CPA Exam Lab
Section 2: 25–35%A5

Understanding the Entity and Its Environment

Exam Insight

Risk assessment starts with understanding the client. The CPA exam tests whether candidates know what the auditor must learn about the entity, its industry, and its internal control before designing audit procedures. Skipping this step leads to ineffective audits and wrong answers.

What AICPA Wants You to Know

  • 1Identify the components of the entity's environment the auditor must understand
  • 2Explain the purpose of understanding internal control in risk assessment
  • 3Describe risk assessment procedures: inquiry, observation, inspection, and analytical procedures
  • 4Understand the five components of internal control (COSO framework)
  • 5Recognize how industry and regulatory factors affect audit risk