-
Understand the nature of fraud, the motivations to commit fraud, and the manner in which fraud may be perpetrated
-
Exercise "professional skepticism" throughout the entire fraud risk assessment process
-
"Brain storm" and share knowledge with other audit team members
-
Obtain information useful in identifying and assessing fraud risk
-
Identify the specific fraud risks, including potential magnitude, and areas like to be affected by a fraud
-
Evaluate the quality of the company's controls and potential effectiveness in mitigating the risk of fraud
-
Respond; that is, adjust audit procedures to assure that the audit adequately address the risk of fraud and provides evidence specifically related to the possibility of fraud
-
Evaluate findings. If evidence signals that a fraud might exist, determine whether or not forensic or specialist auditors are needed to complete the investigation. Reevaluate the need for additional procedures to determine the existence of amount of fraud
-
Communicate the possibility that fraud exist to management, or to the audit committee or the full board if the fraud is material and/or involves members of management
-
Document the audit approach, starting with Step 1 through the completion of all of the steps identified above
|
|
