内部控制和审计风险(英文版)

《内部控制和审计风险(英文版)》由会员分享，可在线阅读，更多相关《内部控制和审计风险(英文版)（18页珍藏版）》请在装配图网上搜索。

1、n更多企业学院：中小企业管理全能版183套讲座+89700份资料总经理、高层管理49套讲座+16388份资料中层管理学院46套讲座+6020份资料国学智慧、易经46套讲座人力资源学院56套讲座+27123份资料各阶段员工培训学院77套讲座+ 324份资料员工管理企业学院67套讲座+ 8720份资料工厂生产管理学院52套讲座+ 13920份资料财务管理学院53套讲座+ 17945份资料销售经理学院56套讲座+ 14350份资料销售人员培训学院72套讲座+ 4879份资料部控制与审计风险英Chapter 1 General provisionsArticle 1This standard is p

2、repared in accordance with the General Independent Auditing Standard to establish standards for Certified Public Accountants on the study and evaluation of an entitys internal controls in the audit of financial statements, to assess audit risk, to improve audit efficiency and to ensure a high standa

3、rd of professional work.Article 2The term internal controls in this standard refers to the policies and procedures formulated and implemented by an entity with a view to ensuring the efficient conduct of the business activities, safeguarding assets, preventing, detecting and correcting error and fra

4、ud, and ensuring the truthfulness, legitimacy and completeness of accounting information.Internal controls include the control environment, accounting systems and control procedures.Article 3The term audit risk in this standard refers to the possibility of the CPA expressing an inappropriate audit o

5、pinion after performing an audit, when the financial statements contain material misstatements or omissions. Audit risk includes inherent risk, control risk and detection risk.Article 4Unless otherwise specified, CPAs should refer to this standard in performing audit work other than the audit of fin

6、ancial statements.Chapter 2 General principlesArticle 5When preparing the audit plan, the CPA should study and evaluate the entitys internal controls.Article 6The CPA should perform compliance tests on any internal controls, which are intended to be relied upon, to determine the impact on the nature

7、, timing and extent of the substantive tests.Article 7The CPA should maintain professional scepticism, apply professional judgement reasonably to assess the audit risk and to design and perform relevant audit procedures in order to reduce the audit risk to an acceptable level.Article 8The CPA should

8、 document the work carried out and the results of the study and evaluation of the internal controls and the assessment of the audit risk in the audit working papers.Chapter 3 Internal controlsArticle 9It is the accounting responsibility of the entitys management to establish sound internal controls.

9、 The relevant internal controls should generally： ensure that business activities are conducted in accordance with appropriate authorization; ensure that all transactions and events are promptly recorded at the correct amount, in the appropriate accounts and in the proper accounting period, to enabl

10、e preparation of financial statements in accordance with the relevant requirements of the accounting standards; ensure that access to and handling of assets and records are permitted only in accordance with appropriate authorization; and ensure that assets recorded are reconciled with the physical a

11、ssets at regular intervals.Article 10When determining the reliability of internal controls, the CPA should maintain professional scepticism and pay adequate attention to the following inherent limitations of internal controls： The design and implementation of internal controls are restricted by the

12、principle of cost and benefit; Internal controls tend to be directed at routine business activities; Even perfectly designed internal controls may not operate effectively due to human carelessness, distraction, mis-judgement and the misunderstanding of instructions; Internal controls may be circumve

13、nted through the collusion by relevant persons with parties inside or outside the entity; Internal controls may be circumvented when a person responsible for exercising an internal control abuses that responsibility or submits to external pressure; and Internal controls may deteriorate or become ine

14、ffective due to changes in the operating environment and the nature of the business.Article 11When preparing the audit plan, the CPA should understand the design and operating conditions of the entitys internal controls.When determining the nature, timing and extent of the audit procedures which sho

