Introduction - An Overview of Auditing
Introduction - An Overview of Auditing
Introduction - An Overview of Auditing
Economic decisions in every society must be based upon the information available at
the time the decision is made. For example, the decision of a bank to make a loan to a
business is based upon previous financial relationships with that business, the financial
condition of the company as reflected by its financial statements and other factors.
If decisions are to be consistent with the intention of the decision makers, the
information used in the decision process must be reliable. Unreliable information can
cause inefficient use of resources to the detriment of the society and to the decision
makers themselves. In the lending decision example, assume that the barfly makes the
loan on the basis of misleading financial statements and the borrower Company is
ultimately unable to repay. As a result the bank has lost both the principal and the
interest. In addition, another company that could have used the funds effectively was
deprived of the money.
A common way to obtain such reliable information is to have some type of verification
(audit) performed by independent persons. The audited information is then used in the
decision making process on the assumption that it is reasonably complete, accurate and
unbiased.
1)Auditing evolved and grew rapidly after the industrial revolution in the 18th century
With the growth of the joint stock companies the ownership and management became
separate.
2)The shareholders who were the owners needed a report from an independent expert
on the accounts of the company managed by the board of directors who were the
employees.
3)The objective of audit shifted and audit was expected to ascertain whether the
accounts were true and fair rather than detection of errors and frauds.
Main Features
This Auditing Standard: Provides explanatory guidance on what constitutes audit evidence;
Requires the auditor to obtain sufficient appropriate evidence;
Requires the auditor to use assertions in obtaining audit evidence; and
Provides explanatory guidance on audit procedures for obtaining audit evidence.
customer, which forms an internal evidence which are further evidenced by receipt of
money from the customers.
Other examples of internal evidences are material issued note, goods received note
or any other evidence generated internally by the client. There can also be internal
external evidences prepared by the clients and later on issued to their customers for
further processing and payment. For example any invoice which is prepared internally
and issued to the customer for further processing and payment. There can also be other
evidences that are not generated by the client and obtained by the auditor directly from
third party. For instance, auditor can obtain balance confirmation certificates from the
third party , may be debtors balance confirmation , creditors balance confirmation and
other such evidence obtained from the third party without dealing with the client. There
can also be external internal evidence flowing from outside the clients organization into
the clients organization, We can give here example of a purchase invoice.
Thus in brief, the evidence can be
1. Internal Evidence
2. Internal- External evidence
3. External Evidence
4. External internal evidence.
However, it is important to know that external evidence which is obtained by
the third party directly from the third party is a more reliable audit evidence. The simple
reason behind this is clients involvement is absent . hence, chances of manipulation in
this type of evidence by the client is not there.
the general and subsidiary ledgers, journal entries and other adjustments to the
financial report that are not reflected in formal journal entries, and records such as work
sheets and spreadsheets supporting cost allocations, computations, reconciliations and
disclosures. The entries in the accounting records are often initiated, recorded,
processed and reported in electronic form. In addition, the accounting records may be
part of integrated systems that share data and support all aspects of the entitys
financial reporting, operations and compliance objectives.
Those charged with governance are responsible for the preparation of the
financial report based upon the accounting records of the entity. Under paragraph 5 of
this Auditing Standard, the auditor needs to obtain some audit evidence by testing the
accounting records, for example, through analysis and review, reperforming procedures
followed in the financial reporting process, and reconciling related types and
applications of the same information. Through the performance of such audit
procedures, the auditor may determine that the accounting records are internally
consistent and agree to the financial report. However, because accounting records
alone do not provide sufficient audit evidence on which to base an auditors opinion on
the financial report, the auditor, under paragraph 5 of this standard, needs to obtain
other audit evidence.
Other information that the auditor may use as audit evidence includes minutes of
meetings, confirmations from third parties, analysts reports, comparable data about
competitors (benchmarking), controls manuals, information obtained by the auditor from
such audit procedures as enquiry, observation, and inspection, and other information
developed by, or available to, the auditor that permits the auditor to reach conclusions
through valid reasoning.
regarding both existence and valuation, although not necessarily the appropriateness of
period-end cut-offs. On the other hand, the auditor ordinarily obtains audit evidence
from different sources or of a different nature that is relevant to the same assertion. For
example, the auditor may analyse the ageing of accounts receivable and the
subsequent collection of receivables to obtain audit evidence relating to the valuation of
the allowance for doubtful accounts. Furthermore, obtaining audit evidence relating to a
particular assertion, for example, the physical existence of inventory, is not a substitute
for obtaining audit evidence regarding another assertion, for example, the valuation of
inventory.
