Internal Controls & Audit Processes Flashcards

During a risk-based audit, auditors prioritize testing based on:

Answer: Areas with the greatest inherent risk and weak controls

Risk-based auditing allocates resources to areas with high inherent risk and insufficient controls to address that risk.

What distinguishes a 'significant deficiency' from a 'material weakness' in internal controls?

Answer: A material weakness represents a reasonable possibility of material misstatement; a significant deficiency is less severe

A material weakness is more severe, indicating a reasonable possibility of a material misstatement; a significant deficiency is noteworthy but less severe.

Which sampling technique gives every item in the population an equal chance of selection?

Answer: Random sampling

Random sampling uses statistical methods to ensure every item has an equal probability of being chosen.

The 'three lines of defense' model assigns internal audit to which line?

Answer: Third line

Internal audit is the third line of defense, providing independent assurance over the first (operations) and second (risk/compliance) lines.

What is the purpose of an 'audit trail'?

Answer: A chronological record of transactions and events that enables reconstruction and verification

An audit trail captures a time-stamped sequence of records to allow reconstruction of transactions and detection of unauthorized activity.

In continuous auditing, the primary advantage over traditional periodic audits is:

Answer: Near real-time monitoring that enables faster detection of anomalies

Continuous auditing uses automated tools to monitor transactions constantly, allowing quicker identification and response to control failures.

Which document formally communicates the results of an internal audit to management and the audit committee?

Answer: Audit report

The audit report summarizes findings, conclusions, and recommendations and is distributed to stakeholders after fieldwork is complete.