Isa 200
Isa 200
CONTENTS
Paragraph
Introduction
Scope of this ISA ......................................................................................................................................................... 1−2
An Audit of Financial Statements ................................................................................................................................ 3−9
Effective Date .............................................................................................................................................................. 10
Overall Objectives of the Auditor ............................................................................................................................. 11−12
Definitions ................................................................................................................................................................... 13
Requirements
Ethical Requirements Relating to an Audit of Financial Statements ........................................................................... 14
Professional Skepticism ............................................................................................................................................... 15
Professional Judgment ................................................................................................................................................. 16
Sufficient Appropriate Audit Evidence and Audit Risk ............................................................................................... 17
Conduct of an Audit in Accordance with ISAs ............................................................................................................ 18−24
Application and Other Explanatory Material
An Audit of Financial Statements ................................................................................................................................ A1−A13
Definitions .................................................................................................................................................................... A14−A16
Ethical Requirements Relating to an Audit of Financial Statements ........................................................................... A17−A20
Professional Skepticism ............................................................................................................................................... A21−A25
Professional Judgment ................................................................................................................................................. A26−A30
Sufficient Appropriate Audit Evidence and Audit Risk ............................................................................................... A31−A57
Conduct of an Audit in Accordance with ISAs ............................................................................................................ A58−A83
ISA 200
104
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
Introduction
Scope of this ISA
1. This International Standard on Auditing (ISA) deals with the independent auditor’s overall responsibilities when conducting
an audit of financial statements in accordance with ISAs. Specifically, it sets out the overall objectives of the independent
auditor, and explains the nature and scope of an audit designed to enable the independent auditor to meet those objectives. It
also explains the scope, authority and structure of the ISAs, and includes requirements establishing the general
responsibilities of the independent auditor applicable in all audits, including the obligation to comply with the ISAs. The
independent auditor is referred to as “the auditor” hereafter.
2. ISAs are written in the context of an audit of financial statements by an auditor. They are to be adapted as necessary in the
circumstances when applied to audits of other historical financial information. ISAs do not address the responsibilities of the
auditor that may exist in legislation, regulation or otherwise in connection with, for example, the offering of securities to the
public. Such responsibilities may differ from those established in the ISAs. Accordingly, while the auditor may find aspects
of the ISAs helpful in such circumstances, it is the responsibility of the auditor to ensure compliance with all relevant legal,
regulatory or professional obligations.
ISA
the risk that the auditor expresses an inappropriate opinion when the financial statements are materially misstated) to an
acceptably low level. However, reasonable assurance is not an absolute level of assurance, because there are inherent
limitations of an audit which result in most of the audit evidence on which the auditor draws conclusions and bases the
auditor’s opinion being persuasive rather than conclusive. (Ref: Para. A31–A57)
6. The concept of materiality is applied by the auditor both in planning and performing the audit, and in evaluating the effect of
identified misstatements on the audit and of uncorrected misstatements, if any, on the financial statements.1 In general,
misstatements, including omissions, are considered to be material if, individually or in the aggregate, they could reasonably
be expected to influence the economic decisions of users taken on the basis of the financial statements. Judgments about
materiality are made in the light of surrounding circumstances, and are affected by the auditor’s perception of the financial
information needs of users of the financial statements, and by the size or nature of a misstatement, or a combination of both.
The auditor’s opinion deals with the financial statements as a whole and therefore the auditor is not responsible for the
detection of misstatements that are not material to the financial statements as a whole.
7. The ISAs contain objectives, requirements and application and other explanatory material that are designed to support the
auditor in obtaining reasonable assurance. The ISAs require that the auditor exercise professional judgment and maintain
professional skepticism throughout the planning and performance of the audit and, among other things:
• Identify and assess risks of material misstatement, whether due to fraud or error, based on an understanding of the
entity and its environment, the applicable financial reporting framework and the entity’s system of internal control.
• Obtain sufficient appropriate audit evidence about whether material misstatements exist, through designing and
implementing appropriate responses to the assessed risks.
1
ISA 320, Materiality in Planning and Performing an Audit and ISA 450, Evaluation of Misstatements Identified during the Audit
ISA 200
105
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
• Form an opinion on the financial statements based on conclusions drawn from the audit evidence obtained.
8. The form of opinion expressed by the auditor will depend upon the applicable financial reporting framework and any
applicable law or regulation. (Ref: Para. A12–A13)
9. The auditor may also have certain other communication and reporting responsibilities to users, management, those charged
with governance, or parties outside the entity, in relation to matters arising from the audit. These may be established by the
ISAs or by applicable law or regulation.2
Effective Date
10. This ISA is effective for audits of financial statements for periods beginning on or after December 15, 2009.
Definitions
13. For purposes of the ISAs, the following terms have the meanings attributed below:
(a) Applicable financial reporting framework – The financial reporting framework adopted by management and, where
appropriate, those charged with governance in the preparation of the financial statements that is acceptable in view of
the nature of the entity and the objective of the financial statements, or that is required by law or regulation.