The reliability of audit evidence is influenced by its source and by its nature and
is dependent on the individual circumstances under which it is obtained. Generalisations
about the reliability of various kinds of audit evidence can be made, however, such
generalisations are subject to important exceptions. Even when audit evidence is
obtained from sources external to the entity, circumstances may exist that could affect
the reliability of the information obtained. For example, audit evidence obtained from an
independent external source may not be reliable if the source is not knowledgeable.
While recognising that exceptions may exist, the following generalisations about the
reliability of audit evidence may be useful:
Audit evidence is more reliable when it is obtained from independent sources outside
the entity.
Audit evidence that is generated internally is more reliable when the related controls
imposed by the entity are effective.
Audit evidence obtained directly by the auditor (for example, observation of the
application of a control) is more reliable than audit evidence obtained indirectly or by
inference (for example, enquiry about the application of a control).
Audit evidence is more reliable when it exists in documentary form, whether paper,
electronic, or other medium (for example, a contemporaneously written record of a
meeting is more reliable than a subsequent oral representation of the matters
discussed).
Audit evidence provided by original documents is more reliable than audit evidence
provided by photocopies or facsimiles.
An audit rarely involves the authentication of documentation, nor is the auditor trained
as or expected to be an expert in such authentication. However, under paragraph 5 of
this Auditing Standard, the auditor needs to consider the reliability of the information to
be used as audit evidence, for example, photocopies, facsimiles, filmed, digitised or
7
to obtain reasonable assurance,1 the auditor is not satisfied with audit evidence that is
less than persuasive.
Classification - transactions and events have been recorded in the proper accounts.
Assertions about account balances at the period end:
Existence - assets, liabilities, and equity interests exist.
Rights and obligations - the entity holds or controls the rights to assets, and liabilities
are the obligations of the entity.
Completeness - all assets, liabilities and equity interests that should have been
recorded have been recorded.
Valuation and allocation - assets, liabilities, and equity interests are included in the
financial report at appropriate amounts and any resulting valuation or allocation
adjustments are appropriately recorded.
Assertions about presentation and disclosure:
Occurrence, rights and obligations - disclosed events, transactions, and other matters
have occurred and pertain to the entity.
Completeness - all disclosures that should have been included in the financial report
have been included.
Classification and understandability - financial information is appropriately presented
and described, and disclosures are clearly expressed.
Accuracy and valuation - financial and other information are disclosed fairly and at
appropriate amounts.
The auditor may use the assertions as described above or may express them differently
provided all aspects described above have been covered. For example, the auditor may
choose to combine the assertions about transactions and events with the assertions
about account balances. As another example, there may not be a separate assertion
related to cut-off of transactions and events when the occurrence and completeness
assertions include appropriate consideration of recording transactions in the correct
accounting period.
perform audit procedures to:obtain an understanding of the entity and its environment,
including its internal control, to assess the risks of material misstatement at the financial
report and assertion levels (audit procedures performed for this purpose are referred to
in the Auditing Standards as risk assessment procedures);
when necessary or when the auditor has determined to do so, test the operating
effectiveness of controls in preventing, or detecting and correcting, material
misstatements at the assertion level (audit procedures performed for this purpose are
referred to in the Auditing Standards as tests of controls); and detect material
misstatements at the assertion level (audit procedures performed for this purpose are
referred to in the Auditing Standards as substantive procedures and include tests of
details of classes of transactions, account balances and disclosures, and substantive
analytical procedures).
The auditor needs to perform risk assessment procedures to provide a
satisfactory basis for the assessment of risks at the financial report and assertion levels.
Risk assessment procedures by themselves do not provide sufficient appropriate audit
evidence on which to base the auditors opinion, however, and are supplemented by
further audit procedures in the form of tests of controls, when necessary, and
substantive procedures.
Tests of controls are necessary in two circumstances. When the auditors risk
assessment includes an expectation of the operating effectiveness of controls, under
ASA 330, the auditor needs to test those controls to support the risk assessment. In
addition, when substantive audit procedures alone do not provide sufficient appropriate
audit evidence, under ASA 330, the auditor needs to perform tests of controls to obtain
audit evidence about their operating effectiveness.
The auditor needs to plan and perform substantive audit procedures to be
responsive to the related assessment of the risks of material misstatement, which
includes the results of tests of controls, if any. The auditors risk assessment is
judgemental, however, and may not be sufficiently precise to identify all risks of material
misstatement. Further, there are inherent limitations to internal control, including the risk
of management override, the possibility of human error and the effect of systems
changes. Therefore, under ASA 330, the auditor needs to design and perform
substantive audit procedures for material classes of transactions, account balances and
disclosures to obtain sufficient appropriate audit evidence.
