1、第八章 審計過程風(fēng)險評價過程 “After Equity Funding and the Cohen Commission, the professionrebuffed societys calls for heightened fraud detection responsibilities,but its different this time. We are in a new era where auditors need tobe more responsible for detecting fraud.Paraphrased from comments by Greg Scates

2、,Associate Chief Auditor,PCAOB Symposium, December 9, 2004.第八章 目錄1、風(fēng)險根底審計概述 2、簽約風(fēng)險管理 3、審計風(fēng)險管理.風(fēng)險根底審計概述 風(fēng)險根底審計的意義 運營風(fēng)險根底審計的根本特征 風(fēng)險的本質(zhì) 運營風(fēng)險根底審計的根本流程.財務(wù)報表審計的目的和普通原那么第十三條 注冊會計師按照審計準(zhǔn)那么的規(guī)定執(zhí)行審計任務(wù)，可以對財務(wù)報表整體不存在艱苦錯報獲取合理保證。第十四條 由于審計中存在的固有限制影響注冊會計師發(fā)現(xiàn)艱苦錯報的才干，注冊會計師不能對財務(wù)報表整體不存在艱苦錯報獲取絕對保證。.合理保證的意義緣由：人的有限認(rèn)知才干和審計的固有局

3、限性意味：社會所要求程度的保證等式：合理保證%=絕對保證100% 審計風(fēng)險%.風(fēng)險根底審計方式風(fēng)險根底審計方式就是審計人將審計風(fēng)險降至可接受的低程度，使得為審計意見提供合理根底的“合理程度堅持在高程度之上的審計方式。 .Business risk-based auditing根本思緒：艱苦財務(wù)報表錯報的根源在于被審計企業(yè)的運營風(fēng)險根本概念：審計是一個證據(jù)構(gòu)成、基于判別的風(fēng)險評價過程Ernst & Young：“全球?qū)徲嫹椒℅lobal Audit Methodology：GAM審計方式KPMG：“運營評價過程Business Measurement Process：BMP .根本特征多方位的風(fēng)

4、險概念多元化的信息源自上而下方式注重分析運營風(fēng)險的影響.Four critical components of risk 企業(yè)風(fēng)險Enterprise risk 影響企業(yè)實現(xiàn)其戰(zhàn)略目的的不確定性。 財務(wù)報告風(fēng)險Financial reporting risk與記錄買賣以及財務(wù)報表披露直接相關(guān)的風(fēng)險。 簽約風(fēng)險Engagement risk與某個特定的客戶簽署審計業(yè)務(wù)商定而帶來的風(fēng)險。 審計風(fēng)險(Audit risk) 審計人在實施審計時沒能發(fā)現(xiàn)財務(wù)報表存在艱苦錯報，結(jié)果發(fā)表了錯誤審計意見的風(fēng)險。.證據(jù)構(gòu)架工具軟件工具software tools核對表checklist模板templet產(chǎn)業(yè)和經(jīng)

5、濟(jì)統(tǒng)計等大型數(shù)據(jù)庫其他信息源.Top-down approach合伙人或者工程經(jīng)理參與以審計方案過程為中心的整個審計業(yè)務(wù)對高層次控制的評價，比如，直接與運營者討論企業(yè)的風(fēng)險管理問題.例子現(xiàn)實中的運營風(fēng)險對企業(yè)繼續(xù)才干的影響.圖表9-1 根本流程 初步評價艱苦錯報風(fēng)險把握有關(guān)財務(wù)報表整體的艱苦錯報風(fēng)險發(fā)現(xiàn)要特別對待的風(fēng)險審計方案編制根據(jù)剩余風(fēng)險的大小確定審計重點和審計程序執(zhí)行審計程序針對要特別對待風(fēng)險的審計程序采取措施：添加助理人員、配置專家、保證審計時間等發(fā)現(xiàn)要特別對待風(fēng)險了解企業(yè)和企業(yè)環(huán)境內(nèi)部控制、運營風(fēng)險財務(wù)報表工程財務(wù)報表整體修正審計方案.Risk-based approach to a

