Information Technology Considerations in Risk-Based Auditing: A Strategic Overview (Discussion Paper) – A timely discussion paper intended to provide readers with detailed, practical guidance on implementing the technology-related aspects of the new Risk-Based Standards (SAS Nos. 104-111). Learn More>>

SAS No. 94 - The Effect of Information Technology on the Auditor's Consideration of Internal Control in a Financial Statement Audit
(Superceded by SAS Nos. 109 and 110)
Guidance is provided on the independent auditor's consideration of an entity's internal control in an audit of financial statements in accordance with generally accepted auditing standards. It defines internal control, describes the objectives and components of internal control, and explains how an auditor should consider internal control in planning and performing an audit. Learn More>>

SAS No. 99 - Consideration of Fraud in a Financial Statement Audit
Provides a description and characteristics of fraud, the need to possess professional skepticsm and discussion among engagement personnel regarding the risks of material misstatement due to fraud. Learn More>> 

SAS No. 104 - Amendment to Statement on Auditing Standards No. 1, Codification of Auditing Standards and Procedures (“Due Professional Care in the Performance of Work”)
This standard requires the independent auditor to plan and perform his or her work with due professional care. Due professional care imposes a responsibility upon each professional within an independent auditor's organization to observe the standards of field work and reporting. Learn More>>

SAS No. 105 - Amendment to Statement on Auditing Standards No. 95, Generally Accepted Auditing Standards
This standard requires the independent auditor to plan and perform his or her work with due professional care. Due professional care imposes a responsibility upon each professional within an independent auditor's organization
to observe the standards of field work and reporting. Learn More>>

SAS No. 106 - Audit Evidence
This standard provides guidance about concepts underlying the third standard of field work; defining audit evidence and relevant assertionsa and discusses their use ina ssessing risks and designing appropriate further audit procedures. Also covers the qualitative aspects that the auditor considers in determining the sufficiency and appropriateness of audit evidence; and describes various audit procedures and discusses the purposes for which they may be performed. Learn More>>

SAS No. 106 - Related Interpretations
Auditor considerations are discussed with relation to audit evidence interpretations in interim financial statements. Modifications introduce a need for estimates to a greater extent than is necessary for annual financial information. Learn More>>

SAS No. 107 - Audit Risk and Materiality in Conducting an Audit
This standard provides guidance on the auditor's consideration of audit risk and materiality when performing an audit of financial statements in accordance with generally accepted auditing standards. Audit risk and materiality affect the application of generally accepted auditing standards, especially the standards of fieldwork and reporting, and are reflected in the auditor's standard report. Learn More>>

SAS No. 108 - Planning and Supervision
Professionals possessing information technology (IT) skills are often needed to determine the effect of IT on the audit, to understand the IT controls, or to design and perform tests of IT controls or substantive procedures. Factors to consider in determining whether such a professional is needed on the audit team, the auditor should consider multiple factors. Learn More>>

SAS No. 108 - Related Interpretations
What specific things an auditor should the auditor consider in discussing matters that may affect the audit with firm personnel responsible for non-audit services to the entity?  Auditors should consider the effect of information technology on the non-audit service.  Learn More>>

SAS No. 109 - Understanding the Entity and Its Environment and Assessing the Risks of Material Misstatement
This standard establishes standards and provides guidance on obtaining sufficient understanding of the entity and its environment to assess the risk of material misstatement of the financial statements.  Information technology is a key component of the entity's environment. Learn More>>

SAS No. 110 - Performing Audit Procedures in Response to Assessed Risks and Evaluating the Audit Evidence Obtained
This standard establishes standards and provides guidance on determining responses and designing and performing further audit procedures to respond to the assessed risks of material misstatement.  The auditor should obtain audit evidence about the accuracy and completeness of information produced by the entity's information system when that information is used in performing audit procedures. Learn More>>

SAS No. 112 - Communicating Internal Control Related Matters Identified in an Audit
(Superceded by SAS No. 115)
Control deficiencies such as inadequate design of information technology (IT) general and application controls that prevent the information system from providing complete and accurate information consistent with financial reporting objectives and current needs may result in significant deficiencies or material weaknesses.  Learn More>>

SAS No. 112 - Related Interpretations
(Superceded by SAS No. 115)
How should the definitions of the terms control deficiency, significant deficiency, and material weakness, found in AU section 325 be adapted and applied in the context of reporting on internal control over compliance in a single audit?  Learn More>>

SSAE No. 15 - An Examination of an Entity’s Internal Control Over Financial Reporting that Is Integrated With an Audit of Its Financial Statements
Effective for integrated audits for periods after 12/15/2008, auditors should exam an entity's internal control over financial reporting.  Understanding the information technology (IT) environment and related IT general and application controls will help the auditor assess the effectiveness. Learn More>>

SAS No. 115 - Communicating Internal Control Related Matters Identified in an Audit
Material weakness and significant deficiencies have been revised.  Effective for audits for periods ending after 12/15/2009, SAS No. 115 aligns the definitions and related guidance for evaluating deficiencies in internal control with the definitions and guidance in SSAE No. 15.  Learn More>>