F8总结之SP和TOC.docx

F8总结之SP和TOC.docx

《F8总结之SP和TOC.docx》由会员分享，可在线阅读，更多相关《F8总结之SP和TOC.docx（20页珍藏版）》请在冰豆网上搜索。

F8总结之SP和TOC

TOC

Testsofcontrol/test/effectiveness/controls（inpreventing,detectingorcorrectingmaterialmisstatements）

Substantiveprocedures/detectingmaterialmisstatements/attheassertionlevel.Theyincludetestsofdetailoftransactions,balances,disclosuresandsubstantiveanalyticalprocedures.

案例题尽量结合实际经验

Managementletterformat:

地址

TheDirectors

（公司名称）BlakeCo

（121happy）Street

（Happy）Town

5December2013

起头

Managementletter

DearSirs

Wewritetobringtoyourattention（题目requirement容）

正文

结尾

Ifyourequireanyfurtherinformationontheabove,pleasedonothesitatetocontactus.

Yoursfaithfully

（审计公司名称）

SalessystemTOC

存在问题：

Authorization人不对：

notseniorenough/notsufficientlysenior（withoutenoughexpertiseandexperience）,notsufficientlyindependent

Creditlimit的问题：

toohigh,irrecoverabledebt/toolow,lossofsales

Control的方法：

为防止customer发错单：

anorderacceptanceisautomaticallysenttothecustomerbymail/emailconfirmingthegoodsorderedandalikelydespatchdate.

为防止遗漏处理：

Flag标记（salesorder）as（fulfilled）

为防止拖延outstandingreceivable,salesorder;为了避免拖延所设期限predeterminedperiod

+为保证所设期限有效执行Creditlimit,outstandingsalesorder,discountlevel等等很多东西都需要review,且onaregularbasis，且byaresponsibleofficial（financialdirector..）

TOC方法：

ITsystem

Fictitious….used,system的反应-----一般是针对电脑系统的toc

加上Withtheclient’spermission更为细致

对于电脑系统的就是跟它反着来然后看系统的反应，如overagreedcreditlimit

例1Testdatacouldbeusedtoattemptto

processordersviathewebsiteforitems

whicharenotcurrentlyheldin

inventory.Theordersshouldbeflagged

asbeingoutofstockandindicatean

approximatewaitingtime.

例2Theauditorshouldattempttoenteranorderforafictitiouscustomeraccountnumber.Thesystemshouldnotacceptthisorder.

例3Withtheclient’spermission,attempttoenterasalesorderwhichwilltakeacustomerovertheagreedcreditlimit,thesystemshouldrejecttheorder.

找人：

Discusswith（）（）

Forasampleofnewcustomersacceptedintheyear,reviewtheauthorisationofthecreditlimit,andensurethatthiswasperformedbyaresponsibleofficial.

enquiryof（）asto（）

Discusswithmembersofthesalesteam

theprocessforsettingsalesdiscounts.

找一手证据：

找样本的目的/样本数量

大

小（如：

report）

Approval/signature

Inspectasampleof（creditapplication）from（eg:

creditagency）+

Review/view（）authority/signature

Forevidenceofauthorization,forexamplethesignature

Reviewreportof（eg:

creditlimit）或者fileof（..）forevidenceof（report可以反映的容reviewby）

举例

例1.Selectasampleofdespatchesby

couriersandaskPearforproofof

despatchbyviewingcustomer

signatures.

例2.Reviewasampleofauthorizedcapital

expenditureformsandidentifyifthe

correctsignatoryhasauthorizedthem.

例3Reviewasampleofsalesinvoicesforevidenceofauthorizationbyaresponsibleofficialofanydiscountsallowed.

例1Reviewthesalesdiscountreportforevidenceofreviewbythesalesdirector.

例2.Reviewthefileofreconciliationsto

ensurethattheyarebeingperformedon

aregularbasisandthattheyhavebeen

reviewedbyaresponsibleofficial.

