1: International regulatory environments for audit and assurance servicesTopic List International regulatory frameworks for audit and assurance Audit committees Internal control effectiv
Trang 1ACCA APPROVED CONTENT PROVIDER
Trang 2Professional Paper P7 Advanced Audit and Assurance (INT)
(000)ACP7(INT)PC14_FP_Ricoh.qxp 5/13/2014 10:03 PM Page i
Trang 3First edition 2007, Eighth Edition July 2014
ISBN 9781 4727 1135 9
e ISBN 9781 4727 1191 5
British Library Cataloguing-in-Publication Data
A catalogue record for this book is available from the
British Library
Your learning materials, published by BPP Learning
Media Ltd, are printed on paper obtained from traceable
All rights reserved No part of this publication may be reproduced, stored in a retrieval system or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise, without the prior written permission of BPP Learning Media.
© BPP Learning Media Ltd 2014 (000)ACP7(INT)PC14_FP_Ricoh.qxp 5/13/2014 10:03 PM Page ii
Trang 4Page iii
Contents
Preface
Welcome to BPP Learning Media’s ACCA Passcards for Paper P7 Advanced Audit and Assurance (INT).
They focus on your exam and save you time.
They incorporate diagrams to kick start your memory.
They follow the overall structure of BPP Learning Media’s Study Texts, but BPP Learning Media’s ACCA
Passcards are not just a condensed book Each card has been separately designed for clear presentation.
Topics are self contained and can be grasped visually
ACCA Passcards are still just the right size for pockets, briefcases and bags.
Run through the Passcards as often as you can during your final revision period The day before the exam, try
to go through the Passcards again! You will then be well on your way to passing your exams.
Good luck!
Trang 5Preface
Page
1 International regulatory environments
for audit and assurance services 1
9 Evaluation and review (ii): matters
relating to specific accounting issues 69
Page
10 Evaluation and review (iii): matters relating to specific accounting issues 77
11 Group audits and transnational audits 85
12 Audit-related services and other
Trang 61: International regulatory environments for audit and assurance services
Topic List
International regulatory frameworks for
audit and assurance
Audit committees
Internal control effectiveness
Money laundering
Law and regulations
This chapter looks at the regulatory environment in whichauditing takes place Directors of companies are
encouraged to follow what has been set down as goodpractice by various government committees
Those charged with governance need to ensure thatinternal controls perform effectively, as part of theirstatutory duties Recent moves have sought transparency
by asking directors to report to shareholders on theseissues
(001)ACP7(INT)PC14_CH01.qxp 5/13/2014 10:03 PM Page 1
Trang 7Money laundering
Internal control effectiveness
International regulatory
Audit committees
International Regulatory Framework
Example: UK Regulatory FrameworkAuditors
EU requires member states to approve auditors
In UK RSBs, eg ACCA Audit framework
The FRC regulates corporate reporting in the UK, and
issued the UK Corporate Governance Code
The FRC issues auditing standards, practice notes and
bulletins
(001)ACP7(INT)PC14_CH01.qxp 5/13/2014 10:03 PM Page 2
Trang 8Money laundering
Internal control effectiveness
International regulatory frameworks for audit and assurance
Law and regulations
Audit committees
1: International regulatory environments for audit and assurance services
Page 3
Duties
Review of internal audit Review of internal controls Special investigations
Liaison with external auditors
Determine scope of external
audit
Forum to link directors/auditors
Deal with auditors’ reservations
Obtain information for auditors
Audit committees
AdvantagesIncreased confidence in financial statements
Frees executive directors to manage
Clear reporting lines for internal audit/impartial
link for external audit
Creates culture opposed to fraud
Trang 9Money laundering
Internal control effectiveness
International regulatory frameworks for audit and assurance
Law and regulations
Audit committees
Codes of Best Practice for corporate governance are increasingly common worldwide We focus on some UKguidance, the UK Corporate Governance Code.
UK Corporate Governance Code
Compliance with the UK Corporate Governance
Code is voluntary, but all UK listed entities must
report on how they have applied it (in the annual
report)
This is known as the ‘comply or explain’ basis.
Listed entities must either comply with the Code, or
explain why they have not done so
Key effects on auditors
Auditors must review compliancewith code and statement ofcompliance/non-compliance
The Code requires companies toestablish an audit committee
Listed (UK FTSE 350)companies applying the Codemust put the external audit out
to tender at least every ten years.
