- An issuer telecommunications company is audited under PCAOB standards. The auditor identifies that the revenue subledger interface to the general ledger failed for two days in December, and IT manually posted a lump-sum journal entry to "true up" revenue; the support is a screenshot with no system-generated audit trail. Which audit procedure demonstrates appropriate skepticism?
Answer: Obtain system logs and detailed transaction listings for the affected period, reconcile subledger to general ledger, and test the manual entry's accuracy and completeness with independent evidence.
This question evaluates skepticism in auditing manual interventions under PCAOB standards. Key facts involve a failed interface with unsupported lump-sum entry, lacking audit trails. Obtaining logs and reconciling with evidence complies with AS 1105 for sufficiency. Agreeing to screenshots or relying on representations/ inquiry ignores AS 2301's corroboration, while limiting for isolation contravenes standards. Procedures must ensure completeness. Framework: Verify manual entries against independent data. Principle: Judgment heightens scrutiny for system failures.
- An issuer software company is undergoing an integrated audit under PCAOB standards. The auditor notes that system administrators have the ability to modify revenue recognition rules in the billing system without an independent review, and a late-year change was made to extend contract terms for certain customers. Based on the evidence, what is the auditor's best course of action?
Answer: Assess the control deficiency's severity, expand substantive testing of revenue cut-off and contract modifications, and evaluate implications for ICFR and the financial statement audit.
This question tests skepticism in integrated audits when control deficiencies impact revenue under PCAOB standards. Key facts include administrators' unchecked ability to modify revenue rules, with a late-year change extending contracts, indicating potential override risks. Assessing deficiency severity and expanding substantive testing complies with AS 2201 and AS 2401 for ICFR and fraud considerations. Relying on analytics alone or concluding effectiveness based on trust ignores AS 2110's risk identification, while qualifying the opinion without procedures violates AS 2810. Controls remain crucial even for predictable revenue per AS 2301. Framework: Link control deficiencies to audit adjustments for comprehensive risk response. Principle: Judgment requires evaluating implications across audit areas to uphold integrity.
- A nonissuer construction contractor is undergoing an audit under AICPA standards. The auditor observes that several journal entries posted on the last day of the year were made by the CFO and lack supporting documentation; the entries increase revenue and decrease contract costs, and the CFO insists the support is "in the project files." How should the auditor respond to identified fraud risks?
Answer: Treat the entries as significant fraud risk indicators, perform targeted journal entry testing including inspection of underlying project support, and consider expanding procedures over revenue recognition estimates.
This question examines responses to fraud risks from unsupported journal entries under AICPA standards. Key facts are CFO-posted year-end entries lacking documentation, increasing revenue and decreasing costs, with vague support claims, signaling manipulation potential. Treating as fraud indicators and performing targeted testing complies with AU-C Section 240, requiring unpredictable procedures for fraud. Accepting based on executive status or delaying follow-up ignores immediacy in AU-C Section 330, while limiting to representations is insufficient per AU-C Section 580. Standards do not presume authorization without evidence. Framework: Investigate unusual entries with corroboration to detect overrides. Principle: Skepticism involves probing beyond surface explanations for hidden risks.
- To mitigate the effects of potential confirmation bias, the auditor should prioritize which of the following procedures?
Answer: Searching for external market data or other evidence that might contradict the controller's explanation.
Confirmation bias is the tendency to seek out and favor information that confirms pre-existing beliefs while ignoring contradictory information. A long-standing positive relationship can create such a bias. To counteract this, the auditor must actively search for disconfirming evidence. Seeking external data that might challenge the explanation is the best way to do this. Choices A and C simply document the potentially biased information. Choice D might be helpful, but the partner could have the same bias; the key is to seek opposing evidence.
- A professionally skeptical auditor's evaluation of this transaction should focus primarily on the:
Answer: substance of the arrangement to determine if the criteria for revenue recognition have been met.
Significant, unusual, or last-minute transactions that help the company meet targets are high-risk areas for financial statement fraud. The auditor's primary concern should be the economic substance of the transaction, not just its form. This involves critically evaluating whether the specific criteria for revenue recognition under a bill-and-hold arrangement (e.g., substantive reason for the arrangement, product is identified and ready for shipment) have been genuinely met. The other choices are standard audit procedures but do not address the primary risk in this scenario.
