CS Professional · Compliance Management, Audit and Due Diligence
Audit Engagement: formula sheet
Key formulas
- Mandatory contents (SA 210, para 10)
- Letter must include: (a) objective and scope; (b) auditor's responsibilities; (c) management's responsibilities; (d) applicable financial reporting framework; (e) expected form and content of reports
- Remember as five items. Item (e) also needs a statement that a report may differ from its expected form and content.
- Recording of terms
- Agreed terms = audit engagement letter or other suitable form of written agreement
- Writing is required. A verbal understanding is not enough.
- Recurring audits (para 13)
- Assess: (i) are revised terms needed? (ii) is a reminder of existing terms needed?
- A fresh letter each year is not compulsory under the standard.
- Change in terms (para 16)
- New terms agreed by auditor and management and recorded in writing
- Applies to a letter or other written agreement.
- Factors for revising or reminding (A29)
- Misunderstanding of audit scope; revised or special terms; change of senior management; significant change in ownership; significant change in nature or size of business; change in legal or regulatory requirements; change in reporting framework; change in other reporting requirements
- Use these as a checklist in recurring audit questions.
- Start-of-engagement activities (SA 300, para 5)
- (a) client continuance procedures per SA 220 + (b) ethical compliance including independence per SA 220 + (c) understanding of engagement terms per SA 210
- The auditor undertakes these at the beginning of the current audit engagement, before other significant activities.
- Scope limitation rule (SA 210, para 7)
- Limitation likely to cause a disclaimer → do not accept as an audit engagement, unless law or regulation requires it
- Applies to limits imposed by management or those charged with governance in the proposed terms.
- Preconditions failing (SA 210, para 8)
- Framework unacceptable (except as provided in para 19), or the para 6(b) agreement on management's responsibilities not obtained → discuss with management; do not accept unless law or regulation requires it
- Always discuss with management first.
- Change in terms (SA 210, paras 15 and 17)
- Request for lower assurance → check reasonable justification; if no agreement and not allowed to continue the original audit → withdraw where law permits and consider reporting obligations
- Reporting may be owed to those charged with governance, owners or regulators.
- Timing of continuance checks (SA 300, A8)
- Continuing clients: initial procedures shortly after or with the previous audit; reconsider throughout the engagement as circumstances change
- It is an ongoing process, not a one-time check.
- Start-of-engagement activities (SA 300)
- Continuance procedures (SA 220) + Ethics and independence (SA 220) + Engagement terms (SA 210)
- Done at the beginning of the current audit engagement. Name all three in an answer.
- Planning activities in setting the overall audit strategy
- Scope + Reporting objectives and timing + Significant factors + Preliminary activities and other-engagement knowledge + Resources
- Five items. The auditor identifies scope characteristics, ascertains reporting objectives, considers significant factors, considers preliminary results, and ascertains resources (nature, timing, extent).
- Strategy and plan relationship
- Overall audit strategy → Audit plan → Further audit procedures
- Strategy is broad. The plan is detailed. Both are revised if conditions change.
- Additional points for initial audits
- Predecessor auditor arrangements + Major issues discussed with management + Opening balances (SA 510) + Firm's quality control procedures
- Predecessor arrangements apply unless prohibited by law or regulation.
- Right of access (SA 210 sample letter)
- Access at all times to books, accounts, vouchers, records and electronic books, at Head Office or elsewhere
- Extends to subsidiary records for consolidation, fraud reports, and persons within the company.
- Right to information
- Auditor may require from officers such information and explanations as the auditor thinks necessary
- Quote the 'thinks necessary' wording. The auditor's judgement decides, not management's.
- Fraud reporting
- Reason to believe fraud offence → report to Board or Audit Committee for reply → forward to Central Government (Section 143(12))
- Reporting in good faith is not a breach of confidentiality.
- Addressee of report
- Accounts report → shareholders (for adoption at AGM); other services → Board of Directors
- Letter says form and content may change in light of audit findings.
- Management representations
- Auditor requests written confirmation of representations made during the audit
- Includes pending litigations, foreseeable losses on long term contracts, and delays in IEPF transfers.
- Working papers
- Working papers = procedures + evidence + conclusions
- Open to peer or quality reviewers for inspection and abstract.
Quick revision
- SA 300 requires three activities at the start: client continuance procedures, ethics and independence evaluation, and understanding the terms under SA 210.
- These initial procedures are completed before other significant audit activities.
- For continuing clients, they often occur shortly after the previous audit.
- Engagement terms are recorded in an engagement letter or other suitable written agreement.
- SA 210 requires five matters in the letter: objective and scope, auditor's responsibilities, management's responsibilities, the reporting framework, and expected reports.
- The letter must state that a report may differ from its expected form and content.
- Where law already sets out these matters, the letter may only refer to the law and management's acknowledgement of its responsibilities.
- The auditor should not accept a scope limitation likely to lead to a disclaimer, unless law requires it.
- The auditor must not agree to a change of terms without reasonable justification.
- If the request is to move to lower assurance, decide whether there is reasonable justification.
- Agreed changes must be recorded in writing.
- If the auditor cannot agree and is not allowed to continue, withdraw where law permits and consider reporting obligations.
Common mistakes
- Saying the engagement letter is optional or can be oral. Fix: State that agreed terms shall be recorded in an engagement letter or other suitable written agreement.
- Saying a fresh letter must be sent every year. Fix: Say the auditor may decide not to send a new letter, but must assess whether terms need revising or a reminder.
- Treating acceptance as a one-time step at appointment Fix: Say that SA 300 treats continuance and ethics as ongoing through the engagement as circumstances change, with initial checks at the start of each audit.
- Skipping independence and listing only fees and competence Fix: Always name SA 300 para 5(b): compliance with ethical requirements including independence, per SA 220.
- Treating the audit strategy and audit plan as the same thing. Fix: Say the strategy is the broad direction and resource decision, and the plan is the detailed set of procedures that follows.
- Saying planning is a one-time phase before fieldwork. Fix: State that planning continues and may be modified when unexpected events, changed conditions or audit evidence differ from what was expected.
- Saying management can decide what records the auditor sees. Fix: State that access covers all relevant records, including electronic books and records kept away from the Head Office.
- Reporting fraud straight to the Central Government. Fix: Show the sequence: report to Board or Audit Committee seeking reply, then forward to the Central Government.
Exam tips
- Write the five mandatory contents in a list. Examiners look for all five.
- In case questions, tie each point to a stated fact, then conclude.
- For drafting questions, give a clear structure: addressee, objective and scope, responsibilities, framework, reports, fees, acknowledgement.
- Keep SA 210 and SA 220 separate: terms agreed with management versus ethical requirements within the auditor's control.
- Cite paragraph numbers only when sure. Plain statements of the rule earn marks without risk.
- Open with the rule, then facts, then conclusion. Examiners reward the SA 300 para 5 trio of continuance, ethics and terms.
- Quote SA numbers only where sure: SA 220 for continuance and ethics, SA 210 for terms and preconditions, SA 300 for timing.
- In case questions, point out the red flag in the facts and say which gate it fails.