172 paragraphs found
See ASA 315 Identifying and Assessing Risks of Material Misstatement through Understanding the Entity and Its Environment . …
The service auditor’s procedures to evaluate the fair presentation of the description may include: Considering the nature of user entities and how the services provided by the service organisation are likely to affect them, for example, whether user …
Paragraph 21(a) requires the service auditor to evaluate whether the control objectives stated in the service organisation’s description of its system are reasonable in the circumstances. Considering the following questions may assist the service auditor …
The service auditor’s procedures to determine whether the service organisation’s system has been implemented may be similar to, and performed in conjunction with, procedures to obtain an understanding of that system. They may also include tracing items …
A service auditor may consider using flowcharts, questionnaires, or decision tables to facilitate understanding the design of the …
Controls may consist of a number of activities directed at the achievement of a control objective. Consequently, if the service auditor evaluates certain activities as being ineffective in achieving a particular control objective, the existence of other …
From the viewpoint of a user entity or a user auditor, a control is operating effectively if, individually or in combination with other controls, it provides reasonable assurance that material misstatements, whether due to fraud or error, are prevented, …
Obtaining an understanding of controls sufficient to opine on the suitability of their design is not sufficient evidence regarding their operating effectiveness, unless there is some automation that provides for the consistent operation of the controls as …
To be useful to user auditors, a type 2 report ordinarily covers a minimum period of six months. If the period is less than six months, the service auditor may consider it appropriate to describe the reasons for the shorter period in the service …
Certain control procedures may not leave evidence of their operation that can be tested at a later date and, accordingly, the service auditor may find it necessary to test the operating effectiveness of such control procedures at various times throughout …