Professional Documents
Culture Documents
True False
2. The auditor must understand internal control before assessing inherent risk.
True False
3. The extent of an entity's use of IT can affect any of the components of internal control.
True False
4. One of the risks associated with internal control from IT is potential loss of data.
True False
True False
True False
6-1
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
7. A reliance strategy is used when control risk has been set at high.
True False
8. A substantive strategy is used when control risk has been set at high.
True False
True False
10. Tests of controls must be performed if control risk is set at a lower level.
True False
6-2
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
12. Internal controls are not designed to provide reasonable assurance that
13. The basic concept of internal control that recognizes the cost of internal control should not exceed the
benefits expected to be derived is known as
A. Reasonable assurance.
B. Management responsibility.
C. Limited liability.
D. Management by exception.
14. An auditor would most likely be concerned with internal control policies and procedures that provide
reasonable assurance about the
15. Management's attitude toward aggressive financial reporting and its emphasis on meeting projected
profit goals most likely would significantly influence an entity's control environment when
A. External policies established by parties outside the entity affect its accounting practices.
B. Management is dominated by one individual.
C. Internal audit personnel have direct access to the board of directors and the entity's management.
D. The audit committee is active in overseeing the entity's financial reporting policies.
6-3
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
16. Management philosophy and operating style most likely would have a significant influence on an
entity's control environment when
17. Proper monitoring within an internal control framework may include all of the following except:
A. An external auditor.
B. An effective audit committee.
C. An internal audit function.
D. The internal revenue service.
A. Performance reviews.
B. Information processing.
C. External auditor's tests of controls.
D. Segregation of duties.
19. Potential benefits of an entity's controls in an IT environment include all of the following except:
6-4
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
20. An entity's IT infrastructure refers to
A. Hardware components.
B. Programmers.
C. Software.
D. Data provided by the system.
21. Auditors are most likely to gather audit evidence solely using substantive procedures
22. Proper segregation of functional responsibilities in an effective system of internal control calls for
separation of the functions of
23. Factors that the auditor should consider as increasing the effectiveness of the audit committee
include all of the following except whether:
A. It is independent of management.
B. It is comprised almost exclusively of members of management, ensuring detailed knowledge of the
company's operations.
C. It asks management difficult questions.
D. It interacts regularly with internal audit personnel.
6-5
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
24. The documentation of an auditor's understanding of internal controls
A. Is optional.
B. Must be exclusively in narrative, questionnaires, or flowchart form.
C. Must include flowcharts.
D. Can include any combination of narratives, questionnaires, or flowcharts.
27. An advantage of using systems flowcharts to document information about internal control instead of
using internal control questionnaires is that systems flowcharts
6-6
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
28. Which of the following audit tests would be regarded as a test of controls?
A. Tests of the specific items making up the balance in a given general ledger account.
B. Tests comparing inventory pricing to vendors' invoices.
C. Tests of the signatures on canceled checks to the board of directors' authorizations.
D. Tests of the additions to property, plant, and equipment by physical inspections.
29. The independent auditor selects several transactions in each functional area and traces them through
the entire system, paying special attention to evidence about whether or not the control activities are
in operation. This is an example of a(n)
A. Analytical procedure.
B. Test of controls.
C. Substantive procedure.
D. Functional test.
30. To obtain evidential matter about control risk, an auditor selects tests from a variety of techniques
including
A. Inquiry.
B. Analytical procedures.
C. Calculation.
D. Confirmation.
6-7
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
31. Which of the following procedures most likely would provide an auditor with evidence about whether
an entity's internal control is suitably designed to prevent or detect material misstatements?
A. Provide reasonable assurance that their financial statements are free of material misstatements.
B. Ensure that the entity will not have any misstatements in areas related to the service organization's
activities.
C. Ensure that the auditee is billed correctly.
D. Assess whether the service organization's controls are suitably designed to achieve internal
control objectives.
33. Where computer processing is used in significant accounting applications, internal control activities
may be defined by classifying control activities into two types: general and
A. Administrative.
B. Specific.
C. Application.
D. Authorization.
6-8
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
34. Which of the following input controls is a numeric value computed to provide assurance that the
original value has not been altered in construction or transmission?
A. Hash total.
B. Parity check.
C. Encryption.
D. Check digit.
A. Organizational controls.
B. Data validation controls.
C. Access security controls.
D. Application system acquisition controls.
A. Test to ensure that a numerical value does not exceed some predetermined value.
B. Check to ensure that the value in a field falls within an allowable range of values.
C. Check to ensure that the data in a field have the proper arithmetic sign.
D. Check on a field to ensure that it contains either all numeric or alphabetic characters.
A. Test to ensure that a numerical value in a field does not exceed some predetermined value.
B. Check to ensure that the value in a field falls within an allowable range of values.
C. Check to ensure that the data in a field have the proper arithmetic sign.
D. Check on a field to ensure that it contains either all numeric or all alphabetic characters.
6-9
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
38. An auditor's primary consideration regarding an entity's internal controls is whether the policies and
procedures
39. In evaluating internal control, the auditor is basically concerned that the system provides reasonable
assurance that
40. Of the following statements about an internal control system, which one is correct?
A. The maintenance of the system of internal control is an important responsibility of the internal audit
function.
