Tag: ISRE 2400

  • Can an Auditor prepare the Financial Statements and then audit them?

    Can an Auditor prepare the Financial Statements and then audit them?

    Who is responsible for the preparation of the Financial Statements?

    Management is responsible for preparing and fairly presenting the financial statements under the applicable financial reporting framework.

    These responsibilities include:

    • Determining accounting policies and the accounting treatment under those policies.
    • Preparing or changing source documents or originating data, in electronic or other forms, evidencing the occurrence of a transaction. Examples include:
      • Purchase orders.
      • Payroll time records.
      • Customer orders.
      • Originating or changing journal entries.
      • Determining or approving the account classifications of transactions

    Accounting and bookkeeping services comprise a broad range of services, including:

    • Preparing accounting records or financial statements.
    • Recording transactions.
    • Providing payroll services
    • Resolving account reconciliation problems.
    • Converting existing financial statements from one financial reporting framework to another.

    Accounting and bookkeeping services that are routine or mechanical:

    1. Involve information, data or material in relation to which the client has made any judgments or decisions that might be necessary; and
    2. Require little or no professional judgment.

    Examples of services that might be regarded as routine or mechanical include:

    • Preparing payroll calculations or reports based on client-originated data for approval and payment by the client.
    • Recording recurring transactions for which amounts are easily determinable from source documents or originating data, such as a utility bill where the client has determined or approved the appropriate account classification.
    • Calculating depreciation on fixed assets when the client determines the accounting policy and estimates useful life and residual values.
    • Posting transactions coded by the client to the general ledger.
    • Posting client-approved entries to the trial balance.
    • Preparing financial statements based on information in the client-approved trial balance and preparing related notes based on client-approved records.

    The firm or a network firm may provide such services to audit clients that are not public interest entities, provided that the firm or network firm:

    • does not assume management responsibility (*) in connection with the service; and
    • addresses any threats created by providing such services that are not at an acceptable level. [MIA By-Laws: R601.5 (b)].

    (*) This includes ensuring that the client’s management:

    1. Designates an individual with suitable skill, knowledge and experience to be responsible at all times for the client’s decisions and oversee the activities. Such an individual, preferably within senior management, would understand:
      1. The objectives, nature and results of the activities; and
      2. The respective client and firm or network firm responsibilities. However, the individual is not required to possess the expertise to perform or re-perform the activities.
    2. Provides oversight of the activities and evaluates the adequacy of the results of the activities performed for the client’s purpose.
    3. Accepts responsibility for the actions, if any, to be taken arising from the results of the activities.

    Although there are risks to the auditor’s objectivity and independence when doing so, there are instances in which an audit firm will prepare the financial statements for a reporting entity and then audit them, especially for small- to mid-sized enterprises (SMEs).

    These risks must be reduced to an acceptable level before such an engagement can occur.

    The self-review threat is the most significant risk when the auditor is responsible for preparing and auditing the financial statements.

    Reviewing the audit file is one of the most important safeguards that can be put in place to ensure that the auditor’s independence and objectivity have not been compromised in any way.

    This can be done by a partner in the engagement that is not an auditor; however, an independent third-party reviewer who is not affiliated with the audit firm can give additional credibility to the process because they will not be biased.

    However, there may be circumstances where safeguards cannot eliminate the threat to independence and objectivity or decrease it to an acceptable level. In the circumstances like this, it is necessary to reject the non-audit task.

    Some professional bodies have also established which types of activities are likely to result in a self-review or self-interest threat that is so severe that the only way to bring the level of risk down to an acceptable level is to avoid participating in the activity or reject to carry out the assurance engagement.

    Audit Clients that are Not Public Interest Entities

    There is no problem (in theory) with an audit firm offering extra services to its customers that go above and beyond the task of auditing.

    In certain instances, this will assist the auditor in obtaining a deeper knowledge of the organisation and the industry in which it works.

    A firm or a network firm shall not provide to an audit client that is not a public interest entity accounting and bookkeeping services, including preparing financial statements on which the firm will express an opinion or financial information which forms the basis of such financial statements, unless:

    1. The services are of a routine or mechanical nature; and
    2. The firm addresses any threats that are created by providing such services that are not at an acceptable level.

    Audit Clients that are Public Interest Entities

    Caution must be taken since a firm or a network firm shall not provide accounting and bookkeeping services to an audit client that is a public interest entity.

    In the UK, the Corporate Governance Code requires audit committees to approve any non-audit services the auditors provide. The primary objective of this approval is to ensure that the auditor’s independence and objectivity have not been impaired.

    In Malaysia, before the provision of any non-audit services by the external auditor, the audit committee of the public listed company should review and approve the acceptance of such engagements, drawing guidance from the By-Laws (on Professional Ethics, Conduct and Practice) by the Malaysian Institute of Accountants (“MIA”).

    If the non-audit service results in concerns about independence to the extent that they cannot be reduced to an acceptable level by applying safeguards, the non-audit service shall not be accepted.

