It is important to for contractors to understand that such understandings will typically go far beyond mere inquiry. In fact, audit guidance warns auditors in bold lettering: "Note - Inquiry alone is not sufficient to obtain an understanding of the contractor's internal control systems."
What audit techniques besides "inquiry" might a contractor expect. Here are a few:
- Observing the application of specific controls
- Inspecting documents and reports
- Performing walk-throughs of the system. Walk-throughs typically include tracing transactions trough the various processing steps.
At this stage of the audit (pre-risk assessment stage), these inquiries, observations, inspections and walk-throughs will not be detailed or comprehensive. Those steps will come later. The auditor is also going to be assessing the level of segregation of duties for each of the key accounting processes/functions. Depending upon the size of the company, the lack of segregation of duties could be a fraud indicator which simply means that the audit risks are increased and the level of testing will increase correspondingly.
No comments:
Post a Comment