REO Audit Planning
REO Audit Planning
AUDIT PLANNING
RAYMUND FRANCIS A. ESCALA, CPA. MBA
1. Roles of planning
Adequate planning benefits the audit of financial statements in several ways, including the following:
Helping the auditor to devote appropriate attention to important areas of the audit
Helping the auditor identify and resolve potential problems on a timely basis
Helping the auditor properly organize and manage the audit engagement so that it is performed in an effective
and efficient manner
*r• Assisting in the selection of engagement team members with appropriate levels of capabilities and competence to
respond to anticipated risks, and the proper assignment of work to them
Facilitating the direction and supervision of engagement team members and the review of their work
Assisting, where applicable, in coordination of work done by auditors of components and experts
5. Documentation
The auditor shall document:
a The overall audit strategy;
b. The audit plan; and
C. Any significant changes made during the audit engag ement to the overall audit strategy or the audit plan, and the
reasons for such changes.
Inherent risk is described as the susceptibility of an assertion about a class of transaction, account balance or
disclosure to a misstatement that could be material, either individually or when aggregated with other
misstatements, before consideration of any related controls.
Inherent risk is higher for some assertions and related classes of transactions, account balances and disclosures
than for others. The degree to which inherent risk varies is referred to as the 'spectrum of inherent risk.'
Control risk is described as the risk that a misstatement that could occur in an assertion about a class of
transaction, account balance or disclosure and that could be material, either individually or when aggregated with
other misstatements, will not be prevented, or detected and corrected, on a timely basis by the entity's system of
internal control.
AUDIT PROCEDURES
1. Obtain an understanding of the entity and its environment, including its internal control
Risk Assessment Procedures and Related Activities
The auditor shall design and perform risk assessment procedures to obtain audit evidence that provides an
appropriate basis for:
a. The identification and assessment of risks of material misstatement, whether due to fraud or error, at the
financial statement and assertion levels: and
b. The design of further audit procedures.
Professional skepticism
Professional skepticism is necessary for the critical assessment of audit evidence gathered when performing the
risk assessment procedures, and assists the auditor in remaining alert to audit evidence that is not biased
towards corroborating the existence of risks or that may be contradictory to the existence of risks.
Professional skepticism is an attitude that is applied by the auditor when making professional judgments that then
provides the basis for the auditor's actions. The auditor applies professional judgment in determining when the
auditor has audit evidence that provides an appropriate basis for risk assessment.
The application of professional skepticism by the auditor may include:
• Questioning contradictory information and the reliability of documents:
• Considering responses to inquiries and other information obtained from management and those charged with
governance:
• Being alert to conditions that may indicate possible misstatement due to fraud or error: and
• Considering whether audit evidence obtained supports the auditor's identification and assessment of the risks
of material misstatement in light of the entity's nature and circumstances.
Obtaining Audit Evidence in an Unbiased Manner Is Important
The auditor shall design and perform risk assessment procedures in a manner that is not biased towards
obtaining audit evidence that may be corroborative or towards excluding audit evidence that may be contradictory.
Designing and performing risk assessment procedures to obtain audit evidence to support the identification and
assessment of the risks of material misstatement in an unbiased manner may assist the auditor in identifying
potentially contradictory information, which may assist the auditor in exercising professional skepticism in
identifying and assessing the risks of material misstatement.
Sources of Audit Evidence
Designing and performing risk assessment procedures to obtain audit evidence in an unbiased manner may
involve obtaining evidence from multiple sources within and outside the entity. However, the auditor is not
required to perform an exhaustive search to identify all possible sources of audit evidence. In addition to
information from other sources. sources of information for risk assessment procedures may include:
✓ Interactions with management, those charged with governance, and other key entity personnel, such as
internal auditors.
• Certain external parties such as regulators, whether obtained directly or indirectly.
• Publicly available information about the entity. for example entity-issued press releases, materials for analysts
or investor group meetings. analysts' reports or information about trading activity.
Regardless of the source of information, the auditor considers the relevance and reliability of the information to be
used as audit evidence.
Scala bility
The nature and extent of risk assessment procedures will vary based on the nature and circumstances of the
entity (e.g.. the formality of the entity's policies and procedures, and processes and systems). The auditor uses
professional judgment to determine the nature and extent of the risk assessment procedures to be performed to
meet the requirements of the standards.
