Chapter Review

Key Takeaways

• Auditors must understand the entity and its environment before assessing audit risk.
• Business processes and information systems influence financial reporting risks.
• Internal control provides reasonable assurance regarding operations, reporting, and compliance.
• The COSO Internal Control Framework consists of five components: Control Environment, Risk Assessment, Control Activities, Information and Communication, and Monitoring Activities.
• Control activities include authorizations, reconciliations, segregation of duties, and physical safeguards.
• Internal controls are classified as preventive, detective, or corrective.
• Internal control has inherent limitations such as human error, collusion, and management override.
• Auditors are required to understand internal control to assess risks and plan audit procedures.

A strong understanding of the client and its internal control system is the cornerstone of effective risk-based auditing.