- In an integrated audit of an issuer under PCAOB standards, the auditor plans to use data analytics to test revenue occurrence. The auditor obtains a complete population of sales invoices and identifies a cluster of invoices recorded on the last two days of the year with shipping dates after year-end and with manual changes to shipping terms. Revenue is material, and prior-year cut-off errors were identified. Which substantive procedure would be most effective given the assessed risk?
Answer: Select invoices from the identified cluster and vouch to underlying shipping documents (e.g., bills of lading) and customer acknowledgments to verify shipment occurred before year-end and terms support revenue recognition; expand testing if exceptions are found.
This question evaluates the auditor's use of data analytics to identify and respond to revenue cutoff risks in a PCAOB integrated audit. The scenario presents data analytics findings showing year-end invoices with post-year-end shipping and manual term changes, combined with prior cutoff errors, indicating high risk of premature revenue recognition. AS 2301 requires substantive procedures for significant risks, and data analytics findings must be investigated through detailed testing. Option A correctly prescribes vouching the identified population to shipping documents and customer acknowledgments to verify proper cutoff and revenue recognition criteria. Option B inappropriately substitutes control testing for required substantive procedures; Option C misunderstands the relationship between interim and year-end testing; Option D misapplies materiality to population testing. The key principle is that data analytics identifies risk populations requiring targeted substantive procedures, not elimination of detailed testing, especially for cutoff where timing is critical.
- What is the auditor's most appropriate planned response to the control test failures noted in the SOC 1, Type 2 report?
Answer: Modify the planned audit approach by increasing the extent of substantive testing of payroll expense.
A SOC 1, Type 2 report provides evidence about the design and operating effectiveness of a service organization's controls. If the report identifies failures in control tests, the auditor cannot rely on those specific controls. The auditor must assess the impact of these failures on the risk of material misstatement for the client's financial statements and modify the audit plan accordingly. The most common response is to increase the nature and/or extent of substantive procedures for the related account, which is payroll expense in this case.
- When designing the audit response for a significant risk, the auditor must perform which of the following?
Answer: Perform substantive procedures that are specifically responsive to that risk.
According to auditing standards (e.g., AU-C 330), when an auditor has determined that a significant risk exists, the auditor must design and perform substantive procedures that are specifically responsive to that assessed risk. While testing controls or engaging a specialist might be part of the response, the core requirement is to perform specifically tailored substantive procedures.
- During an audit of a public company issuer (PCAOB), the auditor identifies that the cash disbursements process includes a control requiring the accounts payable supervisor to review a weekly exception report of manual vendor master file changes. However, the supervisor's review is evidenced only by an electronic sign-off, and IT logs show that the supervisor's credentials were used to approve changes on days the supervisor was on vacation. The company has had recent turnover in AP and a spike in new vendors with P.O. box addresses. What is the best approach to address the identified risk?
Answer: Increase substantive procedures by performing data-driven tests for fictitious vendors (e.g., matching vendor addresses to employees, identifying unusual bank accounts, and testing a sample of vendor changes to supporting authorization) and evaluate whether the control can be relied upon given the potential credential misuse.
This question evaluates the auditor's response to potential management override of controls in a PCAOB integrated audit, specifically addressing segregation of duties and IT access controls. The scenario reveals that supervisor credentials were used during vacation periods, combined with AP turnover and suspicious vendor characteristics (P.O. box addresses), indicating potential fraudulent vendor schemes. Under AS 2110 and AS 2201, when management override indicators exist, the auditor cannot rely on the affected control and must perform extensive substantive procedures targeting the specific fraud risk. Option C correctly prescribes data-driven tests for fictitious vendors (address matching, bank account analysis, authorization testing) and requires evaluation of control reliance. Option A incorrectly limits testing to walkthroughs; Option B inappropriately uses compromised credentials for testing; Option D misapplies standards and accepts inadequate explanations. The critical framework is that evidence of credential misuse represents a significant control deficiency requiring immediate substantive procedures targeting fraud risks, not additional control testing.
- During an integrated audit of a public company issuer under PCAOB standards, the auditor notes that the company implemented a new revenue system midyear and, for the first two months after implementation, sales managers could manually override the system's price and discount fields without documented approval. Revenue is quantitatively material and management's incentives are tied to quarterly revenue targets, and the auditor has identified several large quarter-end sales with unusually high discounts. How should the auditor respond to the control deficiency identified?
