Download Auditing Solution Manual and more Quizzes Auditing in PDF only on Docsity!
Solution Manual for Auditing A Business
Risk Approach 8th Edition by Rittenburg
Complete downloadable file at:
https://testbanku.eu/Solution-Manual-
for-Auditing-A-Business-Risk-Approach-
8th-Edition-by-Rittenburg
Review Questions: 1-1. The special function performed by the public accounting profession is the attestation to the fairness of the financial statements of clients. The special function ensures the reliability and integrity of the financial reporting system. Judge Burger described the special function as "certifying the public reports that collectively depict a corporation's financial status," which involves "a public responsibility transcending any employment relationship with the client." The auditing profession exists to serve the users of an organization's financial statements. These include lenders, investors, management, government, and (indirectly) all individuals who are ultimately affected by the integrity of the financial reporting process. Auditors need to remember that they are serving the public interest and not the interests of client management. 1-2. The audit opinion formulation process is a systematic approach by which the auditor evaluates the risk of being associated with a client, through the process of gathering and evaluating audit evidence, to determining the type of audit opinion that should be rendered. The stages and outcome of each stage are as follows: Assessing Client Acceptance and Retention : The outcome is determining whether or not a firm should serve a potential client. The decision will depend on the risk to the auditor of being associated with a particular client. Understanding the Client : The outcome is a business understanding of the client, its major processes, the risks inherent in its business, and the impact of current economic and competitive issues on the client and its financial statements. Obtaining Evidence About Controls : The outcome is an understanding of the client’s internal control over financial reporting and whether the controls are sufficient to mitigate the risk of material misstatements in a company’s financial statements. Obtaining Substantive Evidence about Account Balances : The outcome is the audit evidence that is gathered, evaluated, and synthesized to determine if the auditor has sufficient competent evidence to render an audit opinion. © 2012 Cengage Learning. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
Wrapping Up the Engagement: A final review of evidence, as well as a review of the audit process by someone outside of the audit to determine whether all procedures have been performed and that audit risks have been evaluated. The final outcome is the decision on which audit opinion to render. 1-3. Some of the factors leading up to the change include: (a) the failure of one of the largest public accounting firms in the world (Arthur Andersen & Co.); (b) four of the largest bankruptcies in history—and each of the bankruptcies occurred in companies where financial statement misrepresentation had taken place; (c) billions of dollars in investment and retirement fund losses; (d) a sense that auditors were not independent of management and (e) a question as to whether the public accounting profession could sufficiently govern itself to ensure that it would always act in the public interest. In response to these failures, Congress passed the Sarbanes-Oxley Act of 2002. The public accounting profession has been impacted by this Act in a number of ways including: The U.S. audit standards for public company audits are now set by a regulatory agency – the PCAOB. The audit committee is to take the role of the client and has the responsibility to hire/fire the auditor. Auditor independence requirements have been strengthened. Audits of internal controls are now required for larger public companies. While the environment has changed, the expectations of users have stayed essentially the same. They expect (a) auditors to detect and report on fraud, and (b) certify financial statements that are both in accordance with GAAP and are transparent regarding economic activities and conditions. 1-4. An audit service requires a report to a third-party user and thus requires independence on the part of the attestor. Audit services differ from general assurance services in that assurance services do not require a report to a third party. For example, a company may request assurance services concerning their internal controls. At their request, the company may be the only recipient of a report. Thus, the difference is related to whether or not the service is provided to third parties. Further, an audit service is generally recognized as one that pertains to an organization’s financial statements and internal controls over financial reporting and the results of the audit service will be communicated to third-party users. 1-5. Auditors exercise professional judgment in virtually every aspect of the audit. That judgment requires the auditor to exercise professional skepticism within a framework of knowledge of the economics of a business and accounting knowledge. That judgment is utilized in the following types of areas (but is not limited to these examples): Evaluating the risk of being associated with a particular client, Evaluating the risk associated with a client’s internal control process and the potential implications regarding potential misstatements in accounting records,
