Auditing A Business Risk Approach International Edition 8th Edition by Audrey A. Gramling - Test Bank

Auditing A Business Risk Approach International Edition 8th Edition by Audrey A. Gramling – Test Bank

 

Instant Download – Complete Test Bank With Answers

 

 

Sample Questions Are Posted Below

 

Chapter 5: Internal Control over Financial Reporting

 

TRUE/FALSE

 

1. Internal control is a process designed to guarantee the achievement of the objectives of reliable financial reporting, compliance with laws and regulations and ineffective and inefficient operations.

 

ANS: F                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

2. Auditing standards require that the auditor exercise professional judgment and maintain professional skepticism throughout the planning and performance of the audit.

 

ANS: T                    PTS:   1                    OBJ:  Professional Skepticism and Ethics

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

3. If internal controls are not enforced they are useless and can lead to waste and fraud.

 

ANS: T                    PTS:   1                    OBJ:  Fraud

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

4. If an organization is too lenient in its treatment of employees who committed fraud, the control environment will be seen as stronger than if the treatment were harsher.

 

ANS: F                    PTS:   1                    OBJ:  Fraud

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

5. Weakness in the tone at the top have been associated with most financial frauds during the past decade.

 

ANS: T                    PTS:   1                    OBJ:  Fraud

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

6. Virtually all major financial frauds from the past decade were associated with organizations that had weaknesses in the control environment

 

ANS: T                    PTS:   1                    OBJ:  Fraud

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

7. Internal control is a process designed to provide reasonable assurance regarding the achievement of the objectives of reliable financial reporting, compliance with laws and regulations and effective and efficient operations, and safeguarding of the assets.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

8. The quality of an organization’s internal control will affect both the audit approach and the amount of testing needed for an engagement.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

9. Control activities are the policies and procedures that are established to assist in accomplishing objectives and to mitigate risks.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

10. Computer controls that are pervasive and affect every computerized system are referred as application controls.

 

ANS: F                    PTS:   1

OBJ:  IT Controls Integrated into Internal Control Evaluations

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

11. Control is considered to be part of corporate governance.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

12. Good control means that risks are identified and dealt with effectively.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

13. Investors do not place much value on the internal control of the companies in which they invest.

 

ANS: F                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

14. The PCAOB, in Auditing Standard No. 5, indicates that auditors should use a “bottom-up approach” that begins at the financial statement level.

 

ANS: F                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

15. Internal control is applied across all activities of the organization.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

16. The more effective the quality of internal control, the lower the control risk.

 

ANS: T                    PTS:   1

OBJ:  Importance of Internal Control to Financial Statement Audits

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

17. The five major components of an organization’s internal control are: the control environment, risk assessment, control activities, information and communication, and materiality.

 

ANS: F                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

18. A company’s internal auditing practices should not be considered when assessing control risk.

 

ANS: F                    PTS:   1                    OBJ:  Control Environment

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

19. An organization’s control environment is established and maintained by the internal auditing department.

 

ANS: F                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

20. Authorization Procedures include that all senior members of the accounting department have the authority to record any transaction.

 

ANS: F                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

21. Physical controls are necessary to protect and safeguard assets from accidental or intentional destruction and theft.

 

ANS: T                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

22. Monitoring of the internal controls involves assessment by appropriate personnel of the design and operation of controls on a timely basis and taking necessary actions.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

23. An auditor is not required to obtain evidence about the design and operation of the internal controls to reduce the assessment of control risk below maximum.

 

ANS: F                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

24. Segregation of duties refers to the duties of authorizing a transaction, recording the transaction, and taking physical custody of assets related to the transaction.

 

ANS: T                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

25. In addition to controls being specific, they may be broad, such as policies regarding a code of ethics.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

26. Physical controls to safeguard assets are not intended to include simple controls such as fences and locks.

 

ANS: F                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

27. Self-checking digit algorithms have been developed to test for transposition errors associated with identification numbers.

 

ANS: T                    PTS:   1

OBJ:  IT Controls Integrated into Internal Control Evaluations

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

28. When control risk is assessed at a maximum level, the auditor assumes that the internal controls are reliable in preventing or detecting material misstatements.