Although the extent to which an entity's policies and procedures. and processes and systems are formalized may
vary, the auditor is still required to obtain the understanding.
The nature and extent of risk assessment procedures to be performed the first time an engagement is undertaken
may be more extensive than procedures for a recurring engagement. In subsequent periods, the auditor may
focus on changes that have occurred since the preced ing period.
Specific procedures
a. Inquiry
Inquiries during planning stage
Much of the information obtained by the auditor's inquiries is obtained from management and those
responsible for financial reporting. However. the auditor may also obtain information, or a different
perspective in identifying risks of material misstatE r-rient, through inquiries of others within the entity and other
employees with different levels of authority. For e):ample:
• those charged with governance
• internal audit personnel
• employees involved in initiating, processing or recording complex or unusual transactions
• in-house legal counsel
• marketing or sales personnel
b. Observation
Auditor aims to obtain an understanding of the ent.ity thru observation of entity's:
• processes used in processing information to b e reported: and
• activities and operations.
c. Inspection
Inspection during planning stage
The auditor can obtain an understanding of the entity through the following inspection activities during
planning:
• Review of prior year's working papers and pric)r year's financial statements
• Review of reports prepared by the entity's management (such as quarterly management reports and
interim financial statements) and those charged with governance (such as minutes of board of directors'
meetings)
• Review of documents (such as business plan: and strategies), records, and internal control manuals
• Reading articles, books, periodicals, and other publications related to the entity's industry
• Visits to the entity's premises and plant facilitil
d. Analytical procedures
A basic premise underlying the application of analytical procedures is that plausible relationships among data
may reasonably be expected to exist and continue in the absence of known conditions to the contrary.
2. Consider materiality
Definition
Information is material if its omission or misstatement could influence the economic decisions of users taken on
the basis of the financial statements. Materiality depends on the size of the item or error judged in the particular
circumstances of its omission or misstatement.
The concept of materiality recognizes that some mat.ters. but not all, are important for fair presentation of the
financial statements in conformity with PFRS.
Materiality in the Context of an Audit
Materiality generally explains that:
Misstatements, including omissions, are consider,ed to be material if they, individually or in the aggregate,
could reasonably be expected to influence the economic decisions of users taken on the basis of the
financial statements;
Judgments about materiality are made in light of siJrrounding circumstances, and are affected by the size or
nature of a misstatement, or a combination of t loth: and
Judgments about matters that are material to useri3 of the financial statements are based on a consideration
of the common financial information needs of isers as a group. The possible effect of misstatements on
specific individual users, whose needs may vary wi1dely, is not considered.
Uses of materiality
Accordingly, materiality should be considered by the al.iditor in the following phases:
a. Planning phase
• To identify and assess the risks of material MiEistatement,
• To determine the nature, timing and extent of flurther audit procedures
b. Completion phase
✓ To evaluate the effect of uncorrected misstaterrents, if any, on the financial statements and in forming the
opinion in the auditor's report
Determination of materiality
The auditor's determination of materiality is a matter ()f professional judgment. and is affected by the auditor's
perception of the financial information needs of users ,f the financial statements.
Using professional judgment, auditor is required to det(?rmine the following three different levels of materiality.
A Materiality for the financial statements as a whc)le
D the materiality determined at the overall financi al statement level
D represented by the smallest aggregate amount: of misstatement applicable to all financial statements
> it helps the auditor determine whether the prop osed audit adjustments are significant or not
> if the audit adjustments exceed this level, the eiuditor may need to adjust the financial statements
B. Materiality applied to specific classes of transactions, account balance or disclosures
is the amount set by the auditor for particular classes of transactions, account balances or disclosures for
which misstatements,
though lower than overall materiality, it could reasonably be expected to influence the economic decisions
of users of the financial statements
In determining the specific materiality, the auditor normally considers the following factors:
• laws and regulations (e.g. related party transac;tions)
• financial reporting framework
• key industry disclosures of the entity
si particular aspects of the entity's business
si understanding of the view of those charged wit h governance and management
C. Performance materiality
▪ the amount or amounts set by the auditor at le ss than materiality for the financial statements, as a whole,
to reduce to an appropriately low level the prc)bability that the aggregate of uncorrected and undetected
misstatements exceeds materiality for the finar)ciaI statements as a whole
also refers to the amount or amounts set by the auditor at less than the materiality level or levels for
particular classes of transactions, account baleinces, or disclosures
calculated as a certain percentage of o‘,'era!' materiality in order to capture any uncorrected
misstatements, the total amount of which may exceed overall materiality
used in scoping of financial statement line items to be tested by the auditor and ensures that significant
accounts in the financial statements are covered by audit testing
In determining performance materiality, an understanding of the following factors may affect the auditor's
judgment such as.
