How to Use Audit Walkthroughs to Find Control Weaknesses
What is the purpose of audit walkthroughs? How do you document walkthroughs? Is it better to use checklists, flowcharts…
Auditors are required to perform a risk assessment. That assessment is to determine where the risk of material misstatement is higher. Account balances, transaction classes, and disclosures with a risk of material misstatement should be addressed by the auditor. Auditors create substantive tests and tests of controls (also known as further audit procedures) in response to the identified risk of material misstatement. These procedures are designed to lower the auditorโs detection risk (the risk the auditor will not detect material misstatement).
So risk assessment procedures are performed early in the audit. Those procedures include gaining an understanding of the entity and its environment, including its internal controls. The auditor inquires, inspects, and makes observations to understand the entity and where risks of material misstatements are most likely. Walkthroughs are performed to review the design and implementation of controls. Estimates are also reviewed to see if there is any management bias in those numbers. Additionally, the auditor performs preliminary analytical procedures to see if the numbers are in accord with the auditorโs expectations.
The risk assessment procedures, including walkthroughs, are performed to understand the accounting system and internal controls, not for the purpose of expressing an opinion on the internal control system.
All identified risks are brought together to create a complete picture of where misstatements might occur. This picture is then used to create the audit plan (also known as an audit program) and an audit strategy.
Risk assessment is iterative. So, if the auditor encounters unknown risks as he or she performs the planned audit procedures, the risk assessment should be revisited and reworked, if necessary.
What is the purpose of audit walkthroughs? How do you document walkthroughs? Is it better to use checklists, flowcharts…
Information technology controls (IT controls) are getting increased attention with the implementation of SAS 145, Understanding the Entity and…
In this article, I explain SAS 143, Auditing Accounting Estimates and Related Disclosures, a new audit standard applicable for periods ending…
Preliminary analytics assist auditors in detecting signs of material misstatement. See how to use this tool in your audits.
Here are 15 risk assessment mistakes. Have you seen these? Assessing control risk at high with no understanding of…
Peer reviews find that many CPA firms don’t identify significant risks in audits, and that’s a problem. Why? Because…
Control risk continues to create confusion in audits. Some auditors assess control risk at less than high when they…
Statement on Auditing Standards No. 145 (SAS 145),ย Understanding the Entity and Its Environment and Assessing the Risks of Material…
Related party transactions can be a means to fraudulent financial reporting. Yet, auditors often don’t detect the financial statement…