Chapter 10 review

Fraudulent Financial Reporting

The intentional misstatement or omission of amounts or disclosures in financial statements with the intent to deceive users. It involves deliberately manipulating financial statement numbers or disclosures to make the company's financial position or performance appear different from reality. It often occurs at higher levels of management and involves larger amounts.

- Examples:

• Recording expenses as assets to overstate income and total assets.

• Recording fictitious sales or recognizing revenue before it has been earned to make sales and income appear higher.

• Omitting liabilities to understate expenses and overstate income.

Misappropriation of Assets

Fraud involving the theft of an entity's assets, usually by employees or others within the organization.

• Example: Stealing cash collected from customers before recording the receipt.

• Example: Making unauthorized payments to fictitious vendors and directing the money to an improper account.

Fraud Triangle

The fraud triangle represents the three conditions associated with fraud. All three components are generally considered necessary for the fraud triangle to be present.

• Incentives/Pressures: A reason or motivation to commit fraud.

• Opportunities: A situation that makes it possible to commit and conceal fraud.

• Attitudes/Rationalization: A way of justifying fraudulent behavior.

Incentives/Pressures

Conditions that motivate someone to commit fraud.

• Examples:

  • Management wants to meet a bonus target.

  • The company is struggling to meet debt covenant requirements.

  • Competition and market saturation threaten financial performance.

Opportunities

Conditions that allow someone to commit and conceal fraud.

• Examples:

  • Weak internal controls.

  • Significant accounting estimates that are difficult to verify.

  • Lack of mandatory vacations for employees with access to assets.

  • Payments to fictitious vendors because an approved vendor list is not maintained.

Attitudes/Rationalization

The attitudes or beliefs that allow someone to justify committing fraud.

• Examples:

  • Management repeatedly justifies inappropriate accounting based on materiality.

  • Employees disregard internal controls.

  • Management fails to communicate the importance of ethics and integrity.

Corporate Governance

The oversight and structures used to guide a company, promote accountability, and support ethical behavior. The board of directors and audit committee play important oversight roles.

• The audit committee oversees management's fraud risk assessment and antifraud programs.

• A strong ethical culture and effective oversight help reduce fraud risk.

• The audit committee considers the possibility that management could override controls.

Control Procedures for Fraud

Policies and procedures implemented by management to prevent and detect fraud and help maintain reliable financial reporting.

• Examples:

  • Maintaining an approved vendor list.

  • Requiring receipts for cash sales.

  • Separating duties so one employee does not control every step of a transaction.

  • Reviewing journal entries and unusual transactions.

Prevention:

Controls designed to stop fraud before it occurs.

• Example: Requiring purchases to be made only from approved vendors.

Detection:

Procedures designed to identify fraud that has occurred or is occurring.

• Example: A whistleblower hotline that allows employees to report suspected fraud.

Deterrence:

Actions that discourage people from committing fraud.

• Example: Enforcing consequences, such as termination or prosecution, for fraudulent behavior.

Specific Fraud Risk Areas — Four areas to know

Based on your notes, the four areas are:

• Revenue and accounts receivable

• Inventory

• Purchases and accounts payable

• Other areas

Revenue and accounts receivable:

Fictitious sales, premature revenue recognition, manipulation of returns and allowances, and theft of cash receipts

Inventory:

Manipulating inventory amounts to achieve financial reporting objectives or stealing inventory.

Purchases and accounts payable:

Paying fictitious vendors and directing payments to fraudulent accounts.

Other areas:

Fixed assets, intangible assets, and payroll expenses

What are the two types of fraud? Give an example of each.

• Fraudulent financial reporting

• Misappropriation of assets

Fraudulent financial reporting:

Intentionally misstating financial statement amounts or disclosures to deceive users.

• Example: Recording fictitious sales to overstate revenue and income.

Misappropriation of assets:

Stealing company assets or using them without authorization.

• Example: An employee steals cash collected from customers and fails to record the sale or receipt properly.

What is the fraud triangle?

The fraud triangle represents the three conditions associated with fraud: incentives/pressures, opportunities, and attitudes/rationalization.

List the three components of a fraud triangle, give an example of each,

• Incentives/Pressures:

  • A manager wants to meet an earnings target to receive a bonus.

• Opportunities:

  • Weak internal controls allow the manager to record fictitious sales without detection.

• Attitudes/Rationalization:

  • The manager justifies the action by believing that manipulating the numbers is acceptable because the company needs to meet its goals.

Explain whether fraud can exist if one component of the fraud triangle is missing

According to your notes, all three conditions must be present for the fraud triangle to be present. If one condition is missing, the complete fraud triangle does not exist. The presence of these conditions indicates fraud risk; it does not automatically prove that fraud occurred.

How do auditors assess the risk of material misstatement due to fraud

Auditors assess fraud risk during audit planning by gathering and evaluating information about the company, identifying fraud risk factors, and maintaining professional skepticism throughout the audit.

What sources do they use to evaluate the risk of material misstatement due to fraud

The five sources of information are:

1. Communications among the audit team:

2. Inquiries of management:

3. Risk factors:

4. Analytical procedures:

5. Other information:

Communications among the audit team:

Discuss where and how fraud could occur and how it could be concealed.

Inquiries of management:

Ask about management's knowledge of fraud, its fraud risk assessment, and the controls in place.

Risk factors:

Identify incentives, opportunities, and attitudes that could increase the risk of fraud.