✓ nature of the entity's business and transactions
• risk assessment procedures
• nature and extent of misstatements identified in previous audits
AUDIT RISK
Definition
Audit risk is the risk that the auditor gives an inappropriate audit opinion when the financial statements are
materially misstated
Components of Audit risk
a. Risk of material misstatement
Risk of material misstatement is the possibility that material misstatements exist on the financial statements
prepared and presented by the entity. Items contributing to this -risk include inherent risk and control risk (see
definitions above).
Risk of not Detecting the Misstatement (more popularly known as detection risk)
• Detection Risk is the risk that the auditor's substantive procedures will not detect a misstatement that
exists in an account balance or class of transactions that could be material, individually or when
aggregated with misstatements in other balances or classes.
These components may be expressed in a formula which shows how they will comprise the audit risk:
AUDIT RISK = Risk of material misstatement x Risk of non-detection
OR
AUDIT RISK = Inherent risk x Control risk x Detection risk
✓ Evaluating the sufficiency and appropriateness of audit evidence obtained (e.g., relating to assumptions
or management's oral and written representati ons)
The auditor shall perform risk assessment procedures to obtain an understanding of:
a. The following aspects of the entity and its environment:
i. The entity's organizational structure, ownership and governance, and its business model, including
the extent to which the business model integrates the use of IT;
ii. Industry, regulatory and other external factors; and
iii. The measures used, internally and externally, to assess the entity's financial performance;
The applicable financial reporting framework, and the entity's accounting policies and the reasons for any
changes thereto; and
c. How inherent risk factors affect susceptibility of assertions to misstatement and the degree to which they
do so, in the preparation of the financial statements in accordance with the applicable financial reporting
framework, based on the understanding obtained in (a) and (b).
The auditor shall evaluate whether the entity's a ccounting policies are appropriate and consistent with the
applicable financial reporting framework.
Scalability
The nature and extent of the required understanding is a matter of the auditor's professional judgment and
varies from entity to entity based on the nature and circumstances of the entity, including:
✓ The size and complexity of the entity, including its IT environment:
✓ The auditor's previous experience with the entity:
✓ The nature of the entity's systems and processes, including whether they are formalized or not: and
✓ The nature and form of the entity's documentation.
The auditor's risk assessment procedures to obtain the required understanding may be less extensive in
audits of less complex entities and more extensive for entities that are more complex. The depth of the
understanding that is required by the auditor is expected.to ie less than that possessed by management in
managing the entity.
Some financial reporting frameworks allow smaller entities to provide simpler and less detailed disclosures in
the financial statements. However, this does not relieve the auditor of the responsibility to obtain an
understanding of the entity and its environment and the applicable financial reporting framework as it applies
to the entity.
The entity's use of IT and the nature and exte nt of changes in the IT environment may also affect the
specialized skills that are needed to assist with ob taming the required understanding.
B. Identify significant classes of transactions, account balances, and disclosures; relevant assertions
The auditor shall determine the relevant assertions and the related significant classes of transactions, account
balances and disclosures.
Significant class of transactions, account balance or disclosure is a class of transactions, account
balance or disclosure for which there is one or more relevant assertions. On the other hand, relevant
assertion is an assertion about a class of transactions, account balance or disclosure is relevant when it has
an identified risk of 'material misstatement The determination of whether an assertion is a relevant assertion
is made before consideration of any related controls (i.e., the inherent risk).