15、uld be performed to understand the internal controls, the CPA should mainly consider the following factors： the size and business complexity of the entity; the type and complexity of the entitys data processing system; audit materiality; the type of relevant internal controls; the documentation of r

16、elevant internal controls; and the result of the assessment of inherent risk.Article 12In understanding the internal controls, the CPA should make reasonable use of previous audit experience. With regard to significant internal controls, generally the CPA may also perform the following procedures： m

17、ake enquiries of the entitys relevant persons and inspect the relevant internal control documentation; inspect the documents and records generated by the internal controls; observe the entitys business activities and the operating conditions of the internal controls; and choose certain typical trans

18、actions and events and perform walkthrough tests on them.Article 13The CPA should obtain and understanding of the control environment sufficient to assess the attitudes, awareness and actions of the entitys management regarding internal controls and their importance.Major factors affecting the contr

19、ol environment include： philosophy, methods and style of management; organisational structure and methods of assigning authority and responsibility; and the control system.Article 14The CPA should obtain an understanding of the accounting system sufficient to identify and understand： the major class

20、es of transactions and activities of the entity; how major classes of transactions and activities are initiated; significant supporting documents, accounting records and items in the financial statements; and the accounting and financial reporting process for significant transactions and events.Arti

21、cle 15The CPA should obtain an understanding of the following major control procedures sufficient to determine the relevant audit procedures reasonably： the authorisation of transactions; the assignment of responsibility; the control of supporting documents and records; access to assets and use of r

22、ecords; and any independent checking.Article 16Internal audit is an important component of the entitys control system. The CPA should consider the following factors when studying and evaluating the quality of the internal audit work to determine whether to rely on the results of the internal audit w

23、ork： the independence of the internal auditors; the experience and competence of the internal auditors; the nature, timing and extent of the internal audit procedures; the sufficiency and appropriateness of the audit evidence obtained by the internal auditors; and the merit placed on the internal au

24、dit work by the management.Article 17The CPA may use various methods such as narrative descriptions, questionnaires, check lists, flow charts etc. to understand and evaluate internal controls and should include them in the audit working papers.Article 18The CPA should inform the entitys management o

25、f material internal control weaknesses identified during the audit. If necessary, a management letter may be issued.Chapter 4 Audit riskArticle 19In developing the overall audit plan, the CPA should assess inherent risk at the financial statement level. Inherent risk refers to the susceptibility of

26、an account balance, or class of transactions, to material misstatements or omissions, either individually or when aggregated with misstatements or omissions in other account balances or classes of transactions, assuming that there were no relevant internal controls.Article 20In developing the detail

27、ed audit plan, the CPA should consider the impact of the assessment of inherent risk on the material account balances or classes of transactions at the assertion level, or directly assume that inherent risk is high for the assertion.Article 21The CPA should exercise professional judgement reasonably

28、 and consider the following factors when assessing inherent risk： the integrity and competence of management; any changes in management, especially the financial staff; any unusual pressures on management; the nature of business; the circumstances and factors affecting the industry in which the enti

29、ty operates; financial statement items likely to be susceptible to misstatements; the complexity of important transactions and events which might require using the work of an expert; the degree of estimation and judgement involved in determining account balances; the susceptibility of assets to loss

30、 or misappropriation; the occurrence of unusual or complex transactions during the accounting period, particularly near the accounting period end; and the susceptibility of transactions and events to omissions in the routine accounting process.Article 22After understanding the internal controls and

31、assessing inherent risk, the CPA should make a preliminary assessment of control risk, at the assertion level, for each material account balance or class of transactions. Control risk refers to the possibility that a misstatement or omission that could occur in an account balance or class of transac

32、tions, either individually or when aggregated with misstatements or omissions in other account balances or classes of transactions, will not be prevented, detected or corrected by the internal controls.Article 23The CPA should assess the control risk of material account balances or classes of transa

