AT 05 Planning An Audit of FS and PSA 315
AT 05 Planning An Audit of FS and PSA 315
AT 05 Planning An Audit of FS and PSA 315
CKC- BSA 3
2. The auditor should perform the following activities at the beginning of the current audit
engagement:
Perform procedures regarding the continuance of the client relationship and the specific
audit engagement.
Evaluate compliance with ethical requirements, including independence.
Establish an understanding of the terms of the engagement.
Planning Activities
3. The auditor should establish the overall audit strategy for the audit. The overall audit strategy sets
the scope, timing and direction of the audit, and guides the development of the more detailed
audit plan
5. The auditor should develop an audit plan for the audit in order to reduce audit risk to an
acceptably low level.
6. The audit plan is more detailed than the overall audit strategy and includes the nature, timing and
extent of audit procedures to be performed by engagement team members in order to obtain
sufficient appropriate audit evidence to reduce audit risk to an acceptably low level.
The overall audit strategy and the audit plan should be updated and changed as necessary during the
course of the audit.
Direction, Supervision and Review
1. The auditor should plan the nature, timing and extent of direction and supervision of engagement
team members and review their work.
2. The nature, timing and extent of the direction and supervision of engagement team members and
review of their work vary depending on many factors, including:
3. The auditor plans the nature, timing and extent of direction and supervision of engagement team
members based on the assessed risk of material misstatement.
Documentation
The auditor should document the overall audit strategy and the audit plan, including any significant
changes made during the audit engagement.
1. The auditor may discuss elements of planning with those charged with governance and the entity’s
management.
2. Discussions with those charged with governance ordinarily include the overall audit strategy and
timing of the audit, including any limitations thereon, or any additional requirements.
3. When discussion of matters included in the overall audit strategy or audit plan occur, care is
required in order not to compromise the effectiveness of the audit.
The auditor should perform the following activities prior to starting an initial audit:
1. Perform procedures regarding the acceptance of the client relationship and the specific audit
engagement.
2. Communicate with the previous auditor, where there has been a change of auditors, in compliance
with relevant ethical requirements.
PSA 315
UNDERSTANDING THE ENTITY AND ITS ENVIRONMENT AND ASSESSING THE RISKS OF MATERIAL
MISSTATEMENT
1. The auditor should obtain an understanding of the entity and its environment, including its internal
control, sufficient to identify and assess the risks of material misstatement of the financial
statements whether due to fraud or error, and sufficient to design and perform further audit
procedures.
2. The auditor should perform the following risk assessment procedures to obtain an understanding
of the entity and its environment, including its internal control:
a.) Industry, regulatory, and other external factors, including the applicable financial reporting
framework.
b.) Nature of the entity, including the entity’s selection and application of accounting policies.
c.) Objectives and strategies and the related business risks that may result in a material
misstatement of the financial statements.
d.) Measurement and review of the entity’s financial performance.
e.) Internal control.
INTERNAL CONTROL
1. Internal control is the process designed and effected by those charged with governance,
management, and other personnel to provide reasonable assurance about the achievement of the
entity’s objectives with regard to:
Reliability of financial reporting;
Effectiveness and efficiency of operations; and
Compliance with applicable laws and regulations.
The control environment includes the governance and management functions and the attitudes,
awareness, and actions of those charged with governance and management concerning the entity’s
internal control and its importance in the entity.
The auditor should obtain an understanding of the entity’s risk assessment process, i.e., the entity’
process for identifying business risks relevant to financial reporting objectives and deciding about
actions to address those risks, and the results thereof.
The auditor should obtain an understanding of the information system, including the related
business processes, relevant to financial reporting, including the following areas:
The classes of transactions in the entity’s operations that is significant to the financial
statements.
The procedures, within both IT and manual systems, by which those transactions are
initiated, recorded, processed and reported in the financial statements.
The related accounting records, whether electronic or manual, supporting information, and
specific accounts in the financial statements, in respect of initiating, recording, processing
and reporting transactions.
How the information system captures events and conditions, other than classes of
transactions that are significant to the financial statements.
The financial reporting process used to prepare the entity’s financial statements, including
significant accounting estimates and disclosures.
Control activities are the policies and procedures to help ensure that management
directives are carried out. Examples of control activities include those relating to the
following:
Authorization
Performance reviews.
Information processing.
Physical controls.
Segregation of duties.
1. The auditor should identify and assess the risks of material misstatement at the
financial statements level, and at the assertion level for classes of transactions, account
balances, and disclosures.
2. The auditor:
Identifies risks throughout the process of obtaining an understanding of the entity
and its environment, including relevant controls that relate to the risks, and by
considering the classes of transactions, account balances, and disclosures in the
financial statements;
Relates the identified risks to what can go wrong at the assertion level;
Considers whether the risks are of a magnitude that could result in a
material misstatement of the financial statements; and
Considers the likelihood that the risks could result in a material misstatement
of the financial statements.