Assurance and Audit Flashcards
For a reasonable type of assurance what is;
1. Assurance level
2. Opinion/conclusion
3. An example
- High
- Positive opinion
- Audit of financial information
For a limited type of assurance what is;
1. Assurance level
2. Opinion/conclusion
3. An example
- Moderate
- Negative
- Review of financial information
ISA 200 objectives of an audit
Obtain reasonable assurance about whether the financial statements are free form material misstatements.
Report on financial statements
Communicate with those charged with governance
What’s the audit threshold
Exempt:
No more than 50 employees
Turnover does not exceed 10.2 m
Gross assets total does not exceed 5.1 m
What companies must have an audit even if they meet the rules of an exception
Plcs
Insurance companies and banks
Where shareholders owning over 10% ask for an audit
Benefits of an audit
Independent scrutiny of the business
Additional assurance
A growing business will need an audit eventually
Subsidiary benefits
Name the following for Statutory audit
1. Report to
2. Scope determined by
3. Reporting
4. Level of assurance
5. Circulation of report
- Shareholders
- Companies act 2006, ISAs and other audit regulation
- Express opinion of financial statements and other matters
- Reasonable
- In public domain once filed
Name the following for assurance reports
1. Report to
2. Scope determined by
3. Reporting
4. Level of assurance
5. Circulation of report
- Management
- Terms of agreement and relevant ISAEs and ISREs
- Report on conclusion depending on the nature of work
- Usually limited
- Likely to be restricted
Management responsibilities
Managing the business (to achieve company objectives, assessing business risks)
Fulfilling duties under companies act 2006 (safeguarding of company assets, proper accounting records, compliance with laws)
Auditor responsibilities
Form an opinion on the financial statements (true and fair, properly prepared, directors report consistent with FS)
Identify material misstatements whether caused by error, fraud or noncompliance
5 fraud procedures (isa 240)
- Perform a fraud risk assessment
- Exercise professional scepticism
- Discuss fraud among the engagement team
- Respond appropriately to the assessed level of fraud risk
- Consider the implications for other areas of the audit
Reporting suspected fraud to
1. Management
2. Those charged with governance
3. Shareholders
4. third parties
- All cases except below
- If management are suspected of fraud
- If fraud causes a material misstatement or uncertainty in FS
- If there is a duty or right to disclose
3 non compliance procedures (isa 250)
- Perform a risk assessment
- Obtain evidence about compliance
- If noncompliance suspected, document and discuss with management
Reporting non compliance to;
1. Internal (management)
2. Those charged with governance
3. Shareholders
4. Third parties
- All other cases except below
- If management suspected of involvement in non-compliance
- If non compliance causes a material misstatement of uncertainty in FS
- If there is a duty or right to disclose
What should anti-bribery policies focus on? (Bribery act 2010)
- top level culture in which bribery is unacceptable
- risk assessment
- due diligence procedures taking a risk based approach
- communication to staff including training
- monitoring and review
Implications of the Sarbanes-Oxley act 2002 on
1. Management
2. Auditors
- COE and CFO must attest veracity if the FS
- Greater disclosure of the amendments made to the FS
- Stricter enforcement of independence rules
- Public company accounting over sight (PCAOB) can inspect audit files of us listed companies
7 steps of related party transactions (isa 550)
- Obtain list of all related parties from management
- Carry out detailed tests of transactions and balances
- Reviewing minutes of meetings of shareholders and directors
- Reviewing bank confirmation letters for evidence of guarantor relationships
- Reviewing investment transactions (to identify related parties)
- Confirm the correct diclosures have been made in the FS
- Obtain written management representation that all related parties have been disclosed
Money laundering responsibilities
- Report actual or suspected money laundering to the firms money laundering nominated offer
- Money laundering nominated officer reports to national crime agency (NCA) if required
- Avoid tipping off the client
What’s the laws under GDPR and Data protection act?
- Anyone processing data has to make sure that is is correctly protected
- Individuals can access their data and how it is processed
- Personal data can only be held with permission or by law
What does the auditor need to do if climate change impacts entity
- Consider risk of material misstatement for the climate related risks
- Understand how climate related risks affect their responsibilities
What standards are applicable to;
1. all engagements
2. Additional guidance
- Ethical standards
Risk assessment
Terms of engagement
ISQMs - Companies act 2006
ISAs
Roles of the international auditing and assurance standards board (IAASB)
- subsidiary or IFAC
- develop international standards (issues ISAs, ISQMs and other standards)
Role of the financial reporting council (FRC)
- supervises accountancy related issues in the UK
- issues ISAs (UK)
- Also issues other standards and guidance (ethical standard, practice notes, bulletins)
- occasionally brief paper on key audit issues
- investigates matters of misconduct and has disciplinary powers against audit firms
Outline the EU directive and regulations 2014 provisions
- improve quality if audit and reporting
- mandatory retendering for audits (10 years) and auditor rotation (20 years)
- ban on providing non-audit services to public interest entities
- cap on fees for non-audit services
What is the topic of the briefing paper issued by FRC on professional scepticism
It recognises the difficulty in exercising scepticism when the culture of audit firms encourages close working relationships with clients
Outline some new considerations for FRC in relation to auditing standards
-big data
- the future of audit
- joint audits
- climate change and sustainability
- technological advances
What are the fundamental ethical principles?
- integrity
- objectivity
- professional competence and due care
- confidentiality
- professional behaviour
What are the threats to objectivity and independence
- self-Interest threat
- self review threat
- advocacy threat
- familiarity threat
- intimidation threat
- management threat
Def: integrity
To be straightforward and honest in all professional and business relationships.
What non audit services are prohibited for PIE clients that are also audit clients
- tax services
- playing any part in decision making
- bookkeeping/ preparing FS
- payroll services
-design / implementation of internal controls or risk management procedures - valuation services
- legal services
What’s the duty of confidentiality mean
Auditors should not;
- disclose client information unless there is a right or duty to
- should take all reasonable steps to preserve confidentiality
- should not use confidential information for personal advantage
What are appropriate safeguards if a firm works for two clients whose interests are in conflict
- separate teams
- information barriers
- confidentiality agreements signed by employees and partners
- review if the application of safeguards by an independent partner
Social media benefits
- sharing experiences
- creating engagement
- easing awareness
Social media negatives
- confidentiality breaches
Criticism
Lack of integrity / professional behaviour
Offensive posts
Illegal acts
Consequences of poor quality management of an audit firm
Icaew
- fines
- disciplinary action
- withdrawal of the firms with oration to carry out audits
Other
- being sued for negligence
- collapse of the assurance firm
- loss of reputation, clients and key staff
- companies act 2006 act offence
Components of a system of quality management
- the firms risk assessment process
- governance and leadership
- relevant ethical requirements
- acceptance and continuance
- engagement performance
- resources
- information and communication
- monitoring and remediation