Chapter 7 Auditing
Chapter 7 Auditing
Chapter 7 Auditing
INTRODUCTION TO
FINANCIAL STATEMENT AUDIT
INDEPENDENT AUDITING DEFINED
Auditing has been defined in different ways by different sources. The definition
given by the American Accounting Association provides an effective means of
introducing and initially exploring the topic
This definition includes several key words and phrases briefly discussed in this
section.
Systematic process
This implies a structured, logical, and organized series of steps and
procedures. Auditing consists of a series of sequential steps that
include information testing system and testing of transactions and
balances.
176 Chapter 7
• Assertions about economic actions and events
These are the representations made by the individual or entity.
They comprise the subject matter of auditing. Assertions include
information contained in financial statements, internal operating
reports, and tax returns. In the audit of financial statements,
assertions are the representations of management as to the
fairness of the financial statements.
• Degree of correspondence
This refers to the closeness with which the assertions can be
identified with" established criteria. The expression of
correspondence may be quantified, such as the amount of a
shortage in a petty cash fund, or it may be qualitative, such as
the fairness (Or reasonableness) of financial statements.
• Established criteria
These are the standards against which the assertions or
representations are judged. Criteria may be specific rules prescribed
by a legislative body, budgets and other measures of performance
• Interested users
These are individuals who use (rely on) the auditor's findings.
In a business environment, this includes stockholders, management'
creditors, governmental agencies, and the public.
to Financial Statement Audit 177
The IFAC Education Committee defines auditing as follows:
"Auditing is a structured process that:
(a) involves the application of analytical skills, professional judgment, and
professional skepticism;
(b) is usually performed by a team of professionals, directed with managerial skills;
(c) uses appropriate forms of technology and adheres to a methodology;
(d) complies with all relevant technical standards, such as International
Standards on Auditing (ISAs), International Standards on Quality Control
(ISQCs), International Financial Reporting Standards (IFRS), International Public
Sector Accounting Standards (IPSAS), and any applicable international, national
or local equivalents as appropriate; and
(e) complies with required standards or professional ethics."
OBJECTIVES OF AUDITING
The term "scope of an audit" refers to the audit procedures deemed necessary in
the circumstances to achieve the objective of the audit. The procedures required
to conduct an audit in accordance with PSAs, relevant professional bodies,
legislations, regulation and, where appropriate, the terms of the audit
engagement and reporting requirements.
When sufficient and competent audit evidences have been gathered, the auditor
can then formulate his opinion n the fairness with which the financial statements
have been prepared. He then prepares the audit report containing the scope of his
examination and the opinion he has expressed on the financial statements for
submission to the client, who in turn furnishes copies of the report to various
interested parties.
c. Voluminous data
As businesses grow, possibly millions of exchange transactions are
processed daily via manual or sophisticated computerized systems. This
increases therefore the likelihood that improperly recorded information may
be included or buried in the records.
d. Complex exchange transactions
New and changing business relationships may lead to innovative accounting
and reporting problems. Some transactions are so complex and hence more difficult
to record properly. Also, transactions not quantifiable will require increased
disclosures.
e. Consequences
During the past decade, many financial statement users — pension funds,
private investors, venture capitalists, and banks — lost billions of pesos
because financial information had become unreliable. As an example, the
factors leading up to, and the consequences of, unreliable information can
be seen in the subprime mortgage crisis in the United States.
To reduce information risk or the risk that information upon which a business
decision is made is inaccurate, managements of businesses and the users of their
financial statements may adopt any or all of the following approaches:
Phase I
Risk Assessment
Phase Ill
Reporting
Discussion
Once a. client is accepted (or the audit firm decides to continue to audit the
client), the auditor needs to perform risk assessment procedures to understand the
client's business thoroughly (or update prior knowledge in the case of a continuing
client), its industry, its competition, and its management and governance processes
(including internal controls) to determine the likelihood that financial accounts might
be in error.