6、uditing了解客戶的風(fēng)險管理過程了解客戶的運營業(yè)務(wù)及其面臨的風(fēng)險根據(jù)所識別的風(fēng)險估計賬戶余額和財務(wù)結(jié)果；評價風(fēng)險管理中內(nèi)部控制的質(zhì)量；確定剩余風(fēng)險，更新對賬戶余額的估計；經(jīng)過實施必要的賬戶余額直接測試以管理賬戶余額錯報風(fēng)險。.COSO defines ERM as a 一個由一個單位的董事會、運營者和其他成員實施的，運用于戰(zhàn)略制定并貫穿于整個企業(yè)、旨在識別能夠影響該單位的潛在事項，管理風(fēng)險使其控制在風(fēng)險容量之內(nèi)，并為單位目的的實現(xiàn)提供合理保證的過程 。 .Understanding ERM Process -1了解客戶的風(fēng)險評價過程復(fù)核內(nèi)部審計所運用的風(fēng)險根底審計方法與運營者討論他們的風(fēng)險

7、管理方式.復(fù)核企業(yè)的報酬政策以察看其能否符合企業(yè)的風(fēng)險政策復(fù)核風(fēng)險管理的文件等Understanding ERM Process-2 .If The company has strong risk management processes ，the auditor may focus on testing controls and developing corroborative evidence on account balances.If The company does not have a comprehensive risk process, the auditor will ass

8、ess engagement risk as high, set audit risk at a lower level, and increase direct testing.Key Business Processes 關(guān)鍵性業(yè)務(wù)影響關(guān)鍵性業(yè)務(wù)的行業(yè)要素運營者管理這些關(guān)鍵性業(yè)務(wù)的方式關(guān)鍵性業(yè)務(wù)能夠產(chǎn)生的運營效果和財務(wù)效果.Business Risk因企業(yè)的內(nèi)部要素和影響企業(yè)活動的不確定的外部要素對企業(yè)的開展和運營成果以及繼續(xù)運營呵斥的危險。根本相等地影響一切企業(yè)的宏觀層次的風(fēng)險。只影響某個行業(yè)或某個企業(yè)的微觀層次的風(fēng)險。.Business Risk前者如經(jīng)濟(jì)不景氣、通貨膨脹、高利率、戰(zhàn)爭

9、、石油價錢的高漲、政局不穩(wěn)、技術(shù)革新、經(jīng)濟(jì)封鎖等；后者如原資料價錢的上漲、周轉(zhuǎn)資金缺乏、罷工、消費動向的變化、訴訟、政府控制、債務(wù)保證、或有損失、合同不履行、子公司或聯(lián)營企業(yè)的運營惡化、被投資企業(yè)收益下降、購貨企業(yè)或者供貨企業(yè)的破產(chǎn)等。.Sources of Information智能代理Intelligent agents知識管理系統(tǒng)Knowledge management systems在線搜索Online searches電子數(shù)據(jù)搜集及檢索系統(tǒng)Electronic research- Electronic data gathering and retrieval system：EDGAR

10、 經(jīng)濟(jì)統(tǒng)計Economic statistics專業(yè)手冊Professional practice bulletins股票分析報告Stock analysts reports等.Sources of Information 審計人還可以經(jīng)過與運營者和前任審計人溝通、閱讀前期審計任務(wù)底稿和客戶的預(yù)算、視察消費車間和業(yè)務(wù)部門、復(fù)核數(shù)據(jù)處理中心、閱讀重要的債務(wù)條款和董事會記錄、確認(rèn)政府的相關(guān)法律以及客戶的有關(guān)法律責(zé)任獲得關(guān)鍵性業(yè)務(wù)的信息。.Developing ExpectationsThe auditor should use information about the companys key

11、processes and risks to develop expectations about its account balances and performance These expectations are compared to recorded book values to identify misstatements.Sources of data commonly used Financial information for prior periodsExpected or planned results from budgets and forecastsComparis

12、on of linked accounts (such as interest expense and debt)Ratios of financial information (such as common-size financial statements)Company and industry trendsRelevant non-financial information .These expectations should beDeveloped independently of managementDocumented, along with a rationale for th

13、e expectationsCommunicated to all audit team members.Techniques commonly used Trend analysisComparative financial statements (horizontal analysis)Common-sized financial statements (vertical analysis)Ratio analysis.What are thepurposes of preliminary analyticalprocedures?- understanding the clients i

