Advanced Audit and Assurance (International) · Professional appointments

Ethical Threats and Safeguards in Audit Appointments

Updated 11 October 2026 · Fact-checked

A threat is a circumstance that could compromise your compliance with the fundamental principles. A safeguard is an action that eliminates the threat or reduces it to an acceptable level. In AAA, identify the threat type, assess its significance, propose specific safeguards, and decline the work if none are enough.

Understand Ethical Threats and Safeguards in Appointments

The IESBA Code does not give a list of banned situations for every case. It uses a conceptual framework. You identify threats to compliance with the fundamental principles, evaluate them, and address them. This approach lets you handle any scenario the examiner builds.

The fundamental principles are integrity, objectivity, professional competence and due care, confidentiality, and professional behaviour. For audit, independence of mind and independence in appearance protect objectivity. A threat is the risk. A safeguard is the response.

The Code groups threats into five types:

Self-interest: a financial or other interest of the firm or a team member influences judgement. Examples: a large fee from one client, a loan from the client, owning client shares, or fear of losing the client.
Self-review: the firm evaluates its own earlier work. Example: auditing financial statements the firm helped prepare, or auditing a valuation it carried out.
Advocacy: the firm promotes the client's position so that objectivity is compromised. Example: acting as the client's advocate in a dispute or helping it raise capital.
Familiarity: a close or long relationship makes you too sympathetic to the client. Examples: a long-serving partner, or a family member in a senior client role.
Intimidation: pressure, real or perceived, deters you from acting objectively. Examples: a dominant director threatening to drop the firm, or a threat of litigation.

The Code describes three kinds of response. Some are eliminating the circumstance, such as selling the shareholding. Some are safeguards, which are actions that reduce the threat. Some are declining or ending the engagement when nothing works. For public interest entities, stricter rules apply, and some situations cannot be safeguarded at all. Your answer should reflect that.

Appointments are a key point for threats. At tender stage you may be tempted to low-ball. At acceptance you must consider competence, conflicts and the client's integrity. When the firm supplies non-audit services alongside audit, self-review and advocacy threats grow. Always link each threat to a fact in the scenario.

Key rules to remember

Five threat categories: Self-interest, self-review, advocacy, familiarity, intimidation; Name the category for each issue. A single fact can create more than one threat, so say so when it does.
Threat response sequence: Identify → Evaluate → Address (eliminate, safeguard, or decline/end); The Code's approach. Evaluate whether a reasonable and informed third party would conclude that compliance is not compromised.
Acceptable level test: Reasonable and informed third party would conclude principles are not compromised; This is the test for whether a threat is at an acceptable level. It is not the firm's own opinion.
Types of safeguard: Safeguards created by the profession, legislation or regulation; by the client; and by the firm's own systems and procedures; Use these groups to structure answers. Specific safeguards score better than general ones.
Declining rule: No safeguard can reduce the threat to an acceptable level → decline or end the engagement; Always give a clear conclusion on accept or decline.

How to solve Ethical Threats and Safeguards in Appointments questions

Use this method for any scenario asking you to identify ethical issues and recommend actions on an appointment.

1Read the requirement. Note whether it asks for threats only, safeguards only, or a recommendation on acceptance.
2Scan the scenario for facts about money, relationships, other services, length of service, pressure and personal interests. Mark each one.
3For each fact, name the threat type (self-interest, self-review, advocacy, familiarity or intimidation) and explain why it arises in this case.
4Assess significance. Consider the size of the fee, seniority of the people involved, whether the client is a public interest entity, and how direct the link is.
5Recommend specific safeguards. Name who does what, such as an independent partner review, rotating the senior staff, or separate teams for non-audit work.
6State whether the safeguards are enough. If not, say you would decline or withdraw from the work or from the non-audit service.
7Add the next action: discuss with those charged with governance, document your judgement, and report as the Code and law require.
8Close with a short recommendation. This earns professional skills marks for communication and judgement.

Quickest way: Fact, threat, significance, safeguard

When to use it: Use this when time is short, or when the scenario has many ethical issues and you must cover them quickly.

Underline each risky fact in the scenario as you read.
Write a four-part line beside each: fact, threat type, significance, safeguard.
Rank by seriousness. Cover the most serious first.
Give one decision line at the end: accept with safeguards, accept only part, or decline.
Check that every safeguard is specific and that each threat is tied to a fact.

Common mistakes in Ethical Threats and Safeguards in Appointments

Listing threats from the Code without linking them to the scenario.
Students memorise definitions and write them out as a list.
Fix: Quote the fact, then name the threat and say why it applies. A threat with no scenario fact earns little.
Confusing threats and safeguards.
Both words appear together, and some students treat a risk factor as a safeguard.
Fix: A threat is the problem. A safeguard is the action that reduces it. Keep two separate headings in your notes.
Giving vague safeguards such as 'be independent' or 'be careful'.
Students run out of time or ideas.
Fix: State the action, who performs it, and how it reduces the threat. For example, a partner not on the engagement reviews the work before the report is issued.
Always concluding that the work can be accepted with safeguards.
Students fear being too negative.
Fix: Some threats, such as a significant financial interest in the audit client, cannot be safeguarded. State clearly when you would decline or withdraw.
Naming only one threat for each fact.
Students stop after the first obvious label.
Fix: Ask whether the fact also creates another threat. Providing valuation services, for example, creates self-review and may create advocacy.
Ignoring public interest entity status and the client's size.
Students treat all clients the same.
Fix: Check whether the client is listed or otherwise a public interest entity. If so, say that stricter requirements apply and that the threat is more significant.