B. Administrative controls relate directly to the safeguarding of assets.
C. Because of the cost/benefit relationship, tests of controls may be applied on a test basis in some
circumstances.
D. Well designed internal control activities always prevent collusion among employees.
6-10
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
41. The concept of reasonable assurance in the context of an entity's internal controls recognizes that
43. The control environment component of internal control includes all of the following except:
6-11
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
45. An organizational structure is important for all of the following reasons except:
6-12
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
49. In planning an audit of a new client, an auditor most likely would consider the methods used to
process accounting information because such methods
50. A substantive strategy differs from a reliance strategy in that a substantive strategy includes
A. Assessing control risk and obtaining an understanding of an entity's internal controls may be
performed concurrently.
B. When control risk is high, an auditor is required to document the basis for that assessment.
C. Control risk may be assessed sufficiently low to eliminate substantive procedures for significant
accounts.
D. When assessing control risk, an auditor should not consider evidence obtained in prior audits
about the operation of control activities.
6-13
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
52. Assessing control risk at a lower level most likely would involve
A. Changing the timing of substantive procedures by omitting interim testing and performing the tests
at year-end.
B. Identifying specific internal controls relevant to specific assertions.
C. Performing more extensive substantive procedures with larger sample sizes than originally
planned.
D. Reducing inherent risk for most of the assertions relevant to significant account balances.
53. In the audit of financial statements, an auditor's primary consideration regarding an internal control
policy or procedure is whether the policy or procedure
54. Which of the following most likely would not be considered an inherent limitation of the potential
effectiveness of an entity's internal controls?
A. Incompatible duties.
B. Management override.
C. Mistakes in judgment.
D. Collusion among employees.
6-14
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
55. It is important for the CPA to consider the competence of the entity's employees because their
competence bears directly and importantly upon the
56. As part of gaining an initial understanding of internal control, an auditor is required to do all of the
following except:
57. Effective internal control in a small company that has an insufficient number of employees to permit
proper division of responsibilities can best be enhanced by
6-15
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
58. The independent auditor should acquire an understanding of the internal audit function as it relates to
the assessment of control risk because
A. Internal audit programs, audit documents, and reports can eliminate the need for the independent
auditor's staff.
B. The procedures performed by the internal audit staff may eliminate the independent auditor's need
for an extensive study and evaluation of internal control.
C. The work performed by internal audit personnel may be a factor in determining the nature, timing,
and extent of the independent auditor's procedures.
D. The understanding of the internal audit function is an important substantive procedure to be
performed by the independent auditor.
60. After completing the preliminary phase of the review of internal control, the auditor decides not to rely
on the system to restrict substantive procedures. Documentation may be limited to the auditor's
6-16
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
61. In an audit of financial statements of a private company in accordance with generally accepted
auditing standards, an auditor is required to
A. Identify specific internal control activities relevant to management's financial statement assertions.
B. Perform tests of controls to evaluate the effectiveness of the entity's accounting system.
C. Determine whether procedures are suitably designed to prevent or detect material misstatements.
D. Document the auditor's understanding of the entity's internal control.
62. For a complex IT system, auditors are least likely to use which of the following when documenting
their understanding of internal controls?
A. Narratives.
B. Internal control questionnaires.
C. Flowcharts.
D. Organization charts.
63. Assessing control risk at a lower level involves all of the following except:
64. When an auditor increases the planned assessed level of control risk because certain control
activities were determined to be ineffective, the auditor would most likely increase the
6-17
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
65. Which of the following procedures most likely would be included as part of an auditor's tests of
controls?
A. Inspection.
B. Reconciliation.
C. Confirmation.
D. Analytical procedures.
66. An auditor is least likely to test the internal controls that provide for
67. For certain controls, such as segregation of duties, documentary evidence may not exist. An auditor
would most likely test the procedures by
68. Walkthroughs usually involve all of the following audit procedures except:
A. Reperformance.
B. Inquiry.
C. Observation.
D. Inspection.
6-18
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
69. Before applying substantive procedures to the details of accounts at an interim date (a date prior to
the balance sheet date), an auditor should
A. Assess control risk at high for the assertions embodied in the accounts selected for interim testing.
B. Determine that the accounts selected for interim testing are not material to the financial statements
taken as a whole.
C. Consider the availability of information at a later date that will be necessary for the auditor's
procedures (e.g., electronic data).
D. Obtain written representations from management that all financial records and related data will be
made available.
