Section 5 Internal Control over Financial Reporting Essay

2. Prepare a list of the controls described in the case. What control problems are they designed to address? Are the managers interviewed for the case justified in being proud of their company’s control system? Why or why not?

Instructors may want to consider simplifying this case assignment by dividing it into two parts. Part one could require students to determine planning materiality while part two could require students to determine tolerable misstatement for individual balance sheet accounts. The approach we recommend for this assignment is to first ask students to review the case assignment materials and conduct a preliminary “in-class” discussion addressing question 1. Students are then asked to complete question 2 outside of class. Once students have completed this assignment, it is important to discuss the solution with them to maximize their learning experience. Students will commonly provide diverse answers for this assignment. This provides an opportunity to highlight the subjective nature of some of these judgments as well as to point out that many audit approaches would be considered reasonable. Cooperative learning activities can easily be adapted to this assignment. The cooperative learning activity called Roundtable could be used for the preliminary in-class discussion (requirement 1). The basic process for this activity is to have students meet in small groups to state aloud and write down on a single sheet of paper their ideas to a question asked by the instructor. For example, students could be asked to explain why different materiality bases are considered when

The design and implementation and objectives of company controls are not adequate to meet the control objectives. The control environment control objective is ineffective. This control objective lacks a written policy on ethical conduct, is lacking oversight from the board of directors and audit committee, lacks a consistent style and philosophy from management, and lacks a strong commitment to competence. The risk assessment control objective is effective but lacks any antifraud program and controls. The information and communication control is ineffective. A virus has been detected and is affecting the files of the company. This control is lacking a strong IT department. The general controls financial reporting control objective is effective but is weak in detecting or preventing material misstatement. The monitoring control objective is ineffective; this control has need of an internal auditor.

Stage 2: Test of internal controls - By testing the effectiveness of the internal controls the auditor can determine the control risk that lies within the company. The audit team can perform tests of controls by making inquiries of appropriate client personnel, examining documents, records, and reports maintained by Smackey, observing control-related activities such as the one done for the inventory procedures for returned Best Boy Gourmet dog food, and re-perform the client procedures.

Team allocation for performing audit procedures to verify that controls are operating effectively through testing techniques and sampling methodologies.

Having internal controls is one thing, but how the company evaluates that control is a matter all by itself. Being an independent auditor, it is our job to understand an entity and

Kudler Fine Food has expanded business and updated their computer systems to meet demands. As IT information is adopted within the organization, automation control processes has become more virtualized. To ensure that Kudler’s computerize systems function properly an audit must be performed on an annual basis. Management at Kudler Fine Foods wants to see the proposed audit schedules for all systems. Management wants to know the types of audit and how they will be conducted. In addition, management would like to know about events that might prevent reliance on auditing through the computer.

Elder, A. A., Beasley, M., & Elder, R. J. (2014). Auditing and assurance services (15th ed.). Upper Saddle River, NJ: Pearson.

● Monitoring — Internal control systems need to be monitored–a process that assesses the quality of the system’s performance over time. This is accomplished through ongoing monitoring activities, separate evaluations or a combination of the two. Ongoing monitoring occurs in the course of operations. It includes regular management and supervisory activities, and other actions personnel take in performing their duties. The scope and frequency of separate evaluations will depend primarily on an assessment of risks and the effectiveness of ongoing monitoring procedures. Internal control deficiencies should be reported upstream, with serious matters reported to top management and the board.

The information found in financial statements outlines the financial activities of that company, and can help managers, creditors, and investors make many important decisions.

Auditors have the responsibilities as well as management to report internal controls. The auditors must examine closely management’s claim of effectiveness and also physically test the controls. After the examination, the auditors should express their opinion and any recommendations to fix any internal control weaknesses.

Auditors should always evaluate the design and test the operating effectiveness of a company’s internal control. The key procedures of the evaluation of design are fulfilled by inquires, observations, and inspections. The same procedures can be used to test the operating effectiveness as well.

Control Weakness: CEO conceals information from the Audit Committee. The Director of Internal Audit also does not feel that the Audit Committee is friendly. Internal Audit has been steered away from the manufacturing process and the reconciliation process by the CEO. Although there is a code of conduct, a monthly newsletter and an open door policy according to the CEO, these efforts do not appear to be successful because of management override. Employees interviewed lack of awareness of these programs. All of these issues are signals of a deficiency of the Control Environment aspect of the COSO framework.

Control environment is the step engaged by a company to prevent fraud; both misappropriation of assets and fraudulent financial reporting. It has an equal role in assuring control over manufacturing and other

Field Work Standard #2 : The auditor must obtain a sufficient understanding of the entity and its environment, including its internal control, to assess the risk of material misstatement of the financial statements whether due to error or fraud, and to design the nature, timing, and extent of further audit procedures (AICPA). Enron had no procedure for internal controls. Therefore, Anderson could not have sufficient understanding of the internal controls.