The term “fair presentation framework” is used to refer to a financial reporting framework that requires compliance
with the requirements of the framework and:
(i) Acknowledges explicitly or implicitly that, to achieve fair presentation of the financial statements, it may be
necessary for management to provide disclosures beyond those specifically required by the framework; or
(ii) Acknowledges explicitly that it may be necessary for management to depart from a requirement of the framework to
achieve fair presentation of the financial statements. Such departures are expected to be necessary only in extremely
rare circumstances.
The term “compliance framework” is used to refer to a financial reporting framework that requires compliance with the
requirements of the framework, but does not contain the acknowledgements in (i) or (ii) above.
(b) Audit evidence – Information used by the auditor in arriving at the conclusions on which the auditor’s opinion is
based. Audit evidence includes both information contained in the accounting records underlying the financial
statements and other information. For purposes of the ISAs:
(i) Sufficiency of audit evidence is the measure of the quantity of audit evidence. The quantity of the audit
evidence needed is affected by the auditor’s assessment of the risks of material misstatement and also by the
quality of such audit evidence.
(ii) Appropriateness of audit evidence is the measure of the quality of audit evidence; that is, its relevance and its
reliability in providing support for the conclusions on which the auditor’s opinion is based.
2
See, for example, ISA 260 (Revised), Communication with Those Charged with Governance; and ISA 240, The Auditor’s Responsibilities Relating to Fraud in
an Audit of Financial Statements, paragraph 44.
3
In the ISAs, only the term “withdrawal” is used.
ISA 200
106
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
(c) Audit risk – The risk that the auditor expresses an inappropriate audit opinion when the financial statements are
materially misstated. Audit risk is a function of the risks of material misstatement and detection risk.
(d) Auditor – The person or persons conducting the audit, usually the engagement partner or other members of the
engagement team, or, as applicable, the firm. Where an ISA expressly intends that a requirement or responsibility be
fulfilled by the engagement partner, the term “engagement partner” rather than “auditor” is used. “Engagement
partner” and “firm” are to be read as referring to their public sector equivalents where relevant.
(e) Detection risk – The risk that the procedures performed by the auditor to reduce audit risk to an acceptably low level
will not detect a misstatement that exists and that could be material, either individually or when aggregated with other
misstatements.
(f) Financial statements – A structured representation of historical financial information, including disclosures, intended to
communicate an entity’s economic resources or obligations at a point in time, or the changes therein for a period of time,
in accordance with a financial reporting framework. The term “financial statements” ordinarily refers to a complete set of
financial statements as determined by the requirements of the applicable financial reporting framework, but can also refer
to a single financial statement. Disclosures comprise explanatory or descriptive information, set out as required,
expressly permitted or otherwise allowed by the applicable financial reporting framework, on the face of a financial
statement, or in the notes, or incorporated therein by cross-reference. (Ref: Para. A14‒A15)
(g) Historical financial information – Information expressed in financial terms in relation to a particular entity, derived
primarily from that entity’s accounting system, about economic events occurring in past time periods or about
economic conditions or circumstances at points in time in the past.
(h) Management – The person(s) with executive responsibility for the conduct of the entity’s operations. For some entities
in some jurisdictions, management includes some or all of those charged with governance, for example, executive
members of a governance board, or an owner-manager.
(i) Misstatement – A difference between the amount, classification, presentation, or disclosure of a reported financial
statement item and the amount, classification, presentation, or disclosure that is required for the item to be in
accordance with the applicable financial reporting framework. Misstatements can arise from error or fraud.
Where the auditor expresses an opinion on whether the financial statements are presented fairly, in all material
respects, or give a true and fair view, misstatements also include those adjustments of amounts, classifications,
presentation, or disclosures that, in the auditor’s judgment, are necessary for the financial statements to be presented
fairly, in all material respects, or to give a true and fair view.
(j) Premise, relating to the responsibilities of management and, where appropriate, those charged with governance, on
ISA
which an audit is conducted – That management and, where appropriate, those charged with governance have
acknowledged and understand that they have the following responsibilities that are fundamental to the conduct of an
audit in accordance with ISAs. That is, responsibility:
(i) For the preparation of the financial statements in accordance with the applicable financial reporting framework,
including, where relevant, their fair presentation;
(ii) For such internal control as management and, where appropriate, those charged with governance determine is
necessary to enable the preparation of financial statements that are free from material misstatement, whether
due to fraud or error; and
(iii) To provide the auditor with:
a. Access to all information of which management and, where appropriate, those charged with governance
are aware that is relevant to the preparation of the financial statements such as records, documentation
and other matters;
b. Additional information that the auditor may request from management and, where appropriate, those
charged with governance for the purpose of the audit; and
c. Unrestricted access to persons within the entity from whom the auditor determines it necessary to obtain audit
evidence.
