You are on page 1of 12

AUDITING THEORY

AT.0105-The Auditor’s Responsibilities Relating to Fraud, Error and Non-compliance MAY 2020

LECTURE NOTES
Auditor's Responsibilities Relating to Fraud and The primary responsibility for the prevention and detection
Error of fraud rests with both TCWG of the entity and
Introduction management. Management shall establish a control
environment and implement internal control policies and
The auditor is responsible for obtaining reasonable procedures to prevent and detect fraud. On the other
assurance that the FSs taken as a whole are free from hand, TCWG, through its oversight function, shall ensure
material misstatement, whether caused by fraud or error. the integrity of accounting and financial reporting systems
Hence, the auditor’s responsibility for the detection of and that appropriate controls are in place.
fraud and error is essentially the same.
On the other hand, the auditor’s responsibility is to obtain
Fraud refers to an intentional act by one or more reasonable assurance about whether the FSs taken as a
individuals among management, TCWG, employees, or whole are free from material misstatement, whether
third parties, involving the use of deception to obtain an caused by fraud or error. The auditor is not responsible
unjust or illegal advantage. While, error pertains to for discovering fraud, and is not and cannot be held
unintentional misstatements or omissions in FSs, including responsible for the prevention of fraud. Unless the auditor
the omission of an amount or disclosure. Differentiating has reason to believe the contrary, the auditor may accept
fraud from error requires professional judgment. The risk records and documents as genuine. An audit rarely
of not fraud is higher than error because fraud may be involves the authentication of documents.
concealed, especially if through collusion.
The auditor shall perform the procedures below following
Although fraud is a broad legal concept, the auditor is the risk-based audit process:
concerned with fraud that causes a material misstatement  maintaining an attitude of professional skepticism;
in the FSs. In addition, the auditor does not make legal  exercising professional judgment;
determinations of whether fraud has actually occurred.  holding engagement team discussion (‘brainstorming’);
 performing RAP and related activities;
Types of Fraud
 identifying and assessing the ROMM due to fraud;
In relation to audit of financial statements:  responding to assessed ROMM due to fraud;
a. Fraudulent financial reporting – Involves intentional  evaluating the audit evidence and the results of audit;
misstatements, including omissions of amounts or  communicating misstatements resulting from fraud;
disclosures in FSs, to deceive FS users, normally  obtaining management representations;
involves management. Examples are the following:  considering withdrawing from engagement; and
 Manipulation or falsification of financial records  documenting the results of work.
 Misrepresentation or intentional omission
Discussion Among the Engagement Team
of information in the FSs
 Intentional misapplication of accounting policies This discussion shall place particular emphasis on how and
b. Misappropriation of assets (theft) - Involves the theft where the entity’s FSs may be susceptible to material
of an entity’s assets and is often perpetrated by misstatement due to fraud, including how fraud might
employees in relatively small and immaterial occur. The team shall set aside beliefs that management
amounts. However, it can also involve management and TCWG are honest and have integrity.
and TCWG. Examples of this type of fraud are the
following: Performing RAP and Related Activities
 Embezzling receipts Management and Others within the Entity
 Lapping of accounts receivable
 Entity funds sent to a personal bank account The auditor shall make inquiries of management, and
 Inventory items sold personally by entity others within the entity as appropriate, to determine
employees whether they have knowledge of any actual, suspected or
 Goods or services paid for by the entity but alleged fraud affecting the entity.
not received
The auditor shall make inquiries of internal audit to
 Use of entity assets for personal use
determine whether it has knowledge of any actual,
As to perpetrator: suspected or alleged fraud affecting the entity, and to
a. Management fraud – refers to fraud involving one or obtain its views about the risks of fraud.
more members of management or TCWG.
Those Charged with Governance (TCWG)
b. Employee fraud – refers to fraud involving only
employees of the entity. The auditor shall obtain an understanding of how TCWG
exercise oversight of management’s processes for
The risk of the auditor not detecting management fraud is
identifying and responding to the risks of fraud in the
greater than for employee fraud, because management
entity and the internal control that management has
may override otherwise effective internal controls.
established to mitigate these risks. TCWG of an entity
Responsibility of Management and Those Charged have oversight responsibility for systems for monitoring
with Governance (TCWG) vs. that of the Auditor risk, financial control and compliance with the law.