Phase II, the auditor will also obtain evidence about Internal control operating
effectiveness through testing those controls. Much of what most people think of as
auditing, the obtaining of substantive evidence about accounts, disclosures, and
assertions are also in this phase. The information gathered in Phase I through Il will
greatly influence the amount of testing to be performed.
Finally, in Phase Ill, the auditor Will complete the audit and make a decision about
what type of audit report to issue.
The final phase in the audit process is to evaluate results and choose the appropriate
audit report to issue. The auditor's report, also known as the audit opinion, is the main
product or output of the audit. Just as the report of a house inspector
communicates the inspector's findings to a prospective buyer, the audit report
communicates the auditor's findings to the users of the financial statements.
184
After completion of the audit work, the auditor determines if the preliminary
assessments of risks were appropriate in light of the evidence collected and whether
sufficient evidence was obtained. The auditor then aggregates the total known and
estimated uncorrected misstatements and determines whether they cause the financial
statements to be materially misstated. If the uncorrected misstatements are judged to
be material, the auditor will request that the client correct misstatements. If the client
refuses, the auditor issues an opinion that clearly indicates that the financial statements
are materially misstated and explains the nature of the misstatement. If the uncorrected
misstatements are insignificant enough that they do not cause the financial
statements to be materially misstated, or if the client is willing to correct the
misstatements, the auditor issues an unqualified (i.e., "clean") report.
Phase III
Completing the Audit and Making Reporting • Complete review and communication
Decisions activities
• Determine the type(s) of opinion(s) to issue
Figure 4-3 lists the management assertions that auditors focus on in an audit. This
presentation divides management assertions into two aspects of information reflected in
the financial statements: transactions and related disclosure, and account balances and
related disclosure. Understanding the assertions in terms of transactions and account
balances helps the auditor focus on the different types of audit procedures needed to test
management's assertions in these two categories.
Assertions about classes of transactions and events (and related disclosures) for the
period:
• Occurrence: Transactions and events that have been recorded or disclosed have
occurred, and such transactions and events pertain to the entity.
• Completeness: All transactions and events that should have been recorded have
been recorded, and all related disclosures that should have been included in the
financial statements been included.
• Authorization: All transactions and events have been properly authorized.
• Accuracy: Amount and other data relating to recorded transactions and events
have been recorded appropriately, and related disclosures have been
appropriately measured and described.
• Cutoff: Transactions and events have been recorded in the correct accounting period.
Introduction to Financial Statement Audit 187
• Classification: Transactions and events have been recorded in the proper accounts.
Assertions about account balances (and related disclosures) at the period end:
The conceptual and procedural details of a financial statement audit build on three
fundamental concepts: materiality, audit risk, and evidence relating to management's
financial statement assertions. The auditor's assessments of materiality and audit risk
influence the nature, timing and extent of the audit evidence to be gathered.
Introduction to Financial Statement Audit 189
Auditors do not guarantee or ensure the fair presentation of financial statements. There
exists some risk that the financial statements are not fairly stated even when the opinion
is unqualified or unmodified.
Materiality
Materiality refers to the amount by which a set of financial statements could be misstated
without affecting the judgment of reasonable person. It also refers to the magnitude of an
omission or misstatement of accounting information that, in the light of surrounding
circumstances make is probable that the judgment of a reasonable person relying on that
information would have been changed or influenced by the omission or misstatement.
One of the auditor's first tasks in planning an audit is to make a judgment about just how
big a misstatement would have to be before it would significantly affect users' judgments.
The concept of materiality is important because it simply isn't practical or cost beneficial
for auditors to ensure that financial statements are completely free of any small
misstatements.
The focus of this definition is on the users of the financial statements. In planning the
engagement, the auditor assesses the magnitude of a misstatement that may affect users'
decisions. This materiality assessment helps the auditor determine the nature, timing, and
extent of audit procedures used to collect audit evidence.
