Advanced Audit and Assurance (International) · International regulatory frameworks for audit and assurance services

IESBA Code of Ethics: Auditor Independence Threats and Safeguards

Updated 11 October 2026

Auditor independence means being free of influences that compromise objective judgement, in mind and in appearance. Under the IESBA Code you identify each threat, evaluate whether it is at an acceptable level, then apply safeguards or decline or end the engagement or service. Always link your answer to the scenario facts.

Understand Ethical Requirements and Auditor Independence

The IESBA Code of Ethics sets the ethical standards for professional accountants worldwide. Its core is the conceptual framework. You do not just follow a list of rules. You identify threats to compliance with the fundamental principles, evaluate them, and address them.

The five fundamental principles are integrity, objectivity, professional competence and due care, confidentiality and professional behaviour. Independence is not a fundamental principle itself. It supports objectivity and integrity in audit and other assurance work.

The Code describes two aspects of independence. Independence of mind is a state of mind that lets you give an opinion without being affected by pressure, so you act with integrity, objectivity and professional scepticism. Independence in appearance means avoiding facts and circumstances so significant that a reasonable and informed third party would conclude your integrity, objectivity or scepticism has been compromised. The first is about what you really think. The second is about how things look to others.

The Code groups threats into five types: self-interest, self-review, advocacy, familiarity and intimidation. Assuming a management responsibility creates self-review, self-interest and familiarity threats, and it is prohibited for all audit clients.

Safeguards are actions that reduce a threat. Examples are using a separate team for a non-audit service, an engagement quality review, removing a person from the team, or rotating the partner. Some threats are too significant for any safeguard. Then you must decline the work, or end the relationship. For public interest entities (PIEs) the Code is stricter. It restricts non-audit services and requires communication with those charged with governance (TCWG) about independence matters and about fees.

Key rules to remember

Five fundamental principles: Integrity, Objectivity, Professional competence and due care, Confidentiality, Professional behaviour; Independence is not on this list. It supports objectivity and integrity for assurance work.
Five main threats: Self-interest, Self-review, Advocacy, Familiarity, Intimidation; Name the threat first, then explain it using the scenario facts.
Conceptual framework approach: Identify threats → Evaluate significance → Address (eliminate, safeguard, or decline/end); Use this sequence in every ethics answer.
Two aspects of independence: Independence of mind + Independence in appearance; Mind is about actual state. Appearance is about what a reasonable and informed third party would conclude.
Acceptable level test: Threat acceptable if a reasonable and informed third party would likely conclude compliance with the principles is not compromised; If not acceptable, apply safeguards or decline.
Management responsibilities: Auditor must not assume a management responsibility for an audit client; Doing so creates self-review, self-interest and familiarity threats. It is prohibited for all audit clients, and no safeguard can remove it.

How to solve Ethical Requirements and Auditor Independence questions

Use the same route for any independence or ethics requirement. It keeps your answer structured and earns both technical and professional skills marks.

1Read the requirement. Note whether it asks you to identify threats, evaluate them, recommend safeguards, or advise on acceptance.
2Pick out the facts in the scenario: fees, services, relationships, length of service, gifts, staff moves, client type (PIE or not).
3For each fact, name the threat type and explain why it is a threat in this case. Do not just list the label.
4Evaluate significance. Consider the client being a PIE, the size of the fee or service, and whether the matter is recurring.
5Recommend specific safeguards, such as a separate team, an engagement quality review, partner rotation, or a cooling-off period. Say how each reduces the threat.
6State where no safeguard works and the firm should decline or end the service or engagement.
7Say who to communicate with, usually TCWG, and what to document.
8Conclude with a clear recommendation. Use a professional tone and sceptical judgement.

Quickest way: Fact – Threat – Safeguard – Decision

When to use it: Use it when time is short, for example in a Section B ethics question with a few marks per point.

Underline each risky fact in the scenario.
Write: fact, threat name, why it matters.
Add one practical safeguard per threat.
Flag any item with no safeguard and recommend declining.
End with one sentence recommending action and communication with TCWG.

Common mistakes in Ethical Requirements and Auditor Independence

Listing the five threats from memory without applying them to the scenario.
Students rush to show knowledge and ignore the facts given.
Fix: Tie every threat to a named fact, for example 'the fee from this client is a large share of firm income, so self-interest'.
Suggesting safeguards for a threat that cannot be safeguarded, such as the firm taking on management decisions for an audit client.
Students assume every threat has a safeguard.
Fix: Say clearly when the service must be declined or ended. Management responsibilities are never acceptable.
Confusing independence of mind with independence in appearance.
Both sound similar and are often defined together.
Fix: Mind is the actual state. Appearance is how a reasonable and informed third party would view the facts. An auditor can be objective in mind but still lack independence in appearance.
Treating self-review as only about non-audit services.
It is the most common example, so students stop there.
Fix: Self-review arises whenever the firm or team evaluates its own earlier work or judgements, for example a former partner joining the client in a key role.
Ignoring whether the client is a PIE.
Students overlook client type details in the scenario.
Fix: Check for listed status or public interest. PIEs face tighter restrictions on non-audit services and require more communication with TCWG.
Giving a vague conclusion such as 'the firm should be careful'.
Students run out of time and skip the decision.
Fix: Finish with a specific recommendation: accept with safeguards, decline the service, or resign, and say who to inform.

