Deck 11: Tests of Controls

Question 1

Which of the following would be a necessary control to avoid an invoice being paid twice

A) periodic bank reconciliations.
B) segregating the duties of approving invoices and signing cheques.
C) invoice stamped paid when the cheque is issued.
D) making payments by cheque.

Answer 1

C

Question 2

Assessing control risk at a level below high most likely would involve:

A) identifying specific internal controls relevant to specific assertions.
B) changing the timing of substantive tests by omitting interim testing and performing the tests at year-end.
C) reducing inherent risk for most of the assertions relevant to significant account balances.
D) performing more extensive substantive tests with larger sample sizes than originally planned.

Answer 2

A

Question 3

The relationship between the required understanding of the internal control structure and the preliminary audit strategy is that:

A) normally, greater understanding is required when the lower assessed level of control risk approach is used.
B) normally, greater understanding is required when the primarily substantive approach is used.
C) no understanding is required in the planning stage unless tests of controls are a planned part of the strategy.
D) normally, less understanding is required when the lower assessed level of control risk approach is used.

Answer 3

A

Question 4

Of the following, the procedure that would produce the most reliable evidence on the segregation duties is:

A) observation.
B) analytical procedures
C) reconciliation.
D) re-performance.

Question 5

The name given to the test of control where the auditor reprocesses actual entity data using auditor-controlled software is:

A) test data approach.
B) integrated test facility.
C) parallel simulation.
D) dual-purpose testing.

Question 6

If the auditor decides to seek a further reduction in control risk, this will require them to:

A) expand the scope of substantive testing during interim work.
B) rely exclusively on analytical procedures.
C) perform additional tests of control.
D) increase, proportionately, assessed inherent risk.

Question 7

A disadvantage of the integrated test facility approach to computer assisted audit is:

A) there is a risk that errors could be created in the client's data
B) it does not overcome the limitations of the use of test data
C) it is disruptive to the client.
D) all the above are limitations.

Question 8

After the auditor planned the audit based on the lower assessed level of control risk approach it was found that the tests of control did not support this approach. Although the controls were well designed they were not implemented and therefore ineffective. What audit strategy should the auditor now pursue?

A) adopt a predominantly substantive approach.
B) perform more extensive tests of control than originally planned.
C) reduce the level of substantive procedures.
D) none of the above.

Question 9

The statement that is accurate concerning audit testing is:

A) the test data approach involves dummy transactions prepared by and processed under the control of the auditor.
B) the test data approach is relatively complicated, time consuming and expensive.
C) the test data approach involves dummy transactions prepared by the client and processed under the control of the auditor
D) the test data approach involves dummy transactions prepared by the auditor and processed under the control of the client.

Question 10

Tests of controls are auditing procedures performed to determine:

A) whether required internal controls have been put in place.
B) the efficiency of the information flow
C) the effectiveness of the design and operation of internal controls.
D) b and c

Question 11

After performing additional tests of controls, the auditor reassesses control risk from the initial planning level of slightly below maximum to moderate. The auditor should now:

A) decrease the level of detection risk, and decrease substantive testing.
B) increase the level of detection risk, and increase substantive testing.
C) increase planned substantive testing.
D) increase the level of detection risk, and decrease substantive testing.

Question 12

When tests of controls are not performed while obtaining an understanding under the primarily substantive approach:

A) they must be performed at year-end.
B) preliminary control risk must be assessed at the maximum.
C) preliminary control risk must be assessed at below maximum.
D) preliminary control risk must be assessed at the minimum.

Question 13

What is the purpose of the preliminary assessment of control risk?

A) to obtain a reasonable expectation of controls so as to decide on an appropriate audit strategy.
B) to determine the extent to which internal controls have been implemented
C) to obtain the necessary information for developing the flowchart.
D) to provide management with an opinion on the effectiveness of controls.

Question 14

Which of these would be a necessary control to prevent a cash payment being made for an unauthorised purpose?

A) invoices being required before cheques are issued.
B) only authorised people being able to issue cheques.
C) the duties of approving invoices and signing cheques are separated.
D) all of the above.