- Which statement best describes the auditor's professional responsibility regarding the general counsel's assertion?
Answer: The auditor should corroborate the assertion by sending a formal letter of inquiry to the external law firm.
Auditing standards emphasize that inquiry alone is not sufficient evidence. While the general counsel is a good source for inquiry, their assertion must be corroborated with more persuasive evidence. The standard procedure for verifying information about litigation, claims, and assessments is to send a direct letter of inquiry to the client's external legal counsel. This provides independent, external corroboration.
- Which of the following audit procedures best demonstrates the application of professional skepticism in response to this situation?
Answer: Requesting to review sales orders and shipping documents for similar components dated after the year-end to corroborate their actual selling price.
Professional skepticism requires the auditor to critically assess audit evidence and corroborate management's assertions. While the manager's explanation is plausible, it must be supported by evidence. Reviewing subsequent sales of similar items provides the strongest, most persuasive evidence regarding the net realizable value of the components in question. Choice A demonstrates a lack of skepticism. Choice B provides evidence about the intended process but not about the actual condition or value of the items. Choice D is irrelevant to the current valuation (net realizable value) of potentially obsolete inventory.
- Which of the following describes the most appropriate application of the auditor's professional judgment?
Answer: Maintain the proposed adjustment if it is supported by sufficient appropriate evidence, regardless of the covenant issue.
The auditor's professional judgment must remain objective and independent from client pressure. The decision to require an adjustment must be based solely on whether it is necessary for the financial statements to be fairly presented in accordance with the applicable financial reporting framework, as supported by audit evidence. The consequences of the adjustment, such as a debt covenant violation, do not change the auditor's responsibility to ensure fair presentation. The other options represent a compromise of the auditor's objectivity.
- The group engagement partner's professional skepticism should lead them to first:
Answer: make specific inquiries of the component auditor to understand how the restriction on access may have affected their ability to obtain sufficient appropriate evidence.
The informal comment contradicts the formal report and suggests a potential scope limitation. A skeptical auditor must investigate this contradiction. The appropriate first step is to formally inquire with the component auditor to understand the nature of the restriction, the areas it affected, and what alternative procedures, if any, were performed to overcome it. This information is needed to assess the impact on the group audit. A and B are inappropriate, and D is a possible later step but not the initial response.
- In evaluating the feasibility of management's plan, which of the following pieces of evidence would be the most persuasive?
Answer: A copy of a signed, legally binding contract with the new customer, executed after the balance sheet date.
The most persuasive audit evidence is externally generated, independent, and conclusive. A signed, legally binding contract (D) is the strongest possible evidence that the planned revenue will materialize. The other options consist of internal documents and management representations (A, B, C), which are subject to management bias and are significantly less persuasive than a contract with an external party.
- An issuer consumer products company is audited under PCAOB standards. During inventory observation, management instructs warehouse staff to move certain slow-moving items to a separate area after the auditor arrives, stating they are "returns not owned," yet the items are recorded in the perpetual inventory system. How should the auditor respond to identified fraud risks?
Answer: Treat the behavior as a red flag, expand observation and test ownership and cut-off for the segregated items, and evaluate whether management is attempting to conceal obsolete or non-owned inventory.
This question addresses fraud risk responses during inventory observation under PCAOB standards. Key facts involve management moving items post-arrival, claiming non-ownership despite records, suggesting concealment. Treating as a red flag and expanding tests complies with AS 2401 for fraud procedures. Accepting explanations or excluding items ignores AS 2310's observation requirements, while prioritizing system data over physical contravenes standards. PCAOB emphasizes corroboration. Framework: Investigate anomalies with ownership verification. Principle: Skepticism probes management actions for misstatement indicators.
- The auditor's judgment could be most negatively impacted by the "availability heuristic," which could cause the auditor to:
Answer: place an excessive amount of audit focus on the valuation of the retailer's minimal investment portfolio.
The availability heuristic (or bias) is a mental shortcut where people overestimate the importance of information that is most easily recalled. Because the auditor's recent and extensive experience is with banking-related risks (valuation of financial instruments), they may subconsciously place too much emphasis on this area at the retail client, even if it is not a significant risk, while potentially overlooking more relevant risks like inventory (A).