a. Computer systems, which are becoming increasingly interdependent across organizations. b. Increased complexity of financial instruments and transactions entered into by organizations. c. The economic environment in which we all must operate. The changing environment includes such items as the increased need to have a global outlook in providing goods and services and the need to be attuned to societal regulations in such areas as environmental protection. 1-9. The ten standards have historically provided the foundation for the financial statement audit. These standards are stated as unconditional requirements. The proposed principles are not requirements but serve as the fundamental principles governing an audit. The structure of the principles addresses the purpose of an audit, personal responsibilities of the auditor, auditor actions in performing the audit, and reporting. The structure is similar to the ten standards. The headings General and Fieldwork have been changed to the principles of Responsibilities and Performance. The Reporting principles are written at a less detailed level than the current reporting standards. 1-10. All three of these parties are important users. Arguments can be made for each group as follows. Ultimately, however, the auditor needs to remember that the audit should have a public interest focus: Shareholders: They are owners of the organization and thus they represent the group to which management is ultimately accountable (i.e., management serves only per the wishes of shareholders). Owners as a group depend on an independent audit to inform them of the stewardship and overall performance of management. Shareholders are also represented through the Board of Directors whom they elect to represent their best interests. Creditors: They invest capital in the organization in the form of short-- or long--term loans. Creditors are concerned with the safety of their loans and look to audited reports to provide information on the status of the organization’s financial position and its earning power to assess the relative safety of their loans or their decision to grant credit to an organization. Management: They are interested in seeing that the financial statements show their performance, and if possible, to do so in a way that is most favorable to them. Many members of management now have bonus (salary) agreements tied to reported profits. Additionally, management may have stock options or stock investments that are significantly affected by the reported profits of the company. Auditors need to remember that management is NOT the client, even though they work closely with management and the client pays the auditor’s fee. Of the three groups, management is more often quite short-term oriented in its perspective (although certainly not all members of management fall into this group).
Full file at https://testbanku.eu/ Often, management may be interested in achieving short--term objectives and in applying accounting principles and judgments that are aggressive and seek to maximize reported income. Creditors, on the other hand, are more concerned with the safety of their loans and would prefer a conservative approach to accounting that might understate assets and revenue and thus provide a cushion for safety. Investors are generally more long-term oriented (although this is less true with the majority of stock ownership now residing in mutual funds) and are generally more interested in the quality of reported earnings and assets (i.e., they do not desire any over-- or under--statement; rather, they want the most accurate information on which to make decisions). The auditors resolve potential conflicts by: Understanding the economic substance of transactions. Determining how the economic substance guides the accounting choices. Ensuring the accounting follows GAAP. Unbiased reporting implies that the auditor always favors appropriate accounting over the desires of individual users. 1-11. The audit enhances the quality of financial statements because the user has the assurance that an independent, qualified professional has examined the financial statements and has rendered an opinion on their fairness. The independence and expertise of the auditor serves as a quality control function to overcome the potential bias of management in presenting the financial statements in a manner that most flatters an assessment of their performance. The audit is designed to add credibility to the financial statements. An audit does not necessarily ensure a fair presentation of a company's financial statements although it does dramatically increase the likelihood that there are no material misstatements in the company's financial statements. The audit provides reasonable, not absolute, assurance about the accuracy of the financial statements. The caveats about fairness exist for two reasons: a. Fairness is judged within a framework of GAAP. Some question whether GAAP result in the fairest possible presentations when there are significant changes in market values of investments or assets. For example, the SEC has encouraged financial institutions to move from using historical cost required by GAAP to market values for all investments in securities because it believes that market value presents a better picture of economic reality than does historical cost. b. Although designed to detect fraud, it might be possible that a well-executed audit may still fail to detect fraud. In addition, an audit does not provide unequivocal assurance that the control systems are free of material weaknesses, i.e., there is always “audit risk” even in a well-designed and well-executed audit.