(001)ACP7(INT)PC14_CH01.qxp 5/13/2014 10:03 PM Page 4
Trang 10Money laundering
Internal control effectiveness
International regulatory frameworks for audit and assurance
Law and regulations
Audit committees
1: International regulatory environments for audit and assurance services
Page 5
Directors
Internal controls and risk management are very important
in fulfiling directors’ duties to the shareholders, which are:
Therefore directors:
Set up a system of internal control
Review its effectiveness
Consider the need for internal audit
To safeguard assets
To prevent and detect fraud
Protect the investment of
the shareholder
As part of their audit:
Ascertain what the controls are
Trang 11Money laundering
Internal control effectiveness
International regulatory frameworks for audit and assurance
Law and regulations
Audit committees
Money laundering is the process by which criminals attempt to conceal the true origin and ownership of
the proceeds of their criminal activity, allowing them to maintain control over the proceeds and, ultimately,providing a legitimate cover for their sources of income
Money laundering is the attempt to conceal the origin of 'dirty' money by making it look legitimate or 'clean'.There are 3 stages:
Placement This is the introduction or placement of the illegal funds into the financial system.
Layering This is passing the money through a large number of transactions or 'layers', so that it becomes
very difficult to trace it to its original source
Integration This is the final integration of funds back into the legitimate economy.
Trang 121: International regulatory environments for audit and assurance services
Page 7
Appoint a ML Reporting officer (MLRO)
Undertake Customer Due Diligence
Report suspicion of money laundering
Maintain specific records
Put internal procedures in place to ensure
continued compliance with regulations
Train staff in all these issues
UK Money Laundering Regulations
2007
Possessing, dealing with or concealing the
proceeds of any crime
Attempting, assisting or incitement to commit
money laundering
Failure of an individual in the regulated sector
to report a suspicion money laundering
Tipping-off
Criminal offences in the UK
(001)ACP7(INT)PC14_CH01.qxp 5/13/2014 10:03 PM Page 7
Trang 13Money laundering
Internal control effectiveness
International regulatory frameworks for audit and assurance
Law and regulations
Audit committees
The auditor’s responsibilities for considering law and
regulations as part of their audit is discussed in ISA 250
Consideration of laws and regulations in an audit of financial
Should obtain sufficient appropriate audit evidence of
compliance with laws and regulations with a direct effect
on material amounts and disclosures in the FS
Document findings
Document non-compliance and the results of discussion
with management, those charged with governance and
Is there a statutory duty?
Is it in the public interest?
Obtain legal advice
Management are responsible for ensuring that laws and regulations are kept.
(001)ACP7(INT)PC14_CH01.qxp 5/13/2014 10:03 PM Page 8
Trang 142: Code of ethics and conduct
Conflicts in application of principles
Much of this chapter is revision from your earlier auditingstudies.You must understand the principles-basedapproach and be familiar with the guidance issued byACCA and the IESBA
In the exam you are likely to be faced with scenarioswhere you have to apply your knowledge, identify ethical threats and recommend appropriate safeguards.
(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 9
Trang 15Threats Independence
ACCA Code of Ethics and Conduct
The Code contains a conceptual framework, setting out five fundamental principles This recognises that it isimpossible to define every single situation that may give rise to a threat, and to prescribe specific safeguards foreach The ACCA Code has been based on the IESBA Code of Ethics for Professional Accountants
Objectivity
To not allow bias, conflicts of interest or undue influence
of others to override professional or business judgements.
Professional competence and due care
To maintain professional knowledge and skill at a
level required to ensure that a client or employer receives competent professional services based on current developments in practice, legislation, techniques and act diligently and in accordance with applicable technical and professional standards when providing
Trang 162: Code of ethics and conduct
Page 11
Confidentiality
To respect the confidentiality of information acquired as a
result of professional and business relationships and,
therefore, not disclose any such information to third
parties without proper and specific authority, unless
there is a legal or professional right or duty to disclose,
nor use the information for the personal advantage of the
professional accountant or third parties.
Professional behaviour
To comply with relevant laws and regulations and to
avoid any action that discredits the profession.
Although not a fundamental principle, auditors must plan and perform the audit with professional skepticism ISA 200
defines this as follows.