- An issuer manufacturing company is audited under PCAOB standards. The audit team plans to use data analytics over the full population of sales transactions, but learns that sales can be entered through a manual "offline order" screen that bypasses automated credit checks and is not included in the main sales extract. What should the auditor consider when evaluating data integrity?
Answer: Assess completeness of the data used for analytics by identifying all transaction sources, reconciling extracts to the general ledger, and including offline orders in the population or performing separate procedures.
This question examines data integrity in analytics under PCAOB standards. Key facts involve excluded offline orders in sales extracts, potentially impairing completeness. Assessing and reconciling data complies with AS 1105 for reliable evidence. Proceeding without or relying on assertions ignores AS 2301's population requirements, while eliminating testing contravenes standards. Analytics need full data. Framework: Ensure comprehensive populations for analytics. Principle: Skepticism verifies data wholeness before analysis.
- The auditor's professional skepticism should cause the auditor to:
Answer: modify the nature and extent of planned tests of inventory valuation, such as increasing sample sizes for obsolescence testing.
Vague, evasive, or dismissive responses to inquiries should heighten an auditor's skepticism. Such a response suggests that controls may be weak or that management is attempting to conceal a problem. The appropriate reaction is to modify the audit plan to obtain more persuasive evidence through other procedures, such as increasing the extent of substantive testing for inventory obsolescence. While seeking another manager (B) may be part of the response, the primary action is to adjust the audit procedures to address the heightened risk.
- An issuer medical device company is audited under PCAOB standards. The auditor plans to rely on a third-party valuation specialist's report for stock-based compensation, but the report was commissioned by management, includes a limitation of liability to management only, and uses inputs inconsistent with observable market volatility. What should the auditor consider when evaluating evidence reliability?
Answer: Assess the specialist's competence and objectivity, evaluate the methods and significant assumptions (including inconsistencies with market data), and obtain sufficient appropriate evidence beyond management's commissioned report as necessary.
This question assesses the auditor's judgment in evaluating the reliability of evidence from a management's specialist under PCAOB standards for an issuer. Critical elements include the specialist's report being commissioned by management, containing a liability limitation, and using assumptions inconsistent with market data for stock-based compensation valuation. Assessing the specialist's competence and objectivity, evaluating methods and assumptions for inconsistencies, and obtaining additional evidence as needed adheres to PCAOB AS 1210, which requires auditors to test the specialist's work and ensure its appropriateness for audit purposes. Accepting the report without challenge or because it was prepared by a specialist, as in choices A and C, is incorrect as AS 1105 mandates auditors to evaluate evidence reliability independently, not defer entirely to management. Ignoring the report and qualifying the opinion outright, per choice D, overstates the impact without first applying evaluative procedures under AS 2501. Auditors should apply a risk-based framework by scrutinizing specialist inputs against external data to form an independent conclusion. This principle reinforces that professional skepticism extends to all sources of evidence, promoting corroboration to achieve reasonable assurance.
- An issuer e-commerce company is audited under PCAOB standards. The auditor identifies that customer refunds are approved through a shared generic user account, and the refund log shows multiple refunds just below the threshold requiring secondary approval. Based on the evidence, what is the auditor's best course of action?
Answer: Assess the shared account as a control deficiency, expand testing of refunds (including those just below the threshold), and perform procedures to identify potential management override or employee fraud.
This question tests responses to control deficiencies in integrated audits under PCAOB standards. Key facts include shared accounts and patterned refunds below thresholds, suggesting override. Assessing as deficiency and expanding testing complies with AS 2201 and AS 2401. Concluding effectiveness or relying on inquiry ignores AS 2301's evidence, while accepting logs without scrutiny contravenes standards. Shared access heightens risks. Framework: Test for patterns indicating fraud. Principle: Skepticism evaluates controls for override potential.
- A nonissuer manufacturing company is undergoing an audit under AICPA standards. The auditor receives a vendor confirmation that shows a payable balance materially higher than the client's records; management says the vendor "must be including January shipments" and asks the auditor to ignore the difference. What is the auditor's best course of action?
Answer: Reconcile the difference by obtaining vendor statements, reviewing subsequent payments and receiving reports, and evaluating whether an unrecorded liability or cut-off error exists.
