战略系统审计.ppt

0,AuditComfortCycle,4KeyQuestionsWhatdoesmanagementneedtogetcomforton?Howdoesmanagementgetcomfort?Aretheyentitledtothatcomfort?Canweauditthatcomfort?,天马行空官方博客：,1,Scoping:FormingaPointofView,PerformcompanyandindustryanalyticalproceduresResearchandanalyzeexternalcommunicationsPartnersconnectwithstaffmembersDocumenttheteamsunderstandingofthebusinessKnowledgebrokertocaptureandshareindustryinformationFormapointofviewontherisksthatmanagementshouldbeconcernedabout,2,Scoping:BusinessAnalysisFramework,3,4,StrategicAnalysis,Understandtheclientsstrategicadvantage,5,6,7,RiskAssessment,Understandtherisksthatthreatenattainmentoftheclientsbusinessobjectives“Theprimarygoalofmanagementcontrolistoensurethatriskmonitoringandcontrolactivitiesarealignedproperlywithoverallstrategicobjectives”p.35StrategicrisksProcessrisks,8,Scoping:RiskAssessmentKeyRisks,Keyrisksarethoseconditionsorfactorswithinanauditthat,inthejudgmentoftheauditor,giverisetoagreaterriskofmaterialfinancialmisstatementorothermattersresultingintheissuanceofaninappropriateauditreport.,9,Scoping:AnalyticalProcedures,HighLevelUnderstandthebusinessIdentifyareasofriskDisaggregatedAccountLevelDeterminethenature,timing&extentoftestingExternalbenchmarkingtopeers,markettrendsLookingforanomalies,areasofriskUseofextensiveknowledgemanagementtoolsavailable,10,BusinessProcessAnalysis,UnderstandthekeyprocessesandrelatedcompetenciesneededtorealizestrategicadvantageProcessdrivencompetitionMeasureandbenchmarkprocessperformanceDocumentunderstandingoftheclientsabilitytocreatevalueandgeneratefuturecashflowsusingaclientbusinessmodel,processanalyses,keyperformanceindicators,andabusinessriskprofile,11,BusinessRisksrelatedtoachievingObjectives,BusinessProcessACompletenessAccuracyValidityRestrictedAccess,BusinessProcessBCompletenessAccuracyValidityRestrictedAccess,BusinessProcessCCompletenessAccuracyValidityRestrictedAccess,AccountBalancesandTransactions,AccountBalancesandTransactions,GeneralComputerControls,AccountBalancesandTransactions,ConnectingtheDots,BusinessObjectives,FinancialStatementAssertions/AuditObjectivesClassesofTransactionsOccurrenceCompletenessAccuracyCutoffClassificationAccountBalancesRights&ObligationsExistenceCompletenessAccuracy/ValuationPresentation&DisclosureOccurrence/R&OCompletenessUnderstandabilityAccuracy/Valuation,12,13,Assessimplicationsforbusinessandaudit,Isriskidentificationcomplete?Aretheyprioritizedproperly?Aretherecontrolstominimizeriskstoacceptablelevel?Doaccountingchoicesanddisclosuresadequatelyreflectuncontrolledrisks?Groupsresidualbusinessriskbyfinancialstatementassertion,14,ScopingTranslatedintoAuditStrategy,Wherecontrolsoversignificantaccountbalancesorclassesoftransactionarenotaligned,wewillneedtoperformsubstantivetestsofdetails.,Stakeholders,Risks,Controls,Alignment,BusinessObjectives,15,BusinessMeasurement,UsethecomprehensivebusinessknowledgedecisionframetodevelopexpectationsaboutkeyassertionsembodiedintheoverallfinancialstatementsComparereportedfinancialresulttoexpectationsanddesignadditionalaudittestworktoaddressanygapsbetweenexpectationsandreportedresultsTransactionbasedauditingproceduresareappliedtonon-routinetransactionsandnon-routineandhighlyjudgmentalaccountingestimates(p.36).ComputeraudittechniquesfilterroutinetransactionsforunusualitemsAdditionaltestworkisperformedwheninterrelatedfinancialandNonfinancialperformancemeasuresareinconsistentandwhenkeyfinancial-statementassertionsarenotconsistentwiththeauditorsunderstandingoftheorganizationsstrategic-systemsdynamicQualityofearningsareassessedProcessperformanceevaluatedonCycletimeProcessqualityProcesscost,16,Scoping:AuditTeamofSpecialists,Ourbestteamsuseourspecialistcapabilitiestohelpinformingapointofview.,Stakeholders,BusinessObjectives,FinancialRisk,BusinessProcess,Enterprise-wideRisk,Systems&Technology,EnergyTradingRisk,BusinessResilience,ProjectManagement,InternalAudit,Security,DataRisk,Regulatory/Compliance,PerformanceImprovement,Treasury,Risks,Controls,Alignment,Computer-AssistedAuditTechniques,Fraud,17,AuditComfortCycle,4KeyQuestionsWhatdoesmanagementneedtogetcomforton?,Howdoesmanagementgetcomfort?,Aretheyentitledtothatcomfort?,Canweauditthatcomfort?,18,“TakingStock”:Real-TimeLinkageintheIterativeProcess,ShareteammemberscumulativeknowledgeUpdateriskidentificationandassessmentConsidertheauditcomfortgainedtodate,byauditassertionAnswer:“Dowehaveenoughcomfort?”Answer:“Whatdowedonext?”,19,SubstantiveAuditEvidence,20,AssuranceHierarchy,Willweobtainauditassurancefromtestsofcontrols?,Testcontrols.,Nofurthertestingrequired.,Canweobtainauditassurancefromsubstantiveanalyticalprocedures?,Performsubstantiveanalyticalprocedures.,Performtestsofdetails.,Doweneedadditionalauditassurance?,No,Yes,No,No,Yes,Yes,21,OtherAuditProcedures,22,OtherAuditProcedures:MoreConnectingtheDots,LinkmanagementinformationtofinancialstatementsReviewadjustmentsnecessarytoreconcilemanagementinformationtothefinancialstatementsReviewnon-standardjournalentriesandotheradjustm