Page 114 - Auditing Standards

As of December 15, 2017

.29 The auditor also should obtain an understanding of how IT affects the company's flow of transactions.
(See Appendix B.)

Note: The identification of risks and controls within IT is not a separate evaluation. Instead, it is an integral
part of the approach used to identify significant accounts and disclosures and their relevant assertions

and, when applicable, to select the controls to test, as well as to assess risk and allocate audit effort.

.30 A company's business processes are the activities designed to:

a. Develop, purchase, produce, sell and distribute a company's products or services;

b. Record information, including accounting and financial reporting information; and

c. Ensure compliance with laws and regulations relevant to the financial statements.

.31 Obtaining an understanding of the company's business processes assists the auditor in obtaining an
understanding of how transactions are initiated, authorized, processed, and recorded.

.32 A company's period-end financial reporting process, as referred to in paragraph .28e, includes the
following:

Procedures used to enter transaction totals into the general ledger;

Procedures related to the selection and application of accounting principles; 17

Procedures used to initiate, authorize, record, and process journal entries in the general ledger;

Procedures used to record recurring and nonrecurring adjustments to the annual financial statements
(and quarterly financial statements, if applicable); and

Procedures for preparing annual financial statements and related disclosures (and quarterly financial
statements, if applicable).

.33 Communication. The auditor should obtain an understanding of how the company communicates
financial reporting roles and responsibilities and significant matters relating to financial reporting to relevant
company personnel and others, including:

111