ACCT 555 Week 5 Homework Assignment

ACCT 555 External Auditing
(DeVry - January 2016)

12-17 (Objectives 12-1, 12-4) The following questions concern the characteristics of IT systems. Choose the best response.
a. Effective management of information technologies in an organization embraces the viewpoint that
(1)        most technologies reduce existing risk conditions.
(2)        technologies reduce some types of risks while introducing new types of risks to be managed.
(3)        technologies generally increase an organization’s overall net risks.
(4)        the objective of technology implementations is to increase profitability on a net basis.

b. Which of the following is generally not considered a category of IT general controls?
(1)        Controls that determine whether a vendor number matches the pre-approved vendors in the vendor master file.
(2)        Controls that restrict system-wide access to programs and data.
(3)        Controls that oversee the acquisition of application software.
(4)        Controls that oversee the day-to-day operation of IT applications.

c.  As general IT controls weaken, the auditor is most likely to
(1)        reduce testing of automated application controls done by the computer.
(2)        increase testing of general IT controls to conclude whether they are operating effectively.
(3)        expand testing of automated application controls used to reduce control risk to cover greater portions of the fiscal year under audit.
(4)        ignore obtaining knowledge about the design of general IT controls and whether they have been implemented.

d. Which of the following is an example of an application control?
(1)        The client uses access security software to limit access to each of the accounting applications.
(2)        Employees are assigned a user ID and password that must be changed every quarter.
(3)        The sales system automatically computes the total sale amount and posts the total to the sales journal master file.
(4)        Systems programmers are restricted from doing applications programming functions.

12-18 (Objectives 12-2, 12-4) The following questions concern auditing complex IT systems. Choose the best response.
a. Which of the following client IT systems generally can be audited without examining or directly testing the computer programs of the system?
(1)        A system that performs relatively uncomplicated processes and produces detailed output.
(2)        A system that affects a number of essential master files and produces limited output.
(3)        A system that updates a few essential master files and produces no printed output other than final balances.
(4)        A system that does relatively complicated processing and produces little detailed output.

b. Your client’s sales application ensures that all credit sales transactions in the sales journal have an assigned bill of lading number; however, the system does not ensure that all bill of lading numbers have an assigned sales invoice number. Your company may have a control deficiency related to the
(1)        occurrence of sales transactions.
(2)        accuracy of sales transactions.
(3)        completeness of sales transactions.
(4)        completeness of the cash balance.

c.            Before processing, the system validates the sequence of items to identify any breaks in sequence of input documents. This automated control is primarily designed to ensure the
(1)        accuracy of input.
(2)        authorization of data entry.
(3)        completeness of input.
(4)        restriction of duplicate entries.

d. An auditor will use the test data approach to obtain certain assurances with respect to the
(1)        input data.
(2)        machine capacity.
(3)        procedures contained within the program.
(4)        degree of data entry accuracy.

12-27 (Objectives 12-2, 12-3) Your new audit client, Hardwood Lumber Company, has a computerized accounting system for all financial statement cycles. During planning, you visited with the information systems vice president and learned that personnel in information systems are assigned to one of four departments: systems programming, applications programming, operations, or data control. Job tasks are specific to the individual and no responsibilities overlap with other departments. Hardwood Lumber relies on the operating system software to restrict online access to individuals. The operating system allows an employee with “READ” capabilities to only view the contents of the program or file. “CHANGE” allows the employee to update the contents of the program or file. “RUN” allows the employee to use a program to process data. Programmers, both systems and applications, are restricted to a READ-only access to all live application software program files but have READ and CHANGE capabilities for test copies of those software program files. Operators have READ and RUN capabilities for live application programs. Data control clerks have CHANGE access to data files only and no access to software program files. The person in charge of operations maintains access to the operating software security features and is responsible for assigning access rights to individuals. The computer room is locked and requires a card-key to access the room. Only operations staff have a card-key to access the room, and security cameras monitor access. A TV screen is in the information systems vice president’s office to allow periodic monitoring of access. The TV presents the live picture and no tape record is maintained. The librarian, who is in the operations department, is responsible for maintaining the library of program tapes and files. The librarian has READ and CHANGE access rights to program tapes and files. The files, when not being used, are stored in shelves located in a room adjacent to the computer room. They are filed numerically based on the tape label physically attached on the outside of the tape cartridge to allow for easy identification by operators as they access tapes from the shelves for processing.
What recommendations for change can you suggest to improve Hardwood’s information systems function? 

