Advanced Audit and Assurance (International) · Quality management (firm and engagement level)

Audit Quality, Quality Reviews and Regulatory Inspection

Updated 11 October 2026 · Fact-checked

Audit quality is how far an audit gives users reliable assurance, through a sound firm system, competent and sceptical engagement teams, and proper evidence. Quality is checked by file reviews, engagement quality reviews and external inspections. In AAA, spot the weakness in the scenario, explain its effect, then recommend a fix.

Understand Audit Quality, Quality Reviews and Regulatory Inspection

Audit quality means the audit gives users a reliable opinion. It is not just the final report. It depends on how the firm is run, how the team works and how evidence is gathered. The IAASB's audit quality framework groups these into inputs, processes, outputs, key interactions between the parties in the financial reporting supply chain, and the contextual factors in which the audit takes place. Use it as a checklist, not something to recite.

Start with the inputs. These are the values, ethics and attitudes of the people, plus their knowledge, skills and experience, and the time they have. Then the process: the audit methodology, supervision, direction and review. Then the outputs: the auditor's report, communication with those charged with governance and regulators' reports. The key interactions are the dealings between the auditor and management, those charged with governance, users and regulators. The contextual factors include the corporate governance, financial reporting framework, laws and regulation, and pressure on the entity's timetable.

In a scenario, quality problems show up as clues. Examples are a junior doing complex estimates unsupervised, a partner with too many clients, a tight deadline, weak documentation, a fee cut that squeezes hours, or a long-standing relationship that reduces scepticism. Each clue links to a factor that lowers quality.

Reviews exist at different levels. Within the engagement, the senior reviews the junior's work and the manager and partner review the file. ISQM 1 requires an engagement quality review (EQR) for audits of listed entities, for engagements where law or regulation requires one, and for engagements where the firm determines an EQR is an appropriate response to its assessed quality risks. ISQM 2 sets out how the EQR is done: the appointment and eligibility of the reviewer and the performance of the review. The reviewer must be independent of the team, and the review must be completed before the engagement report is released. The report must not be dated until the EQR is complete. After the audit, the firm may run cold file reviews (post-issuance reviews) as part of its monitoring under ISQM 1.

External inspections are carried out by a regulator or professional body. They look at the firm's quality system and also select individual files. Findings can lead to action points, follow-up inspections, fines, restrictions on taking certain audits, or loss of registration. They also bring reputational damage, client loss and possible liability. In exams, link the finding to its cause and recommend remediation, such as training, more review and root cause analysis.

Key rules to remember

Audit quality framework (IAASB): Inputs + Processes → Outputs, shaped by key interactions and contextual factors; Use it as a checklist for factors affecting quality. Inputs cover people and values, processes cover methodology and review, outputs cover reports and communications. Key interactions cover dealings with management, those charged with governance, users and regulators. Contextual factors cover governance, law and reporting framework.
Engagement quality review: Independent review of significant judgements and conclusions, completed before the report is released (the report is not dated until the EQR is complete); ISQM 1 requires an EQR for listed entity audits, for engagements where law or regulation requires one, and for engagements where the firm determines an EQR is an appropriate response to its assessed quality risks. ISQM 2 covers the appointment, eligibility and performance of the reviewer, who must be objective and have the right competence.
Root cause response: Finding → Cause → Impact → Remediation; A structure for answering inspection and file review questions. Do not stop at the finding.

How to solve Audit Quality, Quality Reviews and Regulatory Inspection questions

Use this method for any question on audit quality, file reviews or inspections.

1Read the requirement and identify whether it asks for factors, weaknesses, review procedures or implications of an inspection.
2Scan the scenario and highlight clues: staffing, time, fees, supervision, documentation, independence, client pressure and previous findings.
3For each clue, name the quality factor affected, such as skills, scepticism, supervision, resources or review.
4Explain the impact on the audit, for example insufficient evidence, missed misstatements or an inappropriate opinion.
5Recommend a specific action: reassign staff, add review, hold an engagement quality review, extend time, train or remediate.
6If it is an inspection, add consequences for the firm: sanctions, reputation, client confidence and follow-up, and a root cause analysis.
7Keep each point to clue, effect and fix. Add a short conclusion for professional skills marks.

Quickest way: Clue, factor, fix

When to use it: Use when you are short of time and the scenario lists several quality concerns.

Underline each clue in the scenario.
Write a three-part line for each: clue, quality factor, fix.
Group points under people, process and review.
Spend the last minute on consequences or priority, and state which issue is most serious.

