startInherent Risks
How To

Inherent Risks

CCH Audit Automation
Last update: Reading time 4 minutes
Inherent RisksAudit Risk Assessment

    To answer the questions relating to general inherent risk, click on [Inherent risk questions] and the Inherent risk questions window will be displayed.

    clipboard_e7d2853806f562e743dd9d751ecfe1ca5.png

    Inherent risk questions window

    This lists up to 99 general risk areas in the top grid and the questions relating to the selected area in the lower grid. Selecting an area in the top grid, either by scrolling the list using the scroll bar, or clicking on an area name when it is displayed, will cause the questions relating to the area to be displayed.

    Capture37.JPG

    To change the answer to a question, either highlight it and click on [Yes] or [No], or on [Edit] to display the Risk questions dialog.

    If any answers to the inherent risk questions are changed the user will be prompted to run the checklist question exclusion and audit test exclusion routine, as the answers to these questions can be linked elsewhere.

    clipboard_e0b4b365c5cb313db33cbba39e5deef67.png

    The Answer dialog

    If the risk model has been set up to allow auditor’s judgment in the point scoring, the dialog will also be shown if you select [Yes] or [No] and the points associated with the answer are the higher of the yes/no points.

    With this dialog displayed, you may change the answer by clicking on the relevant radio button and enter a comment to explain why you have answered the question in this way, if this is appropriate. If the judgmental options is turned on for the pack, you may also edit the points score within the limits set in the pack. To save your answers and comments, click on [Save], clicking on [Abort] will close the dialog leaving the data unchanged.

    Alternatively, if you wish to move to the next or previous questions and keep the Risk question form open, click on the blue up and down arrow buttons. This will save any changes that you have made and move in the direction selected. You may also click on a question in the Inherent risk question window and its details will be displayed in the Risk question form. If you had edited the displayed details before selecting the question, they will be saved before the new question is displayed.

    When a client is created, and after it has been balanced forward, all risk model answers are reset to Not answered. The system will not allow you to proceed to the next stage of the audit until all questions have been answered.

    Risk model comments

    If you wish to view the comments made in the prior period in respect of the question, click on the [Prior comment] button. This button will only be present if a comment was made in the prior period. Clicking this will result in the display of a dialog showing the comment that we made in the previous period:

    clipboard_e6bdeca2cd7c2200b8d4e29f1108f097a.png

    If you wish to copy any of the text to the Windows clipboard, highlight the text by dragging the mouse over it and the [Copy] button will become active. Click on this and the text will be copied and the dialog will be closed. If you do not wish to copy the text, click on [Close] to close the dialog.

    Inherent risk override

    When you have answered all the questions, exit from the Inherent risk questions window using the [Close] button. The system will total the points in each area, calculate the overall total and, by reference to a look-up table in the Master Audit Pack, work out the client’s Risk Level. It will then display the Inherent risk override dialog:

    clipboard_e41f1477632ebcf0b857be74d5dcf2ee7.png

    Inherent risk override dialog

    This shows the level of risk calculated by the system and allows you to override it if you do not think that it is appropriate to the client.

    To override the calculated risk, click on the [Override level] button and enter the level that you consider appropriate. The override button will become a [Use calculated] button and if you click this the risk level will revert to that calculated by the system. On selecting one of these buttons, the system will invite you to enter your comments on the reason for the change. These will be appended to any comments which already exist in the Override dialog.

    It should be emphasized that Audit Automation is a tool and is not seeking to replace the auditor’s judgment. You must therefore consider the level of risk selected and either indicate why it is appropriate or override it and explain your choice.

    To proceed click on [OK] and, provided that you have entered a comment, the system will close the dialog.

    Related documents

    Inherent Risk Questions
    This document outlines the process for assessing inherent risk in clients through a systematic approach of questions. The system can store up to 99 risk areas, each containing 99 questions, which are assigned point scores for "Yes" and "No" answers. It details steps for editing, adding, and deleting risk areas and questions, including interface navigation and confirmation prompts. Additionally, it emphasizes that once numbers are assigned to risk areas or questions, they cannot be changed. The document serves as a guide for managing inherent risk assessments effectively.
    Audit Risks
    This document details the functionality of CCH Audit Automation for recording Identified Audit Risks, also referred to as Significant Business Risks. It provides instructions for users to add, edit, and manage risks, including features for maintaining risks for future audits, assessing their significance, and linking them to assertions. The system includes tools for risk assessment, audit response, and documenting conclusions. Other functionalities encompass risk summarization, printing options, and risk linkage across multiple sources, enhancing the audit process's efficiency and accountability.
    Default Specific Risk Questions
    CCH Audit Automation allows users to define specific risk questions for audit areas, although it's not mandatory. If no specific questions are set, default questions will be used. Users can edit the default questions through the "Specific risk questions" option in the Risk Model section. Up to 99 default questions can be defined, similar to inherent risk questions. The system utilizes a lookup table that combines specific and inherent risks for audits, with editing instructions provided in the manual.
    Risk/Sample Selection
    This document outlines the concept of audit risk, defined as the likelihood of undetected material errors during an audit. It introduces a risk model used in Audit Automation that requires total audit risk to remain below acceptable levels across various audit areas. The risks are broken down into inherent risk, control risk, and detection risk, with further subdivisions for detection risk. It emphasizes the importance of understanding these concepts to design effective audit procedures and assess risk at different levels. Additionally, it discusses general and control environments, and the calculation of residual risk, alongside a risk scoring system.
    Default Identified Risks
    This document outlines the process for authors of master packs to define, edit, and manage default identified risks applicable to linked clients. It details how these risks are automatically included in new client profiles but not in existing ones. Users can add, edit, or delete risks, with specific instructions on customizing risk profiles, justifications, and associated assertions. The document also includes guidance on printing identified risks. Overall, it serves as a comprehensive guide for managing risk documentation within the master pack system.