Identified risk of material misstatement
a. Assessing risks of material misstatement at the financial statement level
For identified risks of material misstatement 3t the financial statement level the auditor shall assess the
risks and:
i. Determine whether such risks affect the a!ssessment of risks at the assertion level: and
ii. Evaluate the nature and extent of their pelevasive effect on the financial statements.
p Adisi
REO CPA REVIEW
REAL EXCELLENCE ONLINE
b. Assessing risks of material misstatement at the assertion level
RAYMUND FRANCIS A. ESCALA, CPA, MBA
AUDIT PLANNING
pAme
REO CPA REVIEW
REAL EXCELLENCE ONLINE
RAYMUND FRANCIS A. ESCALA, CPA, MBA
AUDIT PLANNING
The assessed inherent risk relating to a particular risk of material misstatement at the assertion level
represents a judgment within a range, from lower to higher. on the spectrum of inherent risk. The judgment
about where in the range inherent risk is assessed. may vary based on the nature, size and complexity of the
entity, and takes into account the assessed likelihood and magnitude of the misstatement and inherent risk
factors.
For a risk to be assessed as higher on the spectrum of inherent risk, it does not mean that both the magnitude
and likelihood need to be assessed as high. Ratller, it is the intersection of the magnitude and likelihood of
the material misstatement on the spectrum of inh( rent risk that will determine whether the assessed inherent
risk is higher or lower on the spectrum of inherent risk. A higher inherent risk assessment may also arise from
different combinations of likelihood and magnitude, for example a higher inherent risk assessment could
result from a lower likelihood but a very high magr
p AIM
REO CPA REVIEW
REAL EXCELLENCE ONLINE
RAYMUND FRANCIS A. ESCALA, CPA, MBA
AUDIT PLANNING
The auditor also takes into the account the relative effects of inherent risk factors when assessing inherent
risk. The lower the effect of inherent risk factors, the lower the assessed risk is likely to be. Risks of material
misstatement that may be assessed as having higher inherent risk and may therefore be determined to be a
significant risk, may arise from matters such as the following:
• Transactions for which there are multiple acceptable accounting treatments such that subjectivity is
involved.
• Accounting estimates that have high estimation uncertainty or complex models.
• Complexity in data collection and processing to support account balances.
,1 Account balances or quantitative disclosures that involve complex calculations.
• Accounting principles that may be subject to differing interpretation.
• Changes in the entity's business that involve changes in accounting, for example, mergers and
acquisitions.
5. Identify detection risk to determine the nature, timing and extent of further audit procedures
Definition
As defined previously, detection risk is the risk that the auditor's substantive procedures will not detect a
misstatement that exists in an account balance or class of transactions that could be material, individually or when
aggregated with misstatements in other balances or classes.
Determination of detection risk
Detection risk may be determined by rearranging the formula for audit risk:
AUDIT RISK = Inherent risk x Control risk x Detection risk
DETECTION RISK = Audit Risk / (Inherent risk x Control risk)
Ascertain the reporting objectives of the engagem( nt to plan the timing of the audit and the nature of the
communications required such as
1. deadlines for interim and final reporting: and
2. key dates for expected communications with man agement and those charged with governance.
• Consider the factors that, in the auditor's professicinal judgment. are significant in directing the engagement
team's efforts such as
1. determination of appropriate materiality levels:
2. preliminary identification of areas where there ma y be higher risks of material misstatement:
3. preliminary identification of material components and account balances:
4. evaluation of whether the auditor may plan to ob tam n evidence regarding the effectiveness of internal control;
and
5. identification of recent significant entity-specific, irIdustry, financial reporting or other relevant developments.
Considers the results of preliminary engagemen t activities and, where practicable, whether knowledge
(experience) gained on other engagements performe( by the engagement partner for the entity is relevant.
Ascertain the nature, timing and extent of resources n ecessary to perform the engagement.
Considerations in Establishing the Overall Audit Strat egy
Characteristics of the Engagement
The financial reporting framework on which the finaricial information to be audited has been prepared, including
any need for reconciliations to another financial reporting framework.
Industry-specific reporting requirements such as reports mandated by industry regulators.
The expected audit coverage, including the number a nd locations of components to be included.
p. The nature of the control relationships between a pa rent and its components that determine how the group is to
be consolidated.
• The extent to which components are audited by other auditors.
• The nature of the business segments to be audited. irIcluding the need for specialized knowledge.
• The reporting currency to be used, including any need for currency translation for the financial information
audited.
• The need for a statutory audit of standalone fina ncial statements in addition to an audit for consolidation
purposes.
