book

Audit Planning: A Risk-Based Approach

by K. H. Spencer Pickett

August 2013

Intermediate to advanced

304 pages

7h 3m

English

Wiley

Read now

Unlock full access

INTRODUCTIONRISK-BASED AUDIT-PLANNING MODEL: PHASE ONERISK-BASED AUDIT-PLANNING MODEL: PHASE TWORISK-BASED AUDIT-PLANNING MODEL: PHASE THREERISK-BASED AUDIT-PLANNING MODEL: PHASE FOURRISK-BASED AUDIT PLANNING MODEL: FINALSUMMARYNOTES
INTRODUCTIONBASIC PLANNING MODEL: PHASE ONEBASIC PLANNING MODEL: PHASE TWOBASIC PLANNING MODEL: PHASE THREEBASIC PLANNING MODEL: PHASE FOURBASIC PLANNING MODEL: FINALSUMMARYNOTES

INTRODUCTIONCORPORATE RISK REGISTER MODEL: PHASE ONECORPORATE RISK REGISTER MODEL: PHASE TWOCORPORATE RISK REGISTER MODEL: PHASE THREECORPORATE RISK REGISTER MODEL: PHASE FOURCORPORATE RISK REGISTER MODEL: FINALSUMMARYNOTES
INTRODUCTIONANNUAL AUDIT-PLANNING MODEL: PHASE ONEANNUAL AUDIT-PLANNING MODEL: PHASE TWOANNUAL AUDIT-PLANNING MODEL: PHASE THREEANNUAL AUDIT-PLANNING MODEL: PHASE FOURANNUAL AUDIT-PLANNING MODEL: FINALSUMMARYNOTES
INTRODUCTIONENGAGEMENT PLANNING MODEL: PHASE ONEENGAGEMENT PLANNING MODEL: PHASE TWOENGAGEMENT PLANNING MODEL: PHASE THREEENGAGEMENT PLANNING MODEL: PHASE FOURENGAGEMENT PLANNING MODEL: FINALSUMMARYNOTES
INTRODUCTIONPROJECT MANAGEMENT PLANNING MODEL: PHASE ONEPROJECT MANAGEMENT PLANNING MODEL: PHASE TWOPROJECT MANAGEMENT PLANNING MODEL: PHASE THREEPROJECT MANAGEMENT PLANNING MODEL: PHASE FOURPROJECT MANAGEMENT PLANNING MODEL: FINALSUMMARYNOTES
INTRODUCTIONRISK FOCUS MODEL: PHASE ONERISK FOCUS MODEL: PHASE TWORISK FOCUS MODEL: PHASE THREERISK FOCUS MODEL: PHASE FOURRISK FOCUS MODEL: FINALSUMMARYNOTES
INTRODUCTIONHOLISTIC RISK-BASED AUDIT PLANNING MODEL: PHASE ONEHOLISTIC RISK-BASED AUDIT PLANNING MODEL: PHASE TWOHOLISTIC RISK-BASED AUDIT PLANNING MODEL: PHASE THREEHOLISTIC RISK-BASED AUDIT PLANNING MODEL: PHASE FOURHOLISTIC RISK-BASED AUDIT PLANNING MODEL: FINALSUMMARYNOTES
ASSESSING THE RBAP COMPONENT CHECKLIST

Content preview from Audit Planning: A Risk-Based Approach

3 USING THE CORPORATE RISK REGISTER

Evaluating management's risk processes is different than the requirement that auditors use risk analysis to plan audits. However, information from a comprehensive risk management process, including the identification of management and board concerns, can assist the internal auditor in planning audit activities.

—IIA Practice Advisory 2100-3

INTRODUCTION

This chapter addresses the important topic of the corporate risk register, otherwise known as the risk log/database. There is a growing school of thought that suggests that the audit universe is the risk universe. Moreover, the audit risk that drives audit's plans is primarily derived from risks that drive the organization's activities in managing threats and opportunities. Some commentators go so far as to argue that audit should simply adopt the corporate risk register into their plans and so align themselves entirely with what the entity views as the key risks to its continued success. The model developed here makes use of these ideas, developing them into a more well-rounded view of how and where the corporate risk register may be fed into the audit-planning process.