Chapter 9-Audit
Chapter 9-Audit
CHAPTER 9
RISK ASSESSMENT - PART 1
PHASE 1-A PERFORMANCE OF PRELIMINARY ENGAGEMENT
ACTVITIES
At the beginning of the current audit engagement, the auditor should perform the
following activities:
Perform procedures required by PSA 220 “Quality Control of an Audit of
Financials Statements" regarding the continuance of the client relationship
and the specific audit engagement.
Evaluate compliance with ethical requirements, including independence as
required by PSA 220.
Most CPA firms are desirous and anxious to obtain new clients. Some new
engagements are easily obtained through business transactions such as the
acquisition of a company by an existing client and the client's desire to have the
entire audit performed by one CPA firm. Others are obtained competitively
through social contacts which lead to a request that the CPA firm submit a
proposal for performing the company's annual audit. Such prospective clients
may range from start-up companies seeking a first audit to long-established
companies seeking replacement oftheir current auditor.
Another element of quality-control deals with accepting and retaining clients. This
decision should involve more than just a consideration of management's
integrity. Strict client acceptance/continuance guidelines should be
established-to Screen out the following:
Clients that offer an unreasonably low free for the auditor's services
— In response, the auditor may attempt to cut corners imprudently or
lose money on the engagement. Conversely, auditors may bid for
audits at unreasonably low prices.
Risk Assessment — Part 1 220
Audit Firm Limitations
It is essential for a CPA firm to maintain its integrity, objectivity and reputation
for providing high quality services. No auditor can afford to be regularly
associated with clients who are engaging in management fraud or other unlawful
activities. Before accepting an engagement, the CPA should investigate the
history of the prospective client, including such matters as the identities and
reputation of the directors, officers, and major shareholders. To help assess
engagement risk, the auditors generally obtain management's permission to
make inquiries of other third parties (e.g., client's banker or legal counsel) about
a prospective client. Generally, CPAs choose to avoid engagements entailing a
relatively high engagement risk; others may accept such engagements,
recognizing the need to expand audit procedures .to offset the unusually high
levels of risk.
To reduce their own business risk, public accounting firms try to carefully
manage their audit engagements. An important element of a public accounting
firm's quality control policies and procedures is a system for deciding whether
to accept a new client and, on a continuing basis, deciding whether to continue
providing services to existing clients. Public accounting firms are not obligated
to accept undesirable clients, nor are they obligated to continue to serve clients
when relationships deteriorate or when the management comes under a cloud of
suspicion.
In addition to evaluating engagement risk, the auditor should assess whether they
can complete the audit in accordance with the Philippine Standards on Auditing
which are based on international Standards on Auditing. The CPA must
determine whether there are conditions that would prevent them from
221 Chapter 9
performing an independent audit of the client. Consideration will also be given
to whether the partners and staff have the necessary competence and capability
to conduct the audit.
In summary, before accepting an engagement with a new client, the CPA firm
shall assess whether it
1. is competent to perform the engagement and has the capabilities, including
time and resources to do so,
2. can comply with the relevant ethical requirements, and
3. has considered the integrity of the client and does not have information that
would lead it to conclude that the client lacks integrity
The CPA firm shall likewise establish whether the preconditions for an audit
are present such as:
Whether the financial reporting framework to be applied in the
financial statements are acceptable;
Agreement of management that •it acknowledges and understands its
responsibility,
l. for the preparation of financial statements in accordance with applicable
financial reporting framework including where relevant to their fair
presentation,
2. for such internal control as management determines is necessary to
enable the preparation of financial statements that are free from
material misstatement whether due to fraud or error, and
3. to provide the auditor with:
(a) Access to all information of which management is aware that is
relevant to the preparation of financial statements such as records,
documentation and other matters
(b) Additional information that the auditor may request from
management for the purpose of the audit; and
(c) Unrestricted access to persons within the entity from whom the
auditor determines it necessary to obtain audit evidence.
Engagement letter
Risk Assessment — Part 1 222
The engagement letter, which includes the audit free, also includes a
description of the timing of the external auditor’s work and a description
of documentation that the client is expected to provide to the external auditor.
In writing an engagement letter, care should be taken when describing the
degree of responsibility the auditor takes with respect to discovering fraud
and misstatements. If the client wants its auditors to go beyond the
requirements of the auditing standards, the auditors should have their
attorneys review the wording to make sure that it says not only what is intended
but also what is possible.