70. A high detection risk strategy includes all of the following except:
A. Interim testing.
B. Reduced testing of transactions.
C. Heavy reliance on analytical procedures as substantive procedures.
D. Audit work only completed at year-end.
71. The auditor should consider all of the following when deciding whether substantive procedures will be
performed at an interim date except:
6-19
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
72. If auditors conduct substantive procedures as of 10/31 for an entity with a 12/31 year-end
73. Based on a study and evaluation completed at an interim date, the auditor concludes that no
significant internal control weaknesses exist. The records and procedures would most likely be tested
again at year-end if
A. Compliance tests were not performed by the internal audit staff during the remaining period.
B. The internal control system provides a basis for reliance in reducing the extent of substantive
procedures.
C. The auditor used nonstatistical sampling during interim compliance testing.
D. Inquiries and observations lead the auditor to believe that conditions within the internal control
system have changed.
74. The auditor's communication of material weaknesses in internal control for a nonpublic company is
A. Required to enable the auditor to state that the examination has been made in accordance with
generally accepted auditing standards.
B. The principle reason for studying and evaluating the system of internal controls.
C. Incidental to the auditor's objective of forming an opinion as to the fair presentation of the financial
statements.
D. Required to be included as part of the audit opinion.
6-20
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
75. Significant deficiencies are matters that come to an auditor's attention that should be communicated
to an entity's audit committee because they represent
A. Disclosures of information that significantly contradict the auditor's going concern assumption.
B. Material fraud or illegal acts perpetrated by high-level management.
C. Significant design flaws in internal controls or poor implementation of internal controls.
D. Manipulation or falsification of accounting records or documents from which financial statements
are prepared.
77. The normal sequence of documents and operations on a well-prepared systems flowchart is
6-21
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
78. When documenting an entity's internal control, the independent auditor sometimes uses a systems
flowchart, which can best be described as a
79. Which of the following is not a characteristic of a batch processed computer system?
A. The collection of like transactions which are sorted and processed sequentially against a master
file.
B. Keypunching of transactions, followed by machine processing.
C. The production of numerous printouts.
D. The posting of a transaction, as it occurs, to several files, without intermediate printouts.
80. Which of the following is a general control that would most likely assist an entity whose systems
analyst left the entity in the middle of a major project?
6-22
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
81. A customer intended to order 100 units of product Z96014, but incorrectly ordered 100 units of a
nonexistent product Z96015. Which of the following controls most likely would detect this error?
82. Assume that an auditor estimates that 10,000 checks were issued during the accounting period. If an
IT application control which performs a limit check for each check request is to be subjected to the
auditor's test data approach, the sample should include
83. After obtaining an understanding of internal controls and assessing control risk of an entity, an auditor
decided not to perform tests of controls for purposes of the audit. The auditor most likely decided that
A. The available evidential matter obtained through tests of controls would not support an increased
level of control risk.
B. A reduction in the assessed level of control risk is justified for certain financial statement
assertions.
C. It would be inefficient to perform tests of controls that would result in a reduction in planned
substantive procedures.
D. The assessed level of inherent risk exceeded the assessed level of control risk.
6-23
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
84. After the auditor has prepared a flowchart of the internal controls surrounding sales and evaluated the
design of the system, the auditor would perform tests of controls on all control activities
85. As the acceptable level of detection risk increases, an auditor may change the
86. In a properly designed internal control system, the same employee may be permitted to
A. Receive and deposit checks and also approve write-offs of customer accounts.
B. Approve vouchers for payment and also sign checks.
C. Reconcile the bank statements and also receive and deposit cash.
D. Sign checks and also cancel supporting documents.
87. A procedure that would most likely be used by an auditor in performing tests of control activities that
involve segregation of functions but which leave no transaction trail is
A. Inspection.
B. Observation.
C. Reperformance.
D. Reconciliation.
6-24
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
88. During consideration of internal control in a financial statement audit of a nonpublic company, an
auditor is not obligated to
89. Audit evidence concerning proper segregation of duties ordinarily is best obtained by
90. While substantive procedures may support the accuracy of underlying records, these tests frequently
provide no affirmative evidence of segregation of duties because
A. Substantive procedures rarely guarantee the accuracy of the records if only a sample of the
transactions has been tested.
B. The records may be accurate even though they are maintained by persons having incompatible
functions.
C. Substantive procedures relate to the entire period under audit, but compliance tests ordinarily are
confined to the period during which the auditor is on the entity's premises.
D. Many computerized procedures leave no audit trail of who performed them, so substantive
procedures may necessarily be limited to inquiries and observation of office personnel.
6-25
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
91. Before applying substantive procedures to the details of asset and liability accounts at an interim
date, the auditor should
A. Assess the difficulty in controlling achieved audit risk for the remainder of the period.
B. Investigate significant fluctuations that have occurred in the asset and liability accounts since the
previous balance sheet date.
