1. Modern Auditing: Assurance Services and the Integrity of Financial Reporting, 8 th Edition Modern Auditing: Assurance Services and the Integrity of Financial Reporting, 8 th Edition William C. Boynton California Polytechnic State University at San Luis Obispo Raymond N. Johnson Portland State University Chapter 9 – Audit Risk, Including the Risk of Fraud

2. Chapter 9 Overview

3. Audit Risk – An Overview Concept of Audit Risk – Inverse of reasonable assurance – If 99% certainty is desired, the audit risk is 1% Professional Judgment and Audit Risk – Usually audit firm policy – Comparable from one audit to another

4. Fraud Defined Acts Resulting in Material Misstatements – Fraud or Error – Intentional or Unintentional 2 Types of Misstatements Relevant to Fraud – Fraudulent Financial Reporting – Misappropriation of Assets

5. The Fraud Triangle

6. Fraudulent Financial Reporting Incentives and Pressures Opportunity Attitudes and Rationalization

7. Misappropriation of Assets Incentives and Pressures Opportunity Rationalization

8. Auditing for Fraud Risk Assessment Procedures Brainstorming Session Specific Risks

9. Risk Assessment Procedures Inquiries of Management Consider Unusual or Unexpected Relationships Consider Other Information

10. Brainstorming Session Allow junior members to benefit from senior members Allow more seasoned personnel a fresh set of eyes Allows audit management to set the appropriate tone for the audit Emphasize possibility of fraud existing in any audit

11. Specific Risks Improper Revenue Recognition Management Override of Internal Controls

12. Study Break 1. Audit risk is set according to: A.AICPA guidelines B.Audit firm policy C.SEC regulations D.GAAS B. Audit firm policy

13. Study Break 2. Which of the following is not a component of the fraud triangle? A.Adequate training B.Opportunity C.Rationalization D.Incentives A. Adequate training

14. Study Break 3. All of the following are objectives of a brainstorming session except: A.Allow management to set the tone B.Allow for junior members to benefit from senior members C.Allow for a fresh outlook on situation D.Allow for identification of actual occurrences of fraud

15. Audit Risk Model 3 Components of Audit Risk – Inherent Risk – Control Risk – Detection Risk Illustrating the Model – AR = IR x CR x DR Expanded Audit Risk Model – AR = IR x CR x AP x TD

16. Risk Components Matrix

17. Assessing the Components of Audit Risk Inherent Risk Control Risk Detection Risk

18. Inherent Risk Inherent Risk Defined Assessing Inherent Risk Identifying Significant Inherent Risks

19. Control Risk Control Risk Defined Assessing Control Risk – Planned assessed level of control risk – Actual assessed level of control risk

20. Detection Risk Detection Risk Defined Assessing Detection Risk – Planned acceptable level of detection risk

21. Interrelationships among Materiality, Detection Risk, and Substantive Audit Evidence

22. Components of Preliminary Audit Strategies Assessed level of inherent risk Planned assessed level of control risk Planned assessed level of analytical procedures risk Planned level of tests of details

23. Three Basic Preliminary Audit Strategies Response to Lower Inherent Risks A Lower Assessed Level of Control Risk A Primary Substantive Approach

24. Preliminary Audit Strategies and the Audit Risk Model

25. Preliminary Audit Strategy Comparison

26. Study Break 4. Which of the following is the correct audit risk model? A.AR = IR x CR x DR B.IR = AR x CR x DR C.CR = IR x AR x DR D.DR = CR x IR x AR A. AR = IR x CR x DR

27. Study Break 5. ______ is the risk that a material misstatement could occur and will not be prevented or detected by the entity’s internal controls. A.Inherent Risk B.Audit Risk C.Control Risk D.Detection Risk C. Control Risk

28. Study Break 6. The components of preliminary audit strategies include all of the following except: A.Assessed level of inherent risk B.Planned assessed level of control risk C.Actual assessed level of control risk D.Planned assessed level of analytical procedures risk C. Actual assessed level of control risk