Professional skepticism is an attitude that includes a questioning mind, being alert to conditions which may
indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence
(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 11
Trang 17Confidentiality Fundamental principles
and conceptual approach
Conflicts
of interest
Conflicts in application of principles Safeguards
Threats
Independence
Financial interests
Loans and guarantees Close businessrelationships
Family and personal relationships Employment connections with assurance client
Long association
Provision of multiple services
Gifts/
hospitality Fees Litigation
Independence of mind is the state of mind that
permits the provision of an opinion without being
affected by influences that compromise professional
judgement, allowing an individual to act with integrity,
and exercise objectivity and professional scepticism.
Independence in appearance is the avoidance of facts and
circumstances that are so significant that a reasonable and informed third party, having knowledge of all relevant information, including safeguards applied, would reasonably conclude a firm's, or a member’s, integrity, objectivity or professional scepticism had been compromised.
Threats to independence
Objectives of this section of the ACCA code are to help
firms and members to
Identify threats to independence
Evaluate the significance of the threats indentifical
Apply safeguards, when necessary, to eliminate
the threats or reduce then to an acceptable level
Trang 18Threats Confidentiality Fundamental principles
and conceptual approach
Conflicts
of interest
Conflicts in application of principles Independence
2: Code of ethics and conduct
eg data being reviewed by the same person responsible for preparing it
eg acting as an advocate on behalf of an assurance client in litigation or disputes withthird parties
eg former partner of the firm being a director or officer of the client
eg threat of dismissal or replacement, being pressured to reduce inappropriately theextent of work performed in order to reduce fees
(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 13
Trang 19Confidentiality Fundamental principles
and conceptual approach
Conflicts
of interest
Conflicts in application of principles
Safeguards
Threats Independence
Work environment
Regulations
Individual
Recruitment procedures
Appropriate disciplinary processes
Leadership that stresses the importance of ethicalbehaviour
Policies and procedures to implement and monitor the – quality of employee performance
– quality control of engagements
Using different partners and teams for the provision ofnon-audit services to assurance clients
Discussing ethical issues with those charged withgovernance
Consultation with another professional accountant
ACCA code/IESBA code
Using an independent mentor
Maintaining contact with legal advisers and
professional bodies
Three categories of safeguards exist: those created by regulations, those created by the individual and those created in the work environment.
(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 14
Trang 20Safeguards Threats Confidentiality
2: Code of ethics and conduct
Page 15
Accountants owe their clients a professional duty of confidence, except in the following situations:
Obligatory disclosure
If a member knows or suspects his client to have committed a
terrorist offence, an offence oftreason or a money laundering
offence he is obliged to disclose all the information at his
disposal to a competent authority In the UK, he is required to
report a suspicion of money laundering Local legislation may
also require auditors to disclose other infringements
Disclosure is required by process of law
There is a public duty to disclose
Conflicts of interest
Insider dealing
Areas of controversy
Practice management issues, such
as staff disclosure procedures
‘Chinese Walls’, but how successfulare they?
Engagement letters
Safeguards to consider
(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 15
Trang 21Confidentiality Fundamental principles
and conceptual approach
Conflicts
of interest
Conflicts in application of principles Safeguards
Threats Independence
Auditors should identify potential conflicts of interest as they could result in the ethical codes being breached.Conflicts between members’and clients’interests
Conflicts between the interests of different clients
Example: member competes directly with client
Do not accept engagement
Example: clients in competition with each other
Accept only if safeguards are sufficient
Safeguards include:
Disclosure of the conflict to both clients
Separate engagement teams
(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 16
Trang 22Safeguards Threats Confidentiality Fundamental principles
and conceptual approach
Conflicts
of interest
Conflicts in application of principles
Independence
2: Code of ethics and conduct
Page 17
Auditor encounters a fraud
Conflict: duty to report vs
confidentiality
Take legal advice on whether
there is duty to report
The general principles of the Code may conflict in some circumstances This is because the Code is
principles-based (not rules-principles-based) Rather than simply following a rule, auditors must ensure they are independent by judging how best to apply the fundamental principles This sometimes involves balancing the principles
against each other For example:
Relevant facts
Ethical issues involved
Fundamental principles related tothe matter in question
Established internal procedures
Alternative courses of action
Matters to consider where there is a
conflict:
(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 17
Trang 23(002)ACP7(INT)PC14_CH02.qxp 5/13/2014 10:04 PM Page 18
Trang 243: Professional liability
Topic List
Legal liability and negligence
Restricting liability
Fraud and error
The expectations gap
The responsibility of the auditor is simple: to report to theshareholders on the truth and fairness of the financialstatements
However, the auditor has subsidiary responsibilities andliabilities: to the company (in contract) and potentially tothird party users of the financial statements (in tort).There are some methods by which auditors may restricttheir potential liability
The auditor’s responsibilities for fraud and error are acommon area of public misunderstanding, and anexample of the expectations gap
(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 19
Trang 25Legal liability and negligence Fraud and error The expectationsgap
Restricting liability
person who has suffered loss due to anotherperson’s wrongful neglect is compensated
Money laundering issues
A successful claim for negligence requires:
1 An enforceable duty of care to have existed
2 The duty to have been breached
3 Loss to have resulted
In English (and many other) law(s) a contract forservice implies a duty of care (In practice, this
means to adhere to ISAs.)
