- 10 Marks
Question
You have completed the audit of ABC Ltd for the year ended October 31, 2019.
Required:
i) Outline the procedures for communicating deficiencies in internal controls to those charged with governance and management. (6 marks)
ii) Illustrate how the deficiencies are reported. (4 marks)
Answer
The procedures for communicating deficiencies in internal controls to those charged with governance and management are as follows:
Identification of Deficiencies:
During the audit, the auditor should document all identified deficiencies in internal control, noting the area affected and the potential impact on financial reporting.
Preliminary Discussion with Management:
Before formal communication, the auditor should discuss the identified deficiencies with management to confirm their understanding and obtain management’s initial responses.
Prepare a Written Communication:
The auditor must prepare a formal written report outlining the deficiencies identified, the implications for the financial statements, and any potential risks to the entity’s operations.
Content of Communication:
The communication should clearly explain the nature of the deficiency, its potential impact, and recommendations for improvement. It should also include any responses provided by management.
Formal Presentation to Governance:
The report should be addressed to those charged with governance (e.g., the audit committee or board of directors) and presented in a formal meeting where the deficiencies and recommendations can be discussed.
Acknowledgment and Action Plan:
Management and those charged with governance should acknowledge receipt of the communication and provide a response outlining actions taken or planned to rectify the deficiencies.
(6 marks)
ii)
Deficiencies in internal controls are reported as follows:
Identification of the Internal Control Cycle:
The report should begin by identifying the specific internal control cycle (e.g., procurement, sales, or cash handling) where the deficiency was found. This provides context for understanding the deficiency.
Description of the Deficiency:
Provide a clear and detailed description of the deficiency, explaining how the control failed or was inadequate. For example, “Lack of segregation of duties in the cash handling process.”
Impact of the Deficiency:
Explain the effect of the deficiency on the organization’s financial statements or operations. This could include increased risk of fraud, misstatement, or operational inefficiency.
Recommendation for Improvement:
Provide a specific recommendation to address the deficiency. For example, “Implement segregation of duties by assigning cash handling and record-keeping tasks to different individuals.”
(4 marks)
- Tags: Audit Communication, Deficiency Reporting, Internal Controls, ISA 265
- Level: Level 2
- Topic: Regulatory Framework and Audit Responsibilities
- Series: MAY 2020
- Uploader: Dotse