14、ndustry- assessing going concern issues- indicating possible misstatements- reducing detailed tests.Examples of key performance indicators Backlog of work in progressAmount of return itemsIncreased disputes regarding accounts receivable or accounts payableSurveys of customer satisfactionEmployee abs

15、enteeismDecreased productivityInformation processing errorsIncreased delays in important processes .Residual risk The remaining risk after management has taken action to alter the risks likelihood or impact.Linkage to direct tests of account balances If the auditor concludes there is a high risk of

16、material misstatement auditor mustSet materiality at an appropriate levelUse procedures appropriate for the level risk to examine the account balance.The auditor is required to assess the appropriateness of the accounting methods used by managementGuidelines to evaluate appropriateness include:Repre

17、sentational faithfulness - does the accounting reflect the economic substance of the transactionsConsistency of application of GAAPAccounting estimates - based on proven models, reconciled to actual results, based on valid economic reasons? Quality of accounting principles used .Managing Detection &

18、 Audit Risk Adjusting audit staff to reflect risk associated with a clientDeveloping direct tests of account balances consistent with detection riskAnticipating potential misstatements likely associated with account balancesAdjusting the timing of audit tests to minimize overall audit risk.簽約風(fēng)險管理簽約風(fēng)

19、險管理的意義簽約風(fēng)險管理中對客戶的思索簽約風(fēng)險管理所需信息的獲得簽約風(fēng)險管理中對本身要素的思索.審計業(yè)務(wù)商定書What is an engagement letter?Executory contract between the auditor and clientWhy is it necessary?To document terms of the audit and minimize misunderstandings.Do you know a lawsuit case?The letter is written by the auditor to the client, then s

20、igned by both. When should the letter be signed?Before or after the predecessor/successor auditor communication?Before or after the audit procedures?Must an engagement letter be in a written form?.1 Tenants corporation vs. Rothenberg case Tenants are the ownersManaged by third party realtorCPAs main

21、tained accounting books (book keeping)Sued for failure to discover defalcations of management Confusion between the role of CPA and AuditorLessonsCPAs are supposed to audit the financial statements (Expectation Gap) Engagement letterAlert for any sign of defalcationReport any sign of fraud to owners

22、, regardless of services rendered.1 Tenants Corporation CPA firmA realtor (president: Rothenburg)Only book keepingNo Audit serviceRothenburg stole $130,000. The auditor did not report the Rothenbergs fraud to the managements of 1 Tenants CorpororationCompilation fee: $600Courts judgment: pay $230,00

23、0 to the 1 Tenants Corp.Managed byHiredOral agreement.LessonsCPAs are supposed to audit the financial statements (Expectation Gap) Engagement letterAlert for any sign of defalcationReport any sign of fraud to owners, regardless of services rendered.Engagement Risk 簽約風(fēng)險管理是最重要的審計決策之一。被審計企業(yè)運營失敗或者其財務(wù)報表中

24、存在審計人無法發(fā)現(xiàn)的艱苦錯報，往往引發(fā)審計訴訟。簽約風(fēng)險管理的目的是排除高風(fēng)險客戶，從源頭控制審計風(fēng)險。.綜合思索 一切的審計都不能夠提供100%的保證； 審計人是在猛烈競爭的市場中競爭客戶； 審計人有義務(wù)滿足社會對財務(wù)報告以及審計的期望； 審計人應(yīng)該開展審計方法面對高風(fēng)險； 審計人可以堅持高度的職業(yè)疑心心去發(fā)現(xiàn)重要的錯報。.Factors AffectQuality of the clients corporate governanceClients financial healthClients economic prospects.Corporate Governance企業(yè)外部的一切者

