Hard1 markMultiple Choice
Area II: Risk AssessmentAUDInternal ControlPCAOB

CPA · Question 25 · Area II: Risk Assessment

An auditor is performing an integrated audit of an issuer. The auditor identifies a control deficiency: the person who authorizes purchases also has the ability to enter new vendors into the master file. No material misstatements were found in the financial statement audit. How should the auditor classify this deficiency?

Answer options:

A.

It is a significant deficiency only.

B.

It depends on the potential magnitude of the misstatement and the likelihood of occurrence.

C.

It is not a deficiency because no misstatements were found.

D.

It is automatically a material weakness.

How to approach this question

Deficiency Classification Rule: It's not about what DID happen, it's about what COULD happen. Magnitude + Likelihood.

Full Answer

B.It depends on the potential magnitude of the misstatement and the likelihood of occurrence.✓ Correct
B
The severity of a deficiency depends on (1) the magnitude of the potential misstatement and (2) the reasonable possibility (likelihood) that the control will fail to prevent/detect it. The absence of actual errors does not mean the control is effective.

Common mistakes

Assuming that 'No errors found' = 'No deficiency'.

Practice the full CPA AUD Practice Exam 2

78 questions · hints · full answers · grading

More questions from this exam