- You are auditing a nonissuer entity with many small customer balances and strong controls over billing and cash receipts. The auditor is considering using negative confirmations for accounts receivable. Which factor would most appropriately support the auditor's decision to use negative confirmations rather than positive confirmations?
Answer: The assessed risk of material misstatement for receivables is low and the population consists of a large number of small, homogeneous balances.
AU-C 505.15 establishes specific conditions that must exist for negative confirmations to provide sufficient appropriate audit evidence. The key fact is that the entity has low assessed risk, strong controls, and a population of many small, homogeneous balances. The correct answer (B) aligns with all three required conditions in AU-C 505.15: (a) low assessed risk of material misstatement, (b) large number of small, homogeneous balances, and (c) expectation that recipients will respond to negative requests. Answer A is incorrect because large, significant balances require positive confirmations per AU-C 505.A20. Answer C is incorrect because audit procedures cannot be selected based on management preferences or operational considerations. Answer D is incorrect because negative confirmations provide less persuasive evidence than positive confirmations per AU-C 505.A19. The professional judgment framework is: negative confirmations are only appropriate when all three conditions exist - low risk, homogeneous small balances, and expected response rates.
- When no response is received to a second positive confirmation request for a material accounts receivable balance, the auditor should next:
Answer: Perform alternative audit procedures to substantiate the existence of the receivable.
According to auditing standards, when a response to a positive confirmation request is not received, the auditor should perform alternative procedures to obtain the necessary audit evidence. For accounts receivable, these procedures typically include examining subsequent cash receipts, shipping documents, and customer purchase orders. Qualifying the opinion (A) is premature until all other procedures are exhausted. Involving management (B) compromises auditor independence and objectivity. Concluding the receivable is a misstatement (D) is not appropriate without first gathering evidence through alternative procedures.
- In a nonissuer audit, the auditor receives a customer confirmation that indicates a balance due of $200,000, but the confirmation is returned to the client's accounts receivable clerk, who then forwards a scanned copy to the auditor. The auditor did not receive the response directly and cannot verify the original. Which action should the auditor take based on the confirmation response?
Answer: Treat the response as potentially unreliable and obtain the confirmation directly from the customer or perform alternative procedures to obtain sufficient appropriate evidence.
AU-C Section 505.08 requires auditors to maintain control over confirmations, including direct receipt to ensure reliability. The response forwarded via client scan breaks control, risking alteration. Option B follows AU-C 505.A10 by treating as unreliable and seeking direct or alternative evidence. Option A ignores control; option C relies on representations, and option D documents without action. Control is fundamental. Framework: Reestablish direct channels for compromised responses. This preserves evidence integrity.
- You are auditing a nonissuer distribution company and sent positive confirmations to several customers. One confirmation was returned from a free webmail address (not the customer's domain) stating "Balance confirmed," and the email header shows it was routed through an unknown server; the customer's contact information in the client's records does not match the sender. Which factor would most likely lead the auditor to question the reliability of a confirmation response?
Answer: The response was obtained through a channel that raises doubt about the responder's identity and authority to respond.
AU-C 505.10 requires auditors to evaluate the reliability of confirmation responses, including consideration of risks that responses may not be from proper sources. The key fact is that the response came from an unverified email address that doesn't match the customer's known contact information, raising doubts about the responder's identity. The correct answer (B) aligns with AU-C 505.10, which specifically identifies doubts about the responder's competence, knowledge, or authority as factors affecting reliability. Answer A is incorrect because electronic confirmations can be reliable if proper controls exist per AU-C 505.A14. Answer C is incorrect because customer size doesn't affect confirmation reliability; it affects sample selection. Answer D is incorrect because the type of balance confirmed doesn't inherently affect reliability. The professional judgment framework is: when confirmation responses show indicators of potential fraud or manipulation (mismatched contact information, suspicious routing), treat the response as potentially unreliable and perform additional verification procedures.
- A bank confirmation response reveals an undisclosed agreement where inventory is pledged as collateral for a line of credit. The auditor verifies this is a new agreement. After determining this omission is material, the auditor's primary responsibility is to:
Answer: Request that management revise the financial statements to include the required disclosure.
When an auditor identifies a material misstatement, which includes omitted disclosures, the first step is to communicate the finding to the appropriate level of management and request that they correct the financial statements. If management refuses to make the necessary disclosure, the auditor would then consider the effect on the audit report, which could lead to a qualified or adverse opinion (D). Withdrawing from the engagement (C) or reporting to regulators (A) would only be considered in more extreme circumstances, such as a significant breakdown in management integrity or a refusal to accept the audit report modification.
- A vendor's response to an accounts payable confirmation request shows a higher balance due from the client than the client's records indicate. This discrepancy, if determined to be a client error, would most likely provide evidence related to which assertion?
Answer: Completeness of accounts payable.