Analytical procedures:

Identify unusual trends, relationships, or changes that may indicate possible fraud.

Other information:

Consider other relevant evidence gathered during the audit.

Auditors must maintain a

questioning mind and critically evaluate audit evidence.

They should investigate unusual or contradictory information rather than automatically accepting management's explanations.

What is management responsible for implementing to address fraud?

Management is responsible for implementing corporate governance and control procedures to minimize fraud risk.

The three ways these measures reduce fraud are:

• Prevention

• Detection

• Deterrence

Prevention:

Stops fraud before it occurs.

• Example: Maintaining an approved vendor list to prevent payments to fictitious vendors

Detection:

Identifies fraud that has occurred or is occurring.

• Example: Using a whistleblower hotline to report suspected fraud or reviewing transaction records for unusual activity

Deterrence:

Discourages people from committing fraud.

• Example: Consistently enforcing disciplinary action, termination, or prosecution when fraud is discovered.

Corporate governance supports these efforts through ethical leadership, effective oversight, and an appropriate tone at the top.

A strong culture of honesty and integrity communicates that fraud will not be tolerated. Management is responsible for

designing, implementing, and monitoring antifraud controls, while the audit committee oversees management's efforts and the financial reporting and internal control processes.

Auditors respond to fraud risk at three levels:

1. Overall financial statement level

2. Assertion level

3. Management override of controls

Overall financial statement level:

Make broad changes to the audit approach, such as assigning more experienced personnel, increasing professional skepticism, and introducing unpredictability into audit procedures.

Assertion level:

Perform additional or modified procedures targeting the specific risk, such as testing year-end sales transactions and reviewing shipping documents.

Management override of controls:

Perform procedures specifically designed to address management's ability to bypass established controls.

For errors, auditors generally respond at

the overall financial statement and assertion levels.

Fraud requires the additional management-override level because

management may deliberately bypass controls that would otherwise prevent or detect a misstatement.

For example, management could override the normal sales approval process and record fictitious revenue through a manual journal entry. Even if the company has effective controls, the auditor must consider whether management can circumvent them.

The three required procedures addressing management override are:

• Examine journal entries and other adjustments for possible fraud.

• Review accounting estimates for potential management bias.

• Evaluate the business rationale for significant unusual transactions.

Describe at least two scenarios that present fraud risk, how the auditor should respond, and the auditor's responsibilities.

Scenario 1: Unusually high revenue at year-end

A company records five times its normal monthly sales in December. This unusual increase may indicate premature revenue recognition or fictitious sales.

The auditor should:

• Apply analytical procedures to investigate the unusual increase.

• Increase testing of year-end sales transactions.

• Review shipping documents and other supporting evidence to determine whether sales were recorded in the proper period.

• Evaluate whether revenue is supported by valid transactions and whether the evidence indicates possible fraud.

Describe at least two scenarios that present fraud risk, how the auditor should respond, and the auditor's responsibilities.

Scenario 2: Suspected theft of cash receipts

An auditor discovers that cash sales may have been collected by employees but not recorded in the accounting records.

The auditor should:

• Investigate discrepancies between recorded sales, receipts, and cash balances.

• Apply data analytics and perform additional substantive testing.

• Examine relevant transaction records and supporting documentation.

• Determine whether the evidence indicates missing cash receipts or possible misappropriation of assets.

Auditor's responsibilities in both scenarios

The auditor must obtain reasonable assurance that the financial statements are free of material misstatement, whether caused by fraud or error. When fraud is suspected, the auditor should maintain professional skepticism, gather additional evidence, reassess fraud risk, and modify audit procedures as necessary.

The auditor must also document the work performed, including:

• Significant decisions made during the fraud-risk discussion.

• Procedures performed to identify and assess fraud risks.

• Specific risks identified at the overall financial statement and assertion levels.

• Responses to the identified risks.

• Results of tests and other audit procedures.

• Actions taken in response to unusual analytical relationships or other warning signs.

• Communications about fraud with management, the audit committee, or others.

If suspected fraud involves the controller, the auditor should communicate with an appropriate level of management at least one level above the individual involved and with the audit committee. If senior management is involved, the matter should be discussed directly with the audit committee.

Three main techniques used to manipulate revenue:

• Fictitious revenue or sales

• Premature revenue recognition

• Manipulation of adjustments to revenue

In all three cases, the auditor should investigate unusual patterns, obtain sufficient supporting evidence, increase professional skepticism, and document the procedures performed and their results.

Fictitious revenue or sales

Management records sales that never occurred to overstate revenue and income.

• Example: Recording a $100,000 sale even though no customer order or shipment exists.

• Auditor response: Examine sales invoices, customer orders, shipping documents, and other supporting evidence to determine whether the transaction is legitimate.

Premature revenue recognition

Management records revenue before the requirements for recognizing it have been met or records it in the wrong accounting period.

• Example: Recording January sales in December to increase year-end revenue.

• Auditor response: Perform cutoff testing around year-end, inspect shipping documents, and verify that revenue was recorded in the correct period.

Manipulation of adjustments to revenue

Management manipulates contra-revenue accounts, such as sales returns and allowances, or related estimates, such as bad debt expense, to overstate net revenue or income.

• Example: A company records $300 million in sales but understates expected returns and allowances, making net revenue appear higher than it should.

• Auditor response: Examine sales returns and allowances, review supporting documentation for returns, and evaluate whether related estimates are reasonable and properly recorded.