The availability of the work of internal auditors and th(?. extent of the auditor's potential reliance on such work.
The entity's use of service organizations and how the auditor may obtain evidence concerning the design or
operation of controls performed by them.
The expected use of audit evidence obtained in p revious audits, for example. audit evidence related to risk
assessment procedures and tests of controls.
The effect of information technology on the audit prc>cedures, including the availability of data and the expected
use of computer-assisted audit techniques.
The coordination of the expected coverage and tirrling of the audit work with any reviews of interim financial
information and the effect on the audit of the informat ion obtained during such reviews.
The availability of client personnel and data.
Reporting Objectives, Timing of the Audit, and Nature of Communications
The entity's timetable for reporting, such as at interim and final stages.
The organization of meetings with management and those charged with governance to discuss the nature, timing
and extent of the audit work.
The discussion with management and those chargecI with governance regarding the expected type and timing of
reports to be issued and other communications, both written and oral, including the auditor's report, management
letters and communications to those charged with go rernance.
The discussion with management regarding the exp€:cted communications on the status of audit work throughout
the engagement.
Communication with auditors of components regardir)g the expected types and timing of reports to be issued and
other communications in connection with the audit of components.
p A n.
•
REO CPA REVIEW
REAL EXCELLENCE ONLINE
RAYMUND FRANCIS A. ESCALA, CPA, MBA
AUDIT PLANNING
The expected nature and timing of communications among engagement team members, including the nature and
timing of team meetings and timing of the review of work performed.
• Whether there are any other expected communications with third parties, including any statutory or contractual
reporting responsibilities arising from the audit.
Significant Factors, Preliminary Engagement Activities, and Knowledge Gained on Other Engagements
The determination of appropriate materiality levels. including,
1. Setting materiality for planning purposes.
2. Setting and communicating materiality for auditors of components.
3. Reconsidering materiality as audit procedures are performed during the course of the audit.
4. Preliminary identification of material components and account balances.
• Preliminary identification of areas where there may be a higher risk of material misstatement.
The impact of the assessed risk of material misstatement at the overall financial statement level on direction,
supervision and review.
The manner in which the auditor emphasizes to engagement team members the need to maintain a questioning
mind and to exercise professional skepticism in gathering and evaluating audit evidence.
• Results of previous audits that involved evaluating the operating effectiveness of internal control, including the
nature of identified weaknesses and action taken to address them.
The discussion of matters that may affect the audit with firm personnel responsible for performing other services
to the entity.
Evidence of management's commitment to the design, implementation and maintenance of sound internal control,
including evidence of appropriate documentation of such internal control.
• Volume of transactions, which may determine whether it is more efficient for the auditor to rely on internal control.
• Importance attached to internal control throughout the entity to the successful operation of the business.
> Significant business developments affecting the entity, including changes in information technology and business
processes, changes in key management, and acquisitions, mergers and divestments.
Significant industry developments such as changes in industry regulations and new reporting requirements.
Significant changes in the financial reporting framework, such as changes in accounting standards.
• Other significant relevant developments, such as changes in the legal environment affecting the entity.
Nature, Timing and Extent of Resources
The selection of the engagement team (including, where necessary, the engagement quality control reviewer) and
the assignment of audit work to the team members, including the assignment of appropriately experienced team
members to areas where there may be higher risks of material misstatement.
Engagement budgeting, including considering the appropriate amount of time to set aside for areas where there
may be higher risks of material misstatement.
Important note:
• When establishing the overall audit strategy, the auditor aims to create a strategy or approach that will result to an
effective and efficient audit. Thus, appropriate levels of materiality and audit risk must be considered carefully.
p A m.
•
REO CPA REVIEW
REAL EXCELLENCE ONLINE
RAYMUND FRANCIS A. ESCALA, CPA, MBA
AUDIT PLANNING
The nature, timing, and extent of audit procedures required to implement the overall audit plan: and
• A time budget in which hours are budgeted for the various audit areas or procedures.
The audit program shall serve as a:
✓ Set of instructions to assistants involved in the audit; and
✓ Means to control and record the proper execution of the work
Communication during planning phase
The auditor may decide to discuss elements of planning with the entity's management to facilitate the conduct and
management of the audit engagement (for example, to coordinate some of the planned audit procedures with the
work of the entity's personnel).
pAm. 3.