As a final step, the CPA firm will confer and agree with management or those
charged with governance the appropriate terms of the audit engagement.
Recurring Audits
On recurring audits, the auditor shall assess whether circumstances require the terms
of the audit engagement to be revised and whether there is need to remind the entity
of the existing terms of the audit engagement. The auditor shall not agree to the
change in the terms of the audit engagement where there is no reasonable
justification for doing so.
If the terms of audit engagement are changed, auditor and management shall
agree on and record the new terms of the engagement in an engagement letter or
other suitable form of written agreement.
223 Chapter 9
If the auditor is unable to agree to a change in terms of the audit engagement and is
not permitted by management to continue the original engagement the auditor shall:
a. Withdraw from the audit engagement where withdrawal is possible under
applicable law or regulation; and
b. Determine whether there is any obligation, either contractual or
otherwise, to report the circumstances to other parties, such as those
charged with governance, owners or regulators.
Mr. Alberto
Santos, Managing
Director ABC, Inc.
165 Tandang Sora, Quezon' City
Dear Mr. Santos:
You have requested that we audit the financial statements of ABC, Inc. which comprise
the statement of financial position as at December 31, 2020, and the income
statement, statement of changes in equity and cash-flow statement for the year ended,
and a summary of significant accounting policies and other explanatory information.
We are pleased to confirm our acceptance and our understanding of this audit,
engagement by means of this letter. Our audit will be conducted with the objective of
our expressing an opinion on the financial statements.
Our Responsibilities
We will conduct our audit in accordance with Philippine Standards on Auditing. Those
standards require that we comply with ethical requirements and plan and perform the
audit to obtain reasonable assurance about whether the financial statements are free
from material misstatement. An audit involves performing procedures to obtain audit
evidence about the amounts and disclosures in the financial statements. The procedures
selected depend on the auditors judgment, including the assessment of the risks of
material misstatement of the financial statements, whether due to fraud or error. An
audit also includes evaluating the appropriateness of accounting policies used and the
reasonableness of accounting estimates made by management, as well as evaluating the
overall presentation of the financial statements.
Because of the inherent limitations of an audit, together with the inherent limitations Of
intemal control, there is an unavoidable risk that some material misstatements may
notbe detected, even though the audit is properly planned and performed in accordance
with PSAS.
225 Chapter 9
In making our risk assessments, we consider internal control relevant to the entity's
preparation of the financial statements in order to design audit procedures that are
appropriate in the circumstances, but not for the purpose of expressing an opinion
on the effectiveness of the entity's internal control. However, we will communicate
to you in writing any significant deficiencies in internal control relevant to the audit
of the financial statements that we have identified during the audit.
Unless unanticipated difficulties are encountered, our report will be substantially in the
following form:
[Form and content of the auditor's report has not been reproduced.]
The form and content of our report may need to be amended in the light of our audit
findings.
Management's Responsibility
Our audit will be conducted on the basis that management and those charged with
governance acknowledge and understand that they have responsibility:
Risk Assessment — Part 1 226
ha) For the preparation and fair presentation of the financial statements im
As part of our audit process, we will request from management and, where
appropriate, those charged with governance written confirmation concerning
representations made to us in connection with the audit.
We look forward to full cooperation from your staff during our audit.
Fees
Our fees which are based on the time required by individuals assigned to the
engagement will be Php100,000 plus out-of-pocket expenses and will be billed as
work progresses. Individual hourly rates vary according to the degree of responsibility
involved and the expenence and skill required.
This letter will be effective for future periods unless it is terminated, amended, or
superseded.
Please sign and retum the attached copy of this letter to indicate that it is accordance
with your understanding of the arrangements for our audit of the financial
statements.
Introduction
Once the client has been obtained and the engagement letter signed by both
parties (auditor and client), the planning process intensifies as the auditors
concentrate their efforts in obtaining a detailed understanding of the client's
business in developing an overall audit strategy and assess the risks of material
misstatement of the financial statements.
Audit planning involves the establishment of the overall audit strategy for the
engagement and developing an audit plan, in order to reduce audit risk to an
Acceptably low level. Planning involves the engagement partner and other key
members of the engagement team to benefit from their experience and insight
and to enhance the effectiveness and efficiency of the planning process.
The nature and extent of planning activities will vary according to the size and
complexity of the entity, the auditor's previous experience with the entity, and
changes in circumstances that occur during the audit engagement.