The primary audit risk for accounts payable is understatement (i.e., unrecorded liabilities). If a vendor claims the client owes more than the client has recorded, it suggests a potential unrecorded liability. This directly relates to the completeness assertion, which addresses whether all liabilities that should have been recorded have been. While it also touches on valuation, its primary implication is that the recorded total for payables is incomplete.
- You are auditing an issuer and send positive confirmations to customers. One response is received from a domain that differs slightly from the customer's known domain (e.g., ".co" instead of ".com") and the response confirms the balance exactly, but the customer's accounts payable contact is different from prior-year correspondence. Which factor would most likely lead the auditor to question the reliability of a confirmation response?
Answer: Minor inconsistencies in sender identity information that could indicate the response was not received from the intended confirming party, requiring authentication.
PCAOB AS 2310.18 stresses authenticating confirmation sources, especially with inconsistencies like domain variations or contact changes. The slight domain difference and altered contact raise interception risks, requiring independent verification. Option B is correct per AS 2310.29, prompting authentication or alternatives. Option A misinterprets exact agreement; option C allows electronic responses if verified, and option D overstates contact changes. Authenticity drives reliability. Framework: Verify anomalies against known data. This mitigates fraud in confirmations.
- During an audit of a nonissuer wholesaler, the auditor receives a positive accounts receivable confirmation response that agrees to the balance, but it is returned to the client's office address and then forwarded to the auditor by the controller. The controller states the customer "always responds that way." Which action should the auditor take based on the confirmation response?
Answer: Consider the response potentially unreliable due to lack of auditor control and perform additional procedures, such as re-confirming directly to an address obtained independently or performing alternative procedures.
AU-C 505.11 requires auditors to maintain control over confirmation requests and responses to ensure reliability, including direct mailing and receipt. The key fact is that the confirmation was returned to the client's address and forwarded by management, breaking the auditor's control over the confirmation process. The correct answer (B) aligns with AU-C 505.11 and .A12, which identify lack of auditor control as compromising reliability, requiring additional procedures such as re-confirming to an independently verified address or performing alternatives. Answer A is incorrect because responses routed through the client lack the independence required for reliable audit evidence. Answer C is incorrect because confirmations lose reliability when auditor control is compromised, regardless of their general persuasiveness. Answer D is incorrect because management-prepared reconciliations cannot validate compromised confirmations. The professional judgment framework is: when confirmation responses are intercepted or routed through the client, always treat them as potentially unreliable and either re-confirm directly or perform extensive alternative procedures.
- You are the auditor of a nonissuer in an audit engagement and send positive confirmations to 30 customers for accounts receivable. One large customer responds that it owes $410,000, while the client's records show $520,000 for the same invoices; the customer notes that $110,000 relates to goods returned before year-end but not yet credited. Which action should the auditor take based on the confirmation response?
Answer: Investigate the difference by examining subsequent credit memos, receiving reports, and return documentation, and evaluate whether a sales return or allowance adjustment is required.
AU-C Section 505 addresses external confirmations, emphasizing the auditor's responsibility to investigate discrepancies in positive confirmation responses to obtain sufficient appropriate audit evidence. The key facts here include the customer's confirmation of a lower balance due to returned goods not yet credited, indicating a potential timing or cutoff issue in the client's records. Option B aligns with AU-C 505.12, which requires the auditor to perform further procedures to resolve differences, such as examining evidence of returns and evaluating adjustments. Option A is incorrect because discrepancies must be investigated rather than accepted outright, and option C is wrong as negative confirmations are not a substitute for unresolved positive responses per AU-C 505.A23; option D is inappropriate as qualifying the opinion is premature without further procedures under AU-C 705. In contrast, options like reclassifying or immediate qualification ignore the need for substantive testing. A useful framework is to always trace discrepancies to underlying documentation and assess misstatement implications before concluding on evidence sufficiency. This decision rule ensures audit evidence is reliable and supports assertions like existence and valuation in receivable testing.
- During an audit of a nonissuer software company, the auditor sends positive confirmations to customers that include the invoice number, amount, and payment terms. A customer responds confirming the total balance but does not provide any information about disputed invoices noted in the client's aging; the customer's reply states only "Total OK." Which action should the auditor take based on the confirmation response?
Answer: Request a more complete response or perform targeted alternative procedures on the disputed invoices (e.g., inspect correspondence, credit memos, and subsequent cash receipts).
