Prior to SOX, external auditors were required to be familiar with the client organization’s internal controls, but not test them. Explain.

When a substantive audit strategy is adopted, an auditor will O determine internal controls are effective in mitigating risks. O increase the amount of their substantive testing. O test controls extensively. O not need to document the internal control system.

Is an organization’s internal audit function part of its system of internal controls? If your answer is yes, explain how the internal audit function can evaluate the design adequacy and operating effectiveness of internal controls and at the same time remain independent of the organization’s system of internal controls. If your answer is no, explain the internal audit function’s role relative to the organization’s system of internal controls.

Auditors must consider these five components of COSO internal controls when understanding the client and its internal controls Select an answer and submit. For keyboard navigation, use the up/down arrow keys to select an answer. a control environment, tone at the top, risk assessment, segregation of duties, monitoring b control environment, tone at the top, risk assessment, control activities, monitoring c control activities. control environment, risk assessment, info and communications, monitoring d control activities, control environment, monitoring, tone at the top, info and commumication