Generally Accepted Auditing Standards (GAAS)
In 1947, the American Institute of Certified Public Accountants (AICPA) adopted GAAS to establish standards for audits. The standards cover the following three categories:
- General Standards – relates to professional and technical competence, independence, and professional due care.
- Field Work Standards – relates to the planning of an audit, evaluation of internal control, and obtaining sufficient evidential matter upon which an opinion is based.
- Reporting Standards – relates to the compliance of all auditing standards and adequacy of disclosure of opinion in the audit reports. If an opinion cannot be reached, the auditor is required to explicitly state their assertions.
The auditor must plan and conduct the audit to ensure their audit risk (the risk of reaching an incorrect conclusion based on the audit findings) will be limited to an acceptable level. To eliminate the possibility of assessing audit risk too low the auditor should perform the following steps:
Obtain an Understanding of the Organization and its Environment: The understanding of the organization and its environment is used to assess the risk of material misstatement/weakness and to set the scope of the audit. The auditor’s understanding should include information on the nature of the entity, management, governance, objectives and strategies, and business processes. Identify Risks that May Result in Material Misstatements: The auditor must evaluate an organization’s business risks (threats to the organization’s ability to achieve its objectives). An organization’s business risks can arise or change due to new personnel, new or restructured information systems, corporate restructuring, and rapid growth to name a few. Evaluate the Organization’s Response to those Risks: Once the auditor has evaluated the organization’s response to the assessed risks, the auditor should then obtain evidence of management’s actions toward those risks. The organization’s response (or lack thereof) to any business risks will impact the auditor’s assessed level of audit risk. Assess the Risk of Material Misstatement: Based on the knowledge obtained in evaluating the organization’s responses to business risks, the auditor then assesses the risk of material misstatements and determines specific audit procedures that are necessary based on that risk assessment.
Read more about this topic: Information Technology Audit Process
Famous quotes containing the words generally, accepted and/or standards:
“Lovers may be—and indeed generally are—enemies, but they never can be friends, because there must always be a spice of jealousy and a something of Self in all their speculations.”
—George Gordon Noel Byron (1788–1824)
“Since the Greeks, Western man has believed that Being, all Being, is intelligible, that there is a reason for everything ... and that the cosmos is, finally, intelligible. The Oriental, on the other hand, has accepted his existence within a universe that would appear to be meaningless, to the rational Western mind, and has lived with this meaninglessness. Hence the artistic form that seems natural to the Oriental is one that is just as formless or formal, as irrational, as life itself.”
—William Barrett (b. 1913)
“Measured by any standard known to science—by horse-power, calories, volts, mass in any shape,—the tension and vibration and volume and so-called progression of society were full a thousand times greater in 1900 than in 1800;Mthe force had doubled ten times over, and the speed, when measured by electrical standards as in telegraphy, approached infinity, and had annihilated both space and time. No law of material movement applied to it.”
—Henry Brooks Adams (1838–1918)