Summary Notes Flashcards
What are the different types of assurance?
Audit of financial information: Reasonable (type), high (level), positive (opinion)
- Review of financial information: Limited (type), moderate (level of assurance), negative (opinion)
What are the objectives of an audit?
- Obtain reasonable assurance about whether the financial statements are free from material misstatement and properly prepared in accordance with an applicable financial reporting framework
- Report on the financial statements
- Communicate with those charged with governance
When are companies exempt from audit?
- Small private limited companies are exempt from a mandatory audit if they satisfy two of the following:
- No more than 50 employees
- Turnover does not exceed £10.2m
- Gross assets total does not exceed £5.1m
Subsidiary companies will not require an audit if their parent company guarantees their liabilities
Which companies must have an audit?
- Plcs
- Insurance companies and banks
- Where shareholders owning at least 10% shares ask for an audit
What are the benefits of an audit?
- Independent scrutiny of the business by experts
- Additional assurance may be necessary for third parties e.g. banks
- A growing business will need an audit one day
- Subsidiary benefits of the audit e.g. reports to management
What is the difference between audit and assurance?
- Report to
- Scope
- Reporting
- Level of assurance
- Available to
Statutory audit:
Report to: Shareholders
Scope determined by: Companies Act 2006, ISAs, Other audit regulation
Reporting: Express an opinion on the financial statements (true & fair, properly prepared), certain other matters e.g information in the directors report is consistent with the financial statements
Level of assurance: Reasonable
Circulation of report: In public domain once the accounts are filed
Other assurance:
Report to: Usually management
Scope determined by: Terms of engagement, Relevant ISAEs or ISREs
Reporting: Report a conclusion depending on the nature of the work performed
Level of assurance: Usually limited
Circulation of report: Likely to be restricted
What are management’s reponsibilities?
- Managing the business: so as to achieve company objectives, assessing business risks to those objectives being achieved
Fulfilling statutory duties under Companies Act 2006: - safeguarding the company’s assets - keeping proper accounting records
- preparing company financial statements and delivering them to Companies House
- ensuring the company complies with applicable laws and regulations
What are the auditor’s responsibilities?
Form an opinion on the financial statements:
- True & fair
- Properly prepared
- Directors’ report consistent with financial statements
Identify material misstatement whether caused by error, fraud or non-compliance
What are the fraud procedures?
- Perform a fraud risk assessment
- Exercise professional scepticism
- Discuss fraud among the engagement team
- Respond appropriately to the assessed level of fraud risk
- Consider the implications for other areas of the audit e.g. if fraud is suspected it may cast doubt on the reliability of management representations
Who do you report suspected fraud to?
Internal (management): Report to management, If management suspected of fraud, report to those charged with governance
Shareholders: Only if the fraud causes a material misstatement or uncertainty in the financial statements
Third parties: If there is a duty or right to disclose e.g. to a regulator
What are the non-compliance procedures?
ISA 250:
- Perform a risk assessment
- Obtain evidence about compliance
- If non-compliance suspected, document and discuss with management
How do you report non-compliance?
Internal (management)
- Report to management
- If management suspected of involvement in non-compliance, report to those charged with governance
- If there is no higher level of management, consider obtaining legal advice
Shareholders:
- Only if the non-compliance causes a material misstatement or uncertainty in the financial statements
Third parties:
- If there is a duty or right to disclose e.g. to a regulator
Non-compliance may involve conduct designed to conceal it, such as collusion, forgery, deliberate failure to record transactions, management override of controls or intentional misrepresentations being made to the auditor.
How do you report bribery and what should anti-bribery policies focus on?
Suspicions of bribery must be reported to the National Crime Agency (NCA) under the Proceeds of Crime Act 2002.
Policies should focus on:
- Top level culture in which bribery is unacceptable
- Risk assessment
- Due diligence procedures taking a risk-based approach
- Communication to staff including training
- Monitoring and review
What are the implications of the Sarbanes-Oxley Act 2002?
Management:
- CEOS and CFOs must attest to the veracity of the financial statements (criminal penalties apply for false attestations)
- Greater disclosure of the amendments made to the financial statements during the audit process
Auditors:
- Stricter enforcement of auditor independence rules
- Public Company Accounting Oversight Board (PCAOB) can inspect audit files of US listed companies, including subsidiaries based overseas
How do you deal with related party transactions?
ISA 550:
- Obtain a list of all related parties from management
- Carry out detailed tests of transactions and balances (as would be done on all audits but looking out for related party transactions)
- Reviewing minutes of meetings of shareholders and directors (where related party transactions may have been discussed)
- Reviewing bank confirmation letters for evidence for guarantor relationships
- Reviewing investment transactions e.g identifying new subsidiaries which are related parties
- Confirming that correct disclosures have been made in the financial statements
- Obtain written management representations confirming that all related party transactions have been disclosed
What are the money laundering responsibilities?
- Report actual or suspected money laundering to the firm’s money laundering nominated officer
- MLRO reports to NCA if necessary
- Avoid tipping off client
- Offence to tip off and an offence not to report
What are engagement regulations applicable to all engagements? What about additional guidance for audits?
All engagements:
- Ethical standards
- Risk assessment
- Terms of engagement
- ISQCs
Additional for audit:
- Companies Act 2006
- ISAs
What is the role of the IAASB?
International Auditing and Assurance Standards Board:
- Subsidiary of IFAC
- Develops international standards - issues ISAs, ISQCs and other standards
What is the role of the Financial Reporting Council?
- Supervises accountancy related issues in the UK
- Issues ISAs (UK)
- Also issues other standards and guidance for auditors:
- Ethical standards
- Practice notes
- Bulletins
- Standards for reviews of interim information
- Audit quality - thematic reviews
What are some current issues? (Harmonisation)
EU Directive and Regulation 2014 Provisions:
- Improve quality of audit and reporting
- Mandatory retendering for audits (10 years) and auditor rotation (20 years)
- Ban on providing non-audit services to public interest entities
- Cap on fees for non-audit services