ACCA AAA P7 ISAs compiled
ACCA AAA P7 ISAs compiled
Auditor is responsible for obtaining reasonable assurance that Financial Statements taken as a
whole are free from material misstatements whether due to fraud or error.
Objective of auditor is to express an opinion as to whether financial statements are prepared in all
material respects, in accordance with an applicable financial reporting framework.
-Audit Risk (Detection Risk, Risk of Material Misstatement- Inherent Risk, Control Risk), Professional
Scepticism
Relevant Ethical Requirements: Firm must ensure compliance with requirements of Code of Ethics
and Conduct. Engagement partner must:
-Identify, evaluate and address ethical threats
-Remain alert throughout audit for breaches of ethical requirements
-Take appropriate action when where ethical requirements have not been fulfilled
-Prior to dating the auditor’s report, take responsibility for determining whether ethical
requirements have been fulfilled
Engagement Resources:
Engagement Partner must ensure sufficient and appropriate resources are assigned or made
available to engagement team.
Human resource- Competence and Capabilities
Technological resources- careful not to place too much reliance
Intellectual Resources- audit methodologies, implementation tools, auditing guides, templates and
checklists
(Direction, Supervision and Review)
ISQM-1
Monitoring and Remediation:
Process must be established to provide relevant, reliable and timely information about design,
implementation and operation of system of quality management and take appropriate actions to
respond to identified deficiencies so they are remediated on timely basis.
To do so, firm must:
- Establish quality objectives
- Identify and assess quality risks
- Design and implement responses to address quality risks
- Monitor system as whole by inspecting completed engagements selected according to risk
and consideration of other monitoring activities performed by firm
- Evaluate the severity of deficiencies and investigate root cause of deficiencies, evaluating
effect on quality management system
- Appropriately, remediate deficiencies responsive to root cause
Annual evaluation is required to be undertaken
ISA-220…
Taking overall responsibility for managing and achieving quality:
Prior to dating auditor’s report, engagement partner must ensure their involvement has been
sufficient and appropriate throughout the audit engagement such that they have basis for
determining that significant judgements made and conclusions reached are appropriate. Indicators
include lack of timely review and lack of evidence.
Documentation:
ISA-220 requires auditor to document:
-Conclusions reached with respect to fulfilment of responsibilities relating to ethical requirements,
and acceptance and continuance.
-Nature, scope and conclusions resulting from consultations undertaken during course of audit.
-If audit engagement is subject to an EQR, that EQR has been completed on or before date of
auditor’s report.
ISA-265 Communicating Deficiencies in Internal Control to Those Charged with Governance and
Management:
Requires auditor to communicate identified deficiencies in internal control that in auditor’s
judgement are of sufficient importance to merit attention by entity.
Deficiencies occur when:
i) Control is unable to prevent, detect and correct misstatement on timely basis.
ii) Control is missing.
It should include:
- Description of deficiencies and their potential effects
- Explanation of purpose of auditor
- Explanation of why consideration of internal controls is relevant to audit
- Explanation that matters being reported are only those identified during audit and considered
to be significant enough to report
b) Audit Plan:
-Nature, timing and extent of planned direction and supervision of engagement team members and
review of their work.
-Nature, timing and extent of Risk Assessment Procedures.
-Nature, timing and extent of Further Audit Procedures.
-Any other procedures necessary to conform to ISAs.
- Consider: (Competence and Independence of Service Org Auditor, Standards under which the
report was issued)
- Contact service organisation through client.
- Visiting service organisation and performing procedures.
- Using another auditor to perform procedures that will provide necessary information about
controls at service organisation.
Responding to Assessed Risk:
Auditor should determine whether sufficient appropriate evidence is available from client and if
not perform further audit procedures or use another auditor to perform procedures on their
behalf.
If controls are expected to operate effectively:
- Obtain Type II Report. (Date covered is appropriate, any complimentary controls in place,
time elapsed since TOCs performed, TOCs relevant to F/S assertions)
- Perform TOCs at Service Organisation.
- Use another auditor to perform TOCs.
Auditor should enquire of client whether service organisation has reported any frauds to them or
whether they are aware of any frauds, non-compliance or uncorrected misstatements affecting F/S
of entity.
Impact on Auditor’s Report:
If sufficient appropriate evidence has not been obtained, Qualified or Disclaimer of Opinion will be
issued.
Reporting:
One or more subsidiaries having modified audit opinion:
- If matter is not material in group context, unmodified opinion will be issued
- If matter is material to both, consider whether it can be resolved through consolidation
adjustment. If so, unmodified opinion will be issued.
- If cannot be resolved, modified opinion will be issued.
Reporting to management and TCWG:
Deficiencies in controls identified by group audit team or component auditors should be reported
to management of group.
Any frauds or deficiencies in group wide controls identified should be reported to group
management.
Matter to be communicated to TCWG:
- Overview of work performed and involvement in component auditor’s work
- Areas of concern over quality of component auditor’s work
- Difficulties obtaining sufficient appropriate evidence
- Fraud identified or suspected