoverable amount or value in use. There is a risk that management is not applying the policy accurately thus affecting the value of plant in financial statements The financial controller has been appointed as temporary FD and this lack of experience could result in an increased risk of errors arising in the financial statements. In addition the
JUNE 2008 QUESTION 3 Zak Co sells garden sheds and furniture from 15 retail outlets. Sales are made to individuals, with income being in the form of cash and debit cards. All items purchased are delivered to the customer using Zaks own delivery vans; most sheds are too big for individuals to transport in their own motor vehicles. The directors of Zak indicate that the company has had a difficult year, but are pleased to present some acceptable results to the members. The income statements for the last two financial years are shown below:
Income statement
31ST MARCH 2008 REVENUE 7482 31ST MARCH 2007 6364
COST OF SALES
(3520)
(4253)
GROSS PROFIT
3962
2111
OPERATING EXPENSES
(981)
(689)
(101)
(105)
145
1790
(3)
Required: (b) As part of your risk assessment procedures for Zak Co, identify and provide a possible explanation for unusual changes in the income statement. (9 marks) SOLUTION Net profit Overall, Zaks result has changed from a net loss to a net profit. Given that sales have only increased by 17% and those expenses, at least administration expenses, appear low, then there is the possibility that expenditure may be understated. Sales increase 17% According to the directors, Zak has had a difficult year. Reasons for the increase in sales income must be ascertained as the change does not conform to the directors comments. It is possible that the industry as a whole, has been growing allowing Zak to produce this good result. Cost of sales fall 17%
DECEMBER 2008 QUESTION 4 (a) Explain the term audit risk and the three elements of risk that contribute to total audit risk. (4 marks) The EuKaRe charity was established in 1960. The charitys aim is to provide support to children from disadvantaged backgrounds who wish to take part in sports such as tennis, badminton and football. EuKaRe has a detailed constitution which explains how the charitys income can be spent. The constitution also notes that administration expenditure cannot exceed 10% of income in any year. The charitys income is derived wholly from voluntary donations. Sources of donations include: (1) Cash collected by volunteers asking the public for donations in shopping areas,
SOLUTION
(a) Audit risk
Audit risk is the risk that an auditor gives an inappropriate opinion on the financial statements being audited. Inherent risk is the susceptibility of an assertion to a misstatement that could be material individually or when aggregated with misstatements, assuming that there are no related controls. The risk of such misstatement is greater for some assertions and related classes of transactions, account balances, and disclosures than for others. Control risk is the risk that a material error could occur in an assertion that could be material, individually or when aggregated with other misstatements, will not be prevented or detected on a timely basis by the companys internal control systems. Detection risk is the risk that the auditors procedures will not detect a misstatement that exists in an assertion that could be material, individually or when aggregated with other misstatements. (b) AREA OF INHERENT RISK Income is from voluntary donations only. There is a risk that donations will fall, especially where donors own income is limited by the credit crunch etc. EFFECT ON AUDIT APPROACH It is difficult to estimate that income in the future will be sufficient to meet the expenditure of the charity. Audit of the going concern concept (as in ensuring that the charity can still operate) will therefore be quite difficult Careful review of expenditure will be necessary to ensure that expenditure is not ultra vires the objectives of the charity. The auditor will need to review the constitution of the EuKaRe charity carefully in this respect. The auditor will need to ensure that staff,
Funds can only be spent in accordance with the aims of the charity. There is a risk that funds are spent outside the aims of the charity.
Financial statement extracts for year ended 30 September DRAFT 2010 23.0 (11) 12 (7.5) 4.5 2.1 4.5 ACTUAL 2009 18.0 (10) 8 (4.0) 4 1.6 3.0
Revenue Cost of sales Gross profit Operating expenses PBIT Inventory Receivables
SOLUTION (c) (1) Ratios to assist the audit supervisor in planning the audit: 2010 12/23 = 52.2% 4.5/23 = 19.6% 2.1/11*365 = 70 days 4.5/23*365 = 71 days 1.6/11*365 = 53 days 6.6/2.5 = 2.6 (6.6-2.1)/2.5 = 1.8 2009 8/18 = 44.4% 4/18 = 22.2% 1.6/10*365 = 58 days 3.0/18*365 = 61 days 1.2/10*365 = 44 days 6.9/1.2 = 5.8 (6.9-1.6)/ 1.2 = 4.4
Gross margin Operating margin Inventory days Receivable days Payable days Current ratio Quick ratio (c) (2)
Audit risk Management was disappointed with 2009 results and hence undertook strategies to improve the 2010 trading results. There is a risk that management might feel under pressure to manipulate the results through the judgments taken or through the use of provisions. A generous sales-related bonus scheme has been introduced in the year; this may lead to sales cut-off errors with employees aiming to maximize their current year bonus. Revenue has grown by 28% in the year however; cost of sales has only increased by 10%. This increase in sales may be due to the bonus scheme and the advertising however,
Response to risk Throughout the audit the team will need to be alert to this risk. They will need to carefully review judgmental decisions and compare treatment against prior years.
Increased sales cut-off testing will be performed along with a review of post year-end sales returns as they may indicate cut-off errors. During the audit a detailed breakdown of sales will be obtained, discussed with management and tested in order to understand the sales increase.
The classification of costs between cost of sales and operating expenses will be compared with the prior year to ensure consistency.
Receivable days have increased from 61 to 71 days and management have extended the credit period given to customers. This leads to an increased risk of recoverability of receivables. The current and quick ratios have decreased from 58 to 26 and 44 to 18 respectively. In addition the cash balances have decreased significantly over the year. Although all ratios are above the minimum levels, this is still a significant decrease and along with the increase of sales could be evidence of overtrading which could result in going concern difficulties
The change in the inventory policy will be discussed with management and a review of the additional overheads included performed to ensure that these are of a production nature. Detailed cost and net realizable value testing to be performed and the aged inventory report to be reviewed to assess whether inventory requires writing down. Extended post year-end cash receipts testing and a review of the aged receivables ledger to be performed to assess valuation Detailed going concern testing to be performed during the audit and discussed with management to ensure that the going concern basis is reasonable.
JUNE 2011 QUESTION 3 (b) Donald Co operates an airline business. The companys year-end is 31 July 2011. You are the audit senior and you have started planning the audit. Your manager has asked you to have a meeting with the client and to identify any relevant audit risks so that the audit plan can be completed. From your meeting you ascertain the following: In order to expand their flight network, Donald Co will need to acquire more airplanes; they have placed orders for another six planes at an estimated total cost of $20m and the company is not sure whether these planes will be received by the year end. In addition the company has spent an estimated $15m on refurbishing their existing planes. In order to fund the expansion Donald Co