Which of the following is correct? a. Auditors should evaluate application controls before evaluating general controls b. Auditors should evaluate application controls and general controls simultaneously. c. Auditors should evaluate general controls before evaluating application controls. d. None of these statements is correct.

Which of the following is correct? a. Auditors should evaluate application controls before evaluating general controls b. Auditors should evaluate application controls and general controls simultaneously. c. Auditors should evaluate general controls before evaluating application controls. d. None of these statements is correct.

Auditing: A Risk Based-Approach (MindTap Course List)

11th Edition

ISBN:9781337619455

Author:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Publisher:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Chapter3: Internal Control Over Financial Reporting: Responsibilities Of Management And The External Auditor

Section: Chapter Questions

Problem 20CYBK

See similar textbooks

Similar questions

1) Which of the following statements is the most accurate? a. Data analytics can be exploratory but never confirmatory. b. Data analytics allows auditors to broaden scope of their assurance activities. c. An auditor can always rely more on IT controls than manual controls. d. Application controls can always be relied on when general controls are deemed effective.
1. 1. Working paper documentation includes the auditors’ conclusion about ______ and the basis for their conclusion. a. control risk b. control expecations 2. _____ are controls that do not rely on the client's information technology (IT) environment for their operation. a. IT general controls (ITGCs) b. Automated controls c. Computer application controls d. Manual controls 3. Assessing control risk begins with understanding entity-level controls. a. True b. False
Which of the following is a component of general controls? a. processing controls b. output controls c. back-up and contingency planning d. input controls Required: choose the correct answer and Justify your answers in at least 6 sentences.
Auditors must consider these five components of COSO internal controls when understanding the client and its internal controls Select an answer and submit. For keyboard navigation, use the up/down arrow keys to select an answer. a control environment, tone at the top, risk assessment, segregation of duties, monitoring b control environment, tone at the top, risk assessment, control activities, monitoring c control activities. control environment, risk assessment, info and communications, monitoring d control activities, control environment, monitoring, tone at the top, info and commumication
Q4) Auditors are required to consider a client's internal control.a. Describe the two purposes of the auditors' consideration of a client's internal control.b. Even the best internal control has certain limitations. List three of those limitations.
In the aftermath of the initial stage of examining a client's computer controls, an auditor might choose not to conduct compliance tests concerning the controls within the computer segment of the client's internal control. Which of the following reasons would be considered invalid for opting to exclude such tests? Select one: a. The controls duplicate operative controls existing elsewhere in the structure. b. The time and dollar costs of testing exceed the time and dollar savings in substantive testing if the tests of controls show the controls to be operative. c. There appear to be major weaknesses that would preclude reliance on the stated procedure. d. The controls appear adequate.
Once the auditor detects a control deficiency, which of the following steps must he or shetake first?a. Perform tests of other controls related to the same assertion as the control deemedineffective.b. Evaluate the severity of the deficiency on the auditor’s control risk assessment for thatassertion.c. Modify the planned substantive procedures as a result of the deficiency.d. Test the deficient control, assuming a maximum level of risk.
1. If detective controls signal error flags, why shouldn’t these types of controls automatically make a correction in the identified error? Why are corrective controls necessary? 2. Discuss the nonaccounting services that external auditors are no longer permitted to render to audit clients. 3. Discuss whether a firm with fewer employees than there are incompatible tasks should rely more heavily on general authority than specific authority. 4. According to SAS 78/COSO, the proper segregation of functions is an effective internal control procedure. Please Discuss. PLEASE NO PLAGIARSIM. THANK YOU!!
Statement 1: As part of obtaining an understanding of internal control, an auditor is required to obtain knowledge about the operating effectiveness of internal control. Statement 2: The auditor obtains an understanding of internal controls to identify the types of potential misstatements that may occur. Group of answer choices A. False, true B. True, false C. False, false D. True, true
When an audior increases the assessed level of control risk because certain control activities were determined to be ineffective, the auditor would most likely increase the: A. extent of tests of control B. level of detection risk C. extent of tests of detail D. Level of inherent risk
When an auditor tests the internal controls of a computerized accounting system, which of the following is true of the test data approach? A. Test data are coded to a dummy subsidiary so they can be extracted from the system under actual operating conditions. B. Test data programs need NOT be tailor-made by the auditor for each client's computer applications. C. Test data programs usually consist of all possible valid and invalid conditions reguarding compliance with internal controls. D. Test data are processed with the client's computer and the results are compared with the auditor's predetermined results.
1. What are objectives? What three categories of objectives are set forth in the COSO framework? 2. What does the control environment comprise? 3. What are control activities? What types of control activities are present in a well-designed system of internal controls? 4. When are monitoring activities most effective? Who performs monitoring activities? What distinguishes separate evaluations from ongoing monitoring activities? 5. How does internal auditors' perspective of internal control differ from management's perspective? 6. How does COSO define risk? How does ISO define risk? 7. What are the five COSO ERM components? 8. How does COSO define risk appetite? 9. What are some ERM assurance activities the internal audit function may perform? What are some ERM consulting activities the internal audit function may perform if appropriate safeguards are implemented? What ERM activities should the internal audit function not perform? 10. What are COSO's five categories of risk…