Page 1 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER

The auditor shall make inquiries of TCWG to determine


that otherwise appears to be operating effectively. Due to
whether they have knowledge of any actual, suspected or
the unpredictable way in which such override could occur,
alleged fraud affecting the entity. These inquiries are made
it is a ROMM due to fraud and thus a significant risk.
in part to corroborate the responses to the inquiries of
management.
Irrespective of the auditor’s assessment of the risks of
Unusual or Unexpected Relationships Identified
management override of controls, the auditor shall design
The auditor shall evaluate whether unusual or unexpected and perform audit procedures to:
relationships that have been identified in performing a. Test the journal entries and other adjustments made in
analytical procedures, including those related to revenue the preparation of the FSs.
accounts, may indicate ROMM due to fraud. b. Review accounting estimates for biases.
c. For significant transactions that are outside the
Other Information normal course of business for the entity, or appear to
be unusual, the auditor shall evaluate business
The auditor shall consider whether other information rationale (or the lack thereof) of the transactions.
obtained by the auditor indicates ROMM due to fraud.
Evaluating Audit Evidence and Results of Audit
Evaluation of Fraud Risk Factors
Based on the audit procedures performed and the audit
Fraud risks factors refer to events or conditions that evidence obtained, to evaluate whether the assessments
indicate an incentive or pressure to commit fraud or of the ROMM at the assertion level remain appropriate.
provide an opportunity to commit fraud. The three This evaluation is primarily a qualitative matter based on
conditions (the fraud triangle or characteristics) generally the
present when fraud occurs are: auditor’s judgment.
a) Attitudes or rationalizations – Those involved in the
fraud are able to rationalize committing a Analytical Procedures Performed in the Overall Review of
fraudulent act. This relates to either a person the Financial Statements
committing the fraud, or to the entity’s control
The auditor shall evaluate whether analytical procedures
environment.
that are performed when forming an overall conclusion as
b) Incentives or pressures – Management and employees
to whether the FSs as a whole are consistent with the
have an incentive (e.g., benefit or enrichment) or are
auditor’s understanding of the entity and its environment
under pressure (e.g., threat of losing their job), which
indicate a previously unrecognized ROMM due to fraud.
provides a reason to commit fraud.
c) Opportunities – Circumstances making execution
Consideration of Identified Misstatements
of fraud possible. These circumstances exist when
a person is generally trusted, internal control is The auditor’s actions depend on whether the fraud that has
perceived to be easily overridden, or the individual been discovered or suspected is material or immaterial:
knows about deficiencies in internal control.  If immaterial:
o Refer to appropriate level of management (one
Identifying and Assessing the ROMM Due to Fraud level above the person involved)
o Gain satisfaction no FSs effect
The auditor shall identify and assess the ROMM due to
 If material or unable to evaluate whether material
fraud at the FSs level, and at the assertion level for classes
or immaterial:
of transactions, account balances and disclosures.
o Consider implications for audit, e.g., reliability of
Risks of Fraud in Revenue Recognition management representations
o Investigate further, i.e., discuss with appropriate
The auditor shall, based on a presumption that there are level of management (one level above the person
risks of fraud in revenue recognition, evaluate which types involved)
of revenue, revenue transactions or assertions give rise to o Obtain evidence of fraud and its effects
such risks. Otherwise, auditor shall document when this o Suggest client consult legal counsel
presumption is not applicable. For example, when revenue
recognition is a single type of simple revenue transaction, Communication of Misstatements due to Fraud
e.g., leasehold revenue from a single unit rental property.
In the exceptional circumstances where the auditor has
Understanding the Entity’s Related Controls doubts about the integrity or honesty of management or
The auditor shall treat assessed ROMM due to fraud as TCWG, the auditor may consider it appropriate to obtain
significant risks and accordingly, obtain an understanding legal advice to assist in determining the appropriate course
of the entity’s related controls, including control activities. of action.

Responding to Assessed ROMM Due to Fraud Communication To Management


Overall Responses The communication enables management to act on a
The auditor shall determine overall responses to address timely basis. The communication is made even if the
the assessed ROMM due to fraud at the FSs level. matter might be considered inconsequential (for example,
a minor defalcation by an employee at a low level in the
Audit Procedures Responsive to Assessed Risks of Material entity’s organization). The determination whom to
Misstatement Due to Fraud at the Assertion Level communicate is a matter of professional judgment which
normally is at least one level above the person involved.
The auditor shall design and perform FAP whose nature,
timing and extent are responsive to the assessed ROMM
Communication With Those Charged With Governance
due to fraud at the assertion level.
The auditor’s communication with TCWG may be made
Audit Procedures Responsive to Risks Related to
orally or in writing. Due to the nature and sensitivity of
Management Override of Controls
fraud involving senior management, or fraud that results in
Management is in a unique position to perpetrate fraud a material misstatement in the FSs, the auditor reports
because of management’s ability to manipulate accounting such matters on a timely basis and may consider it
records and prepare fraudulent FSs by overriding controls necessary to also report such matters in writing.
Page 2 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER

In some cases, the auditor may consider it appropriate to material misstatement due to fraud;
communicate with TCWG when the auditor becomes aware
of fraud involving employees other than management that
does not result in a material misstatement. Similarly,
TCWG may wish to be informed of such circumstances.

Communications to Regulatory and Enforcement


Authorities
The auditor’s professional duty to maintain the
confidentiality of client information may preclude
reporting fraud to a party outside the client entity.
However, the regulatory requirements, statute, the law or
courts of law overrides this duty. For example, under a
BSP requirement, the auditor of a financial institution has
a statutory duty to report the occurrence of fraud to the
BSP. Also, under an SEC requirement, the auditor has a
duty to report material audit findings, such as those
involving fraud or error.