In the case of a fair presentation framework, (i) above may be restated as “for the preparation and fair
presentation of the financial statements in accordance with the financial reporting framework,” or “for
ISA 200
107
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
the preparation of financial statements that give a true and fair view in accordance with the financial
reporting framework.”
The “premise, relating to the responsibilities of management and, where appropriate, those charged with
governance, on which an audit is conducted” may also be referred to as the “premise.”
(k) Professional judgment – The application of relevant training, knowledge and experience, within the context provided by
auditing, accounting and ethical standards, in making informed decisions about the courses of action that are appropriate
in the circumstances of the audit engagement.
(l) Professional skepticism – An attitude that includes a questioning mind, being alert to conditions which may indicate
possible misstatement due to error or fraud, and a critical assessment of audit evidence.
(m) Reasonable assurance – In the context of an audit of financial statements, a high, but not absolute, level of assurance.
(n) Risk of material misstatement – The risk that the financial statements are materially misstated prior to audit. This
consists of two components, described as follows at the assertion level: (Ref: Para. A16)
(i) Inherent risk – The susceptibility of an assertion about a class of transaction, account balance or disclosure to
a misstatement that could be material, either individually or when aggregated with other misstatements,
before consideration of any related controls.
(ii) Control risk – The risk that a misstatement that could occur in an assertion about a class of transactions, account
balance or disclosure and that could be material, either individually or when aggregated with other
misstatements, will not be prevented, or detected and corrected, on a timely basis by the entity’s controls.
(o) Those charged with governance – The person(s) or organization(s) (for example, a corporate trustee) with
responsibility for overseeing the strategic direction of the entity and obligations related to the accountability of the
entity. This includes overseeing the financial reporting process. For some entities in some jurisdictions, those charged
with governance may include management personnel, for example, executive members of a governance board of a
private or public sector entity, or an owner-manager.
Requirements
Ethical Requirements Relating to an Audit of Financial Statements
14. The auditor shall comply with relevant ethical requirements, including those related to independence, relating to financial
statement audit engagements. (Ref: Para. A17–A20)
Professional Skepticism
15. The auditor shall plan and perform an audit with professional skepticism recognizing that circumstances may exist that cause
the financial statements to be materially misstated. (Ref: Para. A21–A25)
Professional Judgment
16. The auditor shall exercise professional judgment in planning and performing an audit of financial statements. (Ref: Para.
A26–A30)
ISA 200
108
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
20. The auditor shall not represent compliance with ISAs in the auditor’s report unless the auditor has complied with the
requirements of this ISA and all other ISAs relevant to the audit.
Objectives Stated in Individual ISAs
21. To achieve the overall objectives of the auditor, the auditor shall use the objectives stated in relevant ISAs in planning and
performing the audit, having regard to the interrelationships among the ISAs, to: (Ref: Para. A74–A76)
(a) Determine whether any audit procedures in addition to those required by the ISAs are necessary in pursuance of the
objectives stated in the ISAs; and (Ref: Para. A77)
(b) Evaluate whether sufficient appropriate audit evidence has been obtained. (Ref: Para. A78)
***
ISA
An Audit of Financial Statements
4
ISA 230, Audit Documentation, paragraph 8(c)
ISA 200
109
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
(a) For the preparation of the financial statements in accordance with the applicable financial reporting framework,
including, where relevant, their fair presentation;
(b) For such internal control as management and, where appropriate, those charged with governance determine is necessary to
enable the preparation of financial statements that are free from material misstatement, whether due to fraud or error; and
(c) To provide the auditor with:
(i) Access to all information of which management and, where appropriate, those charged with governance are
aware that is relevant to the preparation of the financial statements such as records, documentation and other
matters;
(ii) Additional information that the auditor may request from management and, where appropriate, those charged with
governance for the purpose of the audit; and
(iii) Unrestricted access to persons within the entity from whom the auditor determines it necessary to obtain audit
evidence.
A3. The preparation of the financial statements by management and, where appropriate, those charged with governance requires:
• The identification of the applicable financial reporting framework, in the context of any relevant laws or regulations.
• The preparation of the financial statements in accordance with that framework.
• The inclusion of an adequate description of that framework in the financial statements.
The preparation of the financial statements requires management to exercise judgment in making accounting estimates that
are reasonable in the circumstances, as well as to select and apply appropriate accounting policies. These judgments are made
in the context of the applicable financial reporting framework.
A4. The financial statements may be prepared in accordance with a financial reporting framework designed to meet:
• The common financial information needs of a wide range of users (that is, “general purpose financial statements”); or
• The financial information needs of specific users (that is, “special purpose financial statements”).