25、和債務(wù)人等對企業(yè)實施控制并要求企業(yè)履行經(jīng)管責(zé)任的過程。公司治理的質(zhì)量反映了運營者履行經(jīng)管責(zé)任的質(zhì)量和財務(wù)報告的質(zhì)量。.The key factors an auditor will analyze 運營者的老實性董事會和審計委員會的獨立性及才干ERM以及內(nèi)部控制的質(zhì)量法律和報告要求的遵守主要利害關(guān)系者參與企業(yè)運營的程度關(guān)聯(lián)方買賣.Why the financial health審計之后被審計企業(yè)懇求破產(chǎn)添加審計人被起訴的能夠性審計人需求經(jīng)過評價了解：運營者能否具有制造財務(wù)報表錯報的動機(jī)識別能夠錯報的領(lǐng)域識別不正常的賬戶余額.Economic Prospects High-risk compan

26、ies are generally characterized by 營運資本缺乏；缺乏長期戰(zhàn)略和運營方案；市場進(jìn)入本錢低；依賴于有限的產(chǎn)品提供；依賴于將要過時的技術(shù)；未來的現(xiàn)金流量不穩(wěn)定；有不恰當(dāng)會計處置的歷史；遭到過外部監(jiān)管機(jī)構(gòu)的調(diào)查。.簽約管理信息前后任審計人的溝通向其他人員訊問 Any communications between the predecessor and management or audit committee regarding fraud, illegal acts or internal control matte .Why?To identify client

27、s reasons for an audit Competency of the prior auditor Hunting for opinion Prior CPA left the client because of illegal acts. Support beginning balances What if not sure about the beginning balance?Communicate with Predecessor Auditors.Procedures of predecessor and successor auditor communicationthe

28、 successor is required to initiate the communicationthe client must give permission for the communication What if a client does not give permission? Are the predecessor required to respond? What if a predecessor auditor does not respond?.Audit CommitteeAudit committee is responsible for appointment,

29、 compensation and oversight of auditorsArrangements for the audit should be made through contact with the companys audit committeeRequired by NYSE and NASDAQConsists of at least 3 independent (outside) directorsAudit committee members should not receive any consulting, advisory or other compensatory

30、 fees from the companyAudit committee members should be financially literate.Are we independent?Are we technically competent?Is client reputable? client lacking integrity- financially unstable client client unable to pay audit fees- Why do they want us?What would be the major question in client acce

31、ptance? Whatpotentialclient might theauditor turndown?.- training and overall experience- industry and client experience- supervision- need for specialistsAre we technically competent?.Components of Engagement LetterName of the clientstatements to be auditedscope of the services including any limita

32、tionsthe auditors responsibility for detecting fraudobligation of the clients staff in preparing schedules and statementsfees or method of determining feeprovisions for clients acceptance signature and date The more specific, the better .審計風(fēng)險管理審計風(fēng)險概述審計重要性審計風(fēng)險評價和控制.審計風(fēng)險概述審計風(fēng)險的概念 審計風(fēng)險的要素審計風(fēng)險的實際模型 審計風(fēng)險

33、模型的界限 .What is audit risk? Audit risk is the risk that an auditor may issue an unqualified opinion on materially misstated financial statements.審計風(fēng)險的要素 固有風(fēng)險 控制風(fēng)險 環(huán)境風(fēng)險 檢查風(fēng)險.Inherent Risk財務(wù)報表工程受會計偏向、如錯誤或舞弊影響的能夠性，指假定被審計企業(yè)不存在相關(guān)內(nèi)部控制政策或程序的情況下，某一賬戶或買賣類別產(chǎn)生艱苦錯報的能夠性。 some accounts, components, cycles are inhe

34、rently riskier than others.Control RiskThe risk that material misstatements will not be prevented or detected by internal controls.控制風(fēng)險的特點控制風(fēng)險程度與被審計企業(yè)的內(nèi)部控制程度有關(guān)。控制風(fēng)險不能夠為零。不同買賣循環(huán)的控制風(fēng)險的程度能夠不同。.Sampling riskauditor samples Non-sampling riskauditors may select ineffective audit proceduresauditors may app

35、ly procedures ineffectivelyauditors may incorrectly evaluate the results of proceduresDetection Risk a risk that material misstatements will not be detected by the audit procedures.抽樣風(fēng)險抽樣風(fēng)險是審計人根據(jù)抽樣結(jié)果得出的結(jié)論與審計對象總體特征不相符合的能夠性，原因于抽樣的不確定性，與樣本不能代表總體有關(guān)。 .非抽樣風(fēng)險非抽樣風(fēng)險是指審計人因采用不恰當(dāng)?shù)膶徲嫵绦蚧蚍椒ǎ蛞蛘`解審計證據(jù)等而未能發(fā)現(xiàn)艱苦誤差的能夠性，