33、ctions at a high level, for some or all assertions, when one or more of the following situations occurs： the entitys internal controls are not effective; it is difficult for the CPA to assess the effectiveness of internal controls; or the CPA does not plan to perform compliance tests.Article 24When

34、making a preliminary assessment of control risk for a financial statement assertion, the CPA should not assess the control risk at a high level when： relevant internal controls are likely to prevent, detect or correct material misstatements or omissions; and the CPA plans to perform compliance tests

35、.Article 25if the CPA plans to rely on the internal controls, he should perform compliance procedures to assess the control risk. The lower the preliminary assessment of control risk, the more evidence the CPA should obtain to show that internal controls are suitably designed and operating effective

36、ly.Article 26The CPA may perform the following compliance procedures： inspection of documents supporting transactions and events; enquiries about, and observation of, internal control operations which leave no audit trail; and reperformance of relevant internal control procedures.Article 27When one

37、or more of the following situations occurs, the CPA may directly perform substantive procedures without performing compliance tests： the relevant internal controls do not exist; even though the relevant internal controls exist, the CPA, through preliminary study, discovers that the internal controls

38、 do not operate effectively; or compliance tests require more work than the reduction of substantive tests that would have been achieved by performing compliance tests.Article 28Based on the results of the compliance tests, the CPA should assess whether the design and operation of the internal contr

39、ols are in line with the conclusion drawn from the preliminary assessment of control risk. If there are discrepancies, the assessed level of control risk should be revised and the nature, timing and extent of substantive procedures should be modified accordingly.Article 29In a continuing engagement,

40、 the CPA may make use of the information relating to the study and evaluation of internal controls obtained in prior periods, but will need to update it.Article 30The CPA should understand whether the internal controls were applied consistently throughout the accounting period being audited. If ther

41、e were obvious changes, the CPA should consider testing them separately.Article 31If compliance tests have been performed in the interim audit, the CPA, before deciding to rely entirely on their results, should consider the following factors to obtain further audit evidence for the period between in

42、terim period end and final period end： the conclusion drawn from the compliance tests in the interim audit; the length of the remaining period after the interim audit; any changes in internal controls after the interim audit; the nature and amount of the transactions and activities which occurred af

43、ter the interim audit; and the substantive procedures to be performed.Article 32Before concluding the audit, the CPA should, based on the results of substantive tests and other audit evidence, make a final assessment of the control risk and check whether it is in line with the conclusion drawn from

44、the preliminary assessment of the risk. If not, the CPA should consider whether additional relevant audit procedures should be performed.Article 33As control risk and inherent risk are related, the CPA should make an overall assessment of inherent risk and control risk, and use the result as the bas

45、is for the assessment of detection risk.Detection risk refers to the possibility that substantive tests will not detect a misstatement or omission that exists in an account balance or class of transactions that could be material, either individually or when aggregated with misstatements or omissions

46、 in other account balances or classes of transactions.The assessment of inherent risk and control risk has a direct impact on the assessment of detection risk. For higher levels of inherent risk and control risk, the CPA should perform more detailed substantive procedures and should also consider th

47、eir nature, timing and extent to reduce the detection risk to an acceptable level.Article 34Regardless of the result of the assessment of inherent risk and control risk, the CPA should perform substantive tests on all material account balances or classes of transactions.Article 35If, after performin

48、g relevant audit procedures, the CPA still believes that detection risk regarding an assertion for a material account balance or class of transactions cannot be reduced to an acceptable level, the CPA should express a qualified opinion or a disclaimer of opinion.Article 36The internal controls in sm

49、all businesses are usually weaker, resulting in higher inherent risk and control risk. The CPA should heavily or entirely rely on substantive procedures to obtain audit evidence in order to reduce the detection risk to an acceptable level.Chapter 5 Supplementary provisionsArticle 37The Chinese Institute of Certified Public Accountants is responsible for the interpretation of this standard.Article 38This standard takes effect from 1 January 1997.18 / 18