A5. The applicable financial reporting framework often encompasses financial reporting standards established by an authorized
or recognized standards setting organization, or legislative or regulatory requirements. In some cases, the financial reporting
framework may encompass both financial reporting standards established by an authorized or recognized standards setting
organization and legislative or regulatory requirements. Other sources may provide direction on the application of the
applicable financial reporting framework. In some cases, the applicable financial reporting framework may encompass such
other sources, or may even consist only of such sources. Such other sources may include:
• The legal and ethical environment, including statutes, regulations, court decisions, and professional ethical obligations
in relation to accounting matters;
• Published accounting interpretations of varying authority issued by standards setting, professional or regulatory
organizations;
• Published views of varying authority on emerging accounting issues issued by standards setting, professional or
regulatory organizations;
• General and industry practices widely recognized and prevalent; and
• Accounting literature.
Where conflicts exist between the financial reporting framework and the sources from which direction on its application may
be obtained, or among the sources that encompass the financial reporting framework, the source with the highest authority
prevails.
A6. The requirements of the applicable financial reporting framework determine the form and content of the financial statements.
Although the framework may not specify how to account for or disclose all transactions or events, it ordinarily embodies
sufficient broad principles that can serve as a basis for developing and applying accounting policies that are consistent with
the concepts underlying the requirements of the framework.
A7. Some financial reporting frameworks are fair presentation frameworks, while others are compliance frameworks. Financial
reporting frameworks that encompass primarily the financial reporting standards established by an organization that is
authorized or recognized to promulgate standards to be used by entities for preparing general purpose financial statements are
ISA 200
110
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
often designed to achieve fair presentation, for example, International Financial Reporting Standards (IFRSs) issued by the
International Accounting Standards Board (IASB).
A8. The requirements of the applicable financial reporting framework also determine what constitutes a complete set of financial
statements. In the case of many frameworks, financial statements are intended to provide information about the financial
position, financial performance and cash flows of an entity. For such frameworks, a complete set of financial statements
would include a balance sheet; an income statement; a statement of changes in equity; a cash flow statement; and related
notes. For some other financial reporting frameworks, a single financial statement and the related notes might constitute a
complete set of financial statements:
• For example, the International Public Sector Accounting Standard (IPSAS), Financial Reporting under the Cash
Basis of Accounting, issued by the International Public Sector Accounting Standards Board states that the primary
financial statement is a statement of cash receipts and payments when a public sector entity prepares its financial
statements in accordance with that IPSAS.
• Other examples of a single financial statement, each of which would include related notes, are:
o Balance sheet.
o Statement of income or statement of operations.
o Statement of retained earnings.
o Statement of cash flows.
o Statement of assets and liabilities that does not include owner’s equity.
o Statement of changes in owners’ equity.
o Statement of revenue and expenses.
o Statement of operations by product lines.
A9. ISA 210 establishes requirements and provides guidance on determining the acceptability of the applicable financial
reporting framework. 5 ISA 800 (Revised) deals with special considerations when financial statements are prepared in
accordance with a special purpose framework.6
A10. Because of the significance of the premise to the conduct of an audit, the auditor is required to obtain the agreement of
management and, where appropriate, those charged with governance that they acknowledge and understand that they have
the responsibilities set out in paragraph A2 as a precondition for accepting the audit engagement.7
ISA
Considerations Specific to Audits in the Public Sector
A11. The mandates for audits of the financial statements of public sector entities may be broader than those of other entities. As a
result, the premise, relating to management’s responsibilities, on which an audit of the financial statements of a public sector
entity is conducted may include additional responsibilities, such as the responsibility for the execution of transactions and
events in accordance with law, regulation or other authority.8
5
ISA 210, Agreeing the Terms of Audit Engagements, paragraph 6(a)
6
ISA 800 (Revised), Special Considerations—Audits of Financial Statements Prepared in Accordance with Special Purpose Frameworks, paragraph 8
7
ISA 210, paragraph 6(b)
8
See paragraph A62.
ISA 200
111
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
opinion required is on whether the financial statements are prepared, in all material respects, in accordance with the
framework. Unless specifically stated otherwise, references in the ISAs to the auditor’s opinion cover both forms of opinion.
Definitions
Financial Statements (Ref: Para. 13(f))
A14. Some financial reporting frameworks may refer to an entity’s economic resources or obligations in other terms. For example,
these may be referred to as the entity’s assets and liabilities, and the residual difference between them may be referred to as
equity or equity interests.
A15. Explanatory or descriptive information required to be included in the financial statements by the applicable financial
reporting framework may be incorporated therein by cross-reference to information in another document, such as a
management report or a risk report. “Incorporated therein by cross-reference” means cross-referenced from the financial
statements to the other document, but not from the other document to the financial statements. Where the applicable financial
reporting framework does not expressly prohibit the cross-referencing of where explanatory or descriptive information may
be found, and the information has been appropriately cross-referenced, the information will form part of the financial
statements.
Risk of Material Misstatement (Ref: Para. 13(n))
A16. For the purposes of the ISAs, a risk of material misstatement exists when there is a reasonable possibility of:
(a) A misstatement occurring (i.e., its likelihood); and
(b) Being material if it were to occur (i.e., its magnitude).