36、原因于證據(jù)評價錯誤等察看上的問題。.Non-Sampling Risk is the Primary Culprit 2003年SEC公布的SOX704條報告分析審計失敗的緣由后指出對非經(jīng)常性事項、期末買賣或者關(guān)聯(lián)方買賣未能堅持應(yīng)有的職業(yè)疑心心professional skepticism，沒有獲得充分適當(dāng)?shù)淖C據(jù)資料支持他們關(guān)于財務(wù)報表的意見是審計人被指控的最主要緣由。.圖表8-2 SEC的審計失敗緣由分析Failure to obtain sufficient, competent evidential matter to support audit opinion（37）Failure t

37、o exercise professional skepticism on unusual, last minute, or related party transactions(30)Failure to maintain independence(19)Failure to respond adequately to red flags(16)Failure to communicate adequately with predecessor auditor6Failure to supervise assistants(4)Failure to respond adequately to

38、 internal controls deficiencies)(3)Failure to perform appropriate inventory observations(2)Failure to confirm account receivables Sufficiently(2). the greater the certainty the auditor wants to achieve98%thegreaterthe amountof auditevidenceandcoststhelowerthe audit risk2%.Audit Risk VS. Engagement R

39、isk審計風(fēng)險和簽約風(fēng)險之間存在著反向關(guān)系。假設(shè)審計人接受了具有較高簽約風(fēng)險的審計業(yè)務(wù)，審計人需求執(zhí)行相應(yīng)嚴(yán)厲的審計，為此審計人需求把審計風(fēng)險程度設(shè)置在較低的程度上。反之，假設(shè)簽約風(fēng)險比較低，那么審計人可以設(shè)置較高的審計風(fēng)險程度。.audit risk model =xxaudit riskinherent riskcontrol riskdetection riskRisk that material misstatements has occurredRisk that auditors do not detect the misstatement.檢查風(fēng)險的特點 DR =AR IR x

40、CR檢查風(fēng)險與環(huán)境風(fēng)險之間存在著反比的關(guān)系。因此，雖然審計人無法控制環(huán)境風(fēng)險，但審計人可以經(jīng)過必要的審計程序來分析和判別固有風(fēng)險程度，根據(jù)被審計企業(yè)的內(nèi)部控制的健全性和有效性情況，估計控制風(fēng)險程度，方案可接受的檢查風(fēng)險程度，使審計風(fēng)險降低到可接受的程度。檢查風(fēng)險的程度直接決議本質(zhì)性審計的嚴(yán)厲程度。檢查風(fēng)險程度越低，本質(zhì)性測試的嚴(yán)厲程度越高。 .例子 審計人關(guān)于某個特定財務(wù)報表工程所能接受的審計風(fēng)險程度為3%，并估計該財務(wù)報表工程的固有風(fēng)險為90%，當(dāng)控制風(fēng)險分別為80%和20%時： 第一種情況 第二種情況 AR: 3% 3% IR: 90% 90% CR: 80% 20% DR: 4.17%

41、16.70%.解釋第一種情況表示，要使審計風(fēng)險控制在3%以內(nèi)，必需將檢查風(fēng)險控制在4.17%以內(nèi)，也就是說，所方案的測試范圍要足夠大到至少要保證審計有效性的水準(zhǔn)到達(dá)96%。在第2種情況下，同樣的審計風(fēng)險水準(zhǔn)所必要的審計程序有效性只需到達(dá)84%即可，相對于第1種情況而言測試范圍可以大幅度地減少。.Audit Risk Model: Limitations Inherent risk is difficult to formally assessAudit risk is subjectively determinedThe model treats each risk component as