Communication of Misstatements due to Error


The auditor should communicate to management (and to
TCWG, where necessary) any identified material
misstatements resulting from error. In addition, the
auditor should communicate also to TCWG those
uncorrected misstatements aggregated by the auditor
during the audit that were deemed by management as
immaterial to the FSs.
Management Written Representations
The auditor shall obtain written representations from
management that:
a. It acknowledges its responsibility for internal control
to prevent and detect fraud;
b. It has disclosed to the auditor:
 the results of its assessment of the risk that
the FSs may be materially misstated due to
fraud;
 its knowledge or suspicion of fraud involving:
management; employees who have significant
roles in internal control; or others where the fraud
could have a material effect on the FSs; and
 its knowledge of any allegations of fraud,
or suspected fraud, affecting the entity’s
FSs
communicated by employees, former employees,
analysts, regulators or others.
Auditor Unable to Continue the Engagement
Examples of these exceptional circumstances include:
 The entity does not take the appropriate action
regarding fraud that the auditor considers
necessary, even when the fraud is not material to
the FSs;
 The auditor’s consideration of the ROMM due to fraud
and the results of audit tests indicate a significant
risk of material and pervasive fraud; or
 The auditor has significant concern about the
competence or integrity of management or TCWG.
If, as a result of circumstances, the auditor shall:
a) Consider whether it is appropriate to withdraw from
the engagement; and
b) If the auditor withdraws:
 Discuss with the appropriate level of management
and TCWG, including the reasons thereof; and
 Determine whether there is a professional or legal
requirement to report to the person or persons
or, in some cases, to regulatory authorities.
Documentation
The auditor’s documentation shall include the:
a) Significant decisions reached during ‘brainstorming’
regarding the susceptibility of the entity’s FSs to

Page 3 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER
b) Identified and assessed ROMM due to fraud at the detect material misstatements are greater because:
FSs level and at the assertion level.  Many laws and regulations, relating principally to the
c) Responses to the assessed ROMM: the overall operating aspects of an entity, do not affect the FSs.
responses and the nature, timing and extent of
FAP;
d) Results of the audit procedures;
e) Communications about fraud made to management,
TCWG, regulators and others; and
f) Reasons for that conclusion ROMM due to fraud
related to revenue recognition is not applicable.
Auditor’s Responsibility to Consider Laws
and Regulations

Introduction
The auditor needs to consider the applicable laws and
regulations to the entity in FSs audit because
compliance and non-compliance with those laws and
regulations affect the FSs in many ways. In addition,
those laws and regulations to which an entity is subject
constitute the legal and regulatory framework in which
the entity operates.
Nature and Definition of Non-compliance
Non-compliance–Acts of omission or commission by the
entity (intentional or unintentional), which are contrary
to the prevailing laws or regulations. Such acts include
transactions entered into by, or in the name of, the
entity, or on its behalf, by TCWG, management or
employees.
However, non-compliance does not include personal
misconduct (unrelated to the business activities of the
entity) by TCWG, management or employees of the
entity.
Types of Laws and Regulations
In relation to audit of FSs, there are two types:
a. Direct effect–Amounts and disclosures, as a result
of compliance, are reported on the FSs such as
tax and pension laws and regulations
b. Indirect effect–Relates primarily to operations of the
entity but does not have a direct effect on an
entity’s FSs. However non-compliance may result in
fines, litigation or other consequences for the entity
that may have a material effect on the FSs.
Examples may include compliance with the terms of
an operating license, regulatory solvency
requirements, or environmental regulations.
Responsibility for Compliance with Laws
and Regulations
Responsibility of Management for Compliance with Laws
and Regulations
Management, with the oversight of TCWG, is
responsible for ensuring that the entity’s operations
are conducted in accordance with laws and
regulations.
Responsibility of the Auditor
The auditor is responsible for obtaining reasonable
assurance that the FSs, taken as a whole, are free from
material misstatement, whether caused by fraud or
error.
The auditor shall identify ROMM of the FSs due to non-
compliance with laws and regulations. However, the
auditor is not responsible for preventing non-compliance
and cannot be expected to detect non-compliance with
all laws and regulations. In the absence of evidence to
the contrary, the auditor is entitled to assume the entity
is in compliance with applicable laws and regulations
affecting the client
In the context of laws and regulations, the potential
effects of inherent limitations on the auditor’s ability to
Page 4 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER

 Non-compliance may be concealed, management


a) An understanding of the nature of the act and the
override of controls or intentional
circumstances in which it has occurred; and
misrepresentations to the auditor.
b) Further information to evaluate the possible effect on
 Whether an act constitutes non-compliance is
the FSs.
ultimately determined by a court of law.
Audit Procedures
Ordinarily, the further removed non-compliance is from
the events and transactions reflected in the FSs, the less If the auditor suspects there may be non-compliance, the
likely the auditor is to become aware of it or to recognize auditor shall discuss the matter with management and,
the non-compliance. where appropriate, TCWG. If management or, as
appropriate, TCWG do not provide sufficient information
The Auditor’s Consideration of Compliance with
that supports that the entity is in compliance with laws
Laws and Regulations
and regulations and, in the auditor’s judgment, the effect
Obtaining an Understanding of the Legal and Regulatory of the suspected non-compliance may be material to the
Framework FSs, the auditor shall consider the need to obtain legal
advice.
As part of obtaining an understanding of the entity and its
environment, the auditor shall obtain a general Evaluating the Implications of Non-Compliance
understanding of:
The auditor shall evaluate the implications of non-
a) The legal and regulatory framework applicable to the
compliance in relation to other aspects of the audit,
entity and the industry or sector in which the entity
including the auditor’s risk assessment and the reliability
operates; and
of written representations, and take appropriate action.
b) How the entity is complying with that framework.
In exceptional cases, the auditor may consider whether,
Direct Effect Laws and Regulations
unless prohibited by law or regulation, withdrawal from
The auditor shall obtain sufficient appropriate audit the engagement is necessary when management or TCWG
evidence regarding compliance with the provisions of those do not take the necessary remedial action, even when the
laws and regulations with direct effect on the material non-compliance is not material but the auditor may
amounts and disclosures in the FSs. consider seeking legal advice. If withdrawal is prohibited,
the auditor may consider alternative actions, including
Indirect Effect Laws and Regulations describing the non-compliance in an Other Matter(s)
The auditor shall perform the following to identify non- paragraph in the auditor’s report.
compliance that may have a material effect on the FSs: Reporting of Identified or Suspected Non-
a. Inquiring of management and, where appropriate, Compliance
TCWG, as to whether the entity is in compliance
with such laws and regulations; and Reporting to Those Charged with Governance
b. Inspecting correspondence, if any, with the relevant
The auditor shall communicate to TCWG matters involving
licensing or regulatory authorities.
non-compliance with laws and regulations, unless those
Non-Compliance Brought to the Auditor’s Attention by are clearly inconsequential and they are involved in
Other Audit Procedures management and already aware of it.
During the audit, the auditor shall remain alert to the If the auditor suspects that management or TCWG is
possibility that other audit procedures applied may bring involved in non-compliance, communicate the matter to
instances of non-compliance or suspected non-compliance the next higher level of authority at the entity, if it exists.
with laws and regulations to the auditor’s attention. Otherwise consider obtaining legal advice.
Reporting in the Auditor’s Report
Audit procedures applied to form an opinion on the FSs
may bring instances of non-compliance or suspected non- Results Opinion
compliance with laws and regulations to the auditor’s No sufficient appropriate audit
attention. For example, such audit procedures may evidence obtained as precluded by Qualified or
include: reading minutes; inquiring of the entity’s management or TCWG Disclaimer
management and in-house legal counsel or external legal No sufficient appropriate audit
counsel concerning litigation, claims and assessments; evidence obtained imposed by Evaluate effect on
and performing substantive tests of details of classes of circumstances audit report
transactions, account balances or disclosures. Contains material misstatement Qualified or Adverse
Written Representations Reporting to Regulatory and Enforcement Authorities
The auditor shall request management and, where If the auditor has identified or suspects non-compliance
appropriate, TCWG to provide written representations that with laws and regulations, determine whether the
all known instances of non-compliance or suspected non- auditor has a responsibility to report the identified or
compliance with laws and regulations whose effects should suspected non-compliance to parties outside the entity.
be considered when preparing FSs have been disclosed.
The auditor’s professional duty to maintain the
No Identified or Suspected Non-compliance confidentiality of client information may preclude reporting
In the absence of identified or suspected non-compliance, identified or suspected non-compliance with laws and
the auditor is not required to perform audit procedures regulations to a party outside the entity.
regarding the entity’s compliance with laws and Documentation
regulations, other than those set out above.
The auditor shall document identified or suspected non-
Audit Procedures When Non-Compliance Is compliance with laws and regulations and the results of
Identified or Suspected discussion with management and, where applicable, TCWG
The auditor shall obtain: and other parties outside the entity. For example: copies
of records or documents or minutes of discussions held
with management, TCWG or parties outside the entity.