AU-C 505.08 states that incomplete or vague confirmation responses may require the auditor to request further information or perform alternative procedures. The key fact is that the customer's response confirms only the total without addressing known disputed items, making it an incomplete response for audit purposes. The correct answer (B) aligns with AU-C 505.08 and .12, requiring follow-up on exceptions and incomplete responses through additional procedures targeting the specific unaddressed items. Answer A is incorrect because confirming only the total without addressing disputes provides incomplete evidence about collectibility. Answer C is incorrect because positive confirmations remain positive regardless of response content; the classification depends on the request type. Answer D is incorrect because incomplete responses don't make confirmations unreliable; they require follow-up procedures. The professional judgment framework is: when confirmations provide incomplete information about known issues (disputes, credits, adjustments), always perform targeted procedures on the unaddressed items rather than accepting partial confirmations.
- An auditor's analysis of confirmation responses reveals a pattern of numerous small discrepancies that customers attribute to disputes over freight charges. This finding would most likely cause the auditor to:
Answer: Reassess the control risk related to the revenue and collections cycle.
A systematic pattern of exceptions, even if individually small, may indicate a deficiency in the client's internal controls. In this case, there may be a control weakness in how freight charges are calculated, billed, or communicated to customers. This would lead the auditor to reassess control risk and potentially increase the extent of substantive testing. A qualified opinion (B) is unlikely unless the aggregate misstatement is material and unresolved. Sending more confirmations (C) is unlikely to resolve a systemic issue. Ignoring the pattern (D) would be a failure to respond to identified risks.
- In an audit of a nonissuer construction contractor, the auditor sent positive confirmations to a key subcontractor to confirm year-end accounts payable. The subcontractor responded with a balance $180,000 higher than the client's accounts payable listing and included several invoices dated before year end that were not recorded by the client. What is the most appropriate follow-up procedure when a confirmation discrepancy is identified?
Answer: Investigate the reconciling items by examining the unrecorded invoices, receiving reports, and subsequent disbursements to determine whether a year-end cutoff or completeness error exists.
AU-C 505.12 requires auditors to investigate all exceptions in confirmation responses, particularly those indicating potential unrecorded liabilities. The key fact is that the vendor confirmed $180,000 more than recorded, with invoices dated before year-end, indicating potential completeness issues with accounts payable. The correct answer (B) aligns with AU-C 505.12 and AU-C 500 requirements to obtain sufficient appropriate evidence by examining source documents to determine if a cutoff or completeness error exists. Answer A is incorrect because simply recording the difference without investigation doesn't address the root cause or ensure proper cutoff. Answer C is incorrect because vendor confirmations are equally reliable evidence, especially for completeness of liabilities. Answer D is incorrect because investigation of exceptions is required regardless of management representations. The professional judgment framework is: when vendor confirmations reveal unrecorded invoices dated before year-end, always investigate for completeness and cutoff errors through examination of receiving reports and subsequent disbursements.
- In an audit of a nonissuer, the auditor sends positive confirmations to a major supplier for accounts payable. The supplier confirms a balance of $0, while the client's accounts payable listing shows $185,000 due at year-end; the client states the invoices were "in dispute." What is the most appropriate follow-up procedure when a confirmation discrepancy is identified?
Answer: Perform a search for unrecorded liabilities by inspecting subsequent cash disbursements, unmatched receiving reports, and vendor invoices, and reconcile to the supplier's statement.
AU-C Section 505 requires auditors to follow up on confirmation discrepancies by obtaining corroborative evidence, particularly when responses contradict client records. The supplier's zero balance confirmation versus the client's recorded liability, coupled with management's 'dispute' explanation, signals a potential unrecorded liability or cutoff error. Option A is correct per AU-C 505.12 and AU-C 330.18, as searching for unrecorded liabilities through subsequent disbursements and reconciliations provides evidence on completeness. Option B is incorrect because accepting management's explanation without evidence violates skepticism requirements in AU-C 200; option C is wrong as management summaries are not primary evidence under AU-C 505.A10, and option D misapplies the confirmation by suggesting reclassification without investigation. Auditors must independently verify discrepancies rather than rely on unverified assertions. In similar scenarios, apply a risk-based follow-up by prioritizing third-party evidence over internal explanations. This rule promotes obtaining sufficient audit evidence to mitigate risks of material misstatement in payables.
- In an audit of a nonissuer, the auditor sends positive confirmations to customers. One customer replies and confirms the balance but adds that it has a side agreement allowing it to return unsold goods at any time for full credit. Management states no such agreement exists and that returns are not allowed. Which action should the auditor take based on the confirmation response?
Answer: Investigate the alleged side agreement by inspecting contracts, emails, and subsequent return activity, and evaluate implications for revenue recognition and disclosure.
AU-C Section 505 requires investigating additional confirmation information, like side agreements, for revenue implications. The customer's note suggests undisclosed terms affecting recognition. Option B aligns with AU-C 505.12 and ASC 606 by inspecting evidence. Option A ignores relevance; option C treats as nonresponse wrongly, and option D relies inadequately. Investigation is essential. Rule: Probe beyond balances for assertions. This applies to revenue audits.
