Why do we consider risk assessment the foundation of the internal audit function? To safeguard independence, many internal audit departments continue to perform risk assessments in a silo, without collaborating with and leveraging the work of ERM. Do you agree with this approach?

Why do we consider risk assessment the foundation of the internal audit function? To safeguard independence, many internal audit departments continue to perform risk assessments in a silo, without collaborating with and leveraging the work of ERM. Do you agree with this approach?

FINANCIAL ACCOUNTING

10th Edition

ISBN:9781259964947

Author:Libby

Publisher:Libby

Chapter1: Financial Statements And Business Decisions

Section: Chapter Questions

Problem 1Q

See similar textbooks

Similar questions

When a substantive audit strategy is adopted, an auditor will O determine internal controls are effective in mitigating risks. O increase the amount of their substantive testing. O test controls extensively. O not need to document the internal control system.
After obtaining an understanding of an entitiy's internal control, an auditor may assess control risk at the maximum level for some assertions because he A. performs tests of controls to restrict detection risk to an acceptable level. B. identifies internal control policies and procedures that are likely to prevent material misstatements. C. believes the internal control policies and procedures are unlikely to be effective. D. determines that the pertinent internal control components are not well documented.
Is an organization’s internal audit function part of its system of internal controls? If your answer is yes, explain how the internal audit function can evaluate the design adequacy and operating effectiveness of internal controls and at the same time remain independent of the organization’s system of internal controls. If your answer is no, explain the internal audit function’s role relative to the organization’s system of internal controls.
As an auditor, it is important to gain a comprehensive understanding of every aspect of a client’s internal control. This helps in evaluating control risk and preparing for the audit of the client’s financial statements. Choose one of the following questions to discuss: For what purposes should an auditor use their understanding of internal control components to plan an audit? What factors should an audit team consider when trying to reduce the planned assessed level of control risk below the maximum? What are the documentation requirements for a client’s internal control and assessed level of control risk?
Which of the following are true regarding internal auditors and the adequacy of an organization's risk management process I. Internal auditors must understand the risk assessment process and the tools used to make the assessment II. Internal auditors should determine the level'of risks acceptable to the organization III. Internal auditors need to be satisfied that the key objectives of risk management processes are being met IV. Internal auditors should evaluate management's risk processes the same way they analyze risk when planning an engagement O , II, III and IV O None of the choices OI, Il and III only O l and II only O l and III only
Obtaining an understanding of the internal control structure is required for first time audit client, but not necessary for recurring clients. TRUE OR FALSE? WHY?
An auditor is likely to use procedures to support the operating effectiveness of internal controls. Which of the following would generally not be used ? Select one : O a. Re -perform client procedures O b. Examine documents , records, and reports O c. Make inquiries of appropriate client personnel O d. Analytical procedures
Which of the following is NOT an example of a significant deficiency in internal control? O evidence of an effective response to identified significant risks O misstatements not prevented or detected by internal controls O evidence of an ineffective entity risk assessment process O identification of management fraud
The difference between assessing control risk for IT control activities versus assessing control risk for manual control activities is best described as follows: Multiple Choice О in a manual environment it is important for the auditor to gain an understanding of the internal control activity before assessing control risk. О in an IT environment, it is not important to gain an understanding of the internal control activity before assessing control risk. О In an IT environment, it is likely that control risk will be assessed as low on largely all audit engagements. О the assessment process that needs to be undertaken for IT controls is essentially the same as would be taken for manual controls.