9
ISQM 1, Quality Management for Firms that Perform Audits or Reviews of Financial Statements, or Other Assurance or Related Services Engagements
10
ISA 220 (Revised), Quality Management for an Audit of Financial Statements, paragraph 3
ISA 200
112
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
applicable legal and regulatory requirements, and conduct engagements in accordance with such standards and requirements.
As part of its system of quality management, ISQM 1 requires the firm to establish quality objectives that address the
fulfillment of responsibilities in accordance with relevant ethical requirements, including those related to independence.11 ISA
220 (Revised) sets out the engagement partner’s responsibilities with respect to relevant ethical requirements, including those
related to independence.12 ISA 220 (Revised) also describes when the engagement team may depend on the firm’s policies or
procedures in managing and achieving quality at the engagement level.13
ISA
A25. The auditor cannot be expected to disregard past experience of the honesty and integrity of the entity’s management and
those charged with governance. Nevertheless, a belief that management and those charged with governance are honest and
have integrity does not relieve the auditor of the need to maintain professional skepticism or allow the auditor to be satisfied
with less than persuasive audit evidence when obtaining reasonable assurance.
11
ISQM 1, paragraph 29
12
ISA 220 (Revised), paragraphs 16‒21
13
ISA 220 (Revised), paragraph A10
14
ISA 500, Audit Evidence, paragraphs 7–9
15
ISA 240, paragraph 14; ISA 500, paragraph 11; ISA 505, External Confirmations, paragraphs 10–11, and 16
ISA 200
113
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
• The evaluation of management’s judgments in applying the entity’s applicable financial reporting framework.
• The drawing of conclusions based on the audit evidence obtained, for example, assessing the reasonableness of the
estimates made by management in preparing the financial statements.
A27. The distinguishing feature of the professional judgment expected of an auditor is that it is exercised by an auditor whose
training, knowledge and experience have assisted in developing the necessary competencies to achieve reasonable
judgments.
A28. The exercise of professional judgment in any particular case is based on the facts and circumstances that are known by the
auditor. Consultation on difficult or contentious matters during the course of the audit, both within the engagement team and
between the engagement team and others at the appropriate level within or outside the firm, such as that required by ISA 220
(Revised),16 assist the auditor in making informed and reasonable judgments.
A29. Professional judgment can be evaluated based on whether the judgment reached reflects a competent application of auditing and
accounting principles and is appropriate in the light of, and consistent with, the facts and circumstances that were known to the
auditor up to the date of the auditor’s report.
A30. Professional judgment needs to be exercised throughout the audit. It also needs to be appropriately documented. In this
regard, the auditor is required to prepare audit documentation sufficient to enable an experienced auditor, having no previous
connection with the audit, to understand the significant professional judgments made in reaching conclusions on significant
matters arising during the audit.17 Professional judgment is not to be used as the justification for decisions that are not
otherwise supported by the facts and circumstances of the engagement or sufficient appropriate audit evidence.
Sufficient Appropriate Audit Evidence and Audit Risk (Ref: Para. 5 and 17)
Sufficiency and Appropriateness of Audit Evidence
A31. Audit evidence is necessary to support the auditor’s opinion and report. It is cumulative in nature and is primarily obtained from
audit procedures performed during the course of the audit. It may, however, also include information obtained from other sources
such as previous audits (provided the auditor has determined whether changes have occurred since the previous audit that may
affect its relevance to the current audit18) or through the information obtained by the firm in the acceptance or continuance of the
client relationship or engagement. In addition to other sources inside and outside the entity, the entity’s accounting records are an
important source of audit evidence. Also, information that may be used as audit evidence may have been prepared by an expert
employed or engaged by the entity. Audit evidence comprises both information that supports and corroborates management’s
assertions, and any information that contradicts such assertions. In addition, in some cases, the absence of information (for
example, management’s refusal to provide a requested representation) is used by the auditor, and therefore, also constitutes audit
evidence. Most of the auditor’s work in forming the auditor’s opinion consists of obtaining and evaluating audit evidence.
A32. The sufficiency and appropriateness of audit evidence are interrelated. Sufficiency is the measure of the quantity of audit
evidence. The quantity of audit evidence needed is affected by the auditor’s assessment of the risks of misstatement (the higher
the assessed risks, the more audit evidence is likely to be required) and also by the quality of such audit evidence (the higher
the quality, the less may be required). Obtaining more audit evidence, however, may not compensate for its poor quality.
A33. Appropriateness is the measure of the quality of audit evidence; that is, its relevance and its reliability in providing support
for the conclusions on which the auditor’s opinion is based. The reliability of evidence is influenced by its source and by its
nature, and is dependent on the individual circumstances under which it is obtained.
A34. Whether sufficient appropriate audit evidence has been obtained to reduce audit risk to an acceptably low level, and thereby
enable the auditor to draw reasonable conclusions on which to base the auditor’s opinion, is a matter of professional
judgment. ISA 500 and other relevant ISAs establish additional requirements and provide further guidance applicable
throughout the audit regarding the auditor’s considerations in obtaining sufficient appropriate audit evidence.