Risk Assessment — Part 1 228
Planning is a continuous and iterative process that often begins shortly after or in
connection with the completion of the previous audit and continues until the completion
of the current audit engagement. However, in planning an audit, the auditor considers
the timing of certain planning activities and audit procedures that need to be completed
prior to the performance of further audit procedures. For example, the auditor plans the
discussion among engagement team members, the analytical procedures to be applied as
risk assessment procedures, the obtaining of a general understanding of the legal and
regulatory framework applicable to the entity and how the entity is complying
with that framework, the determination of materiality, the involvement of experts and
the performance of other risk assessment procedures prior to identifying and assessing
the risks of material misstatement and performing further audit procedures at the
assertion level for classes of transactions, account balances, and disclosures that are
responsive to those risks.
The auditor may decide to discuss elements of planning with the entity's
management to facilitate the conduct and management of the audit engagement
(for example, to coordinate some of the planned audit procedures often occur, the
overall audit strategy and the audit plan remain the auditor's responsibility.
c) It helps ensure that the audit is properly organized, managed and performed in
an effective and efficient manner.
d) It assists in the proper assignment and review of the work of the engagement
team members.
e) It helps coordinate the work to be done by auditors of components and
other parties involved such as experts, specialists, etc.
• The resources to deploy for specific audit areas, such as the use of
appropriately experienced team members for high risk areas or the
• How such resources are managed, directed and supervised, such as when
team briefing and debriefing meetings are expected to be held, how
engagement partner and manager reviews are expected to take place (for
example, on-site or off-site), and whether to complete engagement quality
control reviews.
Once the overall audit strategy has been established, an audit plan can be
developed to address the various matters identified in the overall audit strategy,
taking into account the need to achieve the audit objectives through the efficient
use of the auditor's resources. The establishment of the overall audit strategy
and the detailed audit plan are not necessarily discrete or sequential processes,
but are closely inter-related since changes in one may result in consequential
changes to the other.
In audits of small entities, the entire audit may be conducted by a very small
audit team. Many audits of small entities involve the engagement partner (who
may be a sole practitioner) working with one engagement team member (or
without any engagement team members). With a smaller team, co-ordination of,
231 Chapter 9
and' communication between, team members are easier. Establishing the overall
audit strategy for the audit of a small entity need not be a complex or time
consuming exercise; it varies according to the size of the entity the complexity
of the audit, and the size of the engagement team. For example, a brief
memorandum prepared at the completion of the previous audit, based on a
review of the working papers and highlighting issues identified in the audit just
completed, updated in the current period based on discussions with the owner
manager, can serve as the documented audit strategy for the current audit
engagement if it covers the matters noted in paragraph 7 of PSA 300.
Levels of Materiality
The auditor assesses materiality at two levels:
• First is the overall materiality (or materiality level for the financial
statements as a whole)
I. Overall materiality
2. Specific materiality
Risk Assessment — Part 1 234
In some cases, there may be a need to identify misstatements of lesser
amounts than overall materiality that would affect the economic
decisions of financial statement users. This could relate to sensitive areas
such as particular note disclosures (i.e., management remuneration or
industry-specific data), compliance with legislation or certain terms in a
contract, or transactions upon which bonuses are based. It could also
relate to the nature of a potential misstatement.
Performance Materiality
Performance materiality is used by the auditor to reduce the risk to an
appropriate low level that the accumulation of uncorrected and unidentified
misstatements exceeds materiality for the financial statements as a whole
(overall materiality), or materiality levels established for particular classes
of transactions, account balances, or disclosures (specific materiality).
Performance materiality is set at a lower amount (or amounts) than overall
specific materiality. The objective is to perform more audit work than would be
required by the overall or a specific materiality to:
For example, if overall materiality was set at P200,000 and the audit procedures
were planned to detect all errors •in excess of P200,000, it is quite possible that
an error of say P80,000 would go undetected. If three such errors existed totaling
to P240,000, the financial statements would be materially misstated. If
performance materiality was set at P 120,000, it would be much more likely that
at least one or all of the P80,000 errors would be detected. Even if only one of
the three errors is identified and corrected, the remaining P160,000 misstatement
would still be less than P200,000 and the financial statements as a whole would
not be materially misstated.
Other Considerations
When planning the audit, the auditor considers what would make the financial
statements materially misstated. The auditor's assessment of materiality,
related to specific account balances and classes of transactions, helps the
auditor decide such questions as what items to examine and whether to use
sampling and analytical procedures. This enables the auditor to select audit
procedures that, in combination, can be expected to reduce audit risk to an
acceptably low level.
