Task #4 As part of the audit planning, you recently met with Sam Real and learned the following pertinent information: RRI tends to work on one large renovation project at a time. Sam Real acts as the foreman and employs independent contractors as needed to execute the projects. He employs his wife, Lucky, as his office administrator. Lucky has a diploma in bookkeeping. While she works hard to manage the day-to-day administrative responsibilities for RRI on her own, she does not have knowledge about the more technical aspects of financial reporting. Sam is known as a creative thinker, and he prides himself on being able to “focus on the big picture of a project without getting lost in all of the mundane and annoying details and paperwork.” This obliviousness to details is a source of frustration for Lucky, who must constantly remind him to keep track of his receipts and submit the working hours for his contractors on a timely basis. Sam uses Microsoft Excel to track costs and billings for each project. Lucky insists that he submit his Excel file to her each Friday, along with any supporting documentation. Lucky uses the Excel file to make entries in the accounting software used by RRI. She also reconciles the bank and company credit card on a weekly basis, which helps her identify whether Sam has failed to submit receipts to her. Sam and Lucky are the only individuals who have access to a corporate credit card for RRI. If an independent contractor makes a purchase related to an RRI job, they submit the receipt to Lucky for reimbursement. Lucky ensures that all receipts are allocated to the appropriate job. The challenges with this process are (1) there is sometimes a prolonged delay before contractors submit their receipts and (2) sometimes the contractors lose the receipts and Lucky reimburses them an estimated amount. Discuss the audit approach that H&L should employ for this audit.
The Correct Answer and Explanation is:
Correct Answer:
H&L should employ a risk-based audit approach for the audit of RRI (Renovation and Restoration Inc.). This involves gaining a thorough understanding of the business, identifying areas of significant risk—particularly in revenue recognition, expense allocation, and use of estimates—and tailoring audit procedures to address these risks. Given the informal nature of RRI’s processes, weak internal controls, and reliance on manual systems like Excel, a substantive audit approach with detailed testing of transactions will be crucial. There should also be a strong emphasis on professional skepticism, especially regarding related-party transactions, expense reimbursement processes, and potential understatement or overstatement of costs and revenues.
Comprehensive 1000-Word Explanation:
The audit of RRI requires a tailored and focused approach because of its unique structure, informal control environment, and reliance on limited personnel. The objective is to gather sufficient appropriate audit evidence to support the fairness of the financial statements, with a special emphasis on material misstatements—whether due to error or fraud.
1. Understanding the Business and Control Environment
As part of audit planning, the auditor must gain a comprehensive understanding of the entity and its environment, including internal controls, in accordance with CAS 315 (Identifying and Assessing the Risks of Material Misstatement through Understanding the Entity and Its Environment).
From the meeting with Sam Real, the auditor has learned the following:
- RRI engages in one large renovation project at a time, which simplifies job tracking but also increases the materiality and risk concentration in each individual project.
- Sam Real, the owner and foreman, focuses on project management but has limited interest or involvement in the financial details.
- Lucky Real, his wife, acts as the bookkeeper and administrator. She has basic bookkeeping training but no formal financial reporting expertise.
- The company uses Excel for project cost tracking and later inputs the information into accounting software.
- There are manual processes for recording transactions, submitting documentation, and reconciling accounts.
- Receipt management and contractor reimbursement procedures are weak, with reliance on estimates when documentation is missing.
- There is a related-party relationship between Sam and Lucky, with limited segregation of duties.
This environment presents several red flags and inherent limitations in the control environment.
2. Risk Assessment and Identification of Audit Risks
Based on the above, H&L should identify and assess the following key risks:
a. Revenue Recognition Risk
RRI likely uses the percentage of completion method or similar project-based revenue recognition technique. In a setting with limited formal documentation and subjective estimates, there is a risk that revenue may be:
- Recognized prematurely (to show higher profitability).
- Understated (to defer tax liabilities).
Response: Substantive testing of revenue transactions and review of project progress (e.g., milestones, contracts, billing records, work completion certificates) is necessary.
b. Expense Recognition and Cut-off Risk
Contractor payments are often estimated if receipts are lost. This opens the door to:
- Overstatement of expenses.