例3.Reviewareportofmasterdatachangesandreviewtheauthorityofthosemakingamendments.

Agree

Inspectasampleof（credit=）application）from（eg:

creditagency）+

选择1followthrough（核对的item如：

currentprice/creditlimit）（item所在地如：

inthecurrentpricelist/usedinthesalessystem）

选择2andagreethat（期待的目的如：

creditlimitusedinthesalessystemiscorrect）

=》例1:

Inspectasampleofprocessedcreditapplicationsfromthecreditagencyandfollowthroughthecreditlimitagreedto

thesalessystem.

例2Obtainacopyofthecurrentpricelistandagree（forasampleofinvoices）thatrelevant/currentpriceshavebeenused.

例3InspectasampleofGDNsandagreethatavalidsalesinvoicehasbeencorrectlyraised.

To（warehouse）Observe（）processby（）toascertain/assess……

Visitawarehouseandobservethegoodsdespatchprocesstoassesswhetherallgoodsaredoublecheckedagainstthegoodsdespatchnote（GDN）andthedespatchlistpriortosendingout.

Cashsystem

11.06Q1.c&10.06Q3.b顾客邮寄现金付款

Objective

Control

Mitigaterisk

亲属关系

Related!

Memberswhoarerelatedshouldnotpermittedtoworkinthesamedepartmentwherebytheycanbreachsegregationofdutycontrols.

Thisshouldreducetheriskofstaffcolludingandbeingabletocommitafraudwithouteasilybeingdiscovered.

Allcashreceivedarecorrectlyrecordedintheaccounts.

收到、记录现金时的审核:

至少两人

Eg1.Cashreceiptshouldbeprocessedbytwomembersofstaff.

Eg2.Asecondmemberoftheaccountsteamorstaffindependentoftheaccountsteamshouldassistwiththemail,oneshouldopenthepostandthesecondshouldrecordXXinXX.

Eg1.Thisshouldreducetheriskofonepersonbeingabletostealcashreceipts.Inordertocommitthefraudthesetwomembersofstaffwouldneedtocolludeandtoavoiddetection,alsocolludewithothermembersofthefinanceteam.

Eg2.ToC:

observethemailopeningprocesstoassessifthecontrolisoperatingeffectively.

Doublecheck：

保证准确、及时发现错误

Monthlycustomerstatementsshouldbesentoutpromptlytoallcustomers.Thesalesledgersupervisorshouldreviewtoensurethatallcustomershavebeensentstatements.

?

?

?

IfcustomersreceiveregularstatementsthentheywouldbeinapositiontoflagtoXXthattherewasadelayintheirpaymentsbeingcreditedtotheiraccounts.Thisshouldthenflagapossible‘teemingandlading’fraud.

***Bankreconciliationshouldbereviewedbyaresponsibleofficial（differenttothepreparerofthereconciliation）onaregularbasis.Anyunreconciledamountsshouldbepromptlyinvestigatedandresolved.

PS:

Bankreconciliationsshouldbeperformedmonthly.

*银行调节表很重要的原因

Asmallunreconciledamountcanactuallyrepresenttwolargebalanceswhichalmostcanceleachotheroutandhencecouldindicatesignificantproblemswithcashandbank.

ToC:

Reviewthefileofreconciliationsforevidenceofregularperformanceandreviewbyseniorfinanceteammembers.

轮岗:

员工不敢欺诈

Onaregularbasisstaffwithinthefinancedepartmentshouldrotateduties.

Ifstaffmembersknowthattheywillneedtorotatetheirrolesthentheywillbelessinclinedtocommitfraudulentactivities,asthechancesofthembeingcaughtincreasesignificantly.

建立审部门

Managementshouldconsiderestablishinganinternalauditdepartmentwhichcouldassesstheeffectivenessofcontrolsandidentifyareasofweakness,aswellasperformspecificfraudinvestigations.