 

ANS: F                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

29. When control risk is assessed at a minimum level, the auditor assumes that the internal controls are reliable in preventing or detecting material misstatements.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

30. Performing a walk-through provides an auditor an understanding of the nature of processing in important accounting applications.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

31. The payroll department should be responsible for signing payroll checks.

 

ANS: F                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

32. A strong control environment can reduce all the financial reporting risks to zero.

 

ANS: F                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

33. The auditor’s preliminary assessment of control risk is based on an understanding of the control system as it has operated in the past and is designed to operate.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

34. When control risk is assessed at less than maximum, the auditor must gain assurance that the control procedures are effective.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

35. The auditor is obligated to report significant deficiencies in the control structure discovered during an audit to the audit committee or its equivalent.

 

ANS: T                    PTS:   1

OBJ:  Management Reports on Internal Control over Financial Reporting

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

36. One of the advantages of a computerized accounting system is that the computerized system eliminates the need for internal controls.

 

ANS: F                    PTS:   1

OBJ:  IT Controls Integrated into Internal Control Evaluations

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

37. Transaction-oriented controls should be tested using the guidelines developed for attribute testing utilizing statistical sampling techniques.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

38. Control risk can be evaluated on a scale from high to low.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

39. Testing internal control for effectiveness is done in every audit.

 

ANS: F                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

40. Walkthroughs and inquiries are often used to obtain an understanding of internal controls.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

41. The auditor should obtain an understanding of whether the client’s controls sufficiently address the risk of material misstatement due to fraud.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

42. The PCAOB’s requirement is that documentation must be able to be interpreted by an auditor not connected to the engagement.

 

ANS: T                    PTS:   1

OBJ:  Documenting the Auditor’s Understanding and Assessment of an Organization’s Internal Controls           NAT:             AACSB-Analytical skills | AICPA BB-Critical thinking

 

43. When the auditor believes the design of controls of a non-public company is effective but does not test the controls, the auditor can assess control risk as moderate in some circumstances but otherwise it should be assessed as high.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

44. Transaction oriented controls are designed to operate on every transaction throughout the year.

 

ANS: T                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

45. An external auditor provides a separate opinion on the effectiveness of internal control for large publicly traded companies.

 

ANS: T                    PTS:   1

OBJ:  Importance of Internal Control to Financial Statement Audits

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

46. One of the components of internal control, monitoring, refers to the process of identifying, capturing, and exchanging information in a timely fashion to enable accomplishment of the organization’s objectives.

 

ANS: F                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

47. One of the components of internal control, the control environment, is considered pervasive and the auditor should start the evaluation of controls at this level.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

48. Control activities may be implemented at the organizational level and at the transactional level.

 

ANS: T                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

MULTIPLE CHOICE

 

1. Internal control objectives are designed to assist the organization in assuring which of the following:

a.	the organization has  effective and efficient operations related to its overall strategy
b.	the activities of the organization are in compliance with applicable laws and regulations
c.	the assets of the organization are safeguarded from theft and fraud
d.	all of the above.

 

 

ANS: D                   PTS:   1                    OBJ:  Fraud

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

2. There is a high risk, as well as a history, that fraud is instituted through which of the following:

a.	adjusting entries.
b.	closing entries.
c.	unusual journal entries.
d.	all of the above.

 

 

ANS: D                   PTS:   1                    OBJ:  Fraud

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

3. The quality of an organization’s internal controls affects

a.	the reliability of financial data.
b.	the ability of management to make good decisions.
c.	the ability to sustain an effective business.
d.	all of the above.

 

 

ANS: D                   PTS:   1

OBJ:  Importance of Internal Control to Financial Statement Audits

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

4. Internal control is a process designed to achieve objectives in which one of the following categories?

a.	reliability of financial reporting
b.	compliance with applicable laws
c.	ineffectiveness of operations
d.	both A and B

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

5. Which of the following is not a reason that the auditor must gain an understanding of the client’s internal control system?

a.	to better understand the client, its risks, and how it manages those risks.
b.	to assess control risk and identify the types of financial statement misstatements that are most likely to occur.
c.	to plan direct tests of account balances to determine if misstatements have occurred.
d.	all are reasons why auditors must gain an understanding of the client’s internal control system.

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

6. Which one of the following groups is interested in an organization’s control structure?

a.	board members
b.	lenders
c.	auditors
d.	all of the above

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

7. The tone of internal control typically originates internally with:

a.	auditors.
b.	employees.
c.	management.
d.	stockholders.

