Auditing & Assurance › Fraud & Error Responsibilities
How does the auditor address the risk of management override of controls?
AdvancedAnswer
Because management can override even effective controls, ISA 240 requires specific procedures regardless of assessed risk: testing the appropriateness of journal entries and other adjustments (especially unusual, large, or late ones), reviewing accounting estimates for bias (retrospective review of prior estimates), and evaluating the business rationale for significant unusual transactions. Unpredictability in procedures also helps.
Real-world example A retrospective review of last year's estimates reveals a consistent optimistic bias, indicating possible management manipulation.