13-22 (Objective 13-1, 13-5, 13-7) The following questions concern types of audit tests. Choose the best response.
a. The auditor looks for an indication on duplicate sales invoices to see whether the accuracy of invoices has been verified. This is an example of
(1)        a test of details of balances.
(2)        a test of control.
(3)        a substantive test of transactions.
(4)        both a test of control and a substantive test of transactions.

b. An auditor’s decision either to apply analytical procedures as substantive tests or to perform substantive tests of transactions and account balances usually is determined by the
(1)        availability of data aggregated at a high level.
(2)        relative effectiveness and efficiency of the tests.
(3)        timing of tests performed after the balance sheet date.
(4)        auditor’s familiarity with industry trends.

c.            The auditor faces a risk that the audit will not detect material misstatements that occur in the accounting process. To minimize this risk, the auditor relies primarily on
(1)        substantive tests.
(2)        tests of controls.
(3)        internal control.
(4)        statistical analysis.

d. A conceptually logical approach to the auditor’s evaluation of internal control consists of the following four steps:
I.          Determining the internal controls that should prevent or detect errors and fraud.
II.        Identifying control deficiencies to determine their effect on the nature, timing, or extent of auditing procedures to be applied and suggestions to be made to the client.
III.       Determining whether the necessary internal control procedures are prescribed and are being followed satisfactorily.
IV.       Considering the types of errors and fraud that can occur.
What should be the order in which these four steps are performed?
(1)           I, II, III, and IV
(2)           I, III, IV, and II
(3)           III, IV, I, and II
(4)           IV, I, III, and II

13-23 (Objective 13-1) The following questions deal with tests of controls. Choose the best response.
a. Which of the following statements about tests of controls is most accurate?
(1)        Auditing procedures cannot concurrently provide both evidence of the effectiveness of internal control procedures and evidence required for substantive tests.
(2)        Tests of controls include observations of the proper segregation of duties.
(3)        Tests of controls provide direct evidence about monetary misstatements in transactions.
(4)        Tests of controls ordinarily should be performed as of the balance sheet date or during the period subsequent to that date. 

b. To support the auditor’s initial assessment of control risk below maximum, the auditor performs procedures to determine that internal controls are operating effectively. Which of the following audit procedures is the auditor performing?
(1)        Tests of details of balances
(2)        Substantive tests of transactions
(3)        Tests of controls
(4)        Tests of trends and ratios

c.  The primary objective of performing tests of controls is to obtain
(1)        a reasonable degree of assurance that the client’s internal controls are operating effectively on a consistent basis throughout the year.
(2)        sufficient, appropriate audit evidence to afford a reasonable basis for the auditor’s opinion, without the need for additional evidence.
(3)        assurances that informative disclosures in the financial statements are reasonably adequate.
(4)        knowledge and understanding of the client’s prescribed procedures and methods. 

d. To test the effectiveness of controls, an auditor ordinarily selects from a variety of techniques, including
(1)        analysis.
(2)        confirmation.
(3)        reperformance.
(4)        comparison.

13-24 (Objectives 13-1, 13-2) The following are 11 audit procedures taken from an audit program:

1. Foot the accounts payable trial balance and compare the total with the general ledger.  
2. Confirm accounts payable balances directly with vendors.
3. Account for a sequence of checks in the cash disbursements journal to determine whether any have been omitted.
4. Examine vendors’ invoices to verify the ending balance in accounts payable.
5. Compare the balance in payroll tax expense with previous years. The comparison takes the increase in payroll tax rates into account.
6. Examine the internal auditor’s initials on monthly bank reconciliations as an indication of whether they have been reviewed.
7. Examine vendors’ invoices and other documentation in support of recorded transactions in the acquisitions journal.
8. Multiply the commission rate by total sales and compare the result with commission expense.
9. Examine vendors’ invoices and other supporting documents to determine whether     large amounts in the repair and maintenance account should be capitalized.
10. Discuss the duties of the cash disbursements clerk with him and observe whether he has responsibility for handling cash or preparing the bank reconciliation.
11. Inquire about the accounts payable supervisor’s monthly review of a computer-generated exception report of receiving reports and purchase orders that have not been matched with a vendor invoice.
a.            Indicate whether each procedure is a test of control, substantive test of transactions, analytical procedure, or a test of details of balances.
b. Identify the type of evidence for each procedure.
Powered by