 

 

ANS: C                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

8. The major components of an organization’s internal control structure consist of all of the following except

a.	control risk.
b.	the control environment.
c.	risk assessment.
d.	control activities.

 

 

ANS: A                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

9. What is management’s primary purpose of effective internal control in an organization?

a.	Obtaining high-quality data for making good business decisions.
b.	Completion of a successful audit for the entity.
c.	Shareholder involvement in the company’s success.
d.	Obtaining profitability and financial strength.

 

 

ANS: A                   PTS:   1

OBJ:  Importance of Internal Control to Financial Statement Audits

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

10. Which one of the following components of the system of internal controls sets the tone for the organization?

a.	control risk assessment
b.	control environment
c.	information and communication
d.	monitoring

 

 

ANS: B                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

11. The control environment includes all of the following except

a.	management philosophy and operating style.
b.	methods of assigning authority and responsibility.
c.	personnel policies and practices.
d.	control activities.

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

12. Which of the following is not one of the seven underlying principles of an effective control environment as developed by COSO?

a.	integrity and ethical values.
b.	management’s philosophy and operating style.
c.	authority and responsibility.
d.	information and communication.

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

13. One of the major components of an organization’s internal control structure includes:

a.	major new financing.
b.	the financial environment.
c.	risk assessment.
d.	telecommunication equipment.

 

 

ANS: C                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

14. A component of COSO’s internal control system concerns the process of identifying, capturing, and exchanging information in a timely fashion to enable accomplishment of the organization’s objective. This component is called

a.	control activities.
b.	information and communication.
c.	monitoring.
d.	control environment.

 

 

ANS: B                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

15. The PCAOB requires auditors of public companies to perform

a.	a financial statement audit and an attest audit.
b.	a financial statement audit and an assurance audit.
c.	a financial statement audit and agreed upon procedures.
d.	a financial statement audit and an audit of internal control.

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

16. The control environment includes which of the following?

a.	Control activities.
b.	Management philosophy and operating style.
c.	Assessing activity level risks.
d.	Application level controls.

 

 

ANS: B                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

17. Personnel policies and procedures are designed to ensure that the organization

a.	hires the right people.
b.	complies with federal and state laws in its hiring and retention decisions.
c.	has employees that are properly trained and supervised.
d.	performs all of the above.

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

18. Management of large public companies is required to report on its internal controls with its financial statements. This report is required to include all of the following except:

a.	its responsibility for control of financial reporting.
b.	the framework used for internal control.
c.	an assessment of the effectiveness of the company’s internal control
d.	the statement that the company is not required to have an audit on internal control.

 

 

ANS: D                   PTS:   1

OBJ:  Management Reports on Internal Control over Financial Reporting

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

19. Which one of the following represents a classification of control deficiency by the PCAOB?

a.	A missing control that is required for achievement of objectives.
b.	A control that operates as designed.
c.	A control that ensures the reliability of financial reporting.
d.	An immaterial individual misstatement in internal control.

 

 

ANS: A                   PTS:   1

OBJ:  Management Reports on Internal Control over Financial Reporting

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

20. Which one of the following will an audit of a company’s internal control include?

a.	Reliance on client’s internal controls testing.
b.	Sampling of key controls and related testing.
c.	Concluding on the accuracy of income statement balances.
d.	Design of the internal control system by the auditor.

 

 

ANS: B                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

21. All of the following are pervasive computer controls except:

a.	Planning and controlling the data processing function.
b.	Controlling access to equipment, data, and programs.
c.	Ensuring data is accessible to management on a timely basis.
d.	Controlling applications development and changes to programs.

 

 

ANS: C                    PTS:   1

OBJ:  IT Controls Integrated into Internal Control Evaluations

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

22. The personnel department should be responsible for:

a.	authorization of new employees.
b.	generation of payroll checks.
c.	timekeeping.
d.	all of the above.

 

 

ANS: A                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

23. If the auditor of financial statements understands internal control and assesses control risk as low, it is assumed that internal control:

a.	will be tested to support the assessment.
b.	is not required to be tested as it is considered strong.
c.	is considered relatively weak and will not be tested.
d.	has been assessed erroneously by the auditor.

 

 

ANS: A                   PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

24. To support an assessment that control risk is low, the auditor of financial statements must:

a.	achieve the same conclusion after appropriately testing internal control.
b.	achieve the same conclusion after appropriately performing substantive procedures.
c.	perform increased substantive procedures in order to compensate for the lower rating.
d.	perform limited substantive procedures as the assessment is justified.