    Examples of non-audit services that shall not be provided by the external auditors of a public interest entity pursuant to the By-Laws (on Professional Ethics, Conduct and Practice) by the MIA are outlined below (s (non-exhaustive):

    • accounting and bookkeeping services, including payroll services and the preparation of financial statements or financial information;
    • valuation services if the valuations would have a material effect on the financial statements;
    • preparation of tax calculations of current and deferred tax liabilities (or assets) to prepare accounting entries that are material to the financial statements;
    • internal audit services that relate to a significant part of the internal controls over financial reporting, financial accounting systems or amount or disclosures that are material to the financial statements;
    • design or implementation of information systems that form a significant part of the internal control or information on financial reporting, accounting records or financial statements;
    • acting in an advocacy role on behalf of the company to resolve a dispute or litigation when the amounts involved are material to the financial statements;
    • recruiting services concerning a director, officer or senior management personnel who would be in a position to exert significant influence over the preparation of accounting records or financial statements; and
    • corporate finance services, which involve promoting, dealing in, or underwriting shares.

    Under Bursa Securities Listing Requirements, disclosure should also be made on the nature and extent of non-audit services if the fees on such services are “significant”.

    Conclusion

    Before a firm or a network firm accepts an engagement to provide a non-assurance service to an audit client, the firm shall apply the conceptual framework to identify, evaluate and address any threat to independence that might be created by providing that service.

    Identifying and Evaluating Threats

    Factors that are relevant in identifying the different threats that might be created by providing a non-assurance service to an audit client and evaluating the level of such threats include:

    • The nature, scope and purpose of the service.
    • Ho will the service be provided, such as the personnel involved and their location?
    • The legal and regulatory environment in which the service is provided.
    • Whether the client is a public interest entity.
    • The level of expertise of the client’s management and employees concerning the service provided.
    • The extent to which the client determines significant matters of judgment.
    • Whether the outcome of the service will affect matters reflected in the financial statements on which the firm will express an opinion, and, if so:
      • The extent to which the outcome of the service will have a material effect on the financial statements.
      • The degree of subjectivity involved in determining the appropriate amounts or treatment for those matters reflected in the financial statements.
    • The nature and extent of the impact of the service, if any, on the systems that generate information that forms a significant part of the client’s:
      • Accounting records or financial statements on which the firm will express an opinion.
      • Internal controls over financial reporting.
    • The degree of reliance that will be placed on the outcome of the service as part of the audit. • The fee relating to the provision of the non-assurance service.

    Materiality in Relation to Financial Statements

    Materiality is a factor that is relevant in evaluating threats created by providing a non-assurance service to an audit client.

    The concept of materiality in relation to an audit is addressed in ISA 320, Materiality in Planning and Performing an Audit, and in relation to a review in ISRE 2400 (Revised), Engagements to Review Historical Financial Statements.

    The determination of materiality involves the exercise of professional judgment and is impacted by both quantitative and qualitative factors. It is also affected by perceptions of the financial information needs of users.

    However, where the Code of Ethics for Professional Accountants of the International Ethics Standards Board of Accountants (IESBA) expressly prohibits the provision of a non-assurance service to an audit client, a firm or a network firm is not permitted to provide that service, regardless of the materiality of the outcome or results of the non-assurance service on the financial statements on which the firm will express an opinion.

    Our website's articles, templates, and material are solely for you to look over. Although we make every effort to keep the information up to date and accurate, we make no representations or warranties of any kind, either express or implied, regarding the website or the information, articles, templates, or related graphics that are contained on the website in terms of its completeness, accuracy, reliability, suitability, or availability. Therefore, any reliance on such information is strictly at your own risk.

    Keep in touch with us so that you can receive timely updates |

    要获得即时更新,请与我们保持联系

    1. Website ✍️ https://www.ccs-co.com/ 2. Telegram ✍️ http://bit.ly/YourAuditor 3. Facebook ✍

    4. Blog ✍ https://lnkd.in/e-Pu8_G 5. Google ✍ https://lnkd.in/ehZE6mxy

    6. LinkedIn ✍ https://www.linkedin.com/company/74734209/admin/

    14
  • What is an ‘Assurance Engagement’?

    What is an ‘Assurance Engagement’?

    The International Auditing and Assurance Standards Board (IAASB) defines assurance engagements in the International Framework for Assurance Engagements as follows:

    “An engagement in which a practitioner expresses a conclusion designed to enhance the degree of confidence of the intended users other than the responsible party about the outcome of the evaluation or measurement of a subject matter against criteria.”

    In other words, it is an engagement to express an opinion giving assurance to a set of people on information which is the responsibility of others. It can include some or all of the following aspects:

    • Environmental due diligence (evaluating whether the entity has achieved certain targets, for example).
    • Financial due diligence (reviewing a target company’s financial statements to identify matters such as contingent liabilities and loan covenants).
    • IT due diligence (evaluating the risks inherent in a company’s IT systems and the quality of those systems).
    • Operational due diligence (evaluating the operational risks associated with the company).
    • People due diligence (evaluating key staff positions, termination costs following a restructuring and integration costs).
    • Regulatory due diligence (a review of a company’s compliance with regulation).
    • Review of grant claims.

