Professional Documents
Culture Documents
Advanced Audit and Assurance - Chapter 5 - Quality Control
Advanced Audit and Assurance - Chapter 5 - Quality Control
Assurance
Chapter 05
QUALITY CONTROL
Learning Outcomes
a) Explain the principles and purpose of quality control of
audit and other assurance engagements.[1]
b) Describe the elements of a system of quality control
relevant to a given firm.[2]
c) Evaluate the quality control procedures which are in
place for a given firm and assess if they have been
appropriately applied in a given engagement.[3]
3
Exam Focus
A common requirement in the exam is to critically evaluate the audit work already
performed on an engagement and identify if the audit has been carried out to the
required standard of quality.
If the firm does not perform work to a high quality it increases the risk of issuing an
inappropriate report which could damage the reputation of the firm and the profession.
4
Quality management relevant to audit
engagements
Quality
management
relevant to audit
engagements
Elements of a
The principles and
quality
purpose of quality
management
management
system
5
Principles and purpose of quality control of audit and other assurance
engagements
Quality control management basically deals with how an audit assignment must be handled to ensure
that the professional standards are maintained and work is performed satisfactorily.
Quality control
ISQM 1 Quality Management for Firms that Perform
procedures are
Audits or Reviews of Financial Statements, or Other
governed by two
Assurance or Related Services Engagements
standards
6
Purpose of quality control
7
Elements of a quality management system
Leadership responsibilities
Ethical requirements
Engagement resources
Engagement performance
Overall responsibility
8
Quality in a firm-Leadership responsibility
The engagement partner takes overall responsibility for managing and achieving
quality of the engagement
The importance of
open and robust The importance of
That all team members The importance of communication within each team member
are responsible for professional ethics, the team and the exercising professional
contributing to quality. values and attitudes. ability of the team to scepticism throughout
raise concerns without the engagement
fear of reprisal.
9
Quality in a firm: Ethical requirements
Firms comply with ethical requirements such as the Code of Ethics – Chapter 3
10
Quality in a firm: Acceptance and
continuance: Detailed coverage in chapter 6
Whether
Whether the Whether
management and
engagement team significant matters
Integrity and Whether sufficient those charged
has the that have arisen
ethical values of and appropriate with governance
competence and during the current
principal owners, resources are have
capabilities or previous
management and available to acknowledged
including engagement have
those charged perform the their
sufficient time to implications for
with governance. engagement. responsibilities in
perform the continuing the
relation to the
engagement. engagement.
engagement.
11
Quality in a firm: Engagement resources
The engagement partner must ensure sufficient and appropriate resources are
assigned or made available to the engagement team.
12
Quality in a firm: Human resources
The engagement team, auditor’s external experts and internal auditors who
provide direct assistance must be competent and capable to perform the audit
13
If insufficient resources are made
Competence and capabilities includes
available the following actions can be
consideration of:
taken:
• Practical experience • Change the planned audit approach
• Understanding of professional • Arrange an extension to the
standards reporting deadline
• Expertise in specialised areas of • Follow the firm’s policies and
accounting and auditing procedures for resolving differences
• Expertise in IT or automated tools of opinion
and techniques • Withdraw from the engagement if
• Knowledge of relevant industries possible under applicable law or
• Ability to exercise professional regulation
scepticism and judgement
• Understanding of the firm’s policies
and procedures
14
Quality in a firm: Engagement performance
Engagement
performance
15
Direction
Informing team members of their responsibility to
Perform audit
procedures &
direct,
Contribute to supervise, Understand Address
Exercise
achievement Fulfil ethical and review the objectives threats to the
professional
of quality of requirements the work of of the work to achievement
scepticism
engagement. less be performed. of quality
experienced
team
members
16
Engagement performance
Firms must design policies and procedures to ensure engagements are performed to a satisfactory
standard. Policies and procedures should cover:
Matters relevant to
promoting consistency
• often accomplished through written manuals, software tools and standardised documentation
in the quality of
engagements
• Tracking the progress of the engagement ; Considering the competence and capabilities of the
Supervision
team members; Addressing significant matters that arise during the engagement; Identifying
responsibilities difficult or contentious matters for consultation.
17
Supervision
Tracking the progress of the audit to ensure the objective of the work is achieved and adequate ongoing resources are
assigned.
Addressing issues arising and modifying the planned approach accordingly e.g. by reassigning planned procedures
to more experienced team members when issues are more complex than initially anticipated.
Identifying matters for consultation where the firm lacks appropriate internal expertise.