Page 5 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER
- done -

Page 6 of AT.0105
12
MULTIPLE CHOICE
Fraud and Error
c. Theft of assets covered up by manipulation of
Fraud vs. Error
accounting records
1. What is the primary determinate in the
d. Agreement between two or more persons to
difference between fraud and errors?
commit a criminal act
a. The materiality of the misstatement.
b. The intent to deceive. 7. The most difficult type of misstatement to detect is
c. The level of management involved. fraud based on
d. The type of transaction effected. a. The overrecording of transactions.
b. The nonrecording of transactions.
2. The following are examples of error, except
c. Recorded transactions in subsidiaries or incorrect
a. A mistake in gathering or processing data from
postings of recorded transactions.
which financial statements are prepared.
d. Related-party receivables.
b. An incorrect accounting estimate arising from
oversight or misinterpretation of facts Responsibilities for fraud
c. A mistake in the application of accounting 8. Which statement(s) is(are) incorrect regarding the
principles relating to measurement, recognition, auditor’s responsibility to consider fraud and error in
classification, presentation, or disclosure an audit of financial statements?
d. Misrepresentation in the financial statements of a. The auditor is not and cannot be held responsible
events, transaction or other significant information for the prevention of fraud and error being the
primary responsibility of both the management
3. The risk of not detecting a material misstatement
and those charged with governance.
resulting from fraud is higher than the risk of not
b. When planning and performing audit procedures
detecting a material misstatement resulting from error
and evaluating and reporting the results thereof,
because
the auditor should consider the risk of
a. The effect of fraudulent act is likely omitted in the
misstatements in the financial statements resulting
accounting records
from fraud.
b. Fraud is ordinarily accompanied by acts specifically
c. In planning the audit, the auditor should discuss
designed to conceal its existence and auditors do
with other members of the audit team the
not make legal determinations of whether fraud
susceptibility of the entity to material statements
has actually occurred
in the financial statements resulting from fraud or
c. Fraud is always a result of connivance between or
error and exercise professional skepticism (the
among employees
best method to detect fraud).
d. The auditor is responsible to detect errors but not
d. The auditor should design audit programs that will
fraud
provide reasonable assurance that material errors
Types of fraud and fraud will be detected in the ordinary course of
4. The two types of intentional misstatements that are the examination.
relevant to the auditor’s consideration of fraud include,
Engagement Team Discussion (‘Brainstorming’)
misstatements resulting from fraudulent financial
9. Brainstorming about the susceptibility of the entity’s
reporting and misstatements resulting from
financial statements to material misstatement due to
misappropriation of assets. Fraudulent financial
fraud include the following advantages?
reporting least likely involve
a. Provides an opportunity for more experienced
a. Deception such as manipulation, falsification
engagement team members to share their insights
(including forgery), or alteration of accounting
about how and where the FSs may be susceptible
records or supporting documents from which the
to material misstatement due to fraud and how
financial statements are prepared
entity’s assets could be misappropriated
b. Misrepresentation in, or intentional omission from,
b. Enables the auditor to consider an appropriate
the financial statements of events, transaction or
response to such susceptibility and to determine
other significant information
which members of the engagement team will
c. Intentional misapplication of accounting principles
conduct certain audit procedures.
relating to measurement, recognition,
c. Permits the auditor to determine how the results
classification, presentation, or disclosure
of audit procedures will be shared among the
d. Embezzling receipts, stealing physical assets or
engagement team and how to deal with any
intellectual property , causing an entity to pay for
allegations of fraud that may come to the auditor’s
goods and services not received, or using an
attention.
entity’s assets for personal use.
d. All of the above.
5. In comparing management fraud with employee fraud,
Risk Assessment Procedures and Related Activities
the auditor’s risk of failing to discover the fraud is
10. Sources of information gathered to assess fraud risks
a. Greater for employee fraud because of the higher
usually do not include:
crime rate among blue collar workers
a. Analytical procedures.
b. Greater for management fraud because of
b. Inquiries of management and others within the
management’s ability to override existing internal
entity.
controls, which is always assumed in audit.
c. Communication among audit team members.
c. Greater for employee fraud because of the larger
d. Review of corporate charter and bylaws.
number of employees in the organization
d. Greater for management fraud because managers 11. Categories of fraud risk factors (whose presence often
are inherently smarter than employees has been observed in circumstances where frauds have
occurred) in relation to misstatements arising from
6. Which of the following constitutes the fraud of larceny?
misappropriation of assets and fraudulent financial
a. Misappropriation of assets that have been
reporting are: opportunities; attitudes or
entrusted to one’s care
rationalizations; and pressures or incentives. Which of
b. Theft of assets