Answer: Test the operating effectiveness of the override-approval control by selecting a sample of override transactions from the affected period, inspecting evidence of independent approval, and reperformance of the system's approval workflow; if failures are found, expand substantive tests of revenue (especially quarter-end) and evaluate whether the deficiency is a material weakness.
This question tests the auditor's response to control deficiencies in an integrated audit under PCAOB standards, specifically AS 2201. The scenario presents a revenue system implementation with a two-month period where manual overrides lacked documented approval, combined with material revenue, management incentives tied to revenue targets, and evidence of unusual quarter-end discounts. Under PCAOB standards, when a control deficiency is identified in a material account with fraud risk indicators, the auditor must test the operating effectiveness of compensating controls and expand substantive procedures if the deficiency is not mitigated. Option B correctly requires testing the override-approval control through inspection and reperformance, expanding substantive tests if failures are found, and evaluating whether the deficiency constitutes a material weakness. Option A incorrectly relies solely on analytical procedures without addressing the control deficiency; Option C improperly defers communication and fails to modify procedures; Option D incorrectly applies nonissuer standards to an issuer audit. The key framework is that control deficiencies in areas with fraud risk require both control testing of compensating controls and expanded substantive procedures, with immediate evaluation of the deficiency's severity for ICFR reporting.
- In a nonissuer audit, the auditor notes that the client has significant credit memos issued after year-end related to disputed billings, and the allowance for doubtful accounts was reduced this year despite worsening aging. The AR clerk can both post cash receipts and write off balances without independent review. Receivables are material and materiality is low due to lender scrutiny. Which testing procedure should the auditor implement?
Answer: Confirm a targeted sample of receivables (including past-due accounts), test subsequent cash receipts and post–year-end credit memos, and evaluate the allowance methodology and write-off authorization due to the segregation-of-duties weakness.
This question examines receivables procedures in a nonissuer audit under AU-C 330, with control weaknesses. Credit memos, reduced allowance, segregation issues, material receivables, low materiality are critical. Confirmations, receipts testing, allowance evaluation follows AU-C 330's risk response. Option B relies untested, per AU-C 500. Option C omits substantives improperly, while Option D misadjusts materiality. Framework: Address valuation via aging and subsequent events. Strategy: Combine confirmations with allowance analytics for collectibility.
- To achieve an acceptably low level of detection risk for the valuation of inventory, the auditor's planned substantive procedures would most likely include an increase in the:
Answer: Extent of tests of details, such as increasing sample sizes for price testing.
There is an inverse relationship between the assessed risk of material misstatement (inherent risk x control risk) and detection risk. Since the risk of material misstatement is high, the auditor must plan procedures to achieve a low level of detection risk. This is accomplished by modifying the nature, timing, and/or extent of substantive procedures. Increasing the extent of testing, such as selecting larger sample sizes for tests of details (e.g., price testing of inventory), directly reduces detection risk.
- Based on the identification of this control deficiency, how should the auditor modify the planned substantive procedures for purchases and accounts payable?
Answer: Increase the assessed level of control risk and expand the extent of substantive tests of details.
When a control deficiency is identified in a control the auditor planned to rely upon, the initial assessment of control risk is no longer appropriate. The auditor must increase the assessed level of control risk. As a result, the auditor cannot rely on the control to the extent originally planned and must compensate by increasing the nature, timing, or, most commonly, the extent (e.g., sample size) of substantive procedures to achieve the desired level of audit assurance.
- To obtain the most persuasive evidence regarding the existence assertion for inventory, the auditor should plan to:
Answer: Perform test counts and observe the client's physical inventory count.
The existence assertion for an asset like inventory means that the asset physically exists at a given date. The most direct and persuasive audit procedure to test existence is physical observation and examination. By observing the client's physical inventory count and performing their own test counts, the auditor obtains direct evidence of the existence of the inventory.
- Which planned substantive procedure would provide the most persuasive evidence in response to the high estimation uncertainty for the allowance for doubtful accounts?
Answer: Developing an independent auditor's point estimate and comparing it to management's estimate.
