Advanced Audit and Assurance (International) · International regulatory frameworks for audit and assurance services

IAASB, IFAC and the Regulatory Framework for Auditors

Updated 11 October 2026 · Fact-checked

IFAC is the global accountancy body. The IAASB, which works under the Public Interest Oversight Board (PIOB), sets ISAs and other assurance standards. The IESBA sets the Code of Ethics. Neither has legal power. Countries adopt or adapt the standards through law or national regulators, who also oversee and discipline auditors.

Understand IAASB, IFAC and the Regulatory Framework for Auditors

Start with the problem. Audits cross borders. Investors want to trust an audit report whichever country it comes from. So the profession needs one common set of standards. Those standards need a body to write them, a body to watch that body, and national authorities to give them force.

IFAC (International Federation of Accountants) is the global organisation for the accountancy profession. Its members are professional accountancy bodies, and ACCA is one of them. IFAC supports the independent standard-setting boards, but it does not write the standards itself. Members also commit to the Statements of Membership Obligations (SMOs), which include supporting and promoting adoption of international standards.

IAASB (International Auditing and Assurance Standards Board) issues the International Standards on Auditing (ISAs), the quality management standards (ISQMs), and standards for assurance, review and related services (such as ISAE and ISRE). IESBA (International Ethics Standards Board for Accountants) issues the International Code of Ethics for Professional Accountants (including International Independence Standards). The simple split: IAASB covers what auditors do. IESBA covers how auditors must behave.

Oversight. The Public Interest Oversight Board (PIOB) oversees the public interest side of the standard-setting process. This includes the boards' due process and how they are nominated. Standards are developed through public consultation: exposure drafts, comment periods and public meetings. This is how the boards try to serve the public interest, not only the profession.

Adoption. IAASB and IESBA standards are not law. A country decides how to use them. It may adopt them in full, adopt them with changes, or base its own standards on them. National regulators and professional bodies may then add local legal requirements, monitor audit firms, inspect audit quality and discipline auditors. Where local law conflicts with an ISA, local law normally takes priority, and the auditor must follow the law. Related bodies such as IFIAR (the international group of independent audit regulators) help regulators share inspection practice. In an exam, use the scenario's country to decide how far it applies.

Key rules to remember

Who does what: IFAC = global profession body; IAASB = auditing and assurance standards; IESBA = ethics and independence standards; PIOB = public interest oversight; Learn this as the core split. Do not say IFAC issues the ISAs.
Legal status of international standards: ISAs and the IESBA Code = no direct legal force until adopted by national law or regulators; Adoption can be full, with amendments, or used as a base for national standards.
Conflict with local law: Where law or regulation conflicts with a standard, follow the law and explain any departure; Local requirements can be stricter than the international standard. Stricter local rules apply.
Standard-setting due process: Identify issue → draft → public exposure → consider comments → issue final standard, under PIOB oversight; Use it to explain why standards are credible and in the public interest.

How to solve IAASB, IFAC and the Regulatory Framework for Auditors questions

Use this method for any question on who sets or enforces standards, or on how a standard becomes binding.

1Read the requirement and note the verb: identify, explain, discuss or evaluate. This sets how much depth you need.
2Classify the issue: auditing or assurance standard (IAASB), ethics or independence (IESBA), oversight (PIOB), profession body (IFAC), or enforcement (national regulator).
3State the role of each relevant body in one clear sentence each.
4Explain the legal status. Say international standards bind only when adopted by national law or regulators.
5Apply to the scenario. Use the country, the type of client (such as a listed entity) and any conflict between local law and the standards.
6Add the public interest point: due process, PIOB oversight, consistency, investor confidence and regulator oversight.
7Finish with a short conclusion or recommendation. Make it practical, and link to the professional skills the question rewards.

Quickest way: Body, Role, Force, Apply

When to use it: Use it when you have a few minutes and the question asks who issues, who oversees or how standards are adopted.

Body: name the right body (IAASB, IESBA, IFAC, PIOB or national regulator).
Role: give its job in a short phrase.
Force: say whether it has legal power or needs adoption.
Apply: tie it to the scenario in one sentence, then move on.