Audit Risk
The second major concept involved in auditing is audit risk, which is the risk that the
auditor may mistakenly give a "clean" opinion on financial statements that are materially
misstated.
Audit risk is the risk that the auditor mistakenly expresses a clean audit opinion when the
financial statements are materially misstated.
Auditing standards make it clear that an audit provides "reasonable assurance " that the
financial statements do not contain material misstatements. The phrase "reasonable
assurance" implies that even when the auditor does a good job, there is some risk that a
material misstatement could be present in the financial statements and the auditor will fail
to detect it. The auditor plans and conducts the audit to achieve an acceptably low level of
audit risk. The auditor controls the level of audit risk through 'the effectiveness and extent
190 7
of the audit work conducted. The more effective and extensive the audit work (and thus the
type and amount of audit evidence collected), the lower the risk that a misstatement will
go undetected and that the auditor will issue an inappropriate report.
The third concept involved in auditing is evidence regarding management's assertions, or,
more simply, audit evidence. Most of the auditor's work in arriving at an opinion on the
financial statements consists of obtaining and evaluating audit evidence relating to
management's assertions. Audit evidence consists of the underlying accounting data and
any additional information available to the auditor, whether originating from the client or
externally.
The assertions, in conjunction with assessment of materiality and audit risk, are used by
the auditor to determine the nature, timing, and extent of evidence to be gathered. Once the
auditor has obtained sufficient appropriate evidence that the management assertions can be
relied upon for each significant account and disclosure, the auditor has reasonable
assurance that the financial statements are fairly presented. Note the two key descriptors of
audit evidence: sufficient and appropriate.
The sufficiency of audit evidence simply refers to the quantity of evidence the auditor
obtains — does the auditor have enough evidence to justify a conclusion as to whether
management's assertions are fairly stated? The appropriateness of audit evidence refers to
whether the evidence is relevant and reliable. Relevance refers to whether the evidence
relates to the specific management assertion being tested. Reliability refers to the
diagnosticity of the evidence.
The auditor should comply with the "Revised Code of Ethics for Professional
Accountants in the Philippines" promulgated by the Board of Accountancy and
approved by the Philippine Professional Regulation Commission. Ethical
principles governing the auditor's professional responsibilities are:
Introduction to Financial Statement Audit 191
(a) independence;
(b) integrity;
(c) objectivity;
(d) professional competence and due care;
(e) confidentiality;
(O professional behavior, and
(g) technical standards.
The auditor should conduct an audit in accordance with Philippine Standards on Auditing.
These contain basic principles and essential procedures together with related guidance in
the form of explanatory and other material.
The auditor should plan and perform the audit with an attitude of professional skepticism
recognizing that circumstances may exist which cause the financial statements to be
materially misstated. For example, the auditor would ordinarily expect to find evidence to
support management representations and not assume they are necessarily correct.
Reasonable Assurance
Further, other limitations may affect the persuasiveness of evidence available to draw
conclusions on particular financial statement assertions (for example, transactions
between related parties). In these cases, certain PSAs identify specific procedures which
will, because of the nature of the particular assertions, provide sufficient appropriate audit
evidence in the absence of:
(a) unusual circumstances which increase the risk of material misstatements beyond
that which would ordinarily be expected; or
(b) any indication that a material misstatement has occurred.
While the auditor is responsible for forming and expressing an opinion on the financial
statements, the responsibility for preparing and presenting the financial statements is that
of the management of the entity. The audit of the financial statements does not relieve
management of its responsibilities.
Audits are performed in teams where each auditor is expected to complete tasks requiring
considerable technical knowledge and expertise, along with leadership, teamwork, and
professional skills. In terms of technical knowledge and expertise, auditors must
understand accounting and auditing authoritative literature,
Introduction to Financial Statement Audit 193
develop industry and client-specific knowledge. develop and apply computer skills.
evaluate internal controls, and assess and respond to fraud risk.