Therefore, the auditor always owes the
company (the client) a duty of reasonable care
(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 20
Trang 263: Professional liability
Page 21
However, such a duty of care is only implied to the company.
Various other users of financial statements (individual shareholders, employees, prospective shareholders, taxauthorities, lenders, others) must seek to prove that is true in their case
It is in the interest of auditors to avoid liability
claims from a wide range of parties
They can try to disclaim liability
They can make good use of quality control
procedures to avoid problems
If auditors are sued, they may choose to settle
out of court
Cheaper
Less adverse publicity
Quicker
The Caparo case
Caparo Industries purchased Fidelity shares in the openmarket After the audited accounts were published theybought more and in the end, bought enough to take overFidelity Caparo later alleged that the audited accountswere misleading - a profit should really have been a loss.They argued the auditors owed a duty of care to investorsand potential investors The House of Lords held that
auditors did not owe a duty of care to the public at large deciding whether to buy shares.
The key case that provides insight on judicialthinking on this issue is Caparo Industries plc vDickman and Others 1990
(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 21
Trang 27Restricting liability
Legal liability and negligence
Fraud and error The expectations
gap
Professional indemnity insurance
ACCA requirement – insurance against civil claims
If >6 employees → must have fidelity guarantee insurance too (covers fraud by firm)
Incorporation
Auditors can incorporate in UK, and can obtained stock exchange listings
Limited Liability Partnerships (LLPs)
Many audit firms in the UK are LLPs This provides limited liability but with the flexibility and tax structure of apartnership
Liability limitation agreements
Auditors have wanted limited liability agreements/liability caps for some time This is part of the ongoing debateover the future of audit
(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 22
Trang 28Legal liability and negligence
Fraud and error The expectations
gap
Restricting liability
3: Professional liability
Page 23
Fraud is an intentional act by one or more
individuals among management, those
charged with governance, employees or third
parties, involving the use of deception to
obtain an unjust or illegal advantage
The directors are responsible for
preventing and detecting fraud.
ISA 240 states that by conducting an audit in
accordance with ISAs the auditor obtains
reasonable assurance that FS are free from
material misstatement whether caused by
Management with poor integrity
Deficient internal control components
Unusual transactions
Financial reporting pressures
Problems in gaining sufficient appropriate evidence
Unique issues arising from systems
(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 23
Trang 29Legal liability and negligence
Fraud and error The expectations
gap
Restricting liability
The appropriate level of management (employee fraud), or
Those charged with governance (management fraud)
In terms of the audit opinion given on the financial statements, if the auditor feels thatthe financial statements are materially misstated as a result of fraud, he should modify his report accordingly.