When auditing an accounting estimate with high estimation uncertainty, there are three primary approaches: (1) test management's process, (2) develop an independent estimate, or (3) review subsequent events. While testing management's process (B) and reviewing subsequent collections (C) are valid procedures, developing an independent auditor's point estimate (or range) provides a highly persuasive form of evidence because it is derived from the auditor's own assumptions and data, providing a direct and independent benchmark against which to evaluate management's recorded amount.
- In response to the assessed risk of management override, which of the following is the most appropriate overall audit response?
Answer: Incorporating an element of unpredictability in the selection and timing of audit procedures.
Auditing standards require specific responses to the risk of management override. One key overall response is to incorporate an element of unpredictability in the audit plan. This could involve performing procedures at unexpected locations, using different sampling methods, or varying the timing of tests from year to year. This approach reduces the ability of management to anticipate the audit procedures and conceal fraudulent activity.
- What is the auditor's most appropriate immediate planned response to the identification of this related party transaction?
Answer: Design procedures to evaluate the business rationale, terms, and accounting for the transaction.
When an auditor identifies significant related party transactions not previously disclosed, the immediate response is to perform procedures to understand the transaction fully. This includes evaluating the business rationale (or lack thereof), inspecting the underlying contracts, comparing the terms to similar market transactions, and ensuring the transaction is appropriately accounted for and disclosed. Relying solely on a management representation would not be sufficient.
- During an integrated audit of an issuer, the auditor plans to rely on controls over financial close. The auditor notes that account reconciliations are prepared timely but are reviewed by the same person who prepares several key journal entries, and the review consists of a checklist with no evidence of investigation of reconciling items. The company recorded a large top-side consolidation entry at year-end. Which testing procedure should the auditor implement?
Answer: Test the operating effectiveness of the reconciliation review control by inspecting evidence of review that demonstrates investigation and resolution of reconciling items, and separately test the year-end top-side entry for support, authorization, and appropriateness.
This question evaluates financial close controls in an integrated audit under PCAOB AS 2201, with documentation weaknesses. Same-person preparation/review, checklist without investigation, top-side entry are key. Testing effectiveness and entry substantively aligns with AS 2201's precision requirements. Option B limits to analytics, insufficient per AS 2201. Option C misapplies AICPA, while Option D extrapolates improperly. Framework: Demand evidence of review depth. Strategy: Test close entries for consolidation risks.
- Which of the following procedures would be most effective for testing the completeness of accounts payable?
Answer: Performing a search for unrecorded liabilities by examining cash disbursements made subsequent to year-end.
The completeness assertion for liabilities addresses whether all liabilities that should have been recorded have been recorded. A search for unrecorded liabilities is specifically designed to test this. By examining cash payments made after year-end, the auditor can identify payments for obligations that existed at the balance sheet date but were not recorded. Vouching recorded payables (A) tests existence/occurrence, not completeness.
- Which substantive audit procedure would be most effective in response to the identified fraud risk of undisclosed side agreements?
Answer: Confirming individual contract terms, such as right-of-return and payment terms, directly with the customer's management.
A standard confirmation only confirms the outstanding balance. To address the risk of side agreements, the auditor needs to obtain evidence about the specific terms of the sales agreements that could affect revenue recognition. Directly confirming not just the amount, but also key terms like right-of-return, acceptance criteria, and payment terms with the customer is the most effective procedure to detect such undisclosed arrangements.
- In a nonissuer audit, the auditor identifies an unusual transaction: the company sold equipment to a financing entity and immediately leased it back. Management recorded a gain and classified the proceeds as operating cash flows. The transaction occurred two days before year-end and improved reported profitability. Materiality is moderate, and the entity is seeking new financing. Based on the provided information, which audit procedure is most suitable?
Answer: Inspect the sale-leaseback agreement and related documents, evaluate the appropriate accounting and classification, and test the gain calculation and cash flow presentation, including considering whether the transaction has a financing substance.
This question tests unusual transactions in a nonissuer audit under AU-C 330, focusing on sale-leasebacks. Gain recording, operating cash flows, timing near year-end, financing pursuit are pivotal. Inspecting agreements and evaluating accounting aligns with AU-C 540's complex transaction guidance. Option B limits to cash, missing classification per AU-C 330. Option C relies on walkthrough inadequately, while Option D misapplies PCAOB. Framework: Scrutinize substance over form for off-balance-sheet risks. Strategy: Use specialist input for valuation in nonroutine deals.