Worked examples

Example 1

Your firm audits Zeta Ltd, a listed company. The audit team's own members have been asked to prepare the accounting entries for a complex lease transaction and then audit them. Fee for the service would be small. Explain the threat and recommend a course of action. (5 marks)

Show the solution

Identify the threat: self-review. The team would audit entries it prepared, so it may not challenge its own judgements objectively.
Evaluate: Zeta is listed, so it is a PIE. For a PIE audit client the Code prohibits the firm from providing services that involve preparing accounting records or financial statements. The 'routine or mechanical' exception was removed for PIEs. Complexity and materiality are not the test, and a small fee does not reduce the threat.
Consider safeguards: none of them, such as a separate team or an engagement quality review, can make the service acceptable for a PIE. For comparison, if Zeta were not a PIE, the firm would have to assess the self-review threat and could provide the service only if safeguards reduced it to an acceptable level, for example by using separate staff who are not on the audit team.
Recommend: decline the preparation service. Zeta's management should prepare the entries, or another firm should.
Communicate: discuss the proposal with TCWG and document the reasoning.

Answer: The service creates a self-review threat. Because Zeta is a PIE, the Code prohibits the firm from preparing its accounting records or financial statements, whether the lease is complex or simple. The firm should decline and tell TCWG, rather than rely on safeguards.

Example 2

Your firm has audited Kiran Ltd, a private company, for eight years. The audit partner has become a close friend of the finance director. Kiran's fee is 20% of your firm's total fees. Identify the threats and recommend safeguards. (6 marks)

Show the solution

Familiarity threat: the partner's close friendship with the finance director may make the partner too trusting or less sceptical of the finance director's explanations.
Self-interest threat: Kiran is 20% of firm income. When fees from one client are a large proportion of the firm's total fees, the firm may fear losing the client and so soften its judgements.
Evaluate: both threats are significant together. Eight years of service adds to the familiarity.
Safeguards for familiarity: rotate the partner or add a different senior reviewer, and use an engagement quality review of key judgements.
Safeguards for fee dependence: Kiran is private, so it is not a PIE. The mandatory rule on fees above 15% for two consecutive years applies to PIEs, not to Kiran. The Code's non-PIE fee-dependence provisions use a 30% threshold, and 20% is below that. Even so, 20% is a large proportion, so the firm must evaluate the self-interest threat and apply safeguards where needed. Once the threat is significant, a pre- or post-issuance review by a professional accountant not in the firm is an example safeguard. Discussing the fee proportion with TCWG is good practice. The firm should also monitor the proportion of fees.
Conclude: with these safeguards the threats may be reduced to an acceptable level. Resignation is a last resort, to be considered only if the threats cannot be reduced to an acceptable level.

Answer: Familiarity (partner and finance director friendship) and self-interest (20% of fees, a large proportion) threats exist. Rotate the partner and add independent review. Evaluate the fee dependence and apply safeguards where needed, such as a pre- or post-issuance review by a professional accountant not in the firm. Discussing it with TCWG is good practice. The mandatory 15% for two consecutive years rule applies to PIEs, and the Code's non-PIE fee-dependence provisions use a 30% threshold, which Kiran's 20% is below. Resign only as a last resort if the threats cannot be reduced to an acceptable level.

Exam tips

Always name the threat type and tie it to a fact. Marks are given for application, not recitation.
Check if the client is a PIE. It changes what is allowed, and examiners often hide it in the scenario.
Say when no safeguard works. Recommending decline or resignation shows judgement and earns professional skills marks.
Mention communication with TCWG and documentation. These are easy extra points.
Keep a professional tone. Recommendations should be clear, balanced and practical.

Practice questions from International regulatory frameworks for audit and assurance services

Ethical Requirements and Auditor Independence: frequently asked questions

What is the difference between independence of mind and independence in appearance?

Independence of mind is the actual state of mind that allows objective judgement. Independence in appearance is about how a reasonable and informed third party would view the facts. You need both for an audit to be credible.

How do I deal with a self-review threat from non-audit services?

First check whether the service affects the financial statements and whether the client is a PIE. For a PIE, preparing accounting records or financial statements is prohibited. For a non-PIE, it is permitted only if the threat is at an acceptable level, with safeguards such as separate staff where needed, and you discuss it with TCWG. If the threat stays significant, decline the service.

Is independence one of the fundamental principles?

No. The five fundamental principles are integrity, objectivity, professional competence and due care, confidentiality and professional behaviour. Independence supports objectivity and integrity in audit and other assurance work.

How are independence questions examined in AAA?

They usually appear in a scenario with several ethical issues. You must identify the threats, evaluate them, recommend safeguards or refusal, and communicate with TCWG. Professional skills marks reward clear, reasoned advice.