C. Select only those accounts which can effectively be sampled during year-end audit work.
D. Consider the compliance tests that must be applied at the balance sheet date to extend the audit
conclusions reached at the interim date.
92. When communicating internal control-related matters noted in an audit of a nonpublic company, an
auditor's report issued on significant deficiencies should indicate that
A. Errors or fraud may occur and not be detected because there are inherent limitations in any
internal control system.
B. The issuance of an unqualified opinion on the financial statements may depend on corrective
follow-up action.
C. The deficiencies noted were not detected within a timely period by employees in the normal course
of performing their assigned functions.
D. The purpose of the audit was to report on the financial statements and not to provide assurance on
internal control.
A. Triangle.
B. Circle.
C. Rectangle.
D. Diamond.
6-26
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
Short Answer Questions
94. Internal control has become a very important focus for publicly traded and privately-held companies
alike. Internal control is intended to accomplish at least three objectives and consists of five
components of internal control. List the three objectives and five components of internal control.
Objectives of internal control include:
1. reliability, timeliness, and transparency of internal and external, nonfinancial and financial
reporting,
2. effectiveness and efficiency of operations, including safeguarding of assets, and
3. compliance with applicable laws and regulations.
95. What are two potential benefits and two potential risks of using IT for an entity's internal control?
6-27
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
96. In terms of an audit, define substantive strategy and reliance strategy. Include in your definition how
the different strategies relate to internal control. Which strategy would best relate to a lower control
risk?
97. Describe the limitations of internal control. Why do limitations on internal control exist?
98. What are four potential tools available to the auditor for documenting her understanding of an entity's
system of internal control?
6-28
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
99. What are some typical types of evidence that may be collected in testing an entity's internal controls?
101.While performing an audit on the internal controls over financial reporting for AirWaves Corporation,
your audit team finds what it considers to be a significant deficiency. AirWaves is a large, private
company. What steps would you take to communicate this finding?
6-29
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
102.Data capture occurs through source documentation, direct data entry, or a combination of the two.
List three purposes of data capture controls.
103.What are the differences between document flowcharts, system flowcharts, and program flowcharts?
6-30
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
Chapter 06 Internal Control in a Financial Statement Audit Answer Key
TRUE
2. The auditor must understand internal control before assessing inherent risk.
FALSE
3. The extent of an entity's use of IT can affect any of the components of internal control.
TRUE
6-31
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
Difficulty: 1 Easy
Learning Objective: 06-04 Understand the effect of information technology on internal control.
Topic: Effect of Information Technology on Internal Control
4. One of the risks associated with internal control from IT is potential loss of data.
TRUE
FALSE
TRUE
6-32
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
Topic: The COSO Framework
7. A reliance strategy is used when control risk has been set at high.
FALSE
8. A substantive strategy is used when control risk has been set at high.
TRUE
FALSE
6-33
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
10. Tests of controls must be performed if control risk is set at a lower level.
TRUE
AACSB: Communication
AICPA: BB Critical Thinking
AICPA: FN Risk Analysis
Accessibility: Keyboard Navigation
Blooms: Remember
Difficulty: 1 Easy
Learning Objective: 06-01 Understand the importance of internal control to management and auditors.
Learning Objective: 06-02 Know the definition of internal control.
Topic: Definition of Internal Control
Topic: Importance of Internal Control to Management and Auditors
6-34
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
12. Internal controls are not designed to provide reasonable assurance that
AACSB: Communication
AICPA: BB Industry
AICPA: FN Risk Analysis
Accessibility: Keyboard Navigation
Blooms: Understand
Difficulty: 1 Easy
Learning Objective: 06-02 Know the definition of internal control.
Topic: Definition of Internal Control
13. The basic concept of internal control that recognizes the cost of internal control should not exceed
the benefits expected to be derived is known as
A. Reasonable assurance.
B. Management responsibility.
C. Limited liability.
D. Management by exception.
6-35
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
14. An auditor would most likely be concerned with internal control policies and procedures that
provide reasonable assurance about the
15. Management's attitude toward aggressive financial reporting and its emphasis on meeting
projected profit goals most likely would significantly influence an entity's control environment
when
A. External policies established by parties outside the entity affect its accounting practices.
B. Management is dominated by one individual.
C. Internal audit personnel have direct access to the board of directors and the entity's
management.
D. The audit committee is active in overseeing the entity's financial reporting policies.
AACSB: Communication
AICPA: BB Critical Thinking
AICPA: FN Risk Analysis
Accessibility: Keyboard Navigation
Blooms: Apply
Difficulty: 1 Easy
Learning Objective: 06-05 Be familiar with the components of internal control together with the principles associated with each
component.