Audit Risk
A35. Audit risk is a function of the risks of material misstatement and detection risk. The assessment of risks is based on audit
procedures to obtain information necessary for that purpose and evidence obtained throughout the audit. The assessment of
risks is a matter of professional judgment, rather than a matter capable of precise measurement.
16
ISA 220 (Revised), paragraph 35
17
ISA 230, paragraph 8
18
ISA 315 (Revised 2019), Identifying and Assessing the Risks of Material Misstatement, paragraph 16
ISA 200
114
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
A36. For purposes of the ISAs, audit risk does not include the risk that the auditor might express an opinion that the financial
statements are materially misstated when they are not. This risk is ordinarily insignificant. Further, audit risk is a technical
term related to the process of auditing; it does not refer to the auditor’s business risks such as loss from litigation, adverse
publicity, or other events arising in connection with the audit of financial statements.
ISA
A43. Control risk is a function of the effectiveness of the design, implementation and maintenance of controls by management
to address identified risks that threaten the achievement of the entity’s objectives relevant to preparation of the entity’s
financial statements. However, internal control, no matter how well designed and operated, can only reduce, but not
eliminate, risks of material misstatement in the financial statements, because of the inherent limitations of controls. These
include, for example, the possibility of human errors or mistakes, or of controls being circumvented by collusion or
inappropriate management override. Accordingly, some control risk will always exist. The ISAs provide the conditions
under which the auditor is required to, or may choose to, test the operating effectiveness of controls in determining the
nature, timing and extent of substantive procedures to be performed. 19
A44. The assessment of the risks of material misstatement may be expressed in quantitative terms, such as in percentages, or in
non-quantitative terms. In any case, the need for the auditor to make appropriate risk assessments is more important than the
different approaches by which they may be made. The ISAs typically refer to the “risks of material misstatement,” rather than
to inherent risk and control risk separately. However, ISA 315 (Revised 2019) requires inherent risk to be assessed separately
from control risk to provide a basis for designing and performing further audit procedures to respond to the assessed risks of
material misstatement at the assertion level, in accordance with ISA 330.
A45. Risks of material misstatement are assessed at the assertion level in order to determine the nature, timing and extent of further
audit procedures necessary to obtain sufficient appropriate audit evidence.20
19
ISA 330, The Auditor’s Reponses to Assessed Risks, paragraphs 6–17
20
ISA 330, paragraph 6
ISA 200
115
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
A46. ISA 315 (Revised 2019) establishes requirements and provides guidance on identifying and assessing the risks of material
misstatement at the financial statement and assertion levels.
Detection Risk
A47. For a given level of audit risk, the acceptable level of detection risk bears an inverse relationship to the assessed risks of
material misstatement at the assertion level. For example, the greater the risks of material misstatement the auditor believes
exists, the less the detection risk that can be accepted and, accordingly, the more persuasive the audit evidence required by the
auditor.
A48. Detection risk relates to the nature, timing and extent of the auditor’s procedures that are determined by the auditor to reduce
audit risk to an acceptably low level. It is therefore a function of the effectiveness of an audit procedure and of its application
by the auditor. Matters such as:
• adequate planning;
• proper assignment of personnel to the engagement team;
• the application of professional skepticism; and
• supervision and review of the audit work performed,
assist to enhance the effectiveness of an audit procedure and of its application and reduce the possibility that an auditor might
select an inappropriate audit procedure, misapply an appropriate audit procedure, or misinterpret the audit results.
A49. ISA 300 21 and ISA 330 establish requirements and provide guidance on planning an audit of financial statements and the
auditor’s responses to assessed risks. Detection risk, however, can only be reduced, not eliminated, because of the inherent
limitations of an audit. Accordingly, some detection risk will always exist.
21
ISA 300, Planning an Audit of Financial Statements
22
ISA 540 (Revised), Auditing Accounting Estimates and Related Disclosures, and ISA 700 (Revised), Forming an Opinion and Reporting on Financial
Statements, paragraph 12
ISA 200
116
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
Accordingly, the auditor cannot be certain of the completeness of information, even though the auditor has performed
audit procedures to obtain assurance that all relevant information has been obtained.
• Fraud may involve sophisticated and carefully organized schemes designed to conceal it. Therefore, audit procedures
used to gather audit evidence may be ineffective for detecting an intentional misstatement that involves, for example,
collusion to falsify documentation which may cause the auditor to believe that audit evidence is valid when it is not.
The auditor is neither trained as nor expected to be an expert in the authentication of documents.
• An audit is not an official investigation into alleged wrongdoing. Accordingly, the auditor is not given specific
legal powers, such as the power of search, which may be necessary for such an investigation.