Question 15

The timing of tests of controls refers to:

A) whether they are performed earlier or later during the audit.
B) whether they relate to part or the whole of the accounting period.
C) the end of the year being audited.
D) none of the above.

Question 16

Based on a study and evaluation completed at an interim date, the auditor concludes that no significant internal accounting control weaknesses exist. The records and procedures would most likely be tested again at year-end if:

A) the internal accounting control system provides a basis for reliance in reducing the extent of substantive testing.
B) tests of controls were not performed by the internal auditor during the remaining period.
C) inquiries and observations lead the auditor to believe that conditions have changed.
D) the auditor uses non-statistical sampling during interim compliance testing.

Question 17

When control risk is assessed at the maximum, the extent of documentation required in the working papers is that:

A) no documentation is necessary.
B) the basis for the assessment and the conclusion must both be documented.
C) only the conclusion needs to be documented.
D) only the basis for the assessment must be documented.

Question 18

In a computer information system control procedures that provide reasonable assurance that the recording, processing and reporting of data are properly performed for specific applications are known as:

A) application controls
B) general controls
C) user controls
D) integrated testing.

Question 19

The audit test that would normally be regarded as a test of controls is:

A) enquiries of third parties
B) test of the specific items making up the balance in a given general ledger account.
C) test of the additions to property, plant, and equipment by physical inspections.
D) test of the signatures on purchase orders to a list of approved signatories.

Question 20

Testing the work of the internal auditors is least likely when the external auditor has decided that:

A) the internal auditors will be used to directly assist in the conduct of the audit.
B) the internal auditors have operating responsibilities as well as their auditing role
C) the internal auditors are full-time employees of the client.
D) the reports of the internal auditors are consistent with the results of the work performed.

Question 21

To determine whether the internal control structure policies and procedures operate effectively to minimise errors of failure to invoice a shipment, the auditor would select a sample of transactions from the population represented by the:

A) bill of lading file.
B) customer order file.
C) sales invoice file.
D) subsidiary customer accounts ledger.

Question 22

For the following potential misstatements for cash payments, identify a necessary control and a test of the operational effectiveness of that control.
1.a cash payment may be made for an unauthorised purpose.
2.an invoice may be paid twice.
3.a cheque may be issued for the wrong amount.
4.a cash payment transaction may not be recorded.

Question 23

What audit strategy is the auditor likely to adopt if at the planning stage, control risk is assessed as less than high?

Question 24

When an auditor is designing tests of the operational effectiveness of controls they must decide their nature, timing and extent. Explain what each of these concepts mean and why they are important in designing these tests.

Question 25

The incorrect statement is: The external auditor

A) may coordinate their audit work with that of the internal auditor
B) may use the internal auditors to provide direct assistance with some types of audit work
C) may delegate some of the substantive testing to the internal auditor
D) none of the statements is incorrect, i.e. all are correct statements

Question 26

1. Identify the steps involved in a preliminary assessment of risk.
2. What is the requirement for documenting the assessed level of control risk when:
-control risk is at the maximum, and
-control risk is below the maximum?"
"3. Tests of controls pertaining to effectiveness of operation focus on what two questions?

Question 27

Outline the factors that will determine whether the auditor has obtained sufficient appropriate evidence to support a particular risk assessment.

Question 28

Discuss the test data approach to testing controls.

Question 29

The untrue statement concerning the communication of internal control matters to management during a financial statement audit is:

A) the duties relating to communication are included in ASA 265/ISA 265
B) the auditor shall communicate in writing significant deficiencies in internal control identified
C) circumstances where it may be inappropriate to communicate deficiencies in the internal control system includes situations where there are other deficiencies that are of sufficient importance to merit management's attention
D) none of the statements are untrue, i.e. all are true statements

Question 30

The test of control that is known as a dual-purpose test is:

A) enquiring
B) re-performing the control
C) observing.
D) inspecting.

Question 31

At what stage during the audit is the existence of internal controls tested and how are these tests carried out?