Full file at https://testbanku.eu/ 1-15. Assurance engagements are designed to provide ‘positive assurance’, i.e. the item being attested to is either properly presented, or is not properly presented. For example, one of the Big 4 firms provides assurance to the audience that the votes are properly maintained and counted for the Emmy Awards. A ‘limited assurance engagement’ does not contemplate a full audit or assurance engagement such that sufficient information (evidence) is gathered to warrant a positive statement about whether the item being assured is, or is not, properly presented. Rather, based on a more limited amount of work, the auditor either states that ‘nothing came to his or her attention – based on the limited procedures – that indicates something is not fairly presented’. This is often referred to as ‘negative assurance’. An even more limited assurance engagement is one in which the accountant expresses ‘no assurance’ whatsoever on the item being reported. An example of this would be a compilation engagement in which the auditor prepares the client’s financial statements. 1-16. Independence means objectivity and freedom from bias. The auditor can favor neither the client nor the third party in evaluating the fairness of the financial statements. The auditor must be independent in fact and in appearance. Independence in fact means the auditor is unbiased and objective. An auditor could be independent in fact if he or she owned a few shares of common stock in an audit client, but might not appear independent to a third party. Independence in appearance means that a third party with knowledge of the auditor’s relationship with the client would consider the auditor to be independent. If users don’t perceive auditors to be independent then the value of the audit is lacking.. 1-17. Internal auditing exists as a separate audit function within an organization with a reporting responsibility to management, the board of directors, and the audit committee of the board of directors. The scope of internal audits is generally much broader than that of the external auditor. Internal auditing is viewed as an integral part of the organization’s risk, governance, and control processes. The internal auditor often performs operational audits, compliance audits, and computer system audits in addition to financial--type audits. The internal auditing function must strive to achieve independence while working within the organization. This is usually accomplished by reporting to a high management level and the audit committee of the board of directors to ensure that no audit findings are suppressed. Persons are licensed as CPA's by state regulatory agencies. Only CPAs are licensed to render an audit opinion. Internal auditors are not so licensed, but many internal auditors are either Certified Internal Auditors or CPAs and adhere to the professional standards, as do the external auditors. The internal audit function is also responsible to the organization for which it serves. 1-18. A public accounting firm that does not have any public clients is subject to the auditing and ethical standards as promulgated by the AICPA; and is not subject to the standards
set by the PCAOB. An audit firm serving only non-public companies differs in the following ways: Can perform all types of attestation services, including compilations and reviews (negative assurance and no assurance), Can perform consulting activities for clients as long as they do not violate the AICPA rules. For example, it can perform tax services for managers of their clients, They are not required to perform audits of internal control over financial reporting, Their audits can focus more on direct tests of account balances. 1-19. The GAO is the audit arm of the U.S. Congress with a broad mission to evaluate the effectiveness, efficiency, and compliance of governmental agencies and other agencies that are direct recipients of governmental funds. Although the GAO performs all the types of audits performed by internal auditors, it tends to perform more economy and efficiency audits because Congress is very concerned with the manner in which the government carries out the various pieces of legislation enacted by Congress. The scope of the GAO's audits is extremely broad. A major part of the GAO's work is devoted to developing measurable criteria to compare agency functions with legislative intent. In setting standards for municipal audits, the GAO is responsible for issuing Government Auditing Standards. The standards apply to "audits of government organizations, programs, activities, and functions, and of government funds received by contractors, nonprofit organizations, and other nongovernmental organizations... The standards pertain to the auditor's professional qualifications, the quality of audit effort, and the characteristics of professional and meaningful audit reports" (Foreword from the Standards). 1-20. The Securities and Exchange Commission (SEC) has the power to dictate accounting principles and to determine overall audit standards. This power to regulate the securities industry in the aftermath of the Great Depression was given by Congress to the SEC in 1933 and 1934. It dictates the form of filings that must be made with it and that are available as public documents for new issuances of debt or capital instruments. Companies that meet minimum criteria for diversity of ownership must also file annual and quarterly reports with the SEC. The SEC has traditionally worked with the accounting profession to keep the standard--setting process in the private sector. A representative of the SEC, for example, sits on the Emerging Issues Task Force of the FASB. In addition to power to set standards, the SEC has the power to suspend parties from practicing before it. Further, the SEC has the power to negate rules promulgated by the PCAOB, and is certainly involved in a political capacity in shaping that organization’s agenda. 1-21. The PCAOB:
