Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

AICPA CPA-Auditing Exam - Topic 3 Question 60 Discussion

Posted by Dottie on Oct 26, 2022 at 01:47 AM

For a nonissuer, a previously communicated significant deficiency that has not been corrected, ordinarily should be communicated again:

Suggested Answer: D

Choice 'd' is correct. A previously communicated significant deficiency that has not been corrected ordinarily should be communicated again in writing, during the current audit.

Choices 'a' and 'c' are incorrect. The auditor is required to communicate significant deficiencies each year, regardless of whether the deficiency has a material effect on the auditor's assessment of control risk or the deficiency is considered a material weakness.

Choice 'b' is incorrect. The auditor is required to communicate significant deficiencies each year, even if the entity accepts that degree of risk because of cost-benefit considerations.


Get Premium CPA-Auditing Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
PH
Phuong 11 months ago
Not sure about D, seems like overkill for a deficiency.
MA
Margery 11 months ago
B makes sense too, cost-benefit is a real factor.
CH
Chau 12 months ago
Wait, isn't it only if there's a material weakness?
LE
Leatha 12 months ago
Agree with D, communication is key!
TE
Teresita 12 months ago
I think it's D, definitely needs to be in writing.
NO
Noble 1 year ago
I’m confused about whether a significant deficiency needs to be communicated again if it’s not a material weakness. I wish I could remember the exact guidelines!
ET
Ettie 1 year ago
I’m leaning towards option D because I recall that significant deficiencies should be documented in writing during the audit process.
CH
Charlena 1 year ago
I feel like there was a practice question about this, and it mentioned something about cost-benefit considerations. Maybe that's relevant here?
LI
Lizette 1 year ago
I think I remember that we need to communicate significant deficiencies again if they impact control risk, but I'm not entirely sure if that's the only condition.
BE
Beatriz 1 year ago
Ah, this is a good one. The information security manager needs to balance the risk of a breach with the proper classification of data. I think I know the right approach, but I'll double-check my reasoning before selecting an answer.
MA
Maira 1 year ago
Okay, let's see. The CISO has implemented a risk management capability, so it's likely a program or portfolio-level function, not just a single service. I'm leaning towards "Program" or "Portfolio" as the best answer.
XU
Xuan 1 year ago
Alright, time to put my AWS knowledge to the test. I believe the correct answers are A and B - we can upgrade or downgrade the instance configuration.
MI
Miesha 1 year ago
Hmm, I'm not sure about this. I know the auditors have some role in detecting fraud, but I can't remember the specifics. I'll have to think this through carefully.
0/2000 characters

Save Cancel