25.142 As stated previously, when forming an opinion, the audit team should evaluate management’s assessment and its report. When performing such evaluation, the auditor evaluates whether:
• management properly stated its responsibility for establishing and maintaining adequate internal control
• management’s description of internal control covered by their assessment is adequate
• the framework used by management is appropriately identified
• management’s assessment is free of material misstatement and acceptable by:
– stating whether internal control is effective
– avoiding negative assurance (“nothing came to our attention”)
– not concluding that internal control is effective when a material weakness exists
• material weaknesses are disclosed
• the date of their assessment (assertion) is appropriately disclosed