Audit & Risk Management Flashcards
7 cards from real CA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Audit & Risk Management flashcards as text
Under ISA 240, which of the following is the PRIMARY responsibility for the prevention and detection of fraud?
Answer: Management and those charged with governance
ISA 240 states that management bears primary responsibility for preventing and detecting fraud, while auditors must maintain professional skepticism and assess fraud risks.
Which risk response strategy involves accepting the potential impact of a risk without taking action to reduce it?
Answer: Risk retention
Risk retention (acceptance) means an organization consciously decides to bear the financial consequence of a risk, often because the cost of mitigation exceeds the expected loss.
When assessing going concern under ISA 570, which period must management evaluate?
Answer: At least 12 months from the date the financial statements are authorized for issue
ISA 570 requires management to assess going concern for a period of at least 12 months from the date the financial statements are authorized for issue, not just from the balance sheet date.
The 'three lines of defense' model in risk governance places internal audit in which position?
Answer: Third line — independent assurance to the board and senior management
Internal audit constitutes the third line of defense, providing independent assurance to the board and senior management on the effectiveness of governance, risk management, and internal controls.
An external auditor discovers that a key audit team member has a direct financial interest in the audit client. The appropriate action is to:
Answer: Remove the team member from the engagement to eliminate the independence threat
A direct financial interest in an audit client creates a self-interest threat to independence that cannot be mitigated by safeguards; the team member must be removed from the engagement.
Key Risk Indicators (KRIs) are BEST described as:
Answer: Forward-looking metrics that signal changes in an organization's risk profile
KRIs are forward-looking metrics that provide early warning signals about increasing risk exposures, enabling proactive risk management before losses occur.
Which audit procedure provides the MOST reliable evidence when verifying the existence of accounts receivable?
Answer: Sending positive confirmation requests directly to the customers
Positive confirmations, which require the recipient to respond whether they agree or disagree with the stated balance, provide highly reliable third-party evidence of the existence of receivables.