What Is Audit Risk?

Audit risk is the risk that financial statements are materially incorrect, even though the audit opinion states that the financial reports are free of any material misstatements.

Understanding Audit Risk

The purpose of an audit is to reduce the audit risk to an appropriately low level through adequate testing and sufficient evidence. Because creditors, investors, and other stakeholders rely on the financial statements, audit risk may carry legal liability for a certified public accountancy (CPA) firm performing audit work.

Over the course of an audit, an auditor makes inquiries and performs tests on the general ledger and supporting documentation. If any errors are caught during the testing, the auditor requests that management propose correcting journal entries.

At the conclusion of an audit, after any corrections are posted, an auditor provides a written opinion as to whether the financial statements are free of material misstatement. Auditing firms carry malpractice insurance to manage audit risk and the potential legal liability.

Types of Audit Risk

The two components of audit risk are the risk of material misstatement and detection risk. Assume, for example, that a large sporting goods store needs an audit performed, and that a CPA firm is assessing the risk of auditing the store’s inventory.

Risk of Material Misstatement

Material misstatement risk is the risk that the financial reports are materially incorrect before the audit is performed. In this case, the word “material” refers to a dollar amount that is large enough to change the opinion of a financial statement reader, and the percentage or dollar amount is subjective. If the sporting goods store’s inventory balance of $1 million is incorrect by $100,000, a stakeholder reading the financial statements may consider that a material amount. The risk of material misstatement is even higher if there is believed to be insufficient internal controls, which is also a fraud risk.

Detection Risk

Detection risk is the risk that the auditor’s procedures do not detect a material misstatement. For example, an auditor needs to perform a physical count of inventory and compare the results to the accounting records. This work is performed to prove the existence of inventory. If the auditor’s test sample for the inventory count is insufficient to extrapolate out to the entire inventory, the detection risk is higher.

What Is an Auditor’s Opinion?

An auditor’s opinion is a certification that accompanies financial statements. It is based on an audit of the procedures and records used to produce the statements and delivers an opinion as to whether material misstatements exist in the financial statements. An auditor’s opinion may also be called an accountant’s opinion.

Understanding Auditor’s Opinions

An auditor’s opinion is presented in an auditor’s report. The audit report begins with an introductory section outlining the responsibility of management and the responsibility of the audit firm. The second section identifies the financial statements on which the auditor’s opinion is given. A third section outlines the auditor’s opinion on the financial statements. Although it is not found in all audit reports, a fourth section may be presented as a further explanation regarding a qualified opinion or an adverse opinion.

For audits of companies in the United States, the opinion may be an unqualified opinion in accordance with generally accepted accounting principles (GAAP), a qualified opinion, or an adverse opinion. The audit is performed by an accountant who is independent of the company being audited.

Unqualified Opinion Audit

An unqualified opinion is also known as a clean opinion. The auditor reports an unqualified opinion if the financial statements are presumed to be free from material misstatements. In addition, an unqualified opinion is given over the internal controls of an entity if management has claimed responsibility for its establishment and maintenance, and the auditor has performed fieldwork to test its effectiveness.

Qualified Audit

A qualified opinion is given when a company’s financial records have not followed GAAP in all financial transactions. Although the wording of a qualified opinion is very similar to an unqualified opinion, the auditor provides an additional paragraph including deviations from GAAP in the financial statements and points out why the auditor report is not unqualified.

A qualified opinion may be given due to either a limitation in the scope of the audit or an accounting method that did not follow GAAP. However, the deviation from GAAP is not pervasive and does not misstate the financial position of the company as a whole.

Adverse Opinion

The most unfavorable opinion a business may receive is an adverse opinion. An adverse opinion indicates financial records are not in accordance with GAAP and contain grossly material and pervasive misstatements. An adverse opinion may be an indicator of fraud. Investors, lenders, and other financial institutions do not typically accept financial statements with adverse opinions as part of their debt covenants.

Disclaimer of Opinion

In the event that the auditor is unable to complete the audit report due to the absence of financial records or insufficient cooperation from management, the auditor issues a disclaimer of opinion. This is referred to as a scope limitation and is an indication that no opinion over the financial statements was able to be determined. A disclaimer of opinion is not an opinion itself.

What Is an Audit?

The term audit usually refers to a financial statement audit. A financial audit is an objective examination and evaluation of the financial statements of an organization to make sure that the financial records are a fair and accurate representation of the transactions they claim to represent. The audit can be conducted internally by employees of the organization or externally by an outside Certified Public Accountant (CPA) firm.

Understanding Audits

Almost all companies receive a yearly audit of their financial statements, such as the income statement, balance sheet, and cash flow statement. Lenders often require the results of an external audit annually as part of their debt covenants. For some companies, audits are a legal requirement due to the compelling incentives to intentionally misstate financial information in an attempt to commit fraud. As a result of the Sarbanes-Oxley Act (SOX) of 2002, publicly traded companies must also receive an evaluation of the effectiveness of their internal controls.

Standards for external audits performed in the United States, called the generally accepted auditing standards (GAAS), are set out by Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA). Additional rules for the audits of publicly traded companies are made by the Public Company Accounting Oversight Board (PCAOB), which was established as a result of SOX in 2002. A separate set of international standards, called the International Standards on Auditing (ISA), were set up by the International Auditing and Assurance Standards Board (IAASB).

Types of Audits

External Audits

Audits performed by outside parties can be extremely helpful in removing any bias in reviewing the state of a company’s financials. Financial audits seek to identify if there are any material misstatements in the financial statements. An unqualified, or clean, auditor’s opinion provides financial statement users with confidence that the financials are both accurate and complete. External audits, therefore, allow stakeholders to make better, more informed decisions related to the company being audited.

External auditors follow a set of standards different from that of the company or organization hiring them to do the work. The biggest difference between an internal and external audit is the concept of independence of the external auditor. When audits are performed by third parties, the resulting auditor’s opinion expressed on items being audited (a company’s financials, internal controls, or a system) can be candid and honest without it affecting daily work relationships within the company.

Internal Audits

Internal auditors are employed by the company or organization for whom they are performing an audit, and the resulting audit report is given directly to management and the board of directors. Consultant auditors, while not employed internally, use the standards of the company they are auditing as opposed to a separate set of standards. These types of auditors are used when an organization doesn’t have the in-house resources to audit certain parts of their own operations.

The results of the internal audit are used to make managerial changes and improvements to internal controls. The purpose of an internal audit is to ensure compliance with laws and regulations and to help maintain accurate and timely financial reporting and data collection. It also provides a benefit to management by identifying flaws in internal control or financial reporting prior to its review by external auditors.

Internal Revenue Service (IRS) Audits

The Internal Revenue Service (IRS) also routinely performs audits to verify the accuracy of a taxpayer’s return and specific transactions. When the IRS audits a person or company, it usually carries a negative connotation and is seen as evidence of some type of wrongdoing by the taxpayer. However, being selected for an audit is not necessarily indicative of any wrongdoing.

IRS audit selection is usually made by random statistical formulas that analyze a taxpayer’s return and compare it to similar returns. A taxpayer may also be selected for an audit if they have any dealings with another person or company who was found to have tax errors on their audit.

There are three possible IRS audit outcomes available: no change to the tax return, a change that is accepted by the taxpayer, or a change that the taxpayer disagrees with. If the change is accepted, the taxpayer may owe additional taxes or penalties. If the taxpayer disagrees, there is a process to follow that may include mediation or an appeal.