![Page 1: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/1.jpg)
Risk Assessment, Audit Processes and
Sample Sizes
It’s Really Just Auditing…..But
![Page 2: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/2.jpg)
Agenda
• What is Really Necessary?• Risk Assessment• Audit Processes and Sample Size
• Labor• Indirect Costs
• Guidelines• Conclusion
![Page 3: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/3.jpg)
What is Really Necessary?
It’s Not Just About Auditing
![Page 4: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/4.jpg)
CPA Firm Responsibilities
• Comply with professional standards• Generally Accepted Government
Auditing Standards –GAGAS (Yellowbook)
• Generally Accepted Auditing Standards (GAAS)
• UNDERSTAND terms of engagement• Realistic self-assessment• Establish quality control standards
unique to overhead audits• Communicate with state DOT• Allow cognizant agency full access to
workpapers
![Page 5: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/5.jpg)
Basic Accounting Alignment
• Accrual based (GAAP) Accounting required.
• Labor cost must be reconcilable to individual payroll records.
• Project costs (labor and ODCs) must reconcile to General Ledger Direct Costs.
• Overhead must reconcile to General Ledger.
• Total labor per General Ledger must reconcile to annual payroll records.
• Overhead must correspond to firm fiscal year.
• Job Cost system under General Ledger control.
![Page 6: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/6.jpg)
Two Sets of Books?
Project Costs
Project Costs
Personnel
Expenses
Cash in the Bank
Pay to $
Payroll
$
$
Accounts PayableValue Added(Pricing)
WIP
A/R
Write-offs
Equipment Usage
Adjustments
AccrualMeter
CashMeter
Profit = Revenue – Direct Costs – OverheadProfit = Revenue – Direct Costs – Overhead
InvoiceInvoice
CollectionCollection
Cash Flow = Cash In – Cash OutCash Flow = Cash In – Cash Out
![Page 7: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/7.jpg)
What is “Overhead”?
Use of CAD equipment on a project
Use of a pencil to write the final report
Personal vehicle used on project
Company vehicle used on project
Time spent by accounting to prepare an invoice
Use of equipment on a project
Time spent preparing a proposal
Overtime premium on a project
OHDirectCost Element
Which of these cost elements should legitimately be charged directly to jobs and which to overhead?
![Page 8: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/8.jpg)
Answer
It Depends
![Page 9: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/9.jpg)
Internally Allocated Costs
• Typically known as “in-house” costs
• Allocates costs to projects based on an estimated unit rate using a “contra” account
• Typically used for:• Company owned vehicles• Printing• Equipment
• Can be used for CADD costs but not typical
![Page 10: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/10.jpg)
Debits and Credits
• Contra accounts should be set up to “relieve” overhead of allocated costs
• These accounts can be anywhere in the overhead section of the chart of accounts but we prefer them to be at the bottom of the chart of accounts before other income/expense
• Separate contra accounts should be set up for each category of cost. Eg: vehicles, equipment, unit pricing
• Unit costs ALWAYS are charged to projects
![Page 11: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/11.jpg)
Labor Costing Options
Standard cost (preferred) – Standard hourly rate based on hours employee is expected to work during year (usually 2,080). Any differences (uncompensated overtime, premium overtime) allocated to overhead. (Labor rate stays fixed)
Average cost – Divide paycheck by actual hours worked during pay period. (Labor rate can change each pay period)
![Page 12: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/12.jpg)
The Golden Rules of Accounting Policies
Bill according to contract
Accumulate costs according to policy
![Page 13: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/13.jpg)
The BIG Breakdown
• Anything FAR is an accounting issue thus the responsibility of the financial/accounting department
• FAR compliance is NOT just about accounting for unallowable costs or even accounting procedures
• FAR compliance issues typically occur when principals or project managers propose and negotiate contracts that DO NOT reflect current firm policies
• Firm policies MUST be communicated to the entire organization
![Page 14: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/14.jpg)
Risk Assessment
The First Step
![Page 15: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/15.jpg)
Internal Control Questionnaire (ICQ) for Consulting Engineers
• Great starting point for audit planning• Covers major areas of cost accumulation POLICY!• Identifies firm size• Identifies officers• Identifies owners• Identifies related parties• Information on financial management system• Labor costing method• Premium overtime• Contract labor
