CA Final · Advanced Auditing, Assurance and Professional Ethics

Quality Control: formula sheet

Full chapter guide

Key formulas

Six elements of the system: Leadership + Ethics + Acceptance/Continuance + Human resources + Engagement performance + Monitoring; Learn them in this order. Remember the count is six.
Objective of SQC 1: Firm's reasonable assurance of (a) compliance with professional standards and legal requirements, and (b) appropriateness of reports issued; The word is reasonable assurance, not absolute assurance.
SQC 1 vs SA 220: SQC 1 = firm-level responsibility; SA 220 = engagement-level responsibility of the engagement partner (audits of financial statements); This is the most common comparison question.
Engagement quality control reviewer: Not part of the engagement team + sufficient and appropriate experience and authority + objective; SQC 1 requires EQC review for all audits of financial statements of listed entities, and for other engagements that meet the firm's criteria.
Documentation and communication: Policies and procedures = documented + communicated to personnel; The firm should also keep records that show compliance with its own system.
Leadership element: Culture and tone at the top + commercial considerations do not override quality (evaluation, compensation and promotion show commitment to quality) + enough resources + responsibility assigned to a competent person with authority; A study aid of four groups. SQC 1 does not call them 'four strands', so do not write that in an answer.
Who is assigned responsibility: Partner(s) or other persons with sufficient and appropriate experience, ability and necessary authority; All three attributes should be stated: experience, ability and authority.
Ethical requirements policy: Reasonable assurance that the firm and its personnel comply with relevant ethical requirements; The assurance is reasonable, not absolute.
Independence policies: Communicate requirements → identify and evaluate threats → take action (safeguards or withdraw) → obtain annual written confirmation from personnel required to be independent; Use this chain for any independence question. Where the threat cannot be mitigated by safeguards, the action is removal from the engagement or withdrawal.
Familiarity threat control: Rotate or manage long association of senior personnel on an assurance engagement; Apply to long-standing engagement partners and senior team members.
Principles of the Code: Integrity, objectivity, professional competence and due care, confidentiality, professional behaviour; Independence supports objectivity in assurance work.
Acceptance and continuance: core conditions: Accept or continue only if the firm (1) is competent, has the capabilities, time and resources; (2) can comply with ethical requirements; (3) has considered the client's integrity and found no information that leads to the conclusion that the client lacks integrity; Learn these as three tests: competence, ethics, integrity. Integrity is judged on available information, not proof of dishonesty.
If information arises after acceptance: Information that would have led to refusal had it been known earlier → firm considers action, including consultation with professional or legal advisers and possible withdrawal; Withdrawal is considered, not automatic. The firm decides based on the facts and the legal position.
Human resources: policies cover: Recruitment, performance evaluation, capabilities, competence, commitment to ethical principles, career development, promotion, compensation, estimation of personnel needs; Use this list to structure a short answer on the human resources element.
Assignment of engagement partner: Firm assigns responsibility for each engagement to an engagement partner; identity and role are communicated to key management members and those charged with governance; the partner must have appropriate competence, capabilities and authority; The role is communicated. The partner's accountability for quality is central.
Engagement team assignment: Assign appropriate staff, with the competence and capabilities, and sufficient time, to perform engagements in accordance with professional standards and legal requirements; Link the complexity of the job to the experience level of the team.
Engagement performance: policy areas: Consistency of quality → supervision → review → consultation → differences of opinion; Use this sequence as the skeleton of any answer on this element.
Differences of opinion: Policies for dealing with and resolving differences of opinion within the engagement team, with those consulted, and between the engagement partner and the EQC reviewer; conclusions documented and implemented; report not dated until resolved; The report must not be dated until the matter is resolved.
When EQC review is required (three triggers): EQC review needed if: (1) audit of a listed entity, OR (2) law or regulation requires it, OR (3) firm's own criteria (public interest, unusual circumstances or risks) say so; Any one trigger is enough. Listed entity audits are always covered by the firm's policy. The third trigger is the firm's judgment, not a fixed list.
Reviewer eligibility criteria: Technical qualifications (experience and authority) + able to be consulted by the engagement team without compromising objectivity; Both tests must be met. Competence alone is not enough if objectivity is compromised.
Objectivity safeguards: Firm's policies ensure reviewer's objectivity; good practice is that the firm, not the engagement partner, appoints the reviewer; reviewer does not join the team; reviewer does not make team decisions; If objectivity is impaired, the firm replaces the reviewer. The firm's policy should also address cooling-off before a former engagement partner can review. Firm appointment is good practice consistent with SQC 1, not a verbatim SQC 1 rule.
Timing rule: Report date ≥ date EQC review completed; The report is not dated until the review is complete. Completion means the reviewer has no unresolved matter suggesting the significant judgments or conclusions are not appropriate.
Scope of the review: Discuss significant matters with engagement partner + review financial statements and proposed report + review selected documentation on significant judgments and conclusions + evaluate conclusions and whether the proposed report is appropriate; The review is selective and focused on significant matters. It is not a re-performance of the audit.
Extra points for listed entities: Consider: team's evaluation of firm's independence; appropriate consultation on contentious matters or differences of opinion; whether documentation selected reflects work done and supports conclusions; These are added to the basic review scope when the entity is listed.
EQC reviewer documentation: Procedures performed + review completed on or before report date + no unresolved matters; These are the three items the reviewer documents for the engagement. Say all three.
Timing rule: EQC review completion ≤ date of auditor's report; The report should not be dated before the EQC review is completed.
Purpose of monitoring: Reasonable assurance that policies are relevant, adequate, operating effectively and complied with; Use this as your opening line for any monitoring answer.
Monitoring cycle: Periodic inspection cycle normally not longer than three years, with at least one completed engagement selected for each engagement partner over that cycle; The inspection cycle is normally no longer than three years. Every engagement partner must have at least one completed engagement inspected within the cycle.
Independence of monitors: Monitoring personnel ≠ those who did the engagement or the EQC review; Objectivity is the reason.
Complaints handling: Channel to raise concerns + investigation supervised by experienced partner + documentation + corrective action; Apply when a complaint alleges breach of standards or of the firm's quality control policies.