Common mistakes in IAASB, IFAC and the Regulatory Framework for Auditors

Saying IFAC issues the ISAs.
IFAC is the best-known name and the boards sit within its structure.
Fix: Say IFAC supports the boards. The IAASB issues ISAs and the IESBA issues the Code.
Mixing up IAASB and IESBA.
Both are international boards and both affect auditors.
Fix: Use the split: IAASB is what auditors do, IESBA is how they behave.
Claiming ISAs are automatically law everywhere.
Students see 'international standard' and assume binding force.
Fix: Say they bind only through adoption by national law or regulators, in full or adapted.
Forgetting the PIOB and public interest oversight.
Students focus on the writers of standards and skip who supervises them.
Fix: Add one line on the PIOB overseeing due process and the public interest.
Listing bodies with no link to the scenario.
Students recall notes instead of answering the requirement.
Fix: Name the country or client type from the scenario and say what applies and why.

Worked examples

Example 1

A client in a country that has not adopted the ISAs asks why your firm still follows them. Explain the roles of the IAASB, IESBA and IFAC and the legal status of the standards. (8 marks)

Show the solution

The IAASB issues the ISAs and other assurance standards, so it sets what the auditor does.
The IESBA issues the Code of Ethics, including independence rules, so it sets how the auditor behaves.
IFAC is the global body for the accountancy profession. It supports the boards but does not write the standards itself. Member bodies such as ACCA commit to promoting international standards.
The PIOB oversees the public interest side of standard setting, which supports credibility.
The standards have no legal force by themselves. Where local law has not adopted them, they bind through firm policy or professional body rules.
Apply it: following the ISAs gives consistent quality and credibility for foreign investors and lenders. Any local law that conflicts with them must still be followed.

Answer: The IAASB sets auditing standards, the IESBA sets ethics standards, and IFAC supports them as the global profession body, with PIOB oversight. The standards are not law without adoption. The firm follows them to support quality and credibility, and local law prevails if it conflicts.

Example 2

Explain how a country might adopt the ISAs and why a national regulator is still needed. (6 marks)

Show the solution

Adoption options: adopt the ISAs in full, adopt them with amendments for local law, or base national standards on them.
Legal route: legislation or a national standard-setter or professional body gives them force for statutory audits.
Why a regulator is still needed: standards need enforcement. Regulators monitor and inspect audit firms and discipline auditors.
Local needs: the regulator can add requirements, for example for listed entities or public interest entities, which may be stricter than the ISAs.
Conclusion: international standards give consistency, and national regulators give legal force and enforcement.

Answer: A country can adopt the ISAs in full, with amendments, or use them as a base for its own standards. A regulator is needed to give legal force, inspect firms, discipline auditors and add stricter local rules where required.

Exam tips

Write the split between IAASB and IESBA in one line early. It earns easy marks and shows clear thinking.
Always state that standards need national adoption. Examiners reward the idea of legal force.
Tie your answer to the scenario country or client type. Generic lists score less than applied points.
If the question asks about public interest, mention PIOB oversight and public consultation.
Keep answers short and structured. Use the professional skills marks by giving a clear, practical conclusion.

Practice questions from International regulatory frameworks for audit and assurance services

IAASB, IFAC and the Regulatory Framework for Auditors: frequently asked questions

What is the difference between IAASB and IESBA?

The IAASB sets auditing, assurance and quality management standards, such as the ISAs. The IESBA sets the Code of Ethics, including independence rules. One covers the work, the other covers conduct.

Who issues the International Standards on Auditing?

The IAASB issues the ISAs. It works with IFAC's support and its processes are overseen in the public interest by the PIOB.

What is the role of IFAC?

IFAC is the global organisation for the accountancy profession. It supports the independent standard-setting boards and promotes high-quality practice through its member bodies. It does not write the ISAs itself.

How are ISAs adopted by national regulators?

Each country chooses. It can adopt them in full, adopt them with changes, or base its own standards on them. Law or regulators give them force, and local law prevails if it conflicts.