- During an audit of a nonissuer, the auditor sends positive confirmations of accounts payable to vendors. A vendor confirms a balance that is $60,000 higher than the client's records and states the difference relates to goods shipped FOB shipping point on December 30. Management believes the goods arrived after year-end and were recorded in January. What is the most appropriate follow-up procedure when a confirmation discrepancy is identified?
Answer: Test cutoff by inspecting vendor invoices, shipping terms, receiving reports, and subsequent payments to determine whether the liability and inventory should be recorded at year-end.
AU-C Section 505 requires investigating discrepancies in payable confirmations, such as shipment timing differences, to assess completeness and cutoff. The vendor's higher balance due to FOB terms suggests potential unrecorded liabilities. Option A aligns with AU-C 505.12 and AU-C 330.18 by testing cutoff via documents. Option B adjusts prematurely; option C ignores implications, and option D defers inappropriately. Investigation is key. Framework: Corroborate terms with evidence. This applies to liability assertions.
- In a nonissuer audit, the auditor plans to use negative confirmations for accounts receivable. However, the population includes several individually significant balances and the auditor has identified heightened risk related to fictitious sales near year-end. Which action should the auditor take based on the confirmation approach decision?
Answer: Use positive confirmations for the individually significant and higher-risk balances (and consider blank confirmations), while negative confirmations may be used only for low-risk, smaller balances if appropriate.
AU-C Section 505.A23 restricts negative confirmations to low-risk scenarios, requiring positives for significant or high-risk balances. Significant balances and fictitious sales risk necessitate positive confirmations. Option B follows AU-C 505.A24 by using positives for risky items. Option A ignores risk; option C relies on analytics inadequately, and option D times poorly. Risk tailors approach. Rule: Use positives for elevated risks. This framework enhances detection.
- An auditor is evaluating a confirmation response from a related party regarding a significant, non-routine transaction. What additional step is most important for the auditor to perform?
Answer: Corroborate the terms and substance of the transaction with other independent evidence.
Confirmation from a related party provides less persuasive evidence than confirmation from an independent third party because of the potential for collusion. Therefore, the auditor must perform additional procedures to understand the business rationale and substance of the transaction. This involves obtaining other, independent evidence, such as reviewing contracts, bank statements, or appraisals, to corroborate the information received from the related party. Relying solely on the confirmation (A) or management representations (B) is insufficient. Legal counsel (D) may not have knowledge of the transaction's business terms.
- Which of the following exceptions noted on an accounts receivable confirmation response would most likely represent a misstatement rather than a timing difference?
Answer: The customer states that the invoice amount is incorrect due to a pricing dispute.
A pricing dispute suggests that the amount originally recorded for the sale may have been incorrect. This represents a potential misstatement in the valuation of the receivable and revenue. The other options are classic timing differences: (A) is a payment in transit, (B) relates to a transaction in the subsequent period, and (D) is a payment application issue that does not affect the total receivable balance from that customer.
- In an audit of an issuer, the auditor sends positive confirmations to customers. A customer responds that it paid $75,000 on December 29, but the client's records show the payment was applied on January 3 to a different invoice and the year-end receivable remains outstanding. What is the most appropriate follow-up procedure when a confirmation discrepancy is identified?
Answer: Investigate potential misapplication and cutoff by examining remittance advice, bank deposits, and the client's cash application records around year-end.
PCAOB AS 2310 requires investigation of discrepancies in positive confirmations, including payment timing differences that may indicate misapplication or cutoff issues. The customer's confirmation of a pre-year-end payment applied post-year-end to a different invoice suggests potential errors in cash application or revenue recognition. Option A is correct per AS 2310.33, involving examination of remittance and deposit records to resolve the discrepancy. Option B prematurely adjusts revenue without evidence, contrary to AS 2310; option C relies on management without auditor involvement, violating AS 2310.09, and option D disregards the issue despite its relevance to receivables. Discrepancies demand corroborative testing. A decision rule is to trace timing differences to source documents and assess assertion impacts. This approach aids in identifying misstatements in revenue and receivables cycles.
- You are auditing an issuer and considering confirmation strategy for accounts receivable. The receivable balance is material, fraud risk is elevated due to aggressive revenue targets, and prior-year testing found numerous exceptions. Which action should the auditor take based on the confirmation approach decision?
Answer: Use positive confirmations (potentially with blank forms) and maintain control over the confirmation process because risk is high and stronger evidence is needed.
PCAOB AS 2310.23 recommends positive confirmations for higher-risk or material items, especially with fraud risks and prior exceptions. Elevated fraud risk and exceptions necessitate stronger evidence from positive confirmations. Option B complies with AS 2310.18 by using positives and maintaining control. Option A suits low risk; option C avoids needed procedures, and option D compromises independence. Risk drives type. Rule: Match confirmation strength to risk. This ensures effective fraud detection.
