What do exams expect of you?
Whether you’re writing Auditing for your degree, CTA, or ACCA (Audit and Assurance, F8 and P7), you need to be able to identify risks from a case study, and explain how they affect you as an auditor.
It’s always applied. You’re not learning Risk in order to define it, or explain it. So you need to learn it accordingly.
Why is risk so important?
An audit opinion is based on evidence.
We obtain evidence based on the risks we’ve identified.
The higher the risk, the more evidence we need.
Different types of risk need different types of evidence
If we get risk ‘wrong’, we get the wrong type and amount of evidence. Which means we’ll probably get the wrong opinion.
What goes wrong in exams?
Communication of Risks
Simply put, your risk has to include the following:
- What information in the case study are you referring to?
- What’s the possible impact?
- What’s the connection? Why is there a risk?
Risk at Overall Financial Statement Level vs Account Balance Level
You really need to UNDERSTAND what material misstatements are, and pervasive risks are, what the purpose of risk assessment is, and how we use it.
We differentiate between these two levels for a reason. The more you understand that, the more you’ll start getting this right.
Oversimplification: If you can ‘isolate’ the impact of the possible damage, then it’s not an overall Financial Statement level risk.
If you look at a risk and think “That could be a problem in xxx areas”, then it’s probably an Account balance level risk.
- Eg: The purchases clerk doesn’t know how to use a calculator.
- The impact of the possible damage would be limited to the purchases, because that’s all the clerk touches. You can isolate the effect of the damage. (Account Balance level)
If you look at a risk and think “I know that it could cause a problem, but that problem could be anywhere”, then it’s probably an overall Financial Statement level risk.
- Eg: The general manager doesn’t know how to use a calculator
- You can’t isolate the possible impact, because the general manager ‘touches’ everything. You can’t identify what might be wrong, so you’ll have to keep this risk in mind when you’re auditing EVERYTHING. (AFS level risk)
Focus on this area
I’ve created a separate online course for this section, because it’s so important for your exams, and your understanding of auditing and the entire process.
Risk is the axis around which the entire audit process swings. The more comfortable you are with this, and how to communicate it, the easier it will be to develop your strategy, audit plan and audit procedures. (Not to mention pass your exams!)