A client, a retail clothing chain, operates hundreds of stores across the country. The auditor is developing an overall audit strategy and notes that the client uses a centralized system for purchasing and accounts payable, but each store records its own daily sales and cash receipts, which are then transmitted to corporate. How should the auditor primarily address inherent risk related to revenue recognition in this scenario?
- AEngage an IT specialist to review the centralized purchasing and accounts payable system.
- BConsider the susceptibility of sales transactions at individual store locations to misstatement.
- CFocus on the effectiveness of corporate-level controls over financial reporting.
- DIncrease the scope of substantive analytical procedures at the aggregated corporate level.
Show answer & explanationAnswer & explanation
Correct answer: B. Consider the susceptibility of sales transactions at individual store locations to misstatement.
Inherent risk is the susceptibility of an assertion to misstatement before considering internal controls. Since sales and cash receipts are recorded at individual store locations, the inherent nature of these decentralized, high-volume transactions makes them susceptible to errors or fraud at the local level, regardless of corporate-level controls. Therefore, the auditor must consider this susceptibility.
Why the other options are wrong
- A. An IT specialist might be useful for the centralized system, but the question focuses on revenue recognition, which is decentralized at the store level, making this option less relevant to the direct inherent risk for revenue.
- C. While corporate controls are important, inherent risk exists irrespective of controls. This focuses on control risk, not inherent risk.
- D. Substantive analytical procedures are audit procedures, not a primary way to *address inherent risk* itself, though they can help identify areas of higher inherent risk.
Inherent Risk - Decentralized Operations
The susceptibility of financial statement assertions to material misstatement, assuming no related internal controls, which is elevated in decentralized environments due to variations in processes, oversight, and potential for inconsistent application of policies at individual locations.
- Higher volume of transactions at multiple points increases error risk.
- Variations in local management and staff expertise.
- Challenges in consistent application of policies and procedures.
Memory trick: Decentralized means 'Different Doors for Discrepancies'.