This question tests the auditor's professional skepticism under AICPA standards when encountering discrepancies in confirmation responses during an audit of accounts payable. Key facts include a vendor confirmation showing a materially higher balance than the client's records, with management attributing it to timing differences and urging the auditor to ignore it. The correct action, reconciling the difference by obtaining vendor statements, reviewing subsequent payments and receiving reports, and evaluating for unrecorded liabilities or cut-off errors, complies with AU-C Section 330, which requires auditors to investigate exceptions in confirmation responses to obtain sufficient appropriate audit evidence. Accepting management's explanation without investigation, as in choice A, is incorrect because it violates the requirement for corroboration under AU-C 500 and fails to exercise due professional care. Discarding the confirmation or applying PCAOB standards, as in choices C and D, is inappropriate under AICPA standards for nonissuers and misapplies evidence evaluation principles, as confirmations are generally reliable external evidence per AU-C 505. Auditors should always maintain skepticism by corroborating management assertions with independent evidence, especially when discrepancies arise. This framework emphasizes that professional judgment involves balancing efficiency with thoroughness to mitigate risks of material misstatement.
- A nonissuer manufacturing company is undergoing a financial statement audit under AICPA standards. Management provided an accounts receivable confirmation response in a PDF forwarded from the controller's email, and the auditor notes the customer's domain in the PDF footer does not match the customer's known website; management explains the customer "recently changed domains." Based on the evidence, what is the auditor's best course of action?
Answer: Treat the response as potentially unreliable and obtain the confirmation directly from the customer using auditor-controlled contact information and alternative procedures as needed.
This question tests the auditor's professional skepticism in evaluating the reliability of confirmation evidence under AICPA standards. Key facts include the confirmation being forwarded from management's email, a mismatched domain, and management's explanation of a recent domain change, which raises concerns about authenticity and potential interception. Treating the response as potentially unreliable and obtaining confirmation directly from the customer using auditor-controlled contact information complies with AU-C Section 505, which emphasizes maintaining control over the confirmation process to ensure reliability. Accepting the confirmation as reliable overlooks red flags and violates skepticism requirements, while relying on management's representation or discontinuing confirmations ignores the need for corroborative evidence under AU-C Section 330. Increasing sample sizes elsewhere or limiting to analytical procedures does not address the specific reliability issue and contravenes standards requiring appropriate responses to risks. Auditors should always verify suspicious evidence independently to maintain objectivity. Professional judgment involves assessing the source and nature of evidence for potential bias or manipulation.
- A nonissuer manufacturer is undergoing an audit under AICPA standards. The auditor notes that the purchasing manager can both add new vendors and approve invoices in the system, and the vendor master file includes several new vendors with P.O. boxes and no tax identification documentation. What factor should most influence the auditor's judgment about further procedures?
Answer: The heightened fraud risk from vendor master file access and approval rights, requiring expanded procedures such as vendor existence validation and testing for related parties and duplicate payments.
This question assesses factors influencing procedures amid fraud risks from control weaknesses under AICPA standards. Key facts involve the purchasing manager's dual roles and undocumented new vendors, elevating fraud potential. Heightened risk requiring expanded validation complies with AU-C Section 240 for fraud-responsive procedures. Focusing on triviality or ethics policies alone ignores AU-C Section 315's risk assessment, while excluding operational processes contravenes audit scope in AU-C Section 200. Controls do not mitigate without testing. Framework: Amplify procedures proportional to identified risks. Principle: Skepticism prioritizes corroboration in deficient control environments.
- A nonissuer wholesaler is undergoing an audit under AICPA standards. The auditor plans to use a system-generated sales report for cut-off testing, but learns that IT implemented a patch two weeks before year-end and there is no evidence of user acceptance testing; several sales invoices around year-end have missing shipping numbers. Which audit procedure demonstrates appropriate skepticism regarding data integrity?
Answer: Obtain the report directly from the system, test report logic and key IT general controls around the patch, and reconcile report totals to the general ledger before selecting items for cut-off testing.
This question evaluates skepticism regarding data integrity for audit procedures under AICPA standards. Key facts include an untested system patch before year-end and missing data in sales reports, questioning completeness. Obtaining reports directly and testing controls complies with AU-C Section 500 for reliable evidence. Proceeding without verification or relying on assurances/ prior results ignores AU-C Section 330's integrity needs. Reduced samples do not offset risks. Framework: Validate data sources before substantive use. Principle: Judgment assesses IT impacts on evidence quality.
