preview

Summary of Au 330 Confirmation Process

Better Essays

Confirmation is the process of obtaining and evaluating a direct communication from a third party in response to a request for information about a particular item affecting financial statement assertions. It describes the concept of assessing inherent and control risks, determining the acceptable level of detection risk, and designing an audit program to achieve an appropriately low level of audit risk. The auditor uses the audit risk assessment in determining the audit procedures to be applied, including whether they should include confirmation. The greater the combined assessed level of inherent and control risk, the greater the assurance that the auditor needs from substantive tests related to a financial statement assertion. …show more content…

Since there is a risk that recipients of a positive form of confirmation request with the information to be confirmed contained on it may sign and return the confirmation without verifying that the information is correct, blank forms may be used as one way to mitigate this risk. Thus, the use of blank confirmation requests may provide a greater degree of assurance about the information confirmed. However, blank forms might result in lower response rates because additional effort may be required of the recipients; consequently, the auditor may have to perform more alternative procedures.
The negative form requests the recipient to respond only if he or she disagrees with the information stated on the request. Negative confirmation requests may be used to reduce audit risk to an acceptable level when (a) the combined assessed level of inherent and control risk is low, (b) a large number of small balances are involved, and (c) the auditor has no reason to believe that the recipients of the requests are unlikely to give them consideration. For example, in the examination of demand deposit accounts in a financial institution, it may be appropriate for an auditor to include negative confirmation requests with the customers' regular statements when the combined assessed level of inherent and control risk is low and the auditor has no reason to believe that the recipients will not consider

Get Access