UNDERSTANDING THE ENTITY AND ITS ENVIRONMENT AND ASSESSING THE RISKS OF MATERIAL

MISSTATEMENT

1. The auditor should obtain an understanding of the entity and its environment, including its internal

control, sufficient to identify and assess the risks of material misstatement of the financial

statements whether due to fraud or error, and sufficient to design and perform further audit

procedures.

2. The auditor should perform the following risk assessment procedures to obtain an understanding of

the entity and its environment, including its internal control:

a.) Industry, regulatory, and other external factors, including the applicable financial reporting

framework.

b.) Nature of the entity, including the entity’s selection and application of accounting policies.

c.) Objectives and strategies and the related business risks that may result in a material

misstatement of the financial statements.

d.) Measurement and review of the entity’s financial performance.

e.) Internal control.

INTERNAL CONTROL

81. Internal control is the process designed and effected by those charged with governance,

management, and other personnel to provide reasonable assurance about the achievement of the

entity’s objectives with regard to:

● Reliability of financial reporting;

● Effectiveness and efficiency of operations; and

● Compliance with applicable laws and regulations.

2. The auditor uses the understanding of internal control to:

● Identify types of potential misstatements;

● Consider factors that affect the risks of material misstatement; and

● Design the nature, timing and extent of further audit procedures.

3. Internal control consists of the following components:

1.) The control environment.

2.) The entity’s risk assessment process.

3.) The information system, including the related business processes, relevant to financial reporting,

and communication.

4.) Control activities.

5.) Monitoring of controls.

The control environment includes the governance and management functions and the attitudes,

awareness, and actions of those charged with governance and management concerning the entity’s

internal control and its importance in the entity.