AUD 5.6 - Reporting On Compliance Flashcards
In order for an auditor to issue a report on a clients compliance with contractual agreements or regulator requirements in connection with a financial statement audit, the auditor must have:
Audited the clients financials and may only issue negative assurance on compliance
What is negative assurance?
Meaning that nothing came to the auditors attention
Negative assurance may be give when:
- There are no identified instances of noncompliance
- The auditor expressed an unmodified opinion or qualified opinion on the financial statements
- Applicable covenants or regulatory requirements have been subjected to audit procedures as part of the financial statement audit
If an adverse or disclaimer of opinion is expressed on the financial statements, a report on compliance can…
Only be issued when there are identified instances of noncompliance
The report on compliance should be..
In writing
A separate report OR provided in one or more paragraphs in the auditors report on the financials
The attestation standards address two types of compliance engagements:
- Compliance with specified requirements
- Internal control over compliance
This engagement deals with an entity’s compliance with requirements of specified laws, regulations, rules, contracts, or grants
Compliance with specified requirements
This engagement deals with an entity’s internal control over compliance with specified requirements
Internal control over compliance
The practitioner may be engaged to perform agreed-upon proceeds to assist users in evaluating the following subject matter or assertions:
Compliance with specified requirements
Internal controls over compliance
Or both!
What are the practitioners objectives when performing agreed-upon procedures over compliance?
To present specific findings to assist users in evaluating an entity’s compliance with specified requirements or the entity’s internal control over compliance based on procedures agreed upon by the users of the report
A practitioner may perform an examination engagement over compliance if the following conditions are met:
- The responsible party accepts responsibility for compliance AND the effectiveness of the internal control
- The responsible party evaluates the entity’s compliance
- Sufficient evidential matter exists to support managements evaluation
What standards govern the following types of engagements and what assurance is provided by each?
1. Compliance report in connection with audited financial statements
2. Agreed-upon procedures
3. Examination
- Auditing Standards (SAS) - Negative assurance
- Attestation Standards (SSAE) - No assurance
- Attestation Standards (SSAE) - Reasonable assurance
The audit risk of noncompliance is calculated by:
Risk of material noncompliance X detection risk