If the auditor feels he has to withdraw from the engagement as a result of his discovery,
he should consider whether there is a professional or legal requirement to report to theperson who appointed him
When the auditors discover or suspect a fraud they should consider whether there is aduty to disclose
The auditors would in practice seek legal advice to ensure that they were not breachingtheir ethical duties regarding confidentiality
REPORTING FRAUD
(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 24
Trang 30Legal liability and negligence Fraud and error
The expectations gap
Restricting liability
3: Professional liability
Page 25
Any gap between the expectations of users of audited financial statements, and those auditors
Fraud is a common area where expectations diverge: it is sometimes incorrectly thought that the purpose of the
audit is to detect fraud
Logically, there are 2 ways of narrowing the gap:
Eg Requiring auditors to report
on the adequacy on fraudprevention controls
Expectations gap
(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 25
Trang 31(003)ACP7(INT)PC14_CH03.qxp 5/13/2014 10:04 PM Page 26
Trang 324: Quality control
Topic List
Quality control: firm level
Quality control: individual audit
Probably the most important consideration in practicemanagement is quality control This chapter covers thespecific guidance in relation to quality practice andprocedures: ISA 220 Quality Control for an Audit ofFinancial Statementsand ISQC 1 Quality control forfirms that perform audits and reviews of financialstatements, and other assurance and related servicesengagements
(004)ACP7(INT)PC14_CH04.qxp 5/13/2014 10:05 PM Page 27
Trang 33Quality control: individual audit
Quality control:
firm level
Observingacceptanceprocedures and not accepting
‘difficult’ clients
Instituting clientcare procedures
Key maninsurance
Setting up asystem of qualitycontrol
Safeguards
Litigation against the firm Disciplinary
action by
Loss of the litigious client
Loss of other clients
(004)ACP7(INT)PC14_CH04.qxp 5/13/2014 10:05 PM Page 28
Trang 344: Quality control
Page 29
ISQC 1.11
Quality control systems, policies and procedures are the responsibility of the audit firm Under ISQC 1, the firm has
an obligation to establish and maintain a system of quality control to provide it with reasonable assurance that:(a) The firm and its personnel comply with professional standards and applicable legal and regulatory requirements;and
(b) The reports issued by the firm or engagements partners are appropriate in the circumstances
Sufficient and appropriate experience
Ability to carry out the job
Authority to carry out the job
The entire business strategy of the firm should be
driven by the need for quality
(004)ACP7(INT)PC14_CH04.qxp 5/13/2014 10:05 PM Page 29
Trang 35Quality control: individual audit
Remedial action with individual
Communication with training dept
Changes in QC policies and procedures
Disciplinary action (if necessary)
Assignment of engagement teams
The firm must also have standards as to what
constitutes a suitablequality control review.
This is the responsibilty of the engagement partner
(004)ACP7(INT)PC14_CH04.qxp 5/13/2014 10:05 PM Page 30
Trang 36Quality control: individual audit
Direction Informing staff about:
– The work to do – Potential problems– Nature of client – Responsibilities
Supervision Overall by engagement partner but
more practical supervision given within the auditteam
Review Includes consideration of whether:
– Work complies with required standards– Significant matters/conclusions documented– Evidence is sufficient and appropriate
Consultation Contentious matters must be
discussed and properly reviewed
Quality Control review Evaluation of:
– Significant judgements– Conclusions
Engagement performance
ISA 220 Quality control for an audit of
financial statements applies the general
principles of ISQC 1 to individual audits
(004)ACP7(INT)PC14_CH04.qxp 5/13/2014 10:05 PM Page 31
Trang 37(004)ACP7(INT)PC14_CH04.qxp 5/13/2014 10:05 PM Page 32
Trang 385: Obtaining and accepting professional appointments
Exam questions could be set in the context of a change
of auditor This could involve:
Ethical issues
Practice management issues
Be prepared to link issues in the syllabus when you areworking through these passcards Generally questions inthe exam are scenario-based and bring in lots of differentissues Bear in mind that the professional appointmentmay be for a service other than audit
(005)ACP7(INT)PC14_CH05.qxp 5/13/2014 10:05 PM Page 33
Trang 39Agreeing terms Acceptance
Advertising, fees and tendering
Change in auditor
Personality: client falls
out with the auditor
Auditor rotation: relationship
ended for independence resons
reasons
(005)ACP7(INT)PC14_CH05.qxp 5/13/2014 10:05 PM Page 34
Trang 40Agreeing terms Acceptance
Advertising, fees and tendering
Change in auditor
5: Obtaining and accepting professional appointments
Page 35
The medium used should not reflect
adversely on the member, ACCA or the
accountancy profession
Advertising
Estimate work involved/fees
Obtain further details from clientWork required
Consider practical issues
– Fees– Staff– Location
Background information
Prepare proposal
Tendering
Approach by prospective client
Firm considers if it wants the work
Fees
No prescribed basis
%/contingency only if unrelated to audit
Quoting too low a fee may introduce threat to
competence and due care
Fair and reasonable re:
– Seniority of staff
– Time
– Risk/responsibility
(005)ACP7(INT)PC14_CH05.qxp 5/13/2014 10:05 PM Page 35