Topic: The COSO Framework
6-36
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
16. Management philosophy and operating style most likely would have a significant influence on an
entity's control environment when
AACSB: Communication
AICPA: BB Critical Thinking
AICPA: FN Risk Analysis
Accessibility: Keyboard Navigation
Blooms: Apply
Difficulty: 1 Easy
Learning Objective: 06-05 Be familiar with the components of internal control together with the principles associated with each
component.
Learning Objective: 06-07 Know how to develop an understanding of an entity's internal control.
Topic: Develop an Understanding of Internal Control
Topic: The COSO Framework
17. Proper monitoring within an internal control framework may include all of the following except:
A. An external auditor.
B. An effective audit committee.
C. An internal audit function.
D. The internal revenue service.
AACSB: Communication
AICPA: BB Industry
AICPA: FN Risk Analysis
Accessibility: Keyboard Navigation
Blooms: Apply
Difficulty: 1 Easy
Learning Objective: 06-05 Be familiar with the components of internal control together with the principles associated with each
component.
Learning Objective: 06-07 Know how to develop an understanding of an entity's internal control.
Topic: Develop an Understanding of Internal Control
Topic: The COSO Framework
6-37
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
18. An entity's control activities include all of the following except:
A. Performance reviews.
B. Information processing.
C. External auditor's tests of controls.
D. Segregation of duties.
AACSB: Communication
AICPA: BB Industry
AICPA: FN Risk Analysis
Accessibility: Keyboard Navigation
Blooms: Remember
Difficulty: 1 Easy
Learning Objective: 06-05 Be familiar with the components of internal control together with the principles associated with each
component.
Learning Objective: 06-07 Know how to develop an understanding of an entity's internal control.
Topic: Develop an Understanding of Internal Control
Topic: The COSO Framework
19. Potential benefits of an entity's controls in an IT environment include all of the following except:
AACSB: Technology
AICPA: BB Leveraging Technology
AICPA: FN Leveraging Technology
Accessibility: Keyboard Navigation
Blooms: Remember
Difficulty: 1 Easy
Learning Objective: 06-04 Understand the effect of information technology on internal control.
Topic: Effect of Information Technology on Internal Control
6-38
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
20. An entity's IT infrastructure refers to
A. Hardware components.
B. Programmers.
C. Software.
D. Data provided by the system.
AACSB: Technology
AICPA: BB Leveraging Technology
AICPA: FN Leveraging Technology
Accessibility: Keyboard Navigation
Blooms: Remember
Difficulty: 1 Easy
Learning Objective: 06-05 Be familiar with the components of internal control together with the principles associated with each
component.
Topic: The COSO Framework
21. Auditors are most likely to gather audit evidence solely using substantive procedures
6-39
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
22. Proper segregation of functional responsibilities in an effective system of internal control calls for
separation of the functions of
AACSB: Communication
AICPA: BB Industry
AICPA: FN Risk Analysis
Accessibility: Keyboard Navigation
Blooms: Apply
Difficulty: 1 Easy
Learning Objective: 06-07 Know how to develop an understanding of an entity's internal control.
Topic: Develop an Understanding of Internal Control
23. Factors that the auditor should consider as increasing the effectiveness of the audit committee
include all of the following except whether:
A. It is independent of management.
B. It is comprised almost exclusively of members of management, ensuring detailed knowledge of
the company's operations.
C. It asks management difficult questions.
D. It interacts regularly with internal audit personnel.
AACSB: Communication
AICPA: BB Industry
AICPA: FN Decision Making
Accessibility: Keyboard Navigation
Blooms: Apply
Difficulty: 1 Easy
Learning Objective: 06-05 Be familiar with the components of internal control together with the principles associated with each
component.
Topic: The COSO Framework
6-40
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
24. The documentation of an auditor's understanding of internal controls
A. Is optional.
B. Must be exclusively in narrative, questionnaires, or flowchart form.
C. Must include flowcharts.
D. Can include any combination of narratives, questionnaires, or flowcharts.
AACSB: Communication
AICPA: BB Critical Thinking
AICPA: FN Reporting
Accessibility: Keyboard Navigation
Blooms: Apply
Difficulty: 1 Easy
Learning Objective: 06-08 Be familiar with the tools available for documenting the understanding of internal control.