Common mistakes in Audit Quality, Quality Reviews and Regulatory Inspection

Listing the framework headings without applying them to the scenario.
Students memorise the framework and write it out as theory.
Fix: Use the headings only to organise. Each point must cite a fact from the scenario.
Identifying a weakness but giving no recommendation.
Students run out of time or treat the question as a description task.
Fix: End every point with a practical action, and say who should do it.
Confusing an engagement quality review with the normal file review.
Both are called reviews of the file.
Fix: Remember the EQR is independent of the team and takes place before the report is issued. Normal review is by the team's seniors.
Treating a cold file review as the same as regulatory inspection.
Both examine completed files.
Fix: A cold review is the firm's own monitoring. An inspection is external and can lead to sanctions.
Blaming only the junior staff for poor work.
The error is visible at the junior level.
Fix: Look for firm level causes too: workloads, training, supervision and culture. The partner is responsible for quality.
Ignoring the consequences for the firm of adverse inspection findings.
Students focus only on fixing the audit file.
Fix: Add reputation, sanctions, client loss and the need for a remediation plan.

Worked examples

Example 1

Your firm audits a listed company. The audit partner also leads five other listed audits. The senior team members are new, the audit fee was cut 15% this year, and the file shows the going concern review was completed by an audit junior with no review sign-off. Identify the factors affecting audit quality and recommend actions. (8 marks)

Show the solution

Partner workload: five other listed audits suggest the partner has limited time for direction and review. Risk: significant judgements are not challenged. Action: reduce the partner's load or add a second senior reviewer.
Inexperienced team: new senior staff may lack sector knowledge and scepticism. Action: assign experienced staff to complex areas and give briefings and coaching.
Fee cut: reduced fees may pressure the firm to cut hours. Risk: insufficient evidence. Action: confirm the budget is adequate for the risks and not driven by price.
Going concern work by a junior with no review: this is a significant area needing judgement. Evidence could be inadequate, and ISA 570 conclusions unsupported. Action: a manager or partner must review before sign-off, and the work should be redone if needed.
Listed entity: an engagement quality review is needed before the report is released, with focus on going concern.
Conclusion: the most serious issue is the unreviewed going concern work, because it affects the audit opinion directly.

Answer: Quality is at risk from partner overload, inexperienced staff, fee pressure and an unreviewed going concern conclusion. Actions include rebalancing workloads, using experienced staff, checking budgets, reviewing and redoing the going concern work, and performing an engagement quality review before the report is issued.

Example 2

A regulator inspected a small firm and found that on two of three audit files, there was insufficient evidence for inventory valuation, and the firm's monitoring had not detected this. Explain the implications for the firm and recommend actions. (6 marks)

Show the solution

Implications for files: the audit opinions may have been unsupported. The firm may need to reperform work and could have to withdraw or reissue reports if the financial statements are materially misstated.
Implications for the firm: the regulator may issue a follow-up inspection, require an action plan, impose fines or restrict audit work. There is also reputational damage and a possible loss of clients. Negligence claims are possible if there are losses.
Implication for the system: the monitoring under ISQM 1 failed to detect the problem. This suggests deficiencies in the quality management system, not just in individual files.
Action: carry out a root cause analysis. Causes could include poor training on inventory, weak methodology, or limited review.
Action: remediate by updating the audit programme, training staff, adding review on inventory, and performing cold file reviews on similar engagements.
Action: inform affected clients where needed and discuss with the regulator. Consider whether the PI insurer should be told.

Answer: The firm faces possible reperformance, regulatory sanctions, reputational damage and liability. The missed findings show a monitoring deficiency. It should perform root cause analysis, improve inventory procedures and training, strengthen review, extend cold reviews and engage openly with the regulator.

Exam tips

Always tie each quality factor to a clue in the scenario. Generic lists score poorly.
For inspections, cover both the file level and the firm system. Examiners reward the link to ISQM 1 monitoring and remediation.
Name the specific remedy, such as an EQR, reassignment, extra supervision or training.
Rank the issues. A short conclusion on the most serious point shows professional judgement.
Write in a professional tone suitable for a partner or the audit committee if the requirement asks for a memo or report.

Practice questions from Quality management (firm and engagement level)

Audit Quality, Quality Reviews and Regulatory Inspection in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit Quality, Quality Reviews and Regulatory Inspection: frequently asked questions

What factors affect audit quality in AAA?

Use inputs, processes, outputs and context. Typical factors are staff competence, scepticism, time, supervision, review, documentation, independence and the entity's governance. In the exam, link each factor to a fact in the scenario.

What is the difference between an engagement quality review and a cold file review?

An engagement quality review is carried out by an independent reviewer before the report is issued, on selected engagements. A cold file review takes place after the report, as part of the firm's monitoring of its quality system.

What happens if a regulator finds weaknesses in an audit file?

The firm usually has to explain the causes and produce an action plan. Depending on severity, the regulator may follow up, impose sanctions or restrict the firm's work. The firm should also consider whether the audit opinion was supported.

How do I spot quality control weaknesses in a scenario?

Look for signs of overstretched partners, inexperienced staff, tight deadlines, cut fees, missing review sign-offs, poor documentation and client pressure. Then state the effect on evidence and the opinion, and recommend a fix.