42、separate and independent when clearly, this is not the caseAudit technology is not so precise that each component can be accurately assessed.Materiality重要性的意義重要性的概念 重要性及其運用 .Audit Risk VS. Engagement Risk審計風(fēng)險和簽約風(fēng)險之間存在著反向關(guān)系。假設(shè)審計人接受了具有較高簽約風(fēng)險的審計業(yè)務(wù)，審計人需求執(zhí)行相應(yīng)嚴(yán)厲的審計，為此審計人需求把審計風(fēng)險程度設(shè)置在較低的程度上。反之，假設(shè)簽約風(fēng)險比較低，那么審

43、計人可以設(shè)置較高的審計風(fēng)險程度。. the greater the certainty the auditor wants to achieve98%thegreaterthe amountof auditevidenceandcoststhelowerthe audit risk2%.Materiality is the magnitude of omitted or misstated information that probably would have made a difference in the judgment of someone relying on that infor

44、mation (FASB 2).What ismateriality?.three significant dimensions錯報的金額：重要性的程度和金額的大小有關(guān)；對照環(huán)境：重要性的程度取決于被審計企業(yè)的運營規(guī)模和業(yè)務(wù)性質(zhì)。對信息運用者的影響：impact on potential users and the type of judgments made.$1000 - WOW!$1000.peanutsFactors affecting the preliminary judgment about materiality .Circumstances and User impact ：

45、舞弊或違法行為呵斥的錯報比同樣金額的錯誤呵斥的錯報重要；與合同條款例如債務(wù)協(xié)議中的比率有關(guān)的細(xì)小差別也能夠是重要的；單個賬戶的不重要的錯報能夠累計為重要的財務(wù)報表錯報。 Factors affecting the preliminary judgment about materiality.SEC staff accounting bulletin #99 故意的錯誤計量引起的錯報； 改動收益趨勢的錯報； 到達(dá)扭虧為贏或者相反目的的錯報； 重要分部或業(yè)務(wù)發(fā)生的錯報； 違反法規(guī)的錯報； 借以滿足債務(wù)契約的錯報； 關(guān)系到管理者報酬的錯報； 隱蔽非法買賣的錯報。.重要性及其運用確定財務(wù)報表層次的重要

46、性 確定賬戶買賣層次的重要性程度 .Set Planning Materiality for the Statements as a Whole Not required to quantify Judgmental Rules of thumbs5% to 10% of net income before tax% to 1% of total asset% to 1% of total revenue1% of total equityMultiple bases of materialityE.g., net income is not misstated by $100,000, an

47、d total assets is not misstated by $300,000.materiality VS. volume of audit evidence (Audit cost)?“Investigate mis- statements over $1.A small materialityestimate will resultin more/less evidence.A large materialityestimate will resultin more/less evidence.“Investigate misstate- ments over $1,000,00

48、0.Allocate Planning Materiality Auditors initially set planning materiality for the statements as a whole, and then allocate this to individual accounts based on their susceptibility to misstatement .性質(zhì)上的重要性判別普通應(yīng)思索的事項包括：發(fā)生舞弊或者損失的能夠性客觀判別或者人為支配的容易程度賬戶本身的性質(zhì)、如在建工程賬戶等數(shù)據(jù)計算以及記賬的復(fù)雜性買賣本身的性質(zhì)、如關(guān)聯(lián)方買賣.圖表8-3 財務(wù)報表

49、層次和賬戶買賣層次的重要性判別F/S項目金額金額重要總分類賬戶明細(xì)分類帳戶性質(zhì)重要綜合重要性B/S貨幣資金 10,000現(xiàn)金本公司A子公司銀行存款-其他貨幣資金-短期投資 1,000短期投資-跌價準(zhǔn)備-應(yīng)收票據(jù) 10,000應(yīng)收票據(jù)-應(yīng)收賬款 35,000應(yīng)收賬款國內(nèi)應(yīng)收賬款國外應(yīng)收賬款壞賬準(zhǔn)備預(yù)付賬款400預(yù)付賬款-存貨8,000產(chǎn)成品-存貨跌價準(zhǔn)備-其他流動資產(chǎn)1,500內(nèi)部往來- .Steps in Risk Assessments了解被審計企業(yè)的運營業(yè)務(wù)以及行業(yè)情況評價被審計企業(yè)所面臨的風(fēng)險及其對財務(wù)報表的影響初步評價被審計企業(yè)的財務(wù)報告內(nèi)部控制.to identify related parties