13 - 1

Chapter 13Overall Audit Planand Audit Program

13 - 2

Presentation Outline

I. Application of Audit Testing

II. Selecting Tests to Perform

III. Design of the Audit Program

IV. A Summary of the Audit Process

13 - 3

I. Application of Audit Testing

A. Tests of ControlsB. Testing for Monetary Misstatement

C. Reduction of RiskD. Audit Assurance at Different Levels of

Internal Control EffectivenessE. Simultaneous Testing of Controls and

Substantive Testing of TransactionsF. Timing of Audit Testing

13 - 4

A. Tests of Controls

Audit procedures to test the operating effectiveness of control policies and procedures in support of a reduced assessed control risk. Some examples

include: Matching of vendor invoices against a purchase order

and receiving report before approving invoice for payment.

Examination of employee time cards for approval of overtime.

13 - 5

B. Testing for Monetary Misstatement

Substantive Tests ofTransactions

Testing for monetary misstatements to determine

if the following 6 transaction-related audit objectives

have been met:Existence

CompletenessAccuracy

ClassificationTiming

Posting and Summarization

Tests of Details ofBalances

Testing for monetarymisstatements to determine if thefollowing 9 balance-related audit

objectives have been met:Existence

CompletenessAccuracy

ClassificationCutoff

Detail tie-inRealizable value

Rights and obligationsPresentation and disclosure

13 - 6

C. Reduction of Risk

Control Risk Procedures to gain an understanding of internal

control Tests of controls

Once the auditor obtains an initial understanding of

controls, tests of controls must be performed to obtain evidence regarding the

effectiveness of controls. Stronger controls will allow the auditor to assess control risk below the maximum.

Detection Risk Substantive tests of

transactions Analytical procedures

Tests of details of balances

The more evidence an auditor collects from the

above procedures, the lower the detection risk. Detection risk must be

lower when control risk is higher.

13 - 7

D. Audit Assurance at Different Levels of Internal Control Effectiveness

Acceptableassurance

Noassurance

INTERNAL CONTROL EFFECTIVENESSWeak control Strong control

Reliance on controls: C3 – None, C2 – Some, C1 – Maximum

Audit assurancefrom control riskassessment andtests of control

Auditassurancefromsubstantivetests

A C B

C3

C2

C1

AU

DIT

AS

SU

RA

NC

E

13 - 8

E. Simultaneous Testing of Controls and Substantive Testing of Transactions

The determination of control risk affects the type of procedures and sample size for the substantive testing of

transactions. For purposes of convenience, the testing of controls and

substantive testing of transactions will often occur simultaneously.

In such situations the auditor will make an assumption about the results of tests of controls. If the testing of controls indicates that internal control is worst than

expected, substantive testing of transactions will have to be modified accordingly.

13 - 9

F. Timing of Audit Testing

Auditors frequently consider it desirable to perform audit tests prior to year end. Certain procedures may be

performed at an interim time (prior to client’s year end) : Update depreciation schedules Examine new loan agreements

Vouch transactions Analyze changes in client’s accounting system

Review board of director minutes If strong internal controls exist the auditor may also:

Observe physical inventories Confirm account balances

13 - 10

II. Selecting Tests to Perform

A. The Cost of Testing

B. Appropriate Evidence for Audit Testing

C. Risk and Testing in the Audit Process

13 - 11

A. The Cost of Testing

Going from the most to least costly, the types of tests

are: Tests of details of balances

Substantive tests of transactions

Tests of controls Procedures to obtain an

understanding of internal controls

Analytical procedures

13 - 12

B. Appropriate Evidence for Audit Testing

Type of Test

Procedures for internal control

Tests of controls

Substantive tests of transactions

Analytical procedures

Tests of details of balances

Ph

ysic

alE

xam

inat

ion

Con

firm

atio

n

Doc

um

enta

tion

Ob

serv

atio

n

Type of Evidence

Inq

uir

ies

ofth

e cl

ien

t

Rep

erfo

rman

ce

An

alyt

icp

erfo

rman

ce

13 - 13

C. Risk and Testing in the Audit Process

Substantive Testing of Transactions

In some situations it may be more efficient to assess control risk at

a higher level and reduce or eliminate tests of controls. This

depends on cost of testing controls versus the additional substantive testing that would result from a higher control

risk.

Tests of Details of Balances

If tolerable misstatement is low, and inherent risk

and control risk are high, planned tests of

details of balances must be high.

13 - 14

III. Design of the Audit Program

A. Tests of Controls and Substantive Tests of Transactions

B. Analytical Procedures

C. Tests of Details of Balances

Most audits design an audit program in the following three parts:

13 - 15

A. Tests of Controls and Substantive Tests of Transactions

A four-step approach when the auditor plans to reduce assessed control risk below the maximum:

Transaction related audit objectives are applied to the class of transactions being tested, such as sales.

Key controls that should reduce control risk for each transaction-related audit objective are identified.

For all internal controls used to reduce the initial assessment of control risk below the maximum (key controls),

appropriate tests of controls are developed. Design appropriate substantive tests of transactions, considering weaknesses in internal control and expected

results of tests of controls (allows for simultaneous tests of controls and substantive testing).

Note: If control risk is assessed at 1.0, only substantive tests of transactions will be used in this part of the audit program.

13 - 16

B. Analytical Procedures

Analytical procedures may be performed during 3 different stages of the audit:

In the planning stage to help the auditor understand the client’s business and determine other evidence needed to satisfy

acceptable audit risk. During the audit, especially during substantive testing.

Near the end of the audit as a final test of reasonableness.