Page 7 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER

the following creates an opportunity for fraud to be


a. The existence of a financial subsidiary.
committed in an organization?
b. A consistent record of above average return on
a. Management demands financial success or is
investment for all subsidiaries.
aggressive in its application of accounting rules.
c. Complex sales transactions and transfers of funds
b. Poor internal control.
between affiliated companies.
c. Commitments tied to debt covenants.
d. Use of separate bank accounts for payrolls by each
d. Finding loopholes in the accounting rules to
subsidiary.
achieve earnings targets.
Communicating Misstatements Resulting from Fraud
Identifying and Assessing the ROMM due to fraud
18. Communication of a misstatement resulting from
12. Which of the following is an example of a common type
fraud, or a suspected fraud, or error to the appropriate
of financial reporting fraud?
level of management on a timely basis is important
a. Capitalizing major overhauls to operating
because it enables management to take action as
equipment.
necessary. Ordinarily, the appropriate level of
b. Deferring service revenue until it is delivered to
management is
customers.
a. At least equal to level of persons who appear to be
c. Recording sales for inventory sold with the right to
involved with misstatements or suspected fraud
return, hence, fraud on revenue recognition is
b. At least one level above persons who appear to be
always presumed to exist in absence or conditions
involved with the misstatement or suspected fraud
to the contrary.
c. The audit committee of the board of directors
d. Excluding a contingent liability that has
d. The head of internal audit department
been settled.
19. Protection Transparency, Inc. is being audited by
Responding to Assessed ROMM due to fraud
Messer and Bromely, LLP. During the assessment of
13. Which of the following is most likely to be an overall
fraud, Messer and Bromely discover that the controller
response to fraud risks identified in an audit?
has been creating fictional sales and posting them to
a. Supervise members of the audit team less closely
the general ledger. Who should the auditors make
and rely more upon judgment.
aware of this issue?
b. Use less predictable audit procedures.
a. Protection Transparency's legal counsel.
c. Only use certified public accountants on the
b. The law enforcement agency.
engagement.
c. The chairman of audit committee.
d. Place increased emphasis on the audit of objective
d. The predecessor auditor.
transactions rather than subjective transactions.
Management Representations
14. As part of designing and performing procedures to
20. The auditor least likely obtains written representations
address management override of controls, auditors
from management that:
must perform which of the following procedures?
a. It acknowledges its responsibility for the
Examine all journal Review accounting implementation and operations of accounting and
entries above materiality estimates for biases internal control systems that are designed to
a. Yes Yes prevent and detect fraud and error
b. No No b. It has disclosed to the auditor its knowledge of
c. Yes No fraud or suspected fraud affecting the entity
d. No Yes involving employees who have significant roles in
internal control only.
Evaluating the Audit Evidence and Results of Audit c. It has disclosed to the auditor its knowledge of any
Circumstances that Indicate the Possibility of Fraud allegations of fraud, or suspected fraud affecting
15. The following are examples of circumstances that may the entity’s financial statements communicated by
indicate the possibility that the financial statements employees, former employees, analysts,
may contain a material misstatement resulting from regulations or others
fraud, except d. It has disclosed to the auditor the results of its
a. Transactions that are recorded in a complete or assessment of the risk that the financial
timely manner or are properly recorded as to statements may be materially misstated as a result
amount, accounting period, classification, or entity of fraud
policy.
b. Unsupported or unauthorized balances or Withdrawing from engagement
transactions. 21. The auditor may encounter exceptional circumstances
c. Last-minute adjustments that significantly affect that bring into question the auditors ability to continue
financial results or unusual journal entries. performing the audit, including where
d. Tips or complaints to the auditor about alleged a. The entity does not take the remedial action
fraud. regarding fraud that the auditor considers
necessary in the circumstances, even when the
16. The following are examples of circumstances that may fraud is not material to the financial statements
indicate the possibility that the financial statements b. The auditor’s consideration of the risk of material
may contain a material misstatement resulting from misstatement resulting from fraud and the results
fraud, except of audit tests indicate a significant risk of material
a. Missing documents. and pervasive fraud
b. Documents that appear to have been altered. c. The auditor has significant concern about the
c. Unavailability of other than photocopied or competence or integrity of management or those
electronically transmitted documents when charged with governance that affect the auditor's
documents in original form are expected to exist. ability to rely on management's representations.
d. Significant explained items on reconciliations. d. All of the above
17. Which of the following might be considered a "red flag"
indicating possible fraud in a large manufacturing
company with several subsidiaries?