Topic: Documenting the Understanding of Internal Control
6-41
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
26. A flowchart is most frequently used by an auditor in connection with the
27. An advantage of using systems flowcharts to document information about internal control instead
of using internal control questionnaires is that systems flowcharts
6-42
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
28. Which of the following audit tests would be regarded as a test of controls?
A. Tests of the specific items making up the balance in a given general ledger account.
B. Tests comparing inventory pricing to vendors' invoices.
C. Tests of the signatures on canceled checks to the board of directors' authorizations.
D. Tests of the additions to property, plant, and equipment by physical inspections.
29. The independent auditor selects several transactions in each functional area and traces them
through the entire system, paying special attention to evidence about whether or not the control
activities are in operation. This is an example of a(n)
A. Analytical procedure.
B. Test of controls.
C. Substantive procedure.
D. Functional test.
6-43
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
30. To obtain evidential matter about control risk, an auditor selects tests from a variety of techniques
including
A. Inquiry.
B. Analytical procedures.
C. Calculation.
D. Confirmation.
AACSB: Communication
AICPA: BB Critical Thinking
AICPA: FN Decision Making
Accessibility: Keyboard Navigation
Blooms: Apply
Difficulty: 1 Easy
Learning Objective: 06-10 Know how auditors perform tests of controls.
Topic: Performing Tests of Controls
31. Which of the following procedures most likely would provide an auditor with evidence about
whether an entity's internal control is suitably designed to prevent or detect material
misstatements?
6-44
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
32. Reports on service organizations typically
A. Provide reasonable assurance that their financial statements are free of material
misstatements.
B. Ensure that the entity will not have any misstatements in areas related to the service
organization's activities.
C. Ensure that the auditee is billed correctly.
D. Assess whether the service organization's controls are suitably designed to achieve internal
control objectives.
AACSB: Communication
AICPA: BB Industry
AICPA: FN Reporting
Accessibility: Keyboard Navigation
Blooms: Remember
Difficulty: 1 Easy
Learning Objective: 06-13 Be familiar with how to assess control risk when an entity's accounting transactions are processed by a
service organization.
Topic: Auditing Accounting Applications Processed by Service Organizations
33. Where computer processing is used in significant accounting applications, internal control
activities may be defined by classifying control activities into two types: general and
A. Administrative.
B. Specific.
C. Application.
D. Authorization.
AACSB: Technology
AICPA: BB Leveraging Technology
AICPA: FN Leveraging Technology
Accessibility: Keyboard Navigation
Blooms: Remember
Difficulty: 1 Easy
Learning Objective: 06-15 Be familiar with general and application controls.
Topic: Types of Controls in an IT Environment
6-45
Copyright © 2017 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
Another random document with
no related content on Scribd:
faltan allegados que, aunque en segunda fila, toman parte, siquiera
con la atención, en los debates de la primera. Habrá seguramente
entre los allegados un señor muy fino y muy risueño, con bastón y
gafas. No se moverá de la silla, no pedirá un fósforo, no hará una
pregunta, sin despepitarse en excusas y cumplidos. «Usted
dispense», «¿me hace usted el obsequio?» «con permiso de
usted», etc., etc... y no habrá dicho en todo el año cosa más
substanciosa. Pero, en una ocasión, trajo usted á la porfía (y note
que no digo conversación), un apellido que hasta entonces no había
sonado allí. Óyelo el de las gafas, y, clavándolas en usted, le
pregunta, con una voz muy dulce y una cara muy risueña:
—¿Verduguillos ha dicho usted, caballero?
—Verduguillos, sí señor,—responde usted parándose en firme.
—¿Sabe usted—insiste el otro,—(y usted perdone si le interrumpo
un momento), si ese señor de Verduguillos tiene parientes en
Cuzcurrita de Río Tirón?
—¿Por qué he de saber yo eso, si jamás allá estuve, ni conozco á
ese señor más que de vista?—replica usted con el sosiego y la
amabilidad que eran de esperarse.
—Perdone usted, caballero—dice el intruso hecho unas mieles,—y
verá por qué me he tomado la libertad de interrumpirle.
Y en esto, deja la silla, sale al centro, encárase con el grupo
principal, afirma las gafas en el entrecejo, carraspea, sonríese y
dice:
—Pues, señor, verán ustedes por qué me ha interesado tanto el oir
á este caballero nombrar á ese señor de Verduguillos. Por el mes de
septiembre del año treinta y ocho, salí yo de Zamora (donde nací y
me crié y radican los pocos ó muchos bienes que heredé á la
muerte de mis padres, y los que he podido adquirir después acá con
el fruto de mis especulaciones modestas), con el propósito de hacer
un largo viaje, por exigirlo así los asuntos de la familia, y también, si
he de ser franco, el estado de mi salud...
Así comienza este señor la relación de un viaje por media España,
con largas detenciones en todos los puertos y plazas del tránsito, y
minuciosas observaciones estadísticas y climatéricas, sin pizca de
interés, ni método, ni estilo, ni substancia, hasta venir á parar, al
cabo de tres mortales cuartos de hora, á Logroño, en la cual ciudad
conocía al comerciante don Fulano de Tal; y decirnos que, yendo á
visitarle á su escritorio, hallóse allí con un caballero, muy amigo
también del don Fulano, el cual don Fulano le dijo á él al despedirse
el otro:
—Este señor que acaba de salir, es don Pacomio Verduguillos,
natural y vecino de Cuzcurrita de Río Tirón.