Under paragraph 5 of this Auditing Standard, the auditor needs to use one or
more types of audit procedures described in paragraphs 31 to 43 below. These audit
procedures, or combinations thereof, may be used as risk assessment procedures,
tests of controls or substantive audit procedures, depending on the context in which
11
they are applied by the auditor. In certain circumstances, audit evidence obtained from
previous audits may provide audit evidence where the auditor, under ASA 330, has
performed audit procedures to establish its continuing relevance.
The nature and timing of the audit procedures to be used may be affected by the
fact that some of the accounting data and other information may be available only in
electronic form or only at certain points or periods in time. Source documents, such as
purchase orders, bills of lading, invoices, and cheques, may be replaced with electronic
messages. For example, entities may use electronic commerce or image processing
systems. In electronic commerce, the entity and its customers or suppliers use
connected computers over a public network, such as the Internet, to transact business
electronically. Purchase, shipping, billing, cash receipt, and cash disbursement
transactions are often consummated entirely by the exchange of electronic messages
between the parties. In image processing systems, documents are scanned and
converted into electronic images to facilitate storage and reference, and the source
documents may not be retained after conversion. Certain electronic information may
exist at a certain point in time. However, such information may not be retrievable after a
specified period of time if files are changed and if backup files do not exist. An entitys
data retention policies may require the auditor to request retention of some information
for the auditors review or to perform audit procedures at a time when the information is
available.When the information is in electronic form, the auditor may carry out certain of
the audit procedures described below through CAATs.
Observation
Observation consists of looking at a process or procedure being performed by others.
Examples include observation of the counting of inventories by the entitys personnel
and observation of the performance of control activities. Observation provides audit
evidence about the performance of a process or procedure, but is limited to the point in
time at which the observation takes place and by the fact that the act of being observed
may affect how the process or procedure is performed. See ASA 501, for further
mandatory requirements and explanatory guidance on observation of the counting of
inventory.
Enquiry
Enquiry consists of seeking information of knowledgeable persons, both financial and
non-financial, throughout the entity or outside the entity. Enquiry is an audit procedure
that is used extensively throughout the audit and often is complementary to performing
other audit procedures. Enquiries may range from formal written enquiries to informal
oral enquiries. Evaluating responses to enquiries is an integral part of the enquiry
process.
Responses to enquiries may provide the auditor with information not previously
possessed or with corroborative audit evidence. Alternatively, responses might provide
information that differs significantly from other information that the auditor has obtained,
for example, information regarding the possibility of management override of controls. In
13
some cases, responses to enquiries provide a basis for the auditor to modify or perform
additional audit procedures.
Ordinarily, the auditor performs audit procedures in addition to the use of enquiry to
obtain sufficient appropriate audit evidence. Enquiry alone ordinarily does not provide
sufficient audit evidence to detect a material misstatement at the assertion level.
Moreover, enquiry alone is not ordinarily sufficient to test the operating effectiveness of
controls.
Although corroboration of evidence obtained through enquiry is often of particular
importance, in the case of enquiries about management intent, the information available
to support managements intent may be limited. In these cases, understanding
managements past history of carrying out its stated intentions with respect to assets or
liabilities, managements stated reasons for choosing a particular course of action, and
managements ability to pursue a specific course of action may provide relevant
information about managements intent.
In respect of some matters, the auditor obtains written representations from those
charged with governance and management to confirm responses to oral enquiries. For
example, the auditor obtains written representations from those charged with
governance and/or management on material matters when other sufficient appropriate
audit evidence cannot reasonably be expected to exist or when the other audit evidence
obtained is of a lower quality. See ASA 580 Management Representations, for further
mandatory requirements and explanatory guidance on written representations.
Confirmation
Confirmation, which is a specific type of enquiry, is the process of obtaining a
representation of information or of an existing condition directly from a third party. For
example, the auditor may seek direct confirmation of receivables by communication with
debtors. Confirmations are frequently used in relation to account balances and their
components, but need not be restricted to these items. For example, the auditor may
request confirmation of the terms of agreements or transactions an entity has with third
14
parties, the confirmation request is designed to ask if any modifications have been
made to the agreement and, if so, what the relevant details are. Confirmations also are
used to obtain audit evidence about the absence of certain conditions, for example, the
absence of a side agreement that may influence revenue recognition. See ASA 505,
for further mandatory requirements and explanatory guidance on confirmations.
Recalculation
Recalculation consists of checking the mathematical accuracy of documents or records.
Recalculation can be performed through the use of information technology, for example,
by obtaining an electronic file from the entity and using CAATs to check the accuracy of
the summarisation of the file.
Reperformance
Reperformance is the auditors independent execution of procedures or controls that
were originally performed as part of the entitys internal control, either manually or
through the use of CAATs, for example, reperforming the ageing of accounts receivable.