 

 

ANS: A                   PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

25. Which of the following is an example of a type of control that may be tested?

a.	Interest accrued on notes payable.
b.	Cash surrender value of life insurance classified as long-term asset.
c.	A spreadsheet used to create a pivot table for the summarization of accounts receivable.
d.	Reconciliations performed monthly on accounts.

 

 

ANS: D                   PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

26. A graphic representation of an accounting application that normally identifies key controls that are effective in achieving specific control policies and procedures is:

a.	an internal control questionnaire.
b.	a flowchart.
c.	an internal control narrative.
d.	a walk-through.

 

 

ANS: B                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

27. Which of the following best represents a walk-through?

a.	The controller reviews the bank reconciliation prepared by the accountant and its resulting journal entries.
b.	The auditor walks the production line to find inefficiencies in the inventory process and reports them to management.
c.	The controller takes a sample of write-offs to ensure they have been adequately documented and recorded.
d.	The auditor traces three purchasing transactions from the purchase order to the financial statement for observation and understanding.

 

 

ANS: D                   PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

28. The auditor uses a variety of procedures to test whether controls effectively. These procedures may all of the following except:

a.	Take a sample of purchase orders and trace them through the system to determine whether (a) there was proper review of credit, and (b) credit authorization or denial was proper.
b.	Take a sample of recorded items (accounts payable) and send a positive confirmation to the related vendors to determine whether the balance is properly stated.
c.	Take a sample of recorded items (accounts receivable) and trace back to the credit approval process to determine that it was performed appropriately.
d.	Use a computer audit program to read all accounts receivable and develop a print- out of all account balances that exceed their credit authorization.

 

 

ANS: B                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

29. Which of the following would result in an adverse report issued by an auditor on an audit of internal control?

a.	The control risk is assessed at a lower level.
b.	The tests of controls support the documented understanding of controls.
c.	There is a material weakness in the design or operation of controls.
d.	A confirmation is not returned by a customer in a timely manner.

 

 

ANS: C                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

30. Physical controls to safeguard assets would include:

a.	hiring only trustworthy cashiers
b.	segregation of duties
c.	locks on the warehouse doors
d.	safety audits on the production-line

 

 

ANS: C                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

31. A financial statement auditor concludes that internal controls over cash are not functioning as designed. She believes that material misstatements to the cash accounts are possible because of the deficiencies. What is the course of action that the auditor will most likely take?

a.	Report the audit to the regulatory agencies of the IRS and SEC.
b.	Develop specific tests for cash balances to determine the extent of misstatement.
c.	Explain to the client that the audit firm will not be able to complete the audit.
d.	Test the internal control over cash.

 

 

ANS: B                    PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

32. Which one of the following is not a control activity implemented in most accounting systems?

a.	segregation of duties
b.	competent, trustworthy employees
c.	authorization procedures
d.	all of these activities are normally implemented.

 

 

ANS: D                   PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

33. A material weakness in the design of the operation of controls discovered in an audit of internal controls results in:

a.	A qualified management letter.
b.	An adverse report on internal controls.
c.	The firing of the auditors.
d.	Adjusting audit journal entries.

 

 

ANS: B                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

34. An auditor obtains evidence of the internal control over the accounting system by all of the following except:

a.	performing walkthroughs of the accounting system.
b.	making inquiries of banks and attorneys.
c.	reviewing system flowcharts.
d.	taking plant and operational tours.

 

 

ANS: B                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

35. Which of the following will an auditor perform to better understand a client’s internal control over accounting systems?

a.	An auditor will re-test subsequent year working papers.
b.	An auditor will review previous year working papers.
c.	An auditor will copy previous year working papers.
d.	An auditor will re-draft subsequent year working papers.

 

 

ANS: B                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

36. Internal control is a process affected by the organization’s board of directors, management, and other personnel to provide reasonable assurance of achieving certain objectives. Which of the following does not fit into one of these categories of objectives?

a.	reliability of financial reporting.
b.	compliance with laws and regulations.
c.	continuing existence.
d.	effectiveness and efficiency of operations.

 

 

ANS: C                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

37. Which of the following will an auditor use to document an understanding of internal control?

a.	Checklists, disclosures and procedures.
b.	The audit report, internal control opinions and confirmations.
c.	Workpapers, engagement letters and management representation letters.
d.	Questionnaires, narratives and flowcharts.

