An organization has a mature control environment but limited audit resources. Given this scenario, on which of the following should internal auditors focus their testing? a. Detective compensating controls b. Preventive compensating controls c. Detective key controls d. Preventive key controls

An organization has a mature control environment but limited audit resources. Given this scenario, on which of the following should internal auditors focus their testing? a. Detective compensating controls b. Preventive compensating controls c. Detective key controls d. Preventive key controls

FINANCIAL ACCOUNTING

10th Edition

ISBN:9781259964947

Author:Libby

Publisher:Libby

Chapter1: Financial Statements And Business Decisions

Section: Chapter Questions

Problem 1Q

See similar textbooks

Related questions

Q: In terms of an audit, define " substantive strategy " and " reliance strategy ". How do the…

A: Audit strategy refers to a strategy that guides the audit plan. It refers to the combination of…

Q: For each of the following, determine how the effectiveness of the entity's internal control affect…

A: a) As the entity's internal control is more effective. Auditor would assess less level of material…

Q: policies and procedures О vacation policy О development of control activities information technology

A: Internal Control System-Internal controls are accounting and auditing processes used in a company's…

Q: n audit procedure designed to evaluate the operating effectiveness of controls in preventing or…

Q: Place the auditor's activities to assess control risk in the proper order: Group of answer choices…

A: Control risk refers to misstatement in financial statements that occur due to error and fraud and…

Q: To test the operating effectiveness of a control, an audit team might use a combination ofeach of…

A: Internal control: It can be defined as a system that includes the policies, rules, and procedures…

Q: Ordinarily, risk assessment procedures do not involve the use of audit sampling. However, the…

A: The purpose of audit risk assessment is to gain a better understanding of Organisation and its…

Q: ll statements are true B. all statements are false C. S1 and S2 are true D. S1 and S3 are true

A: Correct option : A

Q: During an audit, the internal auditor should consider the following factor(s) in determining the…

A: Audit procedures are the techniques, processes, and methods that auditors use to obtain reliable…

Q: If the tests of controls indicate certain controls are not as effective as the auditor originally…

A: Test of controls are performed to determine the effectiveness of the control to detect and correct…

Q: With respect to an audit, which of the following is not a risk assessment procedure? Analytical…

A: Risk assessment procedureThe risk assessment procedure is one of the audit procedures which are…

Q: Which of the following is not a common procedure for assessing operating effectiveness of preventive…

A: Preventive controls is a measure of safeguards implemented by an organisation to proactively…

Q: Which of the following is not a major reason for maintaining an audit trail for a computer system?…

A: An audit trail in a computer system is a record of all activities that have been undertaken and…

Q: Auditors have two strategies to choose from, the lower-assessed control risk strategy and the…

A: Incorrect (c)Auditors can always choose to use the predominantly substantive strategy regardless of…

Q: When planning the audit of internal controls for an issuer, the audit team shoulda. Identify…

A: Internal control is a mechanism or procedure that the company implements so that the integrity of…

Q: In which of the following circumstances would an auditor expect to find that an entity had…

A: Definition: Audit: Audit is the process of verification of the compliance of the financial…

Q: A reliance strategy is chosen when the auditor: Multiple Choice Plans on conducting tests of…

A: The method used by auditors to depend on the work done by internal auditors or other independent…

Q: If control risk is assessed at the maximum, the auditor is required to obta knowledge about the:…

A: Lets understand the basics.Control risk is a risk which arise due to failing of control mechanism of…

Q: 1) Which of the following statements is the most accurate? a. Data analytics can be…

A: Tool for analyzing the data set in a systematical manner. An auditor can use the data analytics tool…

Q: Obtaining an understanding of an entity's internal control is more likely to be performed more…

A: Internal controls are a set of preventive measures that are put in place with the purpose of…

Q: Recall the definition of inherent risk. Why is it important for internal auditors to focus on…

A: The answer is given in the below step.

Q: audit function: a) Risk assessment provides a framework for allocating limited resources to achieve…

A: Risk: It refers to the price paid for earning maximum returns. In business risk there is probability…

Q: When an auditor decreases the planned assessed level of control risk because certain control…

A: Audit report represents the report prepared by an auditor that shows the opinion of the auditor on…

Q: 7) In an environment that is highly automated an auditor determines that it is not possible to…

A: Answer- Perform test of controls to support a lower level of assessed risk In an environment that is…

Question

100%

An organization has a mature control environment but limited audit resources. Given this scenario, on which of the following should internal auditors focus their testing?

a. Detective compensating controls

b. Preventive compensating controls

c. Detective key controls

d. Preventive key controls

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

This is a popular solution!

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Step 3

VIEW

Trending now

This is a popular solution!

Step by step

Solved in 3 steps

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, accounting and related others by exploring similar questions and additional content below.

Similar questions

When an audior increases the assessed level of control risk because certain control activities were determined to be ineffective, the auditor would most likely increase the: A. extent of tests of control B. level of detection risk C. extent of tests of detail D. Level of inherent risk
When a substantive audit strategy is adopted, an auditor will O determine internal controls are effective in mitigating risks. O increase the amount of their substantive testing. O test controls extensively. O not need to document the internal control system.
As an auditor, it is important to gain a comprehensive understanding of every aspect of a client’s internal control. This helps in evaluating control risk and preparing for the audit of the client’s financial statements. Choose one of the following questions to discuss: For what purposes should an auditor use their understanding of internal control components to plan an audit? What factors should an audit team consider when trying to reduce the planned assessed level of control risk below the maximum? What are the documentation requirements for a client’s internal control and assessed level of control risk?
Why do we consider risk assessment the foundation of the internal audit function? To safeguard independence, many internal audit departments continue to perform risk assessments in a silo, without collaborating with and leveraging the work of ERM. Do you agree with this approach?
Study and Evaluation of Management Control. The study and evaluation of management risk mitigation control is not easy. First, auditors must determine the risks and the controls subject to audit. Then they must find a standard by which performance of the control can be evaluated. Next they must specify procedures to obtain the evidence on which an evaluationcan be based. Insofar as possible, the standards and related evidence must be quantified. The following description gives certain information (in italics) that internal auditors would know about or be able to determine on their own. Fulfilling the requirement thus amounts to taking some information from the scenario and figuring out other things by using accountants’ and auditors’ common sense.The ScenarioAce Corporation ships building materials to more than a thousand wholesale and retail customers in a five-state region. The company’s normal credit terms are net/30 days, and no cash discounts are offered. Fred Clark is the chief…
Obtaining an understanding of the internal control structure is required for first time audit client, but not necessary for recurring clients. TRUE OR FALSE? WHY?
Why is the audit team more concerned with controlling the exposure to the risk of overreliancethan with the risk of underreliance?a. Only the risk of overreliance results in an incorrect audit decision.b. The risk of underreliance is not related to the audit team’s study and evaluation of internalcontrol.c. The risk of overreliance can ultimately result in the audit team’s failing to reduce auditrisk to acceptable levels.d. The risk of underreliance can be controlled by performing tests of controls during theinterim period.
The difference between assessing control risk for IT control activities versus assessing control risk for manual control activities is best described as follows: Multiple Choice О in a manual environment it is important for the auditor to gain an understanding of the internal control activity before assessing control risk. О in an IT environment, it is not important to gain an understanding of the internal control activity before assessing control risk. О In an IT environment, it is likely that control risk will be assessed as low on largely all audit engagements. О the assessment process that needs to be undertaken for IT controls is essentially the same as would be taken for manual controls.