Al llegar aquí con el cuento el de las gafas, espera usted el toque de
efecto, el desenlace sorprendente, la gracia del suceso; porque es
de saberse que el narrador se ha quedado en silencio y mirando de
hito en hito á los resignados oyentes. Pero el silencio sigue y la
sorpresa no asoma. Alguien se aventura, y pregunta al del bastón:
—Pero ¿por qué le chocó á usted tanto el oir nombrar á este
Verduguillos?
—Hombre—responde el interpelado, con candidez angelical,—
porque podía muy bien ser pariente del otro Verduguillos que yo
conocí en Logroño.
¡Y para eso interrumpió un animado y sabrosísimo debate; y estuvo,
durante cerca de una hora, ensartando insulsez tras de insulsez,
simpleza tras de simpleza, adormeciendo á unos, quemando la
sangre á otros y aburriéndolos á todos! Y usted llevó la cruz con
paciencia, y yo también; y lo mismo al día siguiente, porque el
bueno del zamorano, desde que pierde la cortedad con el primer
relato, ya no cierra boca en la tertulia, y siempre tan ameno,
divertido y oportuno. Pero nos permitimos los dos un desahoguillo
en un aparte.
—Amigo—dije, ó me dijo usted,—¡este hombre es insufrible:
estando él no se puede venir aquí! Y se oyó el rumor del desahogo,
y ¡qué caras nos pusieron los señores tolerantes, que estaban tan
aburridos como nosotros!
Al día siguiente asoma usted la cabeza á la puerta, ve al de las
gafas en el uso de la palabra, retrocede y no vuelve; ni yo tampoco.
Y porque no volvemos, y además decimos lo que mejor nos parece
del motivo, ¡qué ponernos de intolerantes y hasta de inciviles!...
¡Caramba, protesto contra la enormidad de esta injusticia! En este
caso no hay más intolerantes que el señor de Zamora, que
interrumpe toda conversación racional y obliga á hombres de buen
sentido á que oigan las interminables boberías que él enjareta sin
punto de reposo, y los forzados tolerantes que le escuchan con
paciencia, y no la tienen para oir que otros carecen de ella.
Trátase ahora de un embustero, que un día y otro día le abruma á
usted con narraciones autobiográficas, sin principio ni fin, como la
eternidad de Dios; pero muy punteadas, muy comeadas y con más
espacios que un libro de malos versos. Oye usted una historia, y
dos, y tres, ya con mala cara; pero, al fin, se acaba la paciencia, y
un día interrumpe usted al sujeto de los á propósitos, y le dice:
—Mire usted, hombre: en primer lugar, la mayor parte de lo que
usted me cuenta se lo he contado yo á usted en cuatro palabras; en
segundo lugar, le sucedió á un condiscípulo mío en Oviedo, y no á
un amigo de usted en Zaragoza; en tercer lugar, no pasó como
usted lo refiere, sino del modo contrario: mi condiscípulo no adquirió
una capa aquella noche, sino que perdió la que llevaba, y, además,
el juicio, con costas, á los pocos días...
—Pues lo mismo da...
—Justo: media vuelta á la derecha es lo mismo que media vuelta á
la izquierda, sólo que es todo lo contrario.
—¡Caramba, es usted lo más intolerante!... No se puede hablar con
usted...
¡Todavía le parece poco, al ángel de Dios, la tolerancia que se ha
tenido con él!
Media docena de mujeres, ó menos, si á usted le parecen muchas
seis, se pasan una tarde entera desollando con la lengua al lucero
del alba. ¡Eso sí, con las mejores formas y la intención más santa!
De una dirán que es un dolor que, siendo tan bonita, sea tan charra
en el vestir, tan tosca en el hablar, tan inconsecuente en sus
amistades, tan desleal en sus amores; de otra, que es mordaz y
maldiciente, en lo cual se perjudica mucho, porque teniendo esta
falta, y la otra, y la de más allá, da pie para que cualquiera que se
estime en tan poco como ella, se las saque á relucir; de otra, que es
una desgraciada, porque el marido la ha puesto á ración, así en el
vestir como en el bailar, á causa de que fué algo despilfarrada
siempre en estos dos ramos de buena sociedad; de otra, que ya no
halla modista que la haga un traje si no paga adelantadas las
hechuras, y que no le venden nada en las tiendas, sino con el dinero
en la mano, etc., etc., etc... En esto, entra usted (es un suponer) y,
continuando el desuello, llegan á preguntarle si conoce á cierta
señora de éstas ó las otras señas; y como la tal es mujer de historia,
y usted la sabe de corrido, repítela allí con comentarios, creyendo
hacer á su auditorio un señalado servicio. Yo creo también que
usted se le hace, pues no fué á humo de pajas la preguntita; pero es
lo cierto que todas aquellas señoras, después de oirle á usted,
exclaman, con el más sincero de los asombros:
—¡Jesús!... Con razón dicen que es usted temible.