Quick revision

SQC 1 requires a firm to have a quality control system giving reasonable assurance of compliance with standards and appropriate reports.
Six elements: leadership, ethical requirements, acceptance and continuance, human resources, engagement performance, monitoring.
Leadership means the firm promotes a culture where quality comes first, and management is responsible for the system.
Ethical requirements cover independence, integrity, objectivity, and the firm's duty to get confirmation of compliance from its personnel.
Acceptance and continuance: consider client integrity, firm competence and resources, and ability to comply with ethics before accepting or continuing.
Human resources: recruitment, training, competence, capabilities, and assignment of suitable people to each engagement.
Engagement performance: direction, supervision, review, consultation, and resolution of differences of opinion.
EQC review is an objective evaluation of significant judgments and conclusions before the report is dated; it is required for listed entities and for engagements meeting the firm's criteria.
An EQC reviewer needs technical expertise, experience, authority, and objectivity; the engagement partner cannot be the reviewer.
The EQC review must be documented, including that it was completed before the report date.
Monitoring means ongoing review of the system, including periodic inspection of completed engagements, with findings communicated to relevant partners.
Complaints and allegations need clear policies and must be investigated by someone experienced who is not involved in the engagement.

Common mistakes

Stating that SQC 1 has more or fewer than six elements. Fix: Remember the six elements in order: leadership, ethics, acceptance, human resources, engagement performance, monitoring.
Treating engagement quality control review or documentation as a separate element. Fix: Place EQC review, consultation and documentation under engagement performance.
Saying the firm gives absolute assurance of ethical compliance. Fix: Write reasonable assurance. A firm cannot guarantee that every person complies.
Treating quality culture as only a written manual. Fix: Mention tone at the top, clear messages and evaluation, compensation and promotion tied to quality.
Treating integrity of the client as proved only by past wrongdoing. Fix: Say the firm considers the client's integrity using the information available, including owners, management and business practices, and acts if it concludes integrity is lacking.
Writing that the firm must automatically withdraw when new adverse information appears. Fix: Write that the firm considers appropriate action, including consulting and possibly withdrawing, and takes advice on professional and legal responsibilities.
Saying EQC review is compulsory for every audit. Fix: State that SQC 1 requires firm policies covering listed entity audits, engagements where law requires it, and others meeting the firm's own criteria.
Letting the engagement partner choose the reviewer. Fix: SQC 1 requires firm policies that ensure the reviewer's objectivity. Good practice is for the firm, not the engagement partner, to appoint the reviewer. Present it that way, not as a verbatim SQC 1 rule.
Writing that the EQC reviewer only signs off, with no documentation. Fix: Always list the three documentation items: procedures performed, completion on or before the report date, and no unresolved matters.
Saying the EQC review can be completed after the report is dated. Fix: State that the report should not be dated until the EQC review is completed.

Exam tips

Write the count as six elements and list them in the standard order. Examiners check the list first.
For a comparison of SQC 1 and SA 220, use two columns of points in sentences: who is responsible, what level, and what it covers.
In case questions, name the element, quote the rule in a line, apply the fact and conclude. This earns marks on written answers.
For MCQs, check if the question asks about the firm or the engagement partner. The options often swap these two.
Mention that the system is scaled to the size of the firm, if the case involves a small firm.
Write both parts clearly in answers: leadership responsibilities and ethical requirements. Marks are given for each.
Use the phrases culture of quality, reasonable assurance, sufficient and appropriate experience, and necessary authority.
For independence cases, name the threat first, then the safeguard, then the fallback of withdrawal. Where the threat is a significant direct financial interest, go straight to disposal, removal or withdrawal.