    The following characteristics differentiate an external audit from other types of assurance engagements, which include:

    Audit Engagement

    An audit is the objective examination and evaluation of an entity’s financial statements.

    The purpose is to ensure that the financial records are a true and fair representation of the transactions they claim to represent.

    The processes used and the examinations performed are known as “auditing”.

    The auditor’s conclusions are based on the evidence obtained during the audit process and are communicated in an assurance report.

    During an audit engagement, the auditor will give a high level of assurance, but not an absolute one, that the information being audited is free from material misstatement. The audit report notes this well, referring to it as reasonable assurance.

    Assurance vs Audit

    Audit refers to the techniques and procedures used to obtain evidence.

    Assurance is what is obtained as a result of the audit procedures performed.

    Review Engagement

    ISRE (International Standard on Review Engagements) 2400 Engagements to Review Financial Statements is the standard to govern review engagements.

    ISRE 2400 (Revised) addresses:

    • The practitioner’s responsibilities when engaged to review historical financial statements (when the practitioner is not the auditor of the entity); and
    • The form and content of the practitioner’s report on the financial statements.

    A review engagement is also known as a limited assurance or negative engagement.

    • It gives users limited assurance of the accuracy or correctness of financial statements.
    • A review engagement takes less time than an audit engagement since less effort is involved.

    During the engagement, the auditor performs inquiry and analytical review procedures to provide a moderate level of assurance required to give a Negative Assurance report.

    In other words, since a review engagement consists primarily of inquiry and analytical procedures, there is a greater risk that material misstatements will not be detected compared to an audit.

    Negative assurance is where a professional accountant gives an assurance that nothing has come to their attention which indicates that the subject matter has not been prepared under the framework it is being measured against.

    To develop a judgement to express negative assurance, the practitioner is required by Paragraph 7 of ISRE 2400 to gather sufficient acceptable evidence, generally through inquiry and analytical techniques.

    The procedures that the practitioner followed to arrive at this conclusion will be deciphered by the practitioner, who will consider the pertinent content of the ISRE in addition to guidance issued by relevant professional bodies, legislation, and regulation.

    In addition, the conditions of the engagement between the practitioner and the client could include agreed-upon procedures.

    Planning

    Whilst a review engagement is not an external audit, the characteristics of a review engagement are similar.

    • The practitioner should undertake planning before carrying out the detailed work, which would include (among other things):
    • Obtaining an understanding of the entity and the environment in which it operates.
    • Determining materiality levels.
    • Using the work of others.

    Obtaining sufficient appropriate evidence

    To conclude, the practitioner must obtain evidence to support the assertions made in the financial statements (or other documents on which the practitioner is forming a conclusion) and in this respect, the practitioner should:

    • Ensure they documents all important matters about the review engagement.
    • Apply professional judgement in determining the nature, timing and extent of procedures.
    • Perform work on events after the reporting period (subsequent events).
    • The practitioner should ensure they extend procedures in these areas where material misstatements are suspected.

    Reporting

    In a review engagement, the practitioner will provide the interested parties with a review report which should contain a clear written expression of negative assurance.

    As is the case in an audit, the practitioner should review and assess the conclusions drawn from the evidence obtained and use this as the basis for the expression of negative assurance and consider whether any of this evidence indicates that the financial statements do not give a true and fair view (or do not present fairly in all material respects) under the applicable financial reporting framework.

    Where matters have come to the attention of the practitioner, they should describe those matters which may have the following effects:

    Impact of finding(s)Effect on the assurance report
    MaterialPractitioner will express a qualified opinion of negative assurance
    PervasivePractitioner will express an adverse opinion that the financial statements do not give a true and fair view (or do not present fairly in all material respects)
    Limitation in scope which is material to a single areaThe practitioner should express a qualified opinion of negative assurance relating to amendments which may be required if the limitation did not exist
    Limitation in scope which is pervasiveNo assurance will be provided by the practitioner

    Comparing Audits, Reviews, and Compilations

    IFAC SMP – Guide to Review Engagements

    Our website's articles, templates, and material are solely for you to look over. Although we make every effort to keep the information up to date and accurate, we make no representations or warranties of any kind, either express or implied, regarding the website or the information, articles, templates, or related graphics that are contained on the website in terms of its completeness, accuracy, reliability, suitability, or availability. Therefore, any reliance on such information is strictly at your own risk.

    Keep in touch with us so that you can receive timely updates |

    要获得即时更新,请与我们保持联系

    1. Website ✍️ https://www.ccs-co.com/ 2. Telegram ✍️ http://bit.ly/YourAuditor 3. Facebook ✍

    4. Blog ✍ https://lnkd.in/e-Pu8_G 5. Google ✍ https://lnkd.in/ehZE6mxy

    6. LinkedIn ✍ https://www.linkedin.com/company/74734209/admin/

    15