- Which type of audit test is the auditor designing to meet both objectives simultaneously?
Answer: A dual-purpose test.
A dual-purpose test is an audit procedure that is designed to provide evidence for two different purposes: testing the operating effectiveness of an internal control and detecting material misstatements in financial statement account balances (substantive testing). In this scenario, examining the disbursement for authorization tests the control, and verifying the amount tests the substantive detail, making it a dual-purpose test.
- In an integrated audit of a public company issuer (PCAOB), the auditor is testing controls over journal entries. The company uses a manual spreadsheet to upload consolidation entries, and there is no independent review of the spreadsheet logic or the upload file before posting. Several large, top-side entries were posted late on the last day of the year to increase earnings, and the CFO has significant influence over the close process. Which testing procedure should the auditor implement?
Answer: Perform a test of controls by selecting a sample of consolidation uploads and inspecting evidence of independent review and approval prior to posting; additionally, test IT access and change controls over the upload process and increase substantive journal entry testing focused on late, unusual entries.
This question addresses testing controls over financial reporting period-end processes in a PCAOB integrated audit, specifically focusing on journal entry controls. The scenario presents manual consolidation entries via spreadsheet without independent review, late earnings-increasing entries, and CFO influence over the close process, indicating significant fraud risk. AS 2201 and AS 2401 require specific procedures for journal entry testing, especially for manual, period-end entries affecting earnings. Option A correctly prescribes testing both the review control and IT access/change controls, plus expanded substantive journal entry testing focused on unusual entries. Option B incorrectly limits procedures to analytics; Option C misapplies standards (PCAOB standards do apply to issuers); Option D misunderstands timing requirements for year-end entry testing. The critical framework is that manual period-end processes with fraud indicators require both control and substantive testing, with particular focus on IT controls preventing unauthorized changes and detailed testing of unusual entries.
- During an integrated audit of an issuer, management implemented a new automated three-way match control for purchases, but the auditor notes that the system allows users in Accounts Payable to change receiving quantities after invoice entry without a separate approval log. There were several large manual journal entries to reduce expenses in the last week of the year. Expenses are material and there is incentive to meet earnings targets. What is the best approach to address the identified risk?
Answer: Test the operating effectiveness of controls over changes to receiving data (including access and approval evidence) and expand substantive testing of year-end expense cut-off and manual journal entries for authorization and support.
This question assesses responses to IT-related control deficiencies in an integrated audit under PCAOB AS 2201, focusing on automated controls. The new three-way match allows post-entry changes without approval, with large manual entries reducing expenses amid earnings incentives and material expenses. Testing control effectiveness and expanding substantive testing of cut-off and entries complies with AS 2201's dual testing and AS 2301's risk response. Option B limits to interim walkthroughs, ignoring AS 2201's year-end requirements. Option C misapplies AICPA standards to an issuer and overlooks automated control risks per AS 2110, while Option D delays testing improperly under AS 2201. A transferable framework links IT deficiencies to substantive expansions, evaluating precision and documentation. Decision strategies include assessing control automation levels to determine reliance and testing depth.
- During an integrated audit of an issuer, the auditor identifies that management relies on a system-generated "open purchase orders" report to accrue expenses. The report logic was modified during the year, but change approvals were not documented, and the report is used in a key control for the completeness of accrued liabilities. Accrued expenses are material and there is a history of understating accruals. Which testing procedure should the auditor implement?
Answer: Test IT change management controls over report modifications and test the key control by reperforming the accrual process using the report; additionally, perform substantive search for unrecorded liabilities.
This question evaluates IT-dependent controls in an integrated audit under PCAOB AS 2201, for accruals. Undocumented report changes, key completeness control, understating history, material accruals are key. Testing ITGCs, reperforming, and searching unrecorded liabilities aligns with AS 2201's integrity requirements. Option B ignores IT controls, contrary to AS 2201. Option C misapplies AICPA, while Option D tests retrospectively improperly. Framework: Link application controls to ITGC testing. Strategy: Verify report logic changes for accrual accuracy.