Page 8 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER

Documentation
a. When the auditor becomes aware of information
22. PSAs require auditors to document which of the
concerning a possible instance of noncompliance,
following matters related to the auditor’s consideration
the auditor shall obtain an understanding of the
of material misstatements due to fraud?
nature of the act and the circumstances in which it
a. Reasons supporting a conclusion that there is not a
has occurred and evaluate the possible effect on
significant risk of material improper expense
the financial statements.
recognition.
b. If the auditor has identified or suspects
b. Procedures performed to obtain information
noncompliance with laws and regulations, the
necessary to identify and assess the risks of
auditor shall determine whether the auditor has a
material fraud.
responsibility to report the identified or suspected
c. Results of the internal auditor’s procedures
noncompliance to parties outside the entity.
performed to address the risk of management
c. The auditor shall document identified or suspected
override of controls.
non-compliance with laws and regulations but not
d. Discussions with management regarding
the results of discussion with management, and
separation of duties.
where applicable, those charged with governance
Non-compliance with Laws and Regulations and other parties outside the entity.
Nature, Definition and Types d. The auditor may withdraw from the engagement
23. Which statement is incorrect regarding the auditor’s when the entity does not take the remedial action
consideration of laws and regulations in an audit of that the auditor considers necessary in the
financial statements? circumstances, even when the noncompliance is
a. Noncompliance refers to acts of omission or not material to the financial statements or affects
commission by the entity being audited which are auditor’s ability to rely on management
contrary to prevailing laws and regulations representations.
b. Noncompliance includes transactions entered into
Indications of Non-Compliance with Laws and Regulations
by, or in the name of, the entity, or on its behalf,
26. According to PSA 250 (Consideration of Laws and
by TCWG, management or employees.
Regulations in an Audit of Financial Statements), the
c. Noncompliance includes personal misconduct of
following are indications that noncompliance may have
the entity’s management or employees though
occurred, except
they are unrelated to the entity’s business
a. Investigation by government departments or
activities
payment of fines or penalties
d. In the absence of evidence to the contrary, the
b. Adverse media comment
auditor is entitled to assume the entity is in
c. Authorized transactions or properly recorded
compliance with applicable laws and regulations
transactions
affecting the client.
d. Purchasing at prices significantly above or below
Responsibility for Compliance with Laws and Regulations market price
24. Which of the following is incorrect about the auditor’s
27. Examples of the type of information that may come to
responsibility for evaluating noncompliance by the
the auditor's attention that may indicate that
entity to laws and regulations?
noncompliance with laws or regulations has occurred
a. It is the responsibility of management, with the
least likely include
oversight of those charged with governance, to
a. Payments for unspecified services or loans to
ensure that the entity’s operations are conducted
consultants, related parties, employees or
in accordance with laws and regulations, including
government employees.
compliance with laws and regulations that b. Purchasing at prices significantly above or below
determine the form or content of the entity’s market price.
financial statements. This includes responsibility
c. Unauthorized transactions or improperly
for the prevention and detection of non-compliance
recorded transactions.
with laws and regulations. d. Payments with proper exchange control
b. An audit cannot be expected to detect documentation.
noncompliance with all laws and regulations.
Detection of noncompliance, regardless of Audit Procedures When Non-Compliance Is Identified or
materiality, requires considerations of the Suspected
implications for the integrity of management or 28. When an auditor becomes aware of a possible
employees illegal act by a client, the auditor should obtain an
c. Generally, the further removed non-compliance is understanding of the nature of the act to
from the events and transactions reflected in the a. Increase the assessed level of control risk.
financial statements, the more likely the auditor is b. Recommend remedial actions to the
to become aware of it or to recognize the possible audit committee.
non-compliance. This is because an illegal act by c. Evaluate the effect on the financial statements and
the client often relate to operating aspects rather may consider seeking legal advice especially when
than accounting aspects. involving members of senior management,
d. In order to plan the audit, the auditor should including members of the board of directors.
obtain a general understanding of the legal and d. Determine the reliability of management’s
regulatory framework applicable to the entity and representations.
the industry and how the entity is complying with
29. Which of the following statements is usually true?
that framework.
a. It is easier for the auditor to uncover fraud than
The Auditor’s Consideration of Compliance with Laws and errors.
Regulations b. It is easier for the auditor to uncover indirect-
25. Which of the following is incorrect about the auditor’s effect illegal acts than fraud.
responsibility for evaluating noncompliance by the c. The auditor’s responsibility for detecting direct-
entity to laws and regulations? effect illegal acts is similar to the responsibility to
detect fraud.

Page 9 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER

d. The auditor’s responsibility for detecting indirect-


b. Obtain evidence about the potential effect of the
effect illegal acts is similar to the responsibility to
illegal act on the financial statements.
detect fraud.
c. Contact the local law enforcement officials
Reporting of Identified or Suspected Non-Compliance regarding potential criminal wrongdoing.
30. Which of the following is the auditor least likely to do d. Consider the impact of the illegal act on the
when aware of an illegal act? relationship with the company’s management.
a. Discuss the matter with the client’s legal counsel.
- now do the DIY drill -

DO-IT-YOURSELF (DIY) DRILL


1. Which of the following are most often involved in
7. Which of the following is least likely to be required on
perpetrating fraud in financial statement
an audit in accordance with PSAs?
reporting?
a. Test appropriateness of journal entries and
a. The auditors and the attorneys.
adjustment.
b. The audit committee members.
b. Review accounting estimates for biases.
c. The chief executive and chief financial officers.
c. Evaluate the business rationale for significant
d. The accounts payable clerks.
unusual transactions.
2. Audits of financial statements are designed to obtain d. Make a legal determination of whether fraud has
reasonable assurance of detecting material occurred.
misstatements due to
8. How will the results of the auditor's assessment of
a. b. c. d.
fraud risk factors further affect the planned audit
Errors Yes Yes Yes No
Fraudulent financial Yes Yes No Yes procedures?
reporting a. Audit procedures and fraud assessment do not
Misappropriation of Yes No Yes No relate.
assets b. The assessment may require a re-audit of previous
Direct-effect illegal acts Yes No Yes No resort to management inquiry.
d. turn the audit over to forensic accountants.
3. Which of the following most accurately defines
professional skepticism as it is used in auditing
standards?
a. It either assumes management is honest or slightly
dishonest, but neither all the time.
b. It neither assumes that management is dishonest
nor assumes unquestioned honesty.
c. It assumes management is honest most of the
time.
d. It assumes that management is dishonest in only
rare instances.
4. Brainstorming about the manner in which fraud may
be committed should include all of the following
except
a. how management could perpetrate and conceal
fraudulent financial reporting
b. any unusual or unexplained changes in behavior or
lifestyle of management or employees
c. any fraud risk factors observed to be present in
the engagement
d. all of the above
5. Which of the following best represents actions
that may indicate fraud is pervasive throughout
the company under audit?
a. The company's management negotiates deals
with vendors in such a manner as to pay lower
prices.
b. The company's management drives luxury vehicles
and takes personal vacations to exotic places.
c. The company's management takes an
overly aggressive approach to revenue
recognition.
d. The company's management estimates bad debts
using an aged accounts receivables ledger rather
than as a percent of sales.
6. If the audit team discovers that fraud risk factors
are present on an engagement, it should then:
a. resign from the client and inform the audit
committee and regulatory authorities.
b. modify procedures to actively search for the
existence of fraud.
c. reduce the amount of evidence required and
Page 10 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER
periods.
c. By the assignment of qualified audit staff to
risky areas of the engagement.
d. Management will be called upon to assist
in coordinating audit procedures.
9. The following are examples of circumstances that
may indicate the possibility that the financial
statements may contain a material misstatement
resulting from fraud, except
a. Fewer responses to confirmations than
anticipated or a greater number of responses
than anticipated.
b. Large numbers of debit entries and
other adjustments made to accounts
receivable records.
c. Missing inventory or physical assets of
significant magnitude.
d. Unusual discrepancies between the entity's
records and confirmation replies.
10. If an auditor believes a client may have committed
illegal acts, which of the following actions should
the auditor take?
a. Consult with the client’s counsel and the
auditor’s counsel to determine how the
suspected illegal acts will be communicated to
stockholders.
b. Extend auditing procedures to determine
whether the suspected illegal acts have a
material effect on the financial statements.
c. Make inquiries of the client’s management and
obtain an understanding of the circumstances
underlying the acts and of other evidence to
determine the effects of the acts on the
financial statements.
d. Notify each member of the audit committee of
the board of directors about the nature of the
acts and request that they advise an approach to
be taken by the auditor.
11. Which of the following is an auditor responsible for
concerning the detection of illegal activities of an
audit client?
a. Assess the inherent risk of material
misstatements due to illegal acts
b. Monitor legal requirements and ensure that the
client’s operating procedures are designed to
meet these requirements, for the period under
audit
c. Ensure that the client appoints an audit committee

