chapter 7 audit homework

Which of the following controls would most likely be tested during an interim period?

controls over nonroutine transactions

controls that operate on a continuous basis

controls over transactions that involve a high degree of subjectivity

controls over the period-end financial reporting process

controls that operate on a continuous basis

In auditing a public company, Natalie, an auditor for N. M. Neal & Associates, identifies four deficiencies in ICFR. Three of the deficiencies are unlikely to result in financial misstatements that are material. One of the deficiencies is reasonably likely to result in misstatements that are not material but significant. What type of audit report should Natalie issue?

a disclaimer of opinion

an unqualified report

an exculpatory opinion

an adverse report

an unqualified report

In auditing ICFR for a public company, Emily finds that the entity has a significant subsidiary located in a foreign country. Emily’s accounting firm has no offices in that country, and the entity has thus engaged another reputable firm to conduct the audit of internal control for that subsidiary. The other auditor’s report indicates that there are no material weaknesses in the foreign subsidiary’s ICFR. What should Emily do?

Accept the other auditor’s opinion after evaluating the auditor’swork and make reference to the other auditor’s report in her audit opinion.

Disclaim an opinion because she cannot rely on the opinion of another auditor in dealing with a significant subsidiary.

Qualify the opinion because she is unable to conduct the testing herself, and this constitutes a significant scope limitation.

Accept the other auditor’s opinion and express an unqualified opinion, making no reference to the other auditor’s report in her audit opinion.

Accept the other auditor’s opinion after evaluating the auditor’swork and make reference to the other auditor’s report in her audit opinion.

Entity-level controls can have a pervasive effect on the entity’s ability to meet the control criteria. Which one of the following is not an entity-level control?

management’s risk assessment process

controls to monitor results of operations

the period-end financial reporting process

controls to require authorization of inventory purchases.

controls to require authorization of inventory purchases.

A primary advantage of using generalized audit software packages to audit the financial statements of an entity that uses an IT system is that the auditor may:

reduce the level of required tests of controls to a relatively small amount.

access information stored on computer files while having a limited understanding of the entity’s hardware and software features.

substantiate the accuracy of data through self-checking digits and hash totals.

consider increasing the use of substantive tests of transactions in place of analytical procedures.

access information stored on computer files while having a limited understanding of the entity’s hardware and software features.

AnnaLisa, an auditor for N. M. Neal & Associates, is prevented by the management of Lileah Company from auditing controls over inventory. Lileah is a public company. Management explains that controls over inventory were recently implemented by a highly regarded public accounting firm that the entity hired as a consultant and insists that it is a waste of time for AnnaLisa to evaluate these controls. Inventory is a material account, but procedures performed as part of the financial statement audit indicate the account is fairly stated. AnnaLisa found no material weaknesses in any other area of the entity’s internal control relating to financial reporting. What kind of report should AnnaLisa issue on the effectiveness of Lileah’s internal control?

a disclaimer of opinion

an unqualified report

an exculpatory opinion

an adverse report

a disclaimer of opinion

Which of the following is not a factor that might affect the likelihood that a control deficiency could result in a misstatement in an account balance?

the susceptibility of the related assets or liability to loss or fraud

the interaction or relationship of the control with other controls

the nature of the financial statement accounts, disclosures, and assertions involved

the financial statement amounts exposed to the deficiency

the financial statement amounts exposed to the deficiency

A walkthrough is one procedure used by an auditor as part of the internal control audit. A walkthrough requires an auditor to:

trace a transaction from every class of transactions from origination through the entity's information system.

trace a transaction from each major class of transactions from origination through the entity’s information system.

trace a transaction from each major class of transactions from origination through the entity’s information system until it is reflected in the entity’s financial reports.

tour the organization’s facilities and locations before beginning any audit work.

trace a transaction from each major class of transactions from origination through the entity’s information system until it is reflected in the entity’s financial reports.

The Sarbanes-Oxley Act of 2002 requires management to include a report on the effectiveness of ICFR in the entity’s annual report. It also requires auditors to report on the effectiveness of ICFR for large public companies. Which of the following statements concerning these requirements is false?

The auditor should provide recommendations for improving internal control in the audit report.

Management’s report should state its responsibility for establishing and maintaining an adequate internal control system.

The auditor should evaluate whether internal controls over financial reporting are designed and operating effectively.

Management should identify material weaknesses in its report.

The auditor should provide recommendations for improving internal control in the audit report.

If the financial reporting risks for a location are low and the entity has good entity-level controls, management may rely on which of the following for its assessment?

self-assessment processes in conjunction with entity-level controls

document and test controls over specific risks

selective control test at that location

document and test entity-level controls over the entire entity

self-assessment processes in conjunction with entity-level controls

Significant deficiencies and material weaknesses must be communicated to an entity’s audit committee because they represent:

significant deficiencies in the design or operation of internal control.

disclosures of information that significantly contradict the auditor’s going concern assumption.

material fraud or illegal acts perpetrated by high-level management.

potential manipulation or falsification of accounting records.

significant deficiencies in the design or operation of internal control.

Which of the following statements concerning control deficiencies is true?

The auditor should communicate to management, in writing, all control deficiencies in internal control identified during the audit.

An auditor must immediately report material weaknesses and significant deficiencies discovered during an audit to the PCAOB.

All control deficiencies are significant deficiencies.

All significant deficiencies are material weaknesses.

The auditor should communicate to management, in writing, all control deficiencies in internal control identified during the audit.

When auditors report on the effectiveness of internal control “as of” a specific date and obtain evidence about the operating effectiveness of controls at an interim date, which of the following items would be the least helpful in evaluating the additional evidence to gather for the remaining period?

the length of the remaining period

the walkthrough of the control system conducted at interim

any significant changes that occurred in internal control subsequent to the interim date

the specific controls tested prior to the “as of” date and the results of those tests

the walkthrough of the control system conducted at interim

A control deviation caused by an employee performing a control procedure that he or she is not authorized to perform is always considered a:

significant deficiency.

deficiency in operation.

deficiency in design.

material weakness.

deficiency in operation.

Which of the following most likely represents a weakness in internal control of an IT system?

The accounts payable clerk prepares data for computer processing and enters the data into the computer.

The control clerk establishes control over data received by the IT department and reconciles control totals after processing.

The systems programmer designs the operating and control functions of programs and participates in testing operating systems.

The systems analyst reviews output and controls the distribution of output from the IT department.

The systems analyst reviews output and controls the distribution of output from the IT department.