Latest / VoraPrep Audio — Professional Licensure & Certification Exam Prep / [CPA] AUD: Risk Assessment: Using Analytical Procedures as an Audit Tool
Transcript
- Hey, welcome to VoraPrep Audio. Let's talk about one of the most powerful tools you have as an auditor, especially early in the audit. It’s analytical procedures. I want you to picture this. You're auditing a hot new tech company. The revenue chart is a beautiful hockey stick, going straight up and to the right. Everyone's excited. But you do a quick calculation, and you notice their Days Sales Outstanding—their DSO—has doubled in the last year. That’s… weird. While sales are soaring, it's taking them twice as long to collect cash from customers. That single number is your early warning. It’s a red flag. It could mean they’re getting aggressive with how they recognize revenue, or maybe they have a huge collections problem nobody's talking about. That's the power of analytical procedures. They let you see past the headline numbers to find where the real risks are hiding. It turns a massive, overwhelming audit into a targeted, efficient investigation. So how does this fit into the big picture? It plugs directly into the Audit Risk Model. You remember that formula: Audit Risk equals Inherent Risk times Control Risk times Detection Risk. Analytical procedures, when you use them in the planning stage, are all about sniffing out a higher Risk of Material Misstatement. That's your RMM. They point you to areas with high Inherent Risk—that’s the risk that an account is just naturally prone to mistakes, even before you think about any controls. For instance, if you run the numbers and see gross margins are tanking, that points to a higher inherent risk that inventory might be obsolete. The pressure is on to avoid a write-down. These procedures can also give you hints about Control Risk—the risk that the company’s own internal controls won’t catch a mistake. But primarily, in this early stage, you’re focused on that inherent risk. Once you’ve assessed the RMM, you, the auditor, get to decide how to respond. You control that last piece of the puzzle: Detection Risk. If the RMM is high, you have to set your detection risk low. And what does that mean? It means you have to do more work. More rigorous, extensive testing on those specific high-risk accounts. So, these procedures aren't just busywork. They literally write your audit plan for you. Now, when we say "analytical procedures," it's not just a bunch of financial ratios. It's a whole toolkit. You've got trend analysis. This is probably the simplest one. You're just comparing this year's numbers to last year's. Like, how did sales in May of this year compare to last May? Any big, unexplained jumps or dips? Then you can compare their actual results to their own budgets and forecasts. If a company budgeted for a five percent increase in sales and they hit fifty percent… that's great for them, but for you as the auditor, it's a question mark. Why? What happened? Of course, there’s ratio analysis, which is what we did with that DSO example. This is where you really see the relationships between different accounts. And it’s not just about their own history. You also want to do some industry comparison. Is your client an outlier? If their inventory turnover is way slower than all their competitors, that tells you something important about their risk of obsolescence. And one that’s really powerful is looking at the relationship between financial data and non-financial data. Think about a hotel. If their reported revenue goes up 30 percent, but you find out their occupancy rates were flat all year… how is that possible? Those two things should move together. When they don't, you dig in. There’s a simple, four-step process to doing this right. First, you develop an expectation. Before you even look at the client’s number, you form your own idea of what it should be. Based on last year, or industry trends, or some other data. It has to be a pretty precise expectation, not just a vague guess. Second, you define a tolerable difference. How far off can their number be from your expectation before you get concerned? This is always going to be less than your performance materiality for the account. Third, you compare. You take their number, put it next to your expectation, and calculate the difference. And finally, step four: investigate and corroborate. If the difference is bigger than what you decided was tolerable, you have to find out why. And this is key: you can't just ask management and take their word for it. A vague answer like, "Oh, we had a good year," is not audit evidence. You need to get actual, corroborating evidence for their explanation. Let’s walk through a quick example. Let's call the company Innovate Corp. It’s the end of Year 2. Revenue went up from 4 million to 5 million dollars. Great. Cost of Goods Sold went from 2.6 million to 3.5 million. Accounts Receivable more than doubled, from about 658 thousand to 1.37 million. Whoa. Okay, let's follow the process. First, our expectation. Let's calculate a few key ratios. Their gross margin in Year 1 was 35 percent. This year, in Year 2, it’s dropped to 30 percent. And we know the industry average is 32. So they've fallen behind last year and the industry. That's a flag. Now for A/R. Their DSO, Days Sales Outstanding, in Year 1 was 60 days. In Year 2… it’s 100 days. One hundred. And the industry average is 45. This is not a small change. It's a massive jump. So what does this tell us? The falling gross margin increases the inherent risk for the *valuation* assertion of inventory. There’s a risk that management is avoiding writing down obsolete inventory because it would make their margins look even worse. And that skyrocketing DSO? That points to a high inherent risk for a couple of things. First, the *valuation and allocation* assertion for accounts receivable. Are those receivables actually collectible? And second, it could even point to an issue with the *occurrence* assertion for revenue. Is it possible they recorded some sales prematurely just to hit that five-million-dollar target? So, your audit plan now has to reflect this. You’re going to need to do way more substantive work on A/R and inventory. For receivables, that means testing subsequent cash receipts more thoroughly, maybe sending more confirmations, and really scrutinizing that aging schedule. For inventory, you’ll want to be extra careful at the physical count, looking for dusty boxes in the corner, and you'll need to really test their net realizable value calculations. Now, a really common wrong answer on an exam question like this would be to say these red flags indicate high *control risk*. It feels logical, right? Bad results must mean bad controls. But that's mixing things up. At this planning stage, these analytical procedures are highlighting high *inherent risk*—the risk that exists in the business itself. The declining margin and climbing DSO are symptoms of potential problems with the valuation of assets. Assessing the controls comes next. First you identify *what* might be wrong, then you figure out if the controls would have caught it. To keep the four steps straight, I like the mnemonic D-T-C-I. D-T-C-I. Just think: "Don't Trust, Check It!" Develop an expectation. Tolerable difference. Compare. And Investigate. On the exam, they won't just ask you to calculate a ratio. They test your ability to interpret it. So when you get a question with a bunch of numbers, your first move should always be to find the biggest fluctuation. Scan the data, find the number that sticks out like a sore thumb. A 5% change probably isn't the story. A 70% change is. The question is almost always built around that one big anomaly. Find it, and it will lead you straight to the risk, the assertion, and the right audit response. And remember to never analyze a ratio in a vacuum. A number by itself means nothing. You need context. Is it a change from last year? Is it different from the industry? Does it contradict what management told you to expect in their budget? Does it conflict with non-financial data? Always look for the whole story. Look, this is a big topic, and getting comfortable with it just takes practice. If you want to really get this down, with more lessons and thousands of practice questions, check out the full course. VoraPrep is a full exam-prep app — lessons, practice questions, and an AI tutor in one place. You can find everything at Vora Prep dot com. It's free to get started and see if it works for you. So, the key things to remember: Analytical procedures are required in planning and final review. They help you assess the Risk of Material Misstatement, which lets you plan your audit. And just remember that process: Develop an expectation, define a tolerable difference, compare, and investigate. D-T-C-I. You’ve got this. Keep up the great work, and I'll talk to you in the next one.