 

 

ANS: D                   PTS:   1

OBJ:  Documenting the Auditor’s Understanding and Assessment of an Organization’s Internal Controls           NAT:             AACSB-Analytical skills | AICPA BB-Critical thinking

 

38. Which is clearly a test of control?

a.	Confirmation to a customer of an accounts receivable balance.
b.	Examination of a sample of purchase order records for electronic, authenticated, authorization.
c.	Observing the controller’s use of company owned equipment.
d.	Sending a letter to the client’s attorney to determine litigation that is pending between plaintiff and the defendant.

 

 

ANS: B                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

39. An auditor’s test of transaction processing whereby the auditor is evaluating both the operation and effectiveness of controls and the correctness and completeness of processing and posting to an account balance is:

a.	a test of controls.
b.	a substantive test.
c.	a dual-purpose test.
d.	an analytical review procedure.

 

 

ANS: C                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

40. An auditor of a client company that has multiple locations must:

a.	increase control risk to moderate or high.
b.	conclude that independent business units of the consolidation are immaterial.
c.	issue multiple audit reports for each segment of the company.
d.	determine the universal application of controls across the company.

 

 

ANS: D                   PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

41. In order to further understand internal control, an auditor may use inquiry methods by:

a.	interviewing key employees to gain further insight into the internal control environment.
b.	observing the safeguarding of assets by checking locked doors and safes.
c.	tracing a transaction from the boundary of the organization through to the final reporting.
d.	documenting thoroughly the internal control through the use of narratives.

 

 

ANS: A                   PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

42. In a large company, who usually actively performs the monitoring of internal control?

a.	Internal auditors
b.	PCAOB
c.	CFO
d.	External auditors

 

 

ANS: A                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

43. Which of the following is not true of internal control as defined by COSO?

a.	it is narrower than internal control over financial reporting.
b.	it is a process that includes all elements of internal control working together.
c.	it includes all the people in the organization.
d.	it starts at the top of the organization in setting a tone.

 

 

ANS: A                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

44. Which of the following is not true of the concepts that are embodied in the COSO framework of internal control?

a.	Internal control relates to the organization’s objectives.
b.	The six components of internal control are logically and operationally intertwined.
c.	Internal control applies across all activities of the organization.
d.	All of the above are important concepts

 

 

ANS: B                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

45. The major components of an organization’s internal controls consists of all of the following except

a.	risk assessment.
b.	control environment.
c.	control activities.
d.	control risk

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

46. Which of the following is part of the control environment of an organization?

a.	management’s philosophy and operating style.
b.	organizational structure.
c.	human resources.
d.	all of the above

 

 

ANS: D                   PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

47. When control risk is assessed as high the auditor needs to:

a.	perform more tests of controls.
b.	perform more direct testing of account balances.
c.	perform significantly fewer tests of controls.
d.	perform significantly less testing of account balances.

 

 

ANS: B                    PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

48. Which of the following is a detective control designed to detect the occurrence of a misstatement?

a.	access controls.
b.	edit controls.
c.	reconciliations.
d.	all of the above are detective controls.

 

 

ANS: C                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

49. A component of COSO’s internal control system concerns the process that provides feedback on the effectiveness of the other components of internal control. This component is called:

a.	information and communication.
b.	monitoring.
c.	control activities.
d.	risk assessment.

 

 

ANS: B                    PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Analytical skills | AICPA BB-Critical thinking

 

ESSAY

 

1. Internal control

 

Define the term “internal control” and identify the major components of an internal control system.

 

ANS:

Internal control is defined as a process effected by management to provide reasonable assurance that the following objectives are met:

1.	the reliability of financial reporting;
2.	compliance with applicable laws and regulations;
3.	effectiveness and efficiency of operations; and
4.	the safeguarding of assets.

 

The major components of internal control are:

1.	control environment;
2.	risk assessment;
3.	control activities;
4.	information and communication; and
5.	monitoring.

 

 

PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

2. Control environment

 

One of the elements of an organization’s control system is the “control environment.” Identify at least four factors that the auditor should consider when reviewing the control environment and discuss how the auditor would relate this review to the assessment of control risk.

 

ANS:

The factors that an auditor should consider when reviewing the control environment would include:

·	management’s philosophy and operating style.
·	the entity’s organization structure.
·	the functioning of the board of directors and its committees.
·	methods of assigning authority and responsibility.
·	management’s control methods for monitoring and following up on performance, including internal auditing.
·	personnel policies and practices.
·	external influences such as bank regulatory agencies.

 

The auditor would examine his or her findings relating to each of the listed factors in determining whether control risk was high, medium or low. For example, if the philosophy of management placed little priority on internal controls the auditor would be concerned about control risk.

 

PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

3. Understanding internal control

 

The auditor identifies four phases or steps in the control risk assessment procedure. Phase I involves obtaining an understanding of the internal control structure. Identify at least four methods the auditor might use in gathering the information and briefly describe each one.

 

ANS:

Methods for obtaining an understanding of the internal control structure might include:

·	Walkthroughs – Walkthroughs provide an understanding of the nature of processing in important accounting applications. The auditor actually walks a document through the system to determine how the system actually works.
·	Inquiries – An auditor interviews key employees to learn about segregation of duties, extent of computer usage, the documents the application generates, and the overall nature of transaction processing.
·	Review of accounting manuals and job descriptions – These manuals may contain a description of the accounting policies, a detailed chart of accounts and an outline for processing accounting transactions.
·	Plant and operational tours – Tours give an auditor a chance to determine conscientiousness of operational employees. (Such as, are receiving reports filled out as goods are received?)
·	Prior year working papers – The evaluation of internal controls is an ongoing process. The auditor may use previous work as a basis for review and update.

 

 

PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

4. Documenting internal control understanding

 

Auditors must document their understanding and evaluation of the internal control system. Identify and briefly describe the three most commonly used methods for such documentation.

 

ANS:

The three most commonly used methods for documenting the auditor’s understanding of internal control are:

·	Flowcharts – Flowcharts provide a graphic description of an application or a process. Flowcharts can be very detailed or depict a broad overview of an application.
·	Questionnaires – Questionnaires present an efficient alternative, or complementary approach, to document the structure. They are designed to gather information by functional area. Questionnaires have the advantage of being fairly simple to use, but yet are comprehensive.
·	Narratives – Narratives are usually used as supplements to flowcharts and questionnaires. They may be used to document relatively simple applications or for small-business applications.

 

 

PTS:   1

OBJ:  Documenting the Auditor’s Understanding and Assessment of an Organization’s Internal Controls

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

5. Integrated audit

 

Explain the application of an integrated audit as it relates to regulation. Discuss the reasons that this integrated approach may occur.

 

ANS:

The Sarbanes-Oxley Act of 2002 requires reporting by management of publicly-held companies on the effectiveness of internal control over financial reporting. The Public Company Accounting Oversight Board (PCAOB) requires the external auditor to perform an integrated audit of the effectiveness of internal controls and financial reporting. In other words, the same auditor must attest to both the financial statements and management’s assertions regarding the effectiveness of internal controls over financial reporting.

 

Because of the above mentioned regulatory requirements, auditors will perform an audit on both financial statements and internal controls for all public clients.

 

PTS:   1                    OBJ:  IT Controls Integrated into Internal Control Evaluations

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

6. Assessing control risk

 

Discuss the impact of control risk assessment on an audit of the financial statements.

 

ANS:

An auditor assesses control risk preliminarily by understanding and documenting controls. This includes a walk-through of a sample of key transactions. This understanding aids the auditor in determining the types of misstatements that may be apparent in certain areas of the financial statements. The assessment of control risk is critical in determining the nature, timing and extent of substantive audit procedures to be applied.

 

Auditors of public companies must report on management’s assertion regarding the effectiveness of internal control.

 

Auditors of non-public companies must report to management and the board the existence of significant deficiencies in the design or operation of internal controls that are identified in the normal course of the audit. The preliminary assessment of control risk must be supported by tests of controls if assessed below the maximum. When the auditor has decided to establish control risk at the maximum level the auditor is not required to perform tests of controls to document the assessment. The auditor must take care to perform the substantive tests at the maximum levels and to document the findings in the audit documentation.

 

PTS:   1                    OBJ:  Risk Assessment and Audit Tests

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

7. Documenting internal control

 

Discuss how an auditor would utilize a client’s flowchart documentation in the audit of financial statements.