Analytical Procedures
Analytical procedures consist of evaluations of financial information made by a study of
plausible relationships among both financial and non-financial data. Analytical
procedures also encompass the investigation of identified fluctuations and relationships
that are inconsistent with other relevant information or deviate significantly from
predicted amounts. See ASA 520 Analytical Procedures, for further mandatory
requirements and explanatory guidance on analytical procedures.
Conformity with International Standards on AuditingExcept as noted below, this Auditing
Standard conforms with International Standard on Auditing ISA 500 Audit Evidence,
issued by the International Auditing and Assurance Standards Board of the International
Federation of Accountants. The main difference between this Auditing Standard and ISA
500 is that ISA 500 includes a Public Sector Perspective. This Auditing Standard does
not include a separate section on the public sector as it is sector neutral.
Requirements
Sufficient Appropriate Audit Evidence
1) The auditor shall design and perform audit procedures that are appropriate in the
circumstances for the purpose of obtaining sufficient appropriate audit evidence.
Information to Be Used as Audit Evidence
18
2) When designing and performing audit procedures, the auditor shall consider the
relevance and reliability of the information to be used as audit evidence
3) When information to be used as audit evidence has been prepared using the work of
a managements expert, the auditor shall, to the extent necessary, having regard to the
significance of that experts work for the auditors purposes,:
(a) Evaluate the competence, capabilities and objectivity of that expert;
(b) Obtain an understanding of the work of that expert; and
(c) Evaluate the appropriateness of that experts work as audit evidence for the relevant
assertion. 9. When using information produced by the entity, the auditor shall evaluate
whether the information is sufficiently reliable for the auditors purposes, including as
necessary in the circumstances:
(a) Obtaining audit evidence about the accuracy and completeness of theinformation
(b) Evaluating whether the information is sufficiently precise and detailed for
the auditors purposes.Selecting Items for Testing to Obtain Audit Evidence
4) When designing tests of controls and tests of details, the auditor shall determine
means ofselecting items for testing that are effective in meeting thepurpose of the audit
procedure. Inconsistency in, or Doubts over Reliability of, Audit Evidence
5) If:(a) audit evidence obtained from one source is inconsistent with that obtained from
another; or
(b) the auditor has doubts over the reliability of information to be used as audit
evidence,
The auditor shall determine what modifications or additions to audit proceduresare
necessary to resolve the matter, and shall consider the effect of the matter, ifany, on
other aspects of the audit.
19
addition to other sources inside and outside the entity, the entitys accounting records
are an important source of audit evidence.
Also, information that may be used as audit evidence may have been prepared using
the work of a managements expert. Audit evidence comprises both information that
supports and corroborates managements assertions, and any information that
contradicts such assertions. In addition, in some cases the absence of information (for
example, managements refusal to provide arequested representation) is used by the
auditor, and therefore, also constitutes audit evidence.
2) Most of the auditors work in forming the auditors opinion consists ofobtaining and
evaluating audit evidence. Audit procedures to obtain audit evidence can include
inspection, observation, confirmation, recalculation,reperformance and analytical
procedures, often in some combination, in addition to inquiry. Although inquiry may
provide important audit evidence, and may even produce evidence of a misstatement,
inquiry alone ordinarily does not provide sufficient audit evidence of the absence of a
material misstatement at the assertion level, nor of the operating effectiveness of
controls.
3) As explained in SA 200,reasonable assurance is obtained when the auditor has
obtained sufficient appropriate audit evidence to reduce audit risk (i.e., the risk that the
auditor expresses an inappropriate opinion when the financial statements are materially
misstated) to an acceptably low level.
4)The sufficiency and appropriateness of audit evidence are interrelated. Sufficiency is
the measure of the quantity of audit evidence. The quantity of audit evidence needed is
affected by the auditors assessment of the risks of misstatement (the higher the
assessed risks, the more audit evidence is likely to be required) and also by the quality
of such audit evidence (the higher thequality, the less may be required). Obtaining more
audit evidence, however, maynot compensate for its poor quality..
21
2) More assurance is ordinarily obtained from consistent audit evidence obtained from
different sources or of a different nature than from items of audit evidence considered
individually. For example, corroborating information obtained from a source independent
of the entity may increase the assurance the auditor obtains from audit evidence that is
generated internally, such as evidence existing within the accounting records, minutes
of meetings, or a managementrepresentation.
3) Information from sources independent of the entity that the auditor may use as audit
evidence may include confirmations from third parties, analysts reports, and
comparable data about competitors (benchmarking data).
Conclusion
Auditor for the purpose of performing audit and forming reasonable conclusion on the
financial statement obtains audit evidence, which thus supports his conclusive opinion.
22
INDEX
Sr.No
Name of Topic
Page No
1
23
3-4
5-6
6-8
9-10
11-12
13-14
Confirmation
15
10
16
11
17
12
18
13
Requirements
19
14
20-22
15
Conclusion
16
23
24