—¡Yo temible, señoras mías?—responde usted.—¿Y por qué?
—¡Porque es usted lo más intolerante y lo más!...
¡Vaya usted á convencer á aquellas damas de que viven
constantemente encenagadas en el pecado que á usted le cuelgan!
No hay inconveniente en que, abandonando estos tiquis-miquis que
ocurren en el ordinario trato social, dirijamos el anteojo unos grados
más arriba.
Todos los días halla usted en periódicos, en folletos y en libros,
sátiras, burlas y disertaciones en serio contra ideas, sentimientos y
hasta personas muy de la devoción de usted. Ocúrresele mirar al
campo de donde parten tantos proyectiles, y le ve usted sembrado
de ridiculeces, farsas y toda clase de miserias; saca usted al palo
media docena de ellas, por vía de muestra, en un papel, en un
folleto ó en un libro; y ¡Virgen María, cómo le ponen á usted de
intolerante y de mordaz, los mismos que tienen la mordacidad y la
intolerancia por oficio!
Así andan, amigo, las cosas de justicia en el ordinario comercio de
las gentes; así se ataja al más inofensivo en el trayecto social en
que pasea su nombre, y así se pretende conducirle al extremo á que
no llegan en el mundo más que las bestias... y los que tienen la
manía de la tolerancia (siendo lógicos en ella): á ver, oir y callar... es
decir, á matar la sed con petróleo, allí donde haya un extravagante
que tal haga delante de usted.
Usted es hombre de sencillas y ordenadas costumbres (es también
un suponer): ni el mundo le tira, ni sus pompas y algaradas le
seducen. Éstos son gustos lícitos y racionales. Ajustándose á ellos,
en paz y en gracia de Dios, se da usted con un baile en los ojos:
tuerce usted el camino; tropieza usted más allá con una mascarada
de calaveras del gran mundo: echa usted por otro lado; allí topa
usted con la misma gente haciendo cuadros plásticos y animados
acertijos: cambia usted de rumbo; aquí asaltos, en el otro lado
conciertos... pues á la otra acera. Ni usted apedrea á los que bailan,
ni apostrofa á los que jiran, ni se ríe de los que se descoyuntan para
remedar á Cristo en la agonía, ni silba á los que reciben una
sorpresa, anunciada quince días antes, ni influye con el Gobernador
para que meta en la cárcel á toda esa gente: limítase á huir de lo
que le aburre, y á hacer lo que más le divierte ó menos le incomoda.
No haría otra cosa un santo.
Pero es el caso que los señores tolerantes no se conforman con
esto, y quieren que les diga usted por qué no concurre á los bailes, y
á las jiras, y á los cuadros vivos, y á los asaltos... y aquí está el
intríngulis precisamente; y si estos rasguños que trazo no fueran,
como he dicho, un inocente desahogo entre nosotros dos, y en
reserva, me atrevería á llamar la atención del lector hacia el
aparente fenómeno, cuya explicación es sencillísima, por lo cual, no
es fenómeno, aunque por tal le toman algunos.
Cuando á usted se le pregunta por qué no piensa como su vecino
sobre determinados puntos de transcendencia, á buen seguro que
se le ocurra á nadie que oiga la respuesta, agarrarse á ella para
llamarle á usted intolerante; pero que se le pregunte por qué no
baila, por qué no jira, etc., etc... y no bien ha contestado usted, ya
tiene encima el Inri de la intolerancia. Y ¿por qué en este caso y en
el otro no? Porque no está el intríngulis en la persona, ni en sus
razones, ni en el modo de exponerlas, sino en la cosa de que se
trata, que, muy á menudo, es, de por sí, ridícula, ó impertinente, ó
pueril cuando menos, y no resiste, sin deshacerse entre las manos,
el análisis de un hombre de seso; al cual hombre, no pudiendo
replicársele en buena justicia, en venganza se le pone un mote.
Por eso llevan el de intolerantes tantos caracteres dóciles, y creen
poner una pica en Flandes, y hasta se llaman guapos chicos y
excelentes sujetos en la sociedad, los que en ella entran con todas,
como la romana del diablo, menos con el sentido común. Quod erat
demonstrandum.
Á pesar de ello, y aun de la mucha saliva, que al propio asunto
hemos consagrado en nuestras conversaciones verbales, júzgole
apenas desflorado. ¡Cuánto me queda todavía que oir de los
inofensivos labios de usted!
Entre tanto, y dicho lo dicho, despidámonos por hoy, con la íntima
satisfacción, bien añeja en nosotros, de haber pasado juntos, en
espíritu, un agradable rato, sin murmurar de nadie ni ofender al
prójimo con hechos, con dichos ni con deseos.
1880.
EL CERVANTISMO