- Incorrect period allocation.
- Potential misappropriation through false reimbursements.
Response: Conduct detailed testing of expenses, perform cut-off testing, and verify that costs are appropriately supported by source documents.
c. Weak Internal Controls
- Lack of segregation of duties (e.g., Lucky records transactions and reconciles accounts).
- Use of informal Excel files to track costs.
- Sam’s lack of attention to detail and irregular submission of documentation.
These factors increase the risk of both fraud and error.
Response: A control-based audit is not feasible due to the ineffective control environment. The auditor should adopt a fully substantive approach, relying on transactional testing and analytical procedures rather than internal controls.
d. Related-Party Transactions
Given that Lucky is both an employee and spouse of the owner, and they both have credit card access, related-party transactions could be disguised as business expenses.
Response: The auditor should confirm that related-party disclosures are complete and accurate (CAS 550) and investigate unusual or non-business expenditures.
e. Estimates and Judgment
Lucky reimburses contractors based on estimates if receipts are missing. This creates a significant estimation uncertainty.
Response: Review supporting documentation, compare estimated payments to historical norms, and consider requesting contractor confirmations.
3. Audit Strategy: Substantive Audit Approach
Given the poor internal controls, a substantive audit approach is appropriate. Key elements include:
a. Detailed Substantive Testing
- Test all material revenue and expense transactions, especially those without original documentation.
- Vouch entries from Excel to source documents (invoices, receipts, bank statements).
- Trace costs from receipts to the correct project and ensure proper classification.
b. Bank and Credit Card Reconciliation Review
Since Lucky performs weekly reconciliations, auditors should:
- Review reconciliations for at least three selected months, ensuring they are accurate and complete.
- Verify any reconciling items and trace to subsequent clearing.
c. Analytical Procedures
Use analytical procedures to identify anomalies in spending patterns, such as:
- Fluctuations in contractor payments.
- Unusual spikes in supplies or materials.
- Overhead costs inconsistent with project timelines.
d. Cut-off Testing
Perform testing around the year-end to ensure:
- Expenses are recorded in the correct period.
- Project costs and revenues are properly matched.
e. Confirmation Procedures
- Send confirmations to contractors to verify amounts billed, dates of work performed, and whether reimbursements were received.
- Confirm bank balances and credit card statements directly with financial institutions.
4. Professional Skepticism and Fraud Risk Assessment
Auditors must maintain professional skepticism throughout the audit. The risk factors present—lack of formal controls, related-party transactions, manual processes, and use of estimates—make it essential to stay alert to signs of misstatement or fraud.
Under CAS 240 (The Auditor’s Responsibilities Relating to Fraud):
- Consider the possibility of fabricated receipts.
- Investigate unusual journal entries.
- Review the general ledger for manual adjustments made by Lucky without adequate explanation.
5. Documentation and Communication with Management
The auditor should:
- Document all identified risks and responses.
- Communicate any control deficiencies to management in a management letter.
- Discuss the need for better controls such as:
- Cloud-based expense tracking.
- Mandatory receipt submission policies.
- Contractor agreements that outline documentation expectations.
6. Final Considerations and Auditor’s Judgment
Given the structure of RRI, H&L must exercise judgment regarding materiality and audit sampling. Since the business works on one project at a time, audit evidence for that project must be exhaustive, even if the volume of transactions is lower than in larger companies.
The audit plan should also include:
- Review of year-end adjusting entries.
- Examination of Lucky’s bookkeeping entries for reasonableness.
- Inquiry into post-year-end events that might affect estimates.
Conclusion
H&L’s audit approach for RRI must be rooted in a risk-based and fully substantive audit strategy, focusing on testing individual transactions and maintaining skepticism. Due to RRI’s weak internal control environment, reliance on manual Excel tracking, and use of subjective estimates, the audit team must verify all material information through original documentation, confirmations, and analytical procedures. Enhancing communication with management regarding internal control improvements will also be a value-added outcome of this audit engagement.