Audit Plan
The auditor should develop an audit plan for the audit in order to reduce
audit risk to an acceptably low level.
The auditor shall plan the nature, timing and extent of direction and
supervision of engagement team members and the review of their work.
Once the audit strategy has been established, the auditor is able to start the
development of a more detailed audit plan to address the various matters
identified in the audit strategy; taking into account the need to achieve the
audit objectives through the efficient use of the auditor's resources.
Although the auditor ordinarily establishes the audit strategy before
Risk Assessment — Part 1
developing the detailed audit plan, the two planning activities are not
necessarily discrete or sequential processes but are closely inter-related
since changes in one may result in consequential changes to the other.
The audit plan is more detailed than the audit strategy and includes the
The auditor should plan the nature, timing and extent of direction and
supervision of engagement team members and review of their work.
The overall audit strategy and the audit plan should be updated and changed as
necessary during the course of the audit.
The auditor should document the overall audit strategy and the audit plan,
including any significant changes made during the audit engagement.
The auditor's documentation of the overall audit strategy records the
key decisions considered necessary to properly plan the audit and to
communicate significant matters to the engagement team. For example,
the auditor may summarize the overall audit strategy in the form of a
memorandum that contains key decisions regarding the overall scope,
timing and conduct of the audit.
The form and extent of documentation depend on such matters as the size
and complexity of the entity, materiality, the extent of other
documentation, and the circumstances of the specific audit engagement
The auditor should perform the following activities prior to starting an initial
audit;
(a) Perform procedures regarding the acceptance of the client relationship
and the specific audit engagement [see PSA 220 for additional
guidance].
Risk Assessment — Part 1 242
(b) Communicate with the previous auditor, where there has been a change
of auditors, in compliance with relevant ethical requirements.
a. Predecessor Auditor
The successor auditor's examination may be greatly facilitated
by consulting with the predecessor auditors and reviewing the
predecessor's working papers. Communication with the
predecessor auditors can provide the successor CPA with
background information about the client, details about the
client's system of internal control, and evidence as to the
account balances at the beginning of the year under audit.
Auditors are ethically prohibited from disclosing confidential
information obtained in the course of an audit without th e
consent of the client. The successor auditor should therefore
obtain the client's consent before making inquiries from the predecessor
auditors.
If the auditor is unable to obtain cooperation from the preceding
auditors, or if he feels that the work done by the preceding
auditors does not meet the requirements of generally accepted
auditing standards, he may have to treat the audit of the• new
client, previously audited by other accountants, just as he would
the first audit of a client who has never been audited before.
b. Other CPAs
Large companies generally consist of divisions and subsidiaries
located in many different parts of the country
or the world. For a variety of reasons, one or several of the
subsidiaries or divisions may have different auditors.
TO be able to •report on the statements of the combined entity, an
auditor must determine that she or he is able to be the principal
auditor. Principal auditor means the auditor with responsibility
for reporting on the financial statements of an entity when those
financial statements include financial information of one or more
components audited by another auditor. Other auditor means an
Risk Assessment — Part 1 244
auditor, other than the principal auditor, with responsibility for
reporting on the financial information of a component which is
included in the financial statement audited by the principal auditor.
Other auditors include affiliated firms whether using the same
name or not, correspondents as well as unrelated auditors,
Component means a division, branch, subsidiary, joint venture,
associated company or other entity whose financial information is
included in financial statements audited by the principal auditor.
c. Specialists
CPAs may lack the qualifications necessary to perform certain technical
tasks relating to the audit. A specialist brings unique knowledge
and judgment in a field other than accounting and auditing. An auditor
might decide to have an art appraiser place values on works of art, a
mineralogist determine the physical characteristics of mineral reserves, or
an actuary provide data related to a group's life expectancy. Effective
planning involves
Operating
• Loss of key management without replacement.
Other
client's industry.
In PSA 220, "Quality Control for an Audit of Financial Statements," the
auditor, and assistants with supervisory responsibilities, will consider
the professional competence of assistants performing work delegated to
them when deciding the extent of direction, supervision and review
appropriate for each assistant.
Any delegation of work to assistants would be in a manner that provides
reasonable assurance that such work will be performed with due care by
251 Chapter 9
persons having the degree of professional competence required in the
circumstances.
a) Deadline for submitting final audit report and filing of income tax
returns
b) Ability of the client's staff to submit required schedules
