Audits - IT Implications of CAS 315

Overview:

Beginning with audits of financial statements for periods beginning on or after December 15, 2021, CAS 315, Identifying and Assessing the Risks of Material Misstatement, was significantly revised, reorganized, and enhanced to respond to challenges and issues faced by practitioners. The revisions require a more robust risk identification and assessment process to promote improved responses to identified risks. Among the more notable enhancements was increased guidance on Information Technology (IT), particularly on general IT controls (GITCs). This course will cover the concepts and definitions needed to understand an organization’s use of IT as well as the enhancements and clarifications to help you, the auditor, apply the audit risk model to IT in planning your audit engagements.

This course reviews the revisions to CAS 315, Identifying and Assessing the Risks of Material Misstatement. In particular, it will review the key changes to obtaining an understanding of an organization’s use of IT and the risks arising from that use. The course builds on your understanding of planning an audit, with a risk-based approach, based on a strong understanding of the business and its environment, including technology.

This course will focus on obtaining an understanding of the IT Environment and GITCs. To accomplish this, it will first start with an introduction to the components of IT that are relevant to an audit of financial statements and the linkage between the business and IT processes and controls within the entity’s system of internal control.

In short, this course is intended to provide you with guidance on the practical application of key revisions in the standard relating to IT.

Course Content:

In this course, you will gain knowledge about the following topics: 

• Components of internal control, including IT
• Gaining an understanding of an organization’s use of IT
• Components of IT that are relevant to the audit of financial statements
• Risks arising from the Use of IT
• An introduction to General IT Controls
• Primer on end user computing

Learning Objectives:

Upon completing this course, you should be able to: 

• Develop an approach to the implementation of CAS 315 in their practice related to obtaining an understanding of the 5 components of internal control, with a focus on the IT Environment and General IT controls
• Apply the control risk assessment, recognizing the role of technology.
• Describe the concept of “scalability” and how the requirements of CAS 315 vary based on the nature and size of an organization

Who Will Benefit: 

Auditors who need to understand and apply Revised CAS 315.

Testimonials: