After obtaining an understanding of an entitiy's internal control, an auditor may assess control risk at the maximum level for some assertions because he A. performs tests of controls to restrict detection risk to an acceptable level. B. identifies internal control policies and procedures that are likely to prevent material misstatements. C. believes the internal control policies and procedures are unlikely to be effective.

After obtaining an understanding of an entitiy's internal control, an auditor may assess control risk at the maximum level for some assertions because he A. performs tests of controls to restrict detection risk to an acceptable level. B. identifies internal control policies and procedures that are likely to prevent material misstatements. C. believes the internal control policies and procedures are unlikely to be effective.

FINANCIAL ACCOUNTING

10th Edition

ISBN:9781259964947

Author:Libby

Publisher:Libby

Chapter1: Financial Statements And Business Decisions

Section: Chapter Questions

Problem 1Q

See similar textbooks

Similar questions

When a substantive audit strategy is adopted, an auditor will O determine internal controls are effective in mitigating risks. O increase the amount of their substantive testing. O test controls extensively. O not need to document the internal control system.
The audit risk model includes the four risks listed below. Match the type of risk with the related definition.A. Detection riskB. Control riskC. Inherent riskD. Audit risk___ 1. The probability that an auditor will give an inappropriate opinion on financial statements.___ 2. The probability that audit procedures will fail to produce evidence of material misstatements.___ 3. The probability that the client's internal control policies and procedures will fail to detect material misstatements if they have entered the accounting system.___ 4. The probability that material misstatements have occurred in transactions entering the accounting system.
Study and Evaluation of Management Control. The study and evaluation of management risk mitigation control is not easy. First, auditors must determine the risks and the controls subject to audit. Then they must find a standard by which performance of the control can be evaluated. Next they must specify procedures to obtain the evidence on which an evaluationcan be based. Insofar as possible, the standards and related evidence must be quantified. The following description gives certain information (in italics) that internal auditors would know about or be able to determine on their own. Fulfilling the requirement thus amounts to taking some information from the scenario and figuring out other things by using accountants’ and auditors’ common sense.The ScenarioAce Corporation ships building materials to more than a thousand wholesale and retail customers in a five-state region. The company’s normal credit terms are net/30 days, and no cash discounts are offered. Fred Clark is the chief…
When completing the audit of internal controls for an issuer, the severity of an internal control deficiency depends ona. Whether there is a reasonable possibility that the company’s controls will fail to prevent or detect a misstatement of an account balance or disclosure.b. Whether a misstatement has actually occurred as a result of the deficiency.c. The magnitude of the potential misstatement resulting from the deficiency or the deficiencies.d. Both a and c are correct.e. All of the above are correct.
The tolerable rate of deviation set by the auditor for tests of controls depends primarily on which of the following? a. The planned risk of assessing control risk too low. b. The dollar amount of substantive misstatements. c. The anticipated cause of the errors. d. The tolerable rate used in audits of other clients in the same industry.
The requirement for an attitude of scepticism means that the auditor should A) perform additional tests of controls to increase the probability of discovering fraud or errors. B) plan and conduct the audit with an attitude of distrust in management. C) not be blind to evidence that suggests the documents, books, or records have been altered or are incorrect. D) not consider management's explanation as evidence on any subject
Why is the audit team more concerned with controlling the exposure to the risk of overreliancethan with the risk of underreliance?a. Only the risk of overreliance results in an incorrect audit decision.b. The risk of underreliance is not related to the audit team’s study and evaluation of internalcontrol.c. The risk of overreliance can ultimately result in the audit team’s failing to reduce auditrisk to acceptable levels.d. The risk of underreliance can be controlled by performing tests of controls during theinterim period.
The difference between assessing control risk for IT control activities versus assessing control risk for manual control activities is best described as follows: Multiple Choice О in a manual environment it is important for the auditor to gain an understanding of the internal control activity before assessing control risk. О in an IT environment, it is not important to gain an understanding of the internal control activity before assessing control risk. О In an IT environment, it is likely that control risk will be assessed as low on largely all audit engagements. О the assessment process that needs to be undertaken for IT controls is essentially the same as would be taken for manual controls.