369 paragraphs found
The nature of a control procedure often influences the nature of tests of operating effectiveness that can be performed. For example, the assurance practitioner may examine evidence regarding controls where such evidence exists, however documentary …
The decision about what comprises sufficient appropriate evidence is a matter of professional judgement. The assurance practitioner may consider for example: the nature of the system; the significance of the control procedure in achieving the relevant …
Obtaining an understanding of controls sufficient to conclude on the suitability of their design is not sufficient evidence regarding their operating effectiveness, unless there is some automation that provides for the consistent operation of the controls …
To be useful to users and not be potentially misleading, an assurance report on operating effectiveness over a period ordinarily covers a minimum period of six months. The assurance practitioner considers the reasons for a shorter period being selected …
Certain control procedures may not leave evidence of their operation that can be tested at a later date and, accordingly, the assurance practitioner may find it necessary to test the operating effectiveness of such control procedures at various times …
If the assurance practitioner provides a conclusion on the operating effectiveness of controls, that conclusion relates to the operation of controls throughout each period, therefore, sufficient appropriate evidence about the operation of controls during …
Evidence of the operating effectiveness of a control subsequent to period end, for a control which did not operate during the period as it was not triggered, may be used in combination with evidence that the circumstances necessary to trigger the control …
In some circumstances, it may be necessary to obtain evidence supporting the effective operation of indirect controls. Controls over the accuracy of the information in exception reports (for example, the general IT controls) are described as “indirect” …
The means of selecting items for testing available to the assurance practitioner are: Selecting all items (100% examination): This may be appropriate for testing controls that are applied infrequently, for example, quarterly, or when evidence regarding …
While selective examination of specific items will often be an efficient means of obtaining evidence, it does not constitute sampling. The results of procedures applied to items selected in this way cannot be projected to the entire population; …