The court system does not directly set accounting or auditing standards. However, the courts have been active in identifying situations in which they believe individual auditors have been deficient. The identification of these deficiencies in court cases has often led the profession to develop more detailed standards to guide practice. Examples of standards that have evolved directly from the outcome of lawsuits include the standards on subsequent events and related--party transactions. 1.26 An audit program details the audit objectives and the audit procedures to be completed to accomplish those objectives. The information that should be gathered includes: (^) The client’s business and the industry within which it operates (^) Business risks the company faces and determining how those risks might affect the presentation of a company’s financial results (^) Potential fraud risks (^) Management compensation plans and how those plans may motivate management actions that could affect the financial statements (^) Appropriate level(s) of materiality (^) The quality of the design of the client’s internal controls over financial reporting (^) Management’s approach to assessing internal control over financial reporting and whether management has sufficient documentation of the design and operation of internal controls over financial reporting (^) The client’s accounting policies and procedures (^) The financial statement items more likely to require adjustment, as well as those that are subjective in nature (^) Factors that may require the extension or modification of audit tests, such as potential related-party transactions or the possibility of material misstatements (^) Potential coordination of work with the client’s internal audit function (^) The type of reports to be issued, such as consolidated statements or single-company statements, special reports, internal control reports, or other reports to be filed with the SEC or other regulatory agencies 1-27 Within an auditing context , materiality is a concept that relates to the importance or significance of an item, such as a financial statement amount, transaction, or discrepancy. But materiality is not simply a function of specific dollar amounts in the organization’s financial statements. The auditor should consider qualitative, as well as quantitative, dimensions of materiality as a basis for designing the audit process to address material misstatements. Materiality guidelines usually involve applying percentages to some base, such as total assets, total revenue, or pretax income. For example, an auditor might choose to set overall materiality at 1% of total assets or revenue, whichever is higher. CPA firms may have more complicated guidance based on the nature of the industry or a composite of materiality decisions made by experts in the firm. Although many audit firms have developed guidelines for materiality decisions, it is important to note that any guideline is just a starting point that is adjusted for other relevant information, some of which may be
Full file at https://testbanku.eu/ qualitative. For example, if the client has a loan with a restrictive covenant that requires a current ratio of 2:1, any potential misstatement or adjustment amount that would bring that ratio under 2:1 would be judged to be qualitatively material.. 1.28Audit procedures that would address this assertion include: (^) Auditing Additions to PPE— Take a sample of all additions to property plant and equipment and verify the cost through reference to vendor invoices to determine that cost is accurately recorded. If there is a high risk that the valuation may be misstated, the auditor may choose to take a larger sample. (^) Assessing the Potential Impairment of the Asset Additions Review continued operation of the assets through inquiry of management to determine if the assets should be written down to an impaired value. Gather current economic information and independent evidence as to the current market price of the assets to corroborate management’s statements. Multiple Choice Questions: 1-29. c. 1-30. b. 1-31. c. (assurance services don’t always require a third party) 1-32. d. 1-33. a. 1-34. d. 1-35. b. 1-36. c. 1-37. d. 1-38. a. 1-39. f. Discussion and Research Questions: 1-40. a. Neutrality is enhanced when each party uses the same reference point to determine the fairness of an organization’s financial statements. If the reference is perceived as being neutral, then the criterion helps the profession stay neutral. Generally accepted accounting principles have been designed as standards that are neutral for users and are applicable to general-purpose financial statements. GAAP are required for all client financial statements that must be filed with the SEC. Some small companies prepare financial statements on a tax or cash basis. In such instances, there must be disclosure that such statements are on a comprehensive basis of accounting other than GAAP. One of the major objectives of the FASB Concepts Statements is neutrality. The auditing profession adheres to the accounting standards universally recognized by their general acceptance. Auditors present an independent, objective assessment of a
Full file at https://testbanku.eu/ urged more current value accounting because of the agency's belief that such a presentation better presents the true economic picture of the entity. Governmental regulatory agencies: Governmental regulatory agencies at both the state and federal level exist to protect various constituencies. The free flow of reliable information is important to these agencies in identifying situations in which action should be taken to protect other groups. For example, a state insurance commission may review the financial reports o insurance companies reporting to them as a basis to determine whether regulatory action is required to protect the investments of various insurance policyholders. An agency's objectives dictate its views toward accounting principles. Insurance commissions, for example, dictate a conservative identification of admittable assets in filings with the state insurance commissions. Most other agencies have similar objectives that dictate the form in which financial statements are filed for regulatory purposes. Labor and labor unions: Labor increasingly negotiates contracts with bonuses or other payments contingent on the level of reported profitability of an employer. Additionally, labor is interested in past profitability as a basis for negotiating current wage levels. 1-41. a. The value of the audit to external users, e.g. investors and creditors is that the audit provides an informed and unbiased report on the public company’s financial statements, and in some instances, its internal controls. b. An audit of internal controls provides value to the public in three ways: it informs users of the accountability that management has assumed in fulfilling its stewardship function, it provides confidence in the company’s processes to control its information and to provide reliable information on an interim basis, and it helps ensure investors that management has reliable information on which to makes its internal decisions. c. An audit committee is important for the following reasons: it provides oversight of the audit function on behalf of shareholders and the board, it is charged with the sole authority to engage the external auditor and therefore the auditor is accountable to the audit committee rather than management, it helps ensure the independence and integrity of the audit process. 1-42.