REO CPA REVIEW
REAL EXCELLENCE ONLINE
Considerations specific to smaller entities
RAYMUND FRANCIS A. ESCALA, CPA, MBA
AUDIT PLANNING
F Am
IRE° CPA REVIEW
REAL EXCELLENCE ONLINE
RAYMUND FRANCIS A. ESCALA, CPA, MBA
AUDIT PLANNING
14. Audit procedures may be classified as risk assessment procedures and further audit procedures. Which of the
following best describes risk assessment procedures?
A. These procedures test the operating effectiveness of controls in preventing, or detecting and correcting, material
misstatements at the assertion level.
B. These procedures are used detect material misstatements at the assertion level.
C. These are procedures for obtaining an understanding of the entity and its environment, including its internal
control, to assess the risks of material misstatement at the financial statement and assertion levels.
D. These procedures include tests of details of classes of transactions, account balances, and disclosures and
analytical procedures.
15. The audit plan generally is modified when
A. Results of tests of control differ from expectations.
B. An engagement letter has been signed by the auditor and the client.
C. A significant deficiency has been communicated to the audit committee of the board of directors.
D. The search for unrecorded liabilities has been performed and obtained results as had been expected during the
planning of the audit.
16. On performing risk assessment, which of the following is correct?
A Compared to the management, the auditor is required to have more knowledge of the entity's business.
B. Risk assessment procedures, by themselves, provide sufficient appropriate evidence on which to base the audit
opinion
C "Observation", as a risk assessment procedure is normally applied to records, documents and assets with
physical substance.
D. Risk assessment procedures are required on every audit engagement. even if it is a continuing audit
engagement.
17. An auditor is required to understand (choose the exception)
A. The nature of the entity. including its operations, ownership and governance
B. The measurement and review of the entity's financial performance
C. All the controls established by the entity
D. Entity's selection and application of accounting policies, including reasons for changes thereto
18. The primary purpose for obtaining and understanding of an entity's internal control is to
A. Determine the nature, timing and extent of tests to be performed in the audit.
B. Obtain sufficient appropriate audit evidence from which to draw conclusion as a basis for forming an opinion on
the financial statements.
C. Test whether controls are suitable designed, implemented and operating effectively.
D. Determine whether to accept or reject an audit engagement.
19. In assessing risk of material misstatement. an auditor is required to perform
A. Confirmation C. Inquiry of the entity's legal counsel
B. Inspection D. Recalculation
20. Which of the following is least likely to be considered a risk assessment procedure?
A. Analytical procedures.
B. Confirmation of ending accounts receivable.
C. Inspection of documents.
D. Observation of the performance of certain accounting procedures.
18. In connection with the planning phase of an audit engagement, which of the following statements is always correct?
A. Final staffing decisions must be made prior to completion of the planning stage.
B. Observation of inventory count should be performed at year-end.
C. A portion of the audit of a continuing audit client can be performed at interim dates.
D. An engagement should not be accepted after the client's financial year-end
19. A retailing entity uses the Internet to execute and record its purchase transactions. The entity's auditor recognizes that
the documentation of details of transactions will be retained for only a short period of time. To compensate for this
limitation, the auditor most likely would:
A. Compare a sample of paid vendors invoices to the receiving records at year-end.
B. Plan for a large measure of tolerable misstatement in substantive tests.
C. Perform tests several times during the year. rather than only at year-end.
D. Increase the sample of transactions to be selected for cutoff tests.
20. The auditor should plan the nature, timing and extent of direction and supervision of engagement team members and
review their work. Which of the following statements is incorrect regarding direction, supervision and review?
A. The auditor plans the nature, timing, and extent of direction and supervision of engagement team members based
on the assessed risk of material misstatement.
B. As the assessed risk of material misstatement increases, for the area of audit risk, the auditor ordinarily increases
the extent and timeliness of direction and supervision of engagement team members.
C. As the assessed risk of material misstatement decreases, for the area of audit risk, the auditor performs a more
detailed review of their work.
D. The auditor plans the nature, timing and extent of the review of the team's work based on the capabilities and
competence of the individual team members performing the audit work.
"Success isn't always about greatness. It's about consistency. Consistent hard work leads to success.
Greatness will come." — DWAYNE JOHNSON