Creating an environment where engagement team members can raise concerns without fear of reprisal
18
Review responsibilities
The work has been performed in accordance with professional standards, policies and procedures
The evidence obtained is sufficient and appropriate to support the auditor's report
19
Engagement quality control review
An engagement quality control review (EQCR) provides an objective evaluation of the significant judgments
made by the engagement team and the conclusions reached thereon, performed by the engagement quality
reviewer and completed on or before the date of the engagement report.
20
Engagement quality control review
For audit engagements where an EQR is Eligibility of engagement quality
required, the engagement partner must: reviewers:
• Determine that an EQR has been • Cannot be a member of the
appointed. engagement team.
• Cooperate with the reviewer and • Must have the competence and
inform other team members of their capabilities, including sufficient time,
responsibility to do so. and the appropriate authority to
• Discuss significant matters and perform the EQR.
significant judgements arising during • Must comply with relevant ethical
the engagement with the reviewer. requirements and laws and regulations
• Not date the auditor’s report until the
completion of the EQR.
21
Monitoring and remediation
A monitoring and
remediation process must
be established to provide
Monitoring relevant, reliable and
and timely information about
remediation the design,
implementation and
operation of the system of
quality management and
Evaluate Annual
Monitor Remediate take appropriate actions
deficiencies review
to respond to identified
deficiencies such that
deficiencies are
remediated on a timely
basis
22
Summary of pre and post-issuance reviews
Pre-issuance (Hot) review Post-issuance (Cold) review
Purpose To enhance the quality of assurance work Monitoring – to identify any deficiencies
in the firm's processes
When Before the auditor's report is issued After the auditor's report has been issued
Which files Listed clients,, Public interest engagements, A selection of completed engagements
Engagements where there are particular risks, Each
partner should have some of their engagements
reviewed
What Processes underpinning judgements about: To ensure that all working papers are: On
considered Significant risks & responses to them, Matters file, Complete, Signed as completed,
requiring consultation, Materiality, Independence, Evidenced as reviewed, The work
Conclusions, Misstatements, The audit opinion, undertaken is sufficient and has been
Matters to be communicated to management and documented appropriately
those charged with governance.
23
Continued
Pre-issuance (Hot) review Post-issuance (Cold) review
Outcomes... A reduction in audit risk, i.e. the risk that the Identify remedial action that should be
auditor expresses an inappropriate audit opinion taken.
when the financial statements are materially Recommendations will be made
misstated. including:
• Communication of findings
• Additional quality reviews
• Training
• Changes to the firm's policies and
procedures
• Disciplinary action
24
Taking overall responsibility for managing and
achieving quality
25
Documentation
Conclusions reached with respect to fulfilment of
responsibilities relating to ethical requirements, and
acceptance and continuance.
26
Examples of weaknesses in the audit work that if not identified
by the EQCR - could directly impact audit quality.
Lack of objectivity: For example,
If the EQCR was included in the
If EQCRs do not have sufficient the EQCR was to become the
tender document and could
specialist experience, needed to audit partner following the audit
therefore have been contacted by
evaluate key judgements specific and had attended audit
the audit committee which – it
to the industry committee meetings as an
would threaten their objectivity
observer
27
In order to ensure effectiveness of the EQCR, firms should
• Complete checklists confirming completion of procedures required by standards.
• Copies of financial statements and reports to the audit committee should be
annotated by the EQCR and kept as evidence of review.
• Key audit working papers should be signed off by the EQCR to indicate that they
have read them.
• EQCR notes should be kept as evidence.
• Audit file notes of significant matters discussed with the audit team and how they
were resolved should be kept as evidence.
• The time spent by the EQCR on the audit should be recorded.
• Firms should ensure the EQCR has sufficient industry experience.
• The EQCR should be required to re-confirm their objectivity at the completion stage
to ensure any issues arising during the audit have been appropriately dealt with
28
Approach to exam questions: Quality management
A common requirement in the exam is to critically evaluate the audit work already performed on
an engagement and identify if the audit has been carried out to the required standard of quality.
In order to assess the quality of the audit you should consider factors such as:
Have ISAs been followed?
• If not, sufficient appropriate evidence will not have been obtained and an inappropriate report may be issued.
29
Continued
Has the appropriate type of evidence been obtained?
• Auditors should try and obtain the most reliable forms of evidence. Too much reliance on enquiry and written
representations may mean sufficient appropriate evidence has not been obtained and sufficient scepticism has
not been applied
Has the audit been performed in accordance with the audit plan?
