Components of Internal Control—Control Environment (Ref: Para. 14) A65. The control environment includes the governance and management functions and the attitudes, awareness, and actions of those charged with governance and management concerning the entity’s internal control and its importance in the entity. The control environment sets the tone of an organization, influencing the control consciousness of its people. A66. Elements of the control environment that may be relevant when obtaining an understanding of the control environment include the following: (a) Communication and enforcement of integrity and ethical values – These are essential elements that influence the effectiveness of the design, administration and monitoring of controls. (b) Commitment to competence – Matters such as management’s consideration of the competence levels for particular jobs and how those levels translate into requisite skills and knowledge. (c) Participation by those charged with governance – Attributes of those charged with governance such as: • Their independence from management. • Their experience and stature. • The extent of their involvement and the information they receive, and the scrutiny of activities. • The appropriateness of their actions, including the degree to which difficult questions are raised and pursued with management, and their interaction with internal and external auditors. (d) Management’s philosophy and operating style – Characteristics such as management’s: • Approach to taking and managing business risks. • Attitudes and actions toward financial reporting. • Attitudes toward information processing and accounting functions and personnel. (e) Organizational structure – The framework within which an entity’s activities for achieving its objectives are planned, executed, controlled, and reviewed.
PSA 315 (Redrafted) 32 (f) Assignment of authority and responsibility – Matters such as how authority and responsibility for operating activities are assigned and how reporting relationships and authorization hierarchies are established. (g) Human resource policies and practices – Policies and practices that relate to, for example, recruitment, orientation, training, evaluation, counseling, promotion, compensation, and remedial actions. Audit Evidence for Elements of the Control Environment A67. Relevant audit evidence may be obtained through a combination of inquiries and other risk assessment procedures such as corroborating inquiries through observation or inspection of documents. For example, through inquiries of management and employees, the auditor may obtain an understanding of how management communicates to employees its views on business practices and ethical behavior. The auditor may then determine whether relevant controls have been implemented by considering, for example, whether management has a written code of conduct and whether it acts in a manner that supports the code.
You've reached the end of your free preview.
Want to read all 55 pages?
- Spring '12
- Financial audit, material misstatement