What are the different types of assurance?
Audit of financial information: Reasonable (type), high (level), positive (opinion)
- Review of financial information: Limited (type), moderate (level of assurance), negative (opinion)
What are the objectives of an audit?
When are companies exempt from audit?
Subsidiary companies will not require an audit if their parent company guarantees their liabilities
Which companies must have an audit?
What are the benefits of an audit?
What is the difference between audit and assurance?
Statutory audit:
Report to: Shareholders
Scope determined by: Companies Act 2006, ISAs, Other audit regulation
Reporting: Express an opinion on the financial statements (true & fair, properly prepared), certain other matters e.g information in the directors report is consistent with the financial statements
Level of assurance: Reasonable
Circulation of report: In public domain once the accounts are filed
Other assurance:
Report to: Usually management
Scope determined by: Terms of engagement, Relevant ISAEs or ISREs
Reporting: Report a conclusion depending on the nature of the work performed
Level of assurance: Usually limited
Circulation of report: Likely to be restricted
What are management’s reponsibilities?
What are the auditor’s responsibilities?
Form an opinion on the financial statements:
- True & fair
- Properly prepared
- Directors’ report consistent with financial statements
Identify material misstatement whether caused by error, fraud or non-compliance
What are the fraud procedures?
Who do you report suspected fraud to?
Internal (management): Report to management, If management suspected of fraud, report to those charged with governance
Shareholders: Only if the fraud causes a material misstatement or uncertainty in the financial statements
Third parties: If there is a duty or right to disclose e.g. to a regulator
What are the non-compliance procedures?
ISA 250:
How do you report non-compliance?
Internal (management)
Shareholders:
- Only if the non-compliance causes a material misstatement or uncertainty in the financial statements
Third parties:
- If there is a duty or right to disclose e.g. to a regulator
Non-compliance may involve conduct designed to conceal it, such as collusion, forgery, deliberate failure to record transactions, management override of controls or intentional misrepresentations being made to the auditor.
How do you report bribery and what should anti-bribery policies focus on?
Suspicions of bribery must be reported to the National Crime Agency (NCA) under the Proceeds of Crime Act 2002.
Policies should focus on:
- Top level culture in which bribery is unacceptable
- Risk assessment
- Due diligence procedures taking a risk-based approach
- Communication to staff including training
- Monitoring and review
What are the implications of the Sarbanes-Oxley Act 2002?
Management:
Auditors:
How do you deal with related party transactions?
ISA 550:
What are the money laundering responsibilities?
What are engagement regulations applicable to all engagements? What about additional guidance for audits?
All engagements:
Additional for audit:
What is the role of the IAASB?
International Auditing and Assurance Standards Board:
What is the role of the Financial Reporting Council?
What are some current issues? (Harmonisation)
EU Directive and Regulation 2014 Provisions:
What are some current issues (professional scepticism/newer considerations)?
PS; the FRC issued a briefing paper on professional scepticism.
Recognises the difficulty in exercising scepticism when the culture of audit firms encourages close working relationships with clients
Newer:
What are the fundamental ethical principals?
What are the threats to objectivity and independence?
What length of time must the audit firm monitor?
The audit firm must monitor the length of time that partners and senior staff work on the client. Self-interest, self-review and familiarity threats