Timeliness of Financial Reporting and the Balance between Benefit and Cost
A53. The matter of difficulty, time, or cost involved is not in itself a valid basis for the auditor to omit an audit procedure for which
there is no alternative or to be satisfied with audit evidence that is less than persuasive. Appropriate planning assists in
making sufficient time and resources available for the conduct of the audit. Notwithstanding this, the relevance of
information, and thereby its value, tends to diminish over time, and there is a balance to be struck between the reliability of
information and its cost. This is recognized in certain financial reporting frameworks (see, for example, the IASB’s
Framework for the Preparation and Presentation of Financial Statements). Therefore, there is an expectation by users of
financial statements that the auditor will form an opinion on the financial statements within a reasonable period of time and at
a reasonable cost, recognizing that it is impracticable to address all information that may exist or to pursue every matter
exhaustively on the assumption that information is in error or fraudulent until proved otherwise.
A54. Consequently, it is necessary for the auditor to:
• Plan the audit so that it will be performed in an effective manner;
• Direct audit effort to areas most expected to contain risks of material misstatement, whether due to fraud or error, with
correspondingly less effort directed at other areas; and
• Use testing and other means of examining populations for misstatements.
A55. In light of the approaches described in paragraph A54, the ISAs contain requirements for the planning and performance of the
audit and require the auditor, among other things, to:
• Have a basis for the identification and assessment of risks of material misstatement at the financial statement and
assertion levels by performing risk assessment procedures and related activities;23 and
• Use testing and other means of examining populations in a manner that provides a reasonable basis for the auditor to
ISA
draw conclusions about the population.24
23
ISA 315 (Revised 2019), paragraph 13
24
ISA 330; ISA 500; ISA 520, Analytical Procedures; ISA 530, Audit Sampling
25
ISA 550, Related Parties
26
ISA 250 (Revised), Consideration of Laws and Regulations in an Audit of Financial Statements
27
ISA 570 (Revised), Going Concern
ISA 200
117
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
Accordingly, the subsequent discovery of a material misstatement of the financial statements resulting from fraud or error
does not by itself indicate a failure to conduct an audit in accordance with ISAs. However, the inherent limitations of an audit
are not a justification for the auditor to be satisfied with less than persuasive audit evidence. Whether the auditor has
performed an audit in accordance with ISAs is determined by the audit procedures performed in the circumstances, the
sufficiency and appropriateness of the audit evidence obtained as a result thereof and the suitability of the auditor’s report
based on an evaluation of that evidence in light of the overall objectives of the auditor.
While such guidance does not in itself impose a requirement, it is relevant to the proper application of the requirements of an
ISA. The application and other explanatory material may also provide background information on matters addressed in an
ISA.
A65. Appendices form part of the application and other explanatory material. The purpose and intended use of an appendix are
explained in the body of the related ISAs or within the title and introduction of the appendix itself.
A66. Introductory material may include, as needed, such matters as explanation of:
• The purpose and scope of the ISA, including how the ISA relates to other ISAs.
• The subject matter of the ISA.
ISA 200
118
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
• The respective responsibilities of the auditor and others in relation to the subject matter of the ISA.
• The context in which the ISA is set.
A67. An ISA may include, in a separate section under the heading “Definitions,” a description of the meanings attributed to
certain terms for purposes of the ISAs. These are provided to assist in the consistent application and interpretation of the
ISAs, and are not intended to override definitions that may be established for other purposes, whether in law, regulation or
otherwise. Unless otherwise indicated, those terms will carry the same meanings throughout the ISAs. The Glossary of
Terms relating to International Standards issued by the International Auditing and Assurance Standards Board in the
Handbook of International Quality Management, Auditing, Review, Other Assurance, and Related Services
Pronouncements published by IFAC contains a complete listing of terms defined in the ISAs. It also includes descriptions
of other terms found in ISAs to assist in common and consistent interpretation and translation.
A68. When appropriate, additional considerations specific to audits of smaller entities and public sector entities are included
within the application and other explanatory material of an ISA. These additional considerations assist in the application of
the requirements of the ISA in the audit of such entities. They do not, however, limit or reduce the responsibility of the
auditor to apply and comply with the requirements of the ISAs.
Scalability Considerations
A69. Scalability considerations have been included in some ISAs (e.g., ISA 315 (Revised 2019)), illustrating the application of the
requirements to all entities regardless of whether their nature and circumstances are less complex or more complex. Less
complex entities are entities for which the characteristics in paragraph A71 may apply.
A70. The “considerations specific to smaller entities” included in some ISAs have been developed primarily with unlisted entities
in mind. Some of the considerations, however, may be helpful in audits of smaller listed entities.
A71. For purposes of specifying additional considerations to audits of smaller entities, a “smaller entity” refers to an entity which
typically possesses qualitative characteristics such as:
(a) Concentration of ownership and management in a small number of individuals (often a single individual – either a
natural person or another enterprise that owns the entity provided the owner exhibits the relevant qualitative
characteristics); and
(b) One or more of the following:
(i) Straightforward or uncomplicated transactions;
(ii) Simple record-keeping;
ISA
(iii) Few lines of business and few products within business lines;
(iv) Simpler systems of internal control;
(v) Few levels of management with responsibility for a broad range of controls; or
(vi) Few personnel, many having a wide range of duties.