• The audit plan will have been developed in response to the assessed risks of material misstatement. Sample sizes
will have been chosen to ensure sufficient appropriate evidence is obtained. If the plan is not followed,
inappropriate conclusions may be drawn
30
Has the audit work been properly reviewed?
• Reviews should take place on a timely basis to ensure the work has been performed properly.
Issues which need to be dealt with by someone more senior can then be resolved. Review of
work should take place shortly after the work has been completed, not several weeks later.
Reviews should be performed by someone more senior than the person who performed the
work to ensure issues are identified. If issues are discovered too late there may not be sufficient
time to address them.
Has an EQR been performed where required e.g. listed and other high risk
clients?
31
Q 49: Exam kit- page 150
32
Solution
33
Answer debrief – Time pressure
34
Answer debrief – Time pressure
Rewrite as follows:
• The junior’s first comment is that the audit was time pressured. All audits
This adds
should be planned to ensure that adequate time can be spent to obtain value
sufficient appropriate audit evidence to support the audit opinion.
35
Answer debrief – Time pressured- continued
Point identified is: ‘. The audit manager told the juniors not to perform some of the planned audit
procedures on items such as directors’ emoluments and share capital as they are considered to be low
risk.
Rewrite as follows:
• It seems that the audit is being rushed and the juniors instructed not to perform work properly, and
that review procedures are not being conducted appropriately. All of this increases the detection risk
of the audit and, ultimately, could lead to an inappropriate opinion being given.
Consequence
• Directors’ emoluments and share capital transactions and are material by their nature and so should
not be ignored. Any modifications to the planned audit procedures should be discussed with, and
approved by, senior members of the audit team and should only occur for genuine reasons
This adds
value
36
Answer debrief – Method of selecting sample
Point identified is: ‘. He also instructed us not to use the firm’s statistical sampling methods in selecting trade
receivables balances for testing, as it would be quicker to pick the sample based on our own judgement. .
Rewrite as follows:
• The audit manager favours non-statistical sampling as a quick way to select a sample, instead of the firm’s usual
statistical sampling method. There is a risk that changing the way items are selected for testing will not provide
sufficient, reliable audit evidence as the sample selected may no longer be representative of the population as a
whole. Or that an insufficient number of items may be selected for testing
• The juniors may not understand how to pick a sample without the use of the audit firm’s statistical selection
method, and there is a risk that the sample may be biased towards items that appear ‘easy to audit’. Again, this
instruction from the audit manager is a departure from planned audit procedures, made worse by deviating from
the audit firm’s standard auditing methods, and likely to increase detection risk
37
Answer debrief – Audit of going concern
Rewrite as follows:
• Going concern can be a difficult area to audit, and given the Group’s listed status and the fact that
losses appear to have been made this year, it seems unwise to delegate such an important area of
the audit to an audit junior. The audit of going concern involves many subjective areas, such as
evaluating assumptions made by management, analysing profit and cash flow forecasts and forming
an overall opinion on the viability of the business.
• The going concern audit programme should be performed by a more senior and more experienced
member of the audit team. This issue shows that the audit has not been well planned as appropriate
delegation of work is a key part of direction and supervision, essential elements of good quality
management.
38
Answer debrief – Review of work
Point identified is: ‘The audit manager asked us to review each other’s work as it
would be good training for us, and he didn’t have time to review everything
Rewrite as follows:
• The juniors have been asked to review each other’s work which is unacceptable. ISA 220 (Revised) requires
that the engagement partner shall take responsibility for reviews being performed in accordance with the
firm’s review policies and procedures. Ideally, work should be reviewed by a person more senior and/or
experienced than the person who conducted the work.
• Audit juniors reviewing each other’s work are unlikely to spot mistakes, errors of judgement and
inappropriate conclusions on work performed. The audit manager should be reviewing all of the work of
the juniors, with the audit partner taking overall responsibility that all work has been appropriately
reviewed.
39
Answer debrief – Review of work
Point identified is: ‘‘I was discussing the Group’s tax position with the financial controller,
when she said that she was struggling to calculate the deferred tax asset that should be
recognised. The deferred tax asset has arisen because several of the Group’s subsidiaries
have been loss making this year, creating unutilised tax losses. As I had just studied
deferred tax at college I did the calculation of the Group’s deferred tax position for her.
Rewrite as follows:
• . It is concerning that the client’s financial controller is not able to calculate the deferred tax figure. This could
indicate a lack of competence in the preparation of the financial statements, and the audit firm should consider if
this impacts the overall assessment of audit risk.
• Continued page 593
40
Deferred tax
41
Thank You
42