Worked examples

Example 1

Marlow & Co is tendering to be auditor of Kestrel Ltd, an unlisted manufacturer. Kestrel's finance director was a partner at Marlow & Co until two years ago. Marlow & Co would also keep Kestrel's accounting records and prepare its financial statements. Fees for these services would be close to the audit fee. Identify the threats and recommend safeguards.

Show the solution

Fact 1: the finance director is a former partner. This is a familiarity threat, because close past relationships may make the audit team too trusting. It may also be an intimidation threat if the team defers to a former senior colleague. Significance depends on how recently he left, whether he still has financial ties to the firm, and whether he knows the team.
Safeguard for fact 1: confirm that he has no remaining financial interest or involvement in the firm. Assign a team who did not work closely with him. Have an independent partner review the key judgements.
Fact 2: the firm would prepare the financial statements and keep the records. This is a self-review threat, since the firm would audit its own work. It is significant because the figures it prepares are the subject of the audit.
Fact 3: non-audit fees are close to the audit fee. This is a self-interest threat because the firm depends on the total fee and may be reluctant to challenge management.
Safeguards for facts 2 and 3: use separate teams for the accounting service and the audit. Ask the client to take responsibility for decisions and approval of the statements. Have a second partner review the audit. Discuss the services and fees with those charged with governance.
Conclusion: if the self-review threat cannot be reduced to an acceptable level, the firm should decline either the accounting service or the audit. Document the assessment.

Answer: The former-partner link gives familiarity and possibly intimidation threats. Preparing the accounts gives a self-review threat, and the large non-audit fee gives a self-interest threat. Safeguards include separate teams, independent partner review, client responsibility for decisions and discussion with those charged with governance. If the self-review threat remains significant, decline the non-audit work or the audit.

Example 2

During planning for the audit of Delta Retail Inc, a long-running client, the engagement partner learns that the audit senior has accepted a personal loan from Delta's chief executive. The chief executive has also said he may review the audit fee if 'difficult questions' are asked about inventory. Explain the threats and the actions you would take.

Show the solution

Identify the loan: this is a self-interest threat. The senior has a financial tie to the client's chief executive, so may be less willing to challenge him. It also looks bad to an informed third party.
Identify the comment about fees: this is an intimidation threat. The chief executive is using the prospect of a lower fee to deter challenge. It may add a self-interest threat for the firm.
Assess significance: the loan is with a senior client officer and the senior is on the audit team, so the threat is high. Challenge on inventory is likely to be needed, so the intimidation is directly relevant.
Action on the loan: remove the senior from the engagement and repay or end the loan. Review the work the senior has done so far. Check that the firm's policy on loans and financial relationships has been followed.
Action on the intimidation: the partner should not change the audit approach. Raise the comment with those charged with governance, such as the audit committee, and document it. Consult the firm's ethics partner.
Conclusion: if the pressure continues and the audit committee does not deal with it, consider withdrawing. Fee pressure must never reduce audit work.

Answer: The loan creates a self-interest threat that is significant. The chief executive's fee comment creates intimidation. Remove the senior and review their work. Report the pressure to those charged with governance, consult the ethics partner, document everything, and consider withdrawal if the pressure continues.

Exam tips

Anchor every threat to a fact in the scenario. The marker looks for application, not recitation.
Name the threat type in your first few words for each point so the marker can see it quickly.
Make safeguards specific and show who acts. Avoid generic phrases.
Give a clear decision at the end of the answer. Accept, accept with conditions, or decline. This also supports professional skills marks.
If the requirement asks for a memo or email to a partner or client, use the format and a professional tone.

Practice questions from Professional appointments

Ethical Threats and Safeguards in Appointments in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Ethical Threats and Safeguards in Appointments: frequently asked questions

What is the difference between a threat and a safeguard in the IESBA Code?

A threat is a circumstance that could compromise compliance with the fundamental principles. A safeguard is an action that eliminates the threat or reduces it to an acceptable level. You identify and evaluate threats first, then choose responses.

What are the five types of ethical threat?

They are self-interest, self-review, advocacy, familiarity and intimidation. In the exam, name the type and link it to a fact. Some facts create more than one threat.

Do I always need to propose safeguards in AAA?

No. If the threat is too significant for any safeguard to reduce it to an acceptable level, you should recommend declining or ending the engagement. Explain why the safeguards would not be enough.

How do I spot ethical threats in a scenario?

Look for facts about fees, loans, shareholdings, family or personal relationships, length of service, other services provided to the client and pressure from management. Mark each and ask which threat it creates.