23.03.2016 Views

Activity Report 2015

Activity Report 2015 - Federal Audit Oversight Authority FAOA

Activity Report 2015 - Federal Audit Oversight Authority FAOA

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

12<br />

Financial Audit | FAOA <strong>2015</strong><br />

Figure 2<br />

Type and number of findings from the <strong>2015</strong> file reviews<br />

at the five largest audit firms (total 43 Findings)<br />

Quality control for an audit (ISA 220)<br />

1<br />

Various other findings<br />

Materiality (ISA 320)<br />

Fraud (ISA 240)<br />

Audit evidence (ISA 500-530)<br />

Estimates (ISA 540)<br />

2<br />

3<br />

3<br />

4<br />

8<br />

9<br />

13<br />

Risk assessment and related response (ISA 300f.)<br />

Using the work of others (ISA 600 - 620)<br />

In the reporting year the FAOA identified<br />

the most findings in the areas<br />

of «using the work of others», «risk<br />

assessment and related response»<br />

and «estimates». The most common<br />

findings within the «using the work of<br />

others» category were in the areas of<br />

group audit (ISA 600) and using the<br />

work of internal auditors (ISA 610).<br />

Reference is made in this regard to<br />

sections «Component coverage» and<br />

«Using the work of internal auditors».<br />

Insufficient professional scepticism<br />

and the failure to identify and respond<br />

to risks of material misstatement are<br />

often the cause of deficiencies, respectively<br />

FAOA findings. If the audit team<br />

fails to identify risks of material misstatement<br />

appropriately during the planning<br />

phase the quality of its responses<br />

to those risks cannot be sufficient. The<br />

informative value of the resulting audit<br />

evidence is limited as a result.<br />

If the auditor intends to rely upon the<br />

effectiveness of general IT and application<br />

controls these controls must be<br />

tested adequately. If not, the auditor<br />

cannot rely upon systems-generated<br />

documents that, in turn, serve as the<br />

basis for the audit of different audit<br />

areas. In part, however, reliance was<br />

placed on IT and application controls<br />

without sufficient testing. It was<br />

further neglected to assess the risk of<br />

unauthorised access to data and functions<br />

in some cases.<br />

FAOA findings with respect to the<br />

audit of estimates relate primarily<br />

to the positions goodwill and other<br />

intangible assets. Contrary to auditing<br />

standard requirements, several<br />

engagement teams obtained insufficient<br />

appropriate audit evidence to<br />

assess the estimates and assumptions<br />

of management. This also includes,<br />

for example, making a critical assessment<br />

of prior year business plan assumptions.<br />

Figure 3<br />

Type and number of findings from the <strong>2015</strong> file reviews at the smaller audit firms<br />

(total 15 Findings)<br />

Using the work of others (ISA 600 - 620)<br />

1<br />

3<br />

5<br />

Fraud (ISA 240)<br />

6<br />

Audit evidence (ISA 500-530)<br />

Risk assessment and related response (ISA 300f.)

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!