Document ID: chunk:federal_register_of_legislation:F2016C00028:reg:26:p3
Version: federal_register_of_legislation:F2016C00028
Segment Type: reg
Provision Reference: reg 26 (pt 3/47)
Character Range: 14058–17394

the process designed, implemented and maintained by those charged with governance, management and other personnel to provide reasonable assurance about the achievement of an entity's objectives with regard to reliability of financial reporting, effectiveness and efficiency of operations, and compliance with applicable laws and regulations.  The term "controls" refers to any aspects of one or more of the components of internal control.

(d)                Risk assessment procedures means the audit procedures performed to obtain an understanding of the entity and its environment, including the entity's internal control, to identify and assess the risks of material misstatement, whether due to fraud or error, at the financial report and assertion levels.

(e)                Significant risk means an identified and assessed risk of material misstatement that, in the auditor's judgement, requires special audit consideration.

Requirements

Risk Assessment Procedures and Related Activities

5.                   The auditor shall perform risk assessment procedures to provide a basis for the identification and assessment of risks of material misstatement at the financial report and assertion levels.  Risk assessment procedures by themselves, however, do not provide sufficient appropriate audit evidence on which to base the audit opinion.  (Ref: Para. A1-A5)

6.                   The risk assessment procedures shall include the following:

(a)                Enquiries of management, of appropriate individuals within the internal audit function (if the function exists) and of others within the entity who in the auditor's judgement may have information that is likely to assist in identifying risks of material misstatement due to fraud or error.  (Ref: Para. A6-A13)

(b)                Analytical procedures.  (Ref: Para. A14-A17)

(c)                Observation and inspection.  (Ref: Para. A18)

7.                   The auditor shall consider whether information obtained from the auditor's client acceptance or continuance process is relevant to identifying risks of material misstatement.

8.                   If the engagement partner has performed other engagements for the entity, the engagement partner shall consider whether information obtained is relevant to identifying risks of material misstatement.

9.                   Where the auditor intends to use information obtained from the auditor's previous experience with the entity and from audit procedures performed in previous audits, the auditor shall determine whether changes have occurred since the previous audit that may affect its relevance to the current audit.  (Ref: Para. A19-A20)

10.               The engagement partner and other key engagement team members shall discuss the susceptibility of the entity's financial report to material misstatement, and the application of the applicable financial reporting framework to the entity's facts and circumstances.  The engagement partner shall determine which matters are to be communicated to engagement team members not involved in the discussion.  (Ref: Para. A21-A24)

The Required Understanding of the Entity and its Environment, Including the Entity's Internal Control

The Entity and Its Environment

11.               The auditor shall obtain an understanding of the following:

(a)