![Page 16: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/16.jpg)
Formal Risk Assessment
• Fraud• Evaluate the controls over cash disbursements• Evaluate the controls over payroll (including time
reporting)• Evaluate the controls over the computer systems • Consider fraud risk factors• Control environment (management attitude)• Control methods (policies and procedures)• Communications• Monitoring
![Page 17: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/17.jpg)
Accounting System
• Deltek Vision• Deltek (Axium) Ajera• BST• Clearview InFocus • BillQuick• Oracle• QuickBooks• Peachtree• Other
![Page 18: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/18.jpg)
Audit Processes and Sample Sizes
Where it all Comes Together
![Page 19: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/19.jpg)
Labor
Largest Cost and Least Documented
![Page 20: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/20.jpg)
Executive Compensation
![Page 21: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/21.jpg)
Key Matrix Points
• Match executive job description and duties to position description in Matrix
• Only one each Chairman, CEO and Executive Vice President are allowed
• Multiple Senior Vice Presidents and Vice Presidents are allowed
• Small firms must pay close attention to “duties” as opposed to title
• Related parties must be evaluated
![Page 22: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/22.jpg)
The Word on Timesheets
They are very important!
![Page 23: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/23.jpg)
Individuals
• EVERYONE must prepare a time sheet
• Total hours MUST be reported
• Time sheets must be approved by employee and supervisor
Firm
• Must have a timekeeping system that identifies employees’ labor by intermediate and final cost objective
• System must charge direct and indirect labor to the appropriate cost objectives
• At least monthly posting to financial management system
![Page 24: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/24.jpg)
This Means…
• Firm must maintain a comprehensive accounting system.
• Firm must prepare time (total hours).• Time sheets must be posted to job cost records.• Job cost records must be posted to the general
ledger.• Time sheet changes must be approved by employee
and supervisor
![Page 25: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/25.jpg)
What is Really Necessary
• A timesheet from each pay period• Selections MUST be traced from the timesheet to:
• Payroll register (actual pay)• Personnel file (approved pay rate)• Job cost system• General ledger
• Is every item on the timesheet necessary?• It depends on RISK ASSESSMENT• Over 60 individual time entries
![Page 26: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/26.jpg)
Do We have a Problem?
![Page 27: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/27.jpg)
Indirect Costs
FAR Knowledge is Critical
![Page 28: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/28.jpg)
Guidelines
• Materiality (Only for planning purposes)• Cost Certification
• Use of sampling• Minimum sample size of 2 to 20 items• High risk accounts• Evil alcohol• No fun• Marketing (now we are talking about some dollars)
![Page 29: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/29.jpg)
Conclusion
Quality is not in Quantity
![Page 30: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/30.jpg)
Audit Quality
• Art not science• The CPAs understanding of industry accounting best
practices is critical• Understanding of the accounting system set-up is
critical• Understanding of the firm’s accounting policies is
critical• Sample size……not so much
![Page 31: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/31.jpg)
T. Wayne Owens & Associates, PC
![Page 32: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/32.jpg)
[Built for A/E/C]
We are a CPA firm that provides a full range of accounting and financial management solutions, including audits, FAR audits and tax services tailored for the design industry. Our services are specifically geared toward boosting the effectiveness, well-being and profitability of your A/E/C firm. Our relationship with you is the driver; consider us a partner on your success team, providing experienced guidance and advice for your situation and spotting opportunities to position your company for the future.
![Page 33: Risk Assessment, Audit Processes and Sample Sizes It’s Really Just Auditing…..But](https://reader030.vdocument.in/reader030/viewer/2022032517/56649ca55503460f94966274/html5/thumbnails/33.jpg)
Questions
T. Wayne Owens, CPAT. Wayne Owens & Associates, PC
O: 678.325.1063C: 404.358.2390
Sign up for the semi-regular newsletter on A/E firm management and government contracting at
www.twocpa.com