Page 11 of AT.0105
12
CPART GETS GMRC CPA REVIEW CENTER

d. Ensure that the client’s internal auditors act in an


audit evidence or in the resolution of potential
ethical manner
disagreements with management.
12. An auditor who discovers that a client's employees c. Usual delays by the entity in providing requested
paid small bribes to municipal officials most likely information
would withdraw from the engagement if d. An unwillingness to address identified weaknesses
a. The payments violated the client's policies in internal control on a timely basis.
regarding the prevention of illegal acts.
17. The following are examples of circumstances that may
b. The client receives financial assistance from a
indicate the possibility that the financial statements
federal government agency.
may contain a material misstatement resulting from
c. Documentation that is necessary to prove that the
fraud, except
bribes were paid does not exist.
a. Unwillingness by management to permit the
d. Management fails to take the appropriate remedial
auditor to meet privately with those charged with
action and reliance on management’s
governance.
representation becomes doubtful.
b. Accounting policies that appear to be consistent
13. If an illegal act is discovered during the audit of a with industry norms.
publicly held company, the auditor should c. Frequent changes in accounting estimates that do
a. Notify the regulatory authorities. not appear to result from changed circumstances.
b. Determine who was responsible for the act. d. Tolerance of violations of the entity’s Code of
c. Modify the extent of auditing procedures. Conduct
d. Report the act to high-level personnel within the 18. Brainstorming about the manner in which fraud may
client's organization. be committed should include all of the following
14. Which of the following is least likely to be included in except
an auditor's inquiry of management while obtaining a. Consider factors that might affect management
information to identify the risks of material motivation to misstate the financial statements
misstatement due to fraud? b. Consider weaknesses in internal control that would
a. Are financial reporting operations controlled by and allow a fraud to take place or management
limited to one location? override of controls
b. Does it have knowledge of fraud or suspect fraud? c. Consider the materiality of the individual
c. Does it have programs to mitigate fraud risks? account balances for substantive testing
d. Has it reported to the audit committee the nature d. Consider factors that may enable an individual
of the company's internal control? capable of committing a fraud to rationalize
perpetrating it
15. Which of the following could indicate that the risk of
fraud and other irregularities perpetrated by senior 19. In evaluating the effect of fraud upon the audit
management is higher than normal? procedures the auditor should consider
a. There are very few related party transactions. a. The type of fraud that may occur.
b. The auditor has not audited this client before. b. The potential significance and likelihood of
c. Management turnover is unusually high. occurrence of fraud.
d. The auditor discovers a GAAP departure during the c. The pervasiveness of fraud detected.
audit. d. All of the above.

16. The following are examples of circumstances that may 20. Relative to internal controls, what is a primary risk of
indicate the possibility that the financial statements fraud in the client company?
may contain a material misstatement resulting from a. The risk that management overrides controls.
fraud, except b. The risk that management changes controls each
a. Undue time pressures imposed by management to year.
resolve complex or contentious issues. c. The risk that management carefully enforces
b. Complaints by management about the conduct of and monitors controls.
the audit or management intimidation of d. The risk that the audit committee
engagement team members, particularly in monitors controls.
connection with the auditor’s critical assessment of

 - end of AT.0105 - 

Page 12 of AT.0105
12

You might also like