 

ANS:

A flowchart is a graphic representation of an accounting application or process. The auditor can use the client’s flowcharts to obtain an understanding of the overall accounting system, the various accounting cycles and accounting applications. The flowcharts provide an overview of how documents flow into and out of a computerized application or manual process. An auditor can use client’s flowcharts to identify key controls that are effective in achieving specific control objectives as part of the auditor’s preliminary assessment of control risk.

 

PTS:   1

OBJ:  Documenting the Auditor’s Understanding and Assessment of an Organization’s Internal Controls

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

8. COSO: A Framework for Internal Control

 

What is internal control as defined by COSO? Also explain, the other elements of the definition that are important to internal control

 

ANS:

COSO defines internal control as a process, effected by an entity’s board of directors, management, and other personnel, designed to provide reasonable assurance regarding the achievement of objectives in the following categories:

(1) reliability of financial reporting,

(2) compliance with applicable laws and regulations, and

(3) effectiveness and efficiency of operations.

 

The other elements of the definition that are important. They state that internal control:

* Is a process designed to accomplish the organization’s objectives.

* Starts at the top of the organization with the board of directors and management creating and reinforcing a structure and a tone for controls in the organization.

* Directly or indirectly includes all people in the organization, ranging from the shipping clerk to the internal auditor to the chief financial officer.

* Is broader than internal control over financial reporting.

 

PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

9. Pervasive control activities

 

Discuss what pervasive control activities are and provide an example of at least three.

 

ANS:

Pervasive control activities are those controls activities whose implementation affects almost all accounting systems.

 

Some examples of pervasive control activities include:

	*segregation of duties
	*authorization procedures
	*documented transaction trail
	*physical controls to safeguard assets
	*reconciliation of control accounts with subsidiary ledgers, of transactions recorded
	with transactions submitted for processing, and of physical counts of assets with
	recorded assets
	*competent, trustworthy employees

 

 

PTS:   1                    OBJ:  Examples of Common Internal Control Activities

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

10. Auditor Evaluation of Internal Controls

 

What are the steps in integrated audit process?

 

ANS:

Integrated audit process includes the following steps:

 

1. Update information about various risks.
2. Consider the possibility of account misstatements.
3. Complete preliminary analytical procedures.
4. Understand the client’s internal controls.
5. Identify controls to test.
6. Make a plan to test the controls and execute that plan.
7. Consider the results of control testing.
8. Conduct substantive audit tests.

 

PTS:   1                    OBJ:  Auditor Evaluation of Internal Controls

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

11. IT Controls Integrated into Internal Control Evaluations

 

Explain Input Controls

 

ANS:

The control procedures designed to assure that the organization fully captures all the transactions between itself and another entity, and to properly record those transactions, are referred to as input controls.

Input controls are designed to ensure that authorized transactions are correct, complete, and recorded in a timely fashion and that only authorized transactions exist. They include:

* Computerized input validation tests

* Self-checking digits

* Use of stored data reference items to eliminate input of frequently required data

* On-screen input verification techniques

 

PTS:   1                    OBJ:  IT Controls Integrated into Internal Control Evaluations

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking

 

12. Relationship of the five internal control components

 

The five components of the COSO internal control system are conceptually and logically integrated. List the five components of the model and describe how they are integrated with each other in the internal control process.

 

Use the following format:

 

Components	Description

 

 

ANS:

Components	Description
Control environment	The control environment establishes management’s commitment to good governance, risk analysis, and control. It sets the tone for the organization’s implementation of effective internal control.
Risk assessment	Management establishes a risk management policy and process to identify risks that affect the organization, including analysis of risks associated with financial reporting.
Control activities	Management and employees develop and implement controls that reduce the risks to an acceptable level. Accounting controls are designed into accounting information systems and are tested to determine that they are working effectively.
Information and communication	An effective information and communication system is developed and implemented to process transactions and to develop reports that enable all levels of management to make reliable decisions and to recognize improper processing. Further, information is communicated both up and down in the organization to facilitate effective operation of controls.
Monitoring	Management monitors the effectiveness of its internal controls by designing on-going monitoring activities. Management also monitors the effectiveness of internal controls by engaging an effective internal audit department to perform separate evaluations of internal control.

 

 

PTS:   1                    OBJ:  COSO: A Framework for Internal Control

NAT: AACSB-Communication skills | AACSB-Analytical skills | AICPA BB-Critical thinking