Helptodeteremployeescommittingfraud.Fraudulentactivitieswouldbemorelikelytobeidentifiedquicklyasinternalcontrolswouldbetested.

Control

ToC

现金储存（题目中提到的）isnotadequateforsecurityof（considerablecashreceipts如果bankeveryseveraldays）

Storedinafireproofsafe；

Accesstothesafeshouldberestrictedtosupervisedindividuals.

Enquireofmanagementwherethecashreceiptsnotbankedarestored.Inspectthelocationtoensurecashissuitablysecure.适当安全

Cashandchequesshouldbebankedeveryday

Inspectthepaying-in-books（里面记录了每天存入银行的钱）toseeifcashandchequeshavebeenbankeddailyorlessfrequently.

Reviewbankstatementsagainstthecashreceivedlogtoconfirmallamountswerebankedpromptly.

记账

Segregationofduties.

【Risk:

Cashierincorrectlyenterareceipt,andthiscouldhaveimpactonboth（题目中一起做的两个账户），andthisweaksegregationofdutiescouldincreasetheriskofteemingandlading.】

（原来那个人）update（其中一个账户）（另外一个具体的人如团队中一个成员）update（另一个账户）

Observetheprocessforrecordingcashreceivedlogtotherelevantledgersandnoteifthesegregationofdutiesisoccurring.

Payrollsystem

有的在requiement中虽然写了identifyandexplain，但是后面有一个小问给你继续explain这时前面就直接identify就好

Deficiency（explain部分）

control

打卡过程

Absentworker/morethanhedeserve

Reconcilenumberofworkersphysicallypresent

ontheproductionlinewiththe

numberofemployeesloggedinrecordedintherecordingsystem

加班问题

Inordertogetmorepayment/logoutlate

Allovertimeshouldbeauthorised,eitherby（theshiftmanager）authorizing

（anestimatedamountofovertime）priortothe（工作容）commencingorbythemanagerconfirmingthe（recordedhoursinthepayrolldepartmentcomputersystem）aftertheshifthasbeencompleted

密码

Easilyguess

Thecodewordshouldbebasedonarandomsequenceoflettersandnumbersandchangedonaregularbasis.

怕遗漏

tagtheemailswithareceiptandforthosewithoutareceipt,askthepayrolldepartmentforreplyintimetoensurethatallemailsareactuallyreceived

怕支付给虚拟员工

‘Dummy’employees/Fictitiousstaff

Priortonetwagesbeingsenttothebankforpayment,（责任人thefinancialaccountant）shouldreviewandauthorizeittoensurethatitiscorrect

segregationofduties,HRwhoaddthenewstafftothestafflist,theonewhopay

通用

Approval/numberconsecutively/segregationofduties/signtotakeresponsibility/reviewbyseniorregularly

SP

万能procedure：

ØPresentation

1）在报表上的分类2）披露对不对

ØCompare&Inquire

Rario:

　1）与同行比2）与往年比

ØCastandagree

ØSubsequentevents

ØSupportingdocuments

ØConfirmationletter/enquiryletter

Senda（上面两者）to（可以提供信息的人）toobtain（想获得的信息）

ØRepresentationletter

ØDiscusswith（responsiblepeople）about（讨论的项目）to（讨论的目的如：

assessthereasonablenessof…）andobtainawrittenmanagementrepresentationletterconfirming（）

ØSAPandcompare（在流量中比较常用）：

大致估算，如receivabledays,estimatedrevenue

AccountsReceivable倾向于多记

DescribesubstantiveprocedurestheauditorshouldperformtoconfirmXX’syearendreceivables.

给一个balance，要判断它是否真实公平地反映了事实

找可能导致没有真实反映的原因，及相应的procedure

原因

Procedure

年末账目记混了（Cutoff的问题）

1.Inspectthedatesofasampleofgoodsdespatchednotes（GDN）beforeandjustaftertheyearendandfollowthroughtothedat