These qualitative characteristics are not exhaustive, they are not exclusive to smaller entities, and smaller entities do
not necessarily display all of these characteristics.
A72. The ISAs refer to the proprietor of a smaller entity who is involved in running the entity on a day-to-day basis as the
“owner-manager.”
ISA 200
119
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
• Deciding whether more needs to be done to achieve them in the particular circumstances of the audit.
A75. Objectives are to be understood in the context of the overall objectives of the auditor stated in paragraph 11 of this ISA. As
with the overall objectives of the auditor, the ability to achieve an individual objective is equally subject to the inherent
limitations of an audit.
A76. In using the objectives, the auditor is required to have regard to the interrelationships among the ISAs. This is because, as indicated
in paragraph A58, the ISAs deal in some cases with general responsibilities and in others with the application of those
responsibilities to specific topics. For example, this ISA requires the auditor to adopt an attitude of professional skepticism; this is
necessary in all aspects of planning and performing an audit but is not repeated as a requirement of each ISA. At a more detailed
level, ISA 315 (Revised 2019) and ISA 330 contain, among other things, objectives and requirements that deal with the auditor’s
responsibilities to identify and assess the risks of material misstatement and to design and perform further audit procedures to
respond to those assessed risks, respectively; these objectives and requirements apply throughout the audit. An ISA dealing with
specific aspects of the audit (for example, ISA 540 (Revised)) may expand on how the objectives and requirements of such ISAs as
ISA 315 (Revised 2019) and ISA 330 are to be applied in relation to the subject of the ISA but does not repeat them. Thus, in
achieving the objective stated in ISA 540 (Revised), the auditor has regard to the objectives and requirements of other relevant
ISAs.
Use of Objectives to Determine Need for Additional Audit Procedures (Ref: Para. 21(a))
A77. The requirements of the ISAs are designed to enable the auditor to achieve the objectives specified in the ISAs, and thereby
the overall objectives of the auditor. The proper application of the requirements of the ISAs by the auditor is therefore
expected to provide a sufficient basis for the auditor’s achievement of the objectives. However, because the circumstances of
audit engagements vary widely and all such circumstances cannot be anticipated in the ISAs, the auditor is responsible for
determining the audit procedures necessary to fulfill the requirements of the ISAs and to achieve the objectives. In the
circumstances of an engagement, there may be particular matters that require the auditor to perform audit procedures in
addition to those required by the ISAs to meet the objectives specified in the ISAs.
Use of Objectives to Evaluate Whether Sufficient Appropriate Audit Evidence Has Been Obtained (Ref: Para. 21(b))
A78. The auditor is required to use the objectives to evaluate whether sufficient appropriate audit evidence has been obtained in the
context of the overall objectives of the auditor. If as a result the auditor concludes that the audit evidence is not sufficient and
appropriate, then the auditor may follow one or more of the following approaches to meeting the requirement of paragraph 21(b):
• Evaluate whether further relevant audit evidence has been, or will be, obtained as a result of complying with other
ISAs;
• Extend the work performed in applying one or more requirements; or
• Perform other procedures judged by the auditor to be necessary in the circumstances.
Where none of the above is expected to be practical or possible in the circumstances, the auditor will not be able to obtain
sufficient appropriate audit evidence and is required by the ISAs to determine the effect on the auditor’s report or on the
auditor’s ability to complete the engagement.
28
ISA 610 (Revised 2013), Using the Work of Internal Auditors, paragraph 2
29
ISA 705, Modifications to the Opinion in the Independent Auditor’s Report, paragraph 13
ISA 200
120
OVERALL OBJECTIVES OF THE INDEPENDENT AUDITOR AND THE CONDUCT OF AN
AUDIT IN ACCORDANCE WITH INTERNATIONAL STANDARDS ON AUDITING
• The requirement to communicate significant deficiencies in internal control identified during the audit to those
charged with governance, 30 which depends on the existence of such identified significant deficiencies; and the
requirement to obtain sufficient appropriate audit evidence regarding the presentation and disclosure of segment
information in accordance with the applicable financial reporting framework,31 which depends on that framework
requiring or permitting such disclosure, represent implicit conditional requirements.
In some cases, a requirement may be expressed as being conditional on applicable law or regulation. For example, the auditor
may be required to withdraw from the audit engagement, where withdrawal is possible under applicable law or regulation,
or the auditor may be required to do something, unless prohibited by law or regulation. Depending on the jurisdiction, the
legal or regulatory permission or prohibition may be explicit or implicit.
ISA
30
ISA 265, Communicating Deficiencies in Internal Control to Those Charged with Governance and Management, paragraph 9
31
ISA 501, Audit Evidence—Specific Considerations for Selected Items, paragraph 13
32
ISA 230, paragraph 12
ISA 200
121