Various parties are involved in the preparation and audit of financial Statements
and related disclosures. Management has responsibilities for (a) preparing and
presenting financial statements in accordance with the applicable financial
reporting framework; (b) designing, implementing and maintaining internal
control over financial reporting; and (c) providing the auditors with information
relevant to the financial statements and internal controls. The internal audit
function provides management and the audit committee with assurance on internal
controls and repots. The audit committee, a subcommittee of the organization's
board of directors, oversees both management and the internal auditors, and they
also hire the external auditor.
available report. External auditors conduct their procedures and make judgments
in accordance with professional standards. The audited financial statements are
provided to users who have an interest in the organization.
You have already learned about different kinds of auditors and audit services,
public accounting firms, and the auditor's role in society. Now let us turn our
attention to the primary context that shapes the external auditor's environment: the
business or entity being audited.
194 Chapter 7
In studying the subsequent chapters, you will be building your auditing tool kit. How you
apply auditing tools on any particular engagement will depend greatly in the nature of the
entity's business.
The point is that the context provided by the entity's business greatly impacts the auditor
and the nature of the audit and is thus a primary aspect of the environment in which financial
statement auditing is conducted.
While businesses in different industries can have different characteristics, most have some
fundamental conceptual characteristics in common. These commonalities provide a way
for auditors to organize how they approach financial statement audit, regardless, of the
type of entity they are auditing.
In a simple business model, management, with guidance and direction from the board of
directors, decides on a mission, what can be translated into a set of objectives along with
the strategies designed to achieve those objectives. The organization must assess and
manage risks that may threaten the achievement of its objectives. The organization then
undertakes certain processes in order to implement its strategies.
Most businesses establish processes that fit in broad business process categories, also
known as business cycles. The five categories that characterize the processes of most
businesses are
The enterprise designs and implements, accounting information system to capture the
details of those transactions. It also designs and implements a system of internal control to
ensure that the transactions are handled and recorded appropriately and that resources are
protected.
Introduction to Financial Statement Audit 195
Auditors often rely on this process model to divide the audit of a business's financial
statements into manageable pieces.
REVIEW QUESTIONS
Questions
3. Discuss the major factors in today's society that have made the need for
independent audits much greater than it was fifty years ago.
4. Identify the major causes of information risk and identify the three main
ways information risk can be reduced. What are the advantages and
disadvantages of each?
5. Explain what is meant by information risk and discuss the four causes Of
this risk.
7. Discuss four factors that are likely to significantly reduce informati011 risk
in the next five to ten years.
196 Chapter 7
a. Option A c. Option C
b. Option B d. Option D
a. Option A c. Option C
b. Option B d. Option D
Introduction to Financial Statement Audit 197
a. Option A c. Option C
b. Option B d. Option D
Case
Case 1
Joe Ramos a college student majoring in accounting, helped finance his education with
a part-time job maintaining all accounting records for a small business, Red Company,
located near campus. Upon graduation, Ramos passed the CPA examination and joined
the audit staff of a CPA firm. However, he continued to perform all accounting work
for Red Company during his "leisure time." Two years later, Ramos received his CPA
certificate and decided to give up his part-time work with Red Company. He noticed
Red that he would no longer be available after preparing the year-end financial
statements.
Introduction to Financial Statement Audit 199
On January 7, Ramos delivered the annual financial statements as his final act for Red
Company. The owner then made the following request: "Joe, I am applying for a
substantial bank loan, and the bank loan officer insists upon getting audited financial
statements to support my loan application. You are now a CPA, and you know
everything that's happened in this company and everything that's included in these
financial statements, and you know they give a fair picture. I would appreciate it if you
would write out the standard audit report and attach it to the financial statements. Then
I'll be able to get some fast action on my loan application."
Required:
a. Would Ramos be justified in complying with Red's request for an auditor's opinion?
Explain.
b. If you think Ramos should issue the audit report, do you think he should first
perform an audit of the company despite his detailed