a. The major objectives of an independent audit are to systematically acquire and evaluate audit evidence to determine the fairness of a company's financial statements (as judged by applicable criteria, such as GAAP) and to communicate that opinion to interested users. An audit may specifically benefit the auditee (Quello) in the following ways:
- An independent assessment of the fairness of presentation enhances the perceived reliability of the financial report and assists the company in obtaining loans or new capital because the investing and lending public will have confidence in the financial figures.
- The auditor's expertise in related areas may help the client in (a) Tax planning. (b) Preparing tax returns. (c) Selecting and implementing accounting information systems. (d) Identifying sources of capital or loans. (e) Preparing financial forecasts or analyses that may assist the company in obtaining loans or new capital. (f) Determining the efficiency of existing accounting operations. (g) Observing areas in which efficiency and effectiveness of operations might be improved.
- The auditor's testing and evaluations of controls may provide insights into areas in which improvements could be made.
- The independent assessment and testing of transactions represent a management control device because individuals know that their work will be tested and evaluated.
- The threat, as well as the performance, of an audit may act to deter potential fraud.
- The auditor's expertise may lead to improved financial presentations because of the application of accounting principles or improved financial statement disclosure.
- The auditor's knowledge may lead to improved reporting for regulatory purposes. b. Some of the points that might be discussed by management in determining the nature of the CPA firm to engage to conduct the audit:
- The audit fees for conducting the audit.
seen by some as an impairment of the auditor’s independence. However, there is really no one else to do the hiring in such cases. c. Many people agree with this. The Red Cross, and other nonprofit organizations, owe accountability to their donors beyond that which is conveyed in financial statements. The Red Cross has been criticized for poor internal controls and poor and inefficient operations. Most donors have a vested interest in understanding that their contributions have been used properly. d. As time has passed, most observers have come to the conclusion that the expectations are not too high. However, they do need some fine tuning in relationship to how much users want to pay for an audit. e. Many practitioners believe this statement is true. However, there should be good class discussion on this issue as it is germane to raise the question as to whether “if it is good for non-public companies, why is it not good for public companies?” There are various answers to this question, and many of them are dependent on the external users of the company’s financial reports. f. Many believe this statement is true. However, audit firms sometimes think that the PCAOB is overly zealous in its inspection process. The PCAOB must prove itself in setting standards that encourage and warrant the public trust, and in providing oversight to the auditing profession in a manner that is both effective and fair. g. GAAP represents rules and conventions that are acceptable at one point in time. Much of the diversity in accounting principles is necessary to reflect real economic differences between organizations and the types of transactions in which the organization is engaged. Beyond this argument, differences such as LIFO / FIFO accounting have evolved over the years. The profession attempts to mitigate the potential problems associated with the diversity by providing disclosure of the differences and by developing other procedures to make it difficult for firms to change accounting principles. Thus, the financial statements of a company should be comparable over a period of time. h. This is true. Auditors need to provide clear guidance to the board, the audit committee, and to management as to whether they believe the financial statements best portray the economic events of the entity being audited. i. Most practitioners do not feel this constitutes a problem. However, the PCAOB has provided guidance where auditors of public companies cannot provide such tax services for executive management of their clients. 1-44. a. Areas in which audit judgment will be made, include, but are not limited to, the following:
Full file at https://testbanku.eu/ Evaluating the risk of being associated with a particular client, Evaluating the risk associated with a client’s internal control process and the potential implications regarding potential misstatements in accounting records, Determining the appropriate audit procedures to perform in light of the identified risks, Assessing appropriate level(s) of materiality, Evaluating the economics of an organization’s financial transactions or the economic value of an organization’s assets or liabilities, and Applying the proper accounting treatment to issues that arise during the conduct of the audit. A quick review demonstrates that professional judgment is not at all limited to accounting issues. A good auditor must understand the business, its transactions, its contracts, and the economics of it transactions and contracts. b. There is disagreement on whether principles-based accounting will lead to more or less consistent judgments. Many believe that it will lead to less consistent accounting because the rules are not as well specified. However, the alternative view is that accounting judgments will become more consistent (especially on an international basis) because auditors will need to take more time to understand and portray the economics of transactions or the value of securities. The rationale for the accounting opinions must be well reasoned and documented. This should also improve consistency. That said, it will be a tremendous challenge for the public accounting firms to change the mindset to accounting judgments and it will require a period of extensive review by concurring partners. c. It is very reasonable – especially from a user’s perspective – to expect that judgments made by different auditors on different clients will be consistent. In other words, similar economic situations should lead to similar accounting judgments. An audit firm’s structure enhances the review and consistency of judgment in the following ways:
- Continuing professional education on accounting issues,
- Firm guidelines and pronouncements on accounting issues,
- Review of significant accounting judgments by audit managers,
- Further review by engagement partners,
- Further review by concurring or engagement quality partners (a subject matter partner that is not otherwise on the audit),
- Internal inspections of the quality of audits by internal review teams. 1-45. a. Understanding a business helps the auditor identify accounts that may be misstated. This is particularly true when the misstatements may not be related to the actual recording of transactions; but are due to changes in valuation that take place over time. The auditor should understand:
Full file at https://testbanku.eu/ Assurance Tested Evidence to be Gathered to Test Assurance Goods are as advertised. Take a sample of advertisements and compare the qualities advertised with a sample of products. Company stands behind goods that are damaged in transit. Take a sample of complaints or credit adjustment requests submitted by customers. Determine whether or not the requests were handled consistently with advertised company policy. Company fulfills promises made in its credit policies. Take a sample of credit sales. Determine that sales are billed according to company policy. Determine that interest, if applicable, is billed according to company policy. Credit card and billing information is kept safe and not sold to other electronic retailers. Inquire of company policies designed to safeguard customer information. Inquire of management as to (a) any sales of customer information; and (b) policies and procedures in place to protect the privacy of customer information. Review customer complaints to determine if any relate to customer privacy issues. Determine that company data are protected. Attempt accesses to such data to determine if unauthorized users can access such data. b. The assurances should be provided frequently enough to assure customers that the policies and procedures continue to be effective, perhaps every three or six months. c. The assurances should be evident on the company’s Web page. Various symbols are currently used, representing various assurance providers. d. The CPA has objectivity and integrity along with the skills needed to provide such assurances. e. Well-established companies with a long history of good business practices probably do not need such assurances. f. Other potential providers include industry associations, Internet provider companies, Web browser companies such as AOL, companies that provide e-commerce Web services, etc. Alternatively, the companies may provide the assurances by promoting the quality of its processes, soliciting testimonials from customers, and promoting a reputation of quality of services. 1-47. a. Internal auditing is defined as follows: Internal auditing is an independent and objective assurance and consulting activity that is designed to add value to improve an organization’s operations. It helps an
organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. It is defined as both an assurance and a consulting activity. Assurance is designed to add value to an organization by providing management, the board of directors, and operating management with independent analysis regarding company operations as well as compliance with company policies and procedures. As companies enter into more trading partner agreements, internal auditors may be called upon to provide assurance on controls and operating procedures to the company’s trading partners. Assurance services have been the historical base of internal auditing and will continue to play a major role in the future development of the profession as the demand for an increasing array of assurances continues to increase. Consulting activities create an additional “value added” component to internal auditing. Internal auditors are unique in that they see the breadth of corporate activities and can provide insight into operations that few operational managers may have. Consulting implies that auditors are willing to share recommendations on how to improve operations. Additionally, auditors can serve on task forces to find ways to improve operations. However, the final decision on actions to take and implementation still rests with management. b. The internal audit focus is on the risk management, control, and governance processes in an organization. The role regarding risk management and control is as follows: i. Determine whether the company has a systematic process to identify, measure, control, or otherwise manage or take risks. ii. Determine whether the company manages risks according to a company approved risk policy. iii. Determine whether the company has sufficient controls in place to identify and manage risk. iv. Determine if the controls are working properly. Controls are integrally related to risk. Controls exist to assist the organization in identifying, mitigating, or preventing undue risks. The auditor’s role is to determine that proper controls are implemented and are operating effectively in light of the organization’s risks. An internal auditor also uses risk to identify areas for audit review. The auditor should work with management to systematically identify risk and consult with management and the audit committee to identify the risk areas that should be reviewed by the audit function each year. c. Internal auditing is a good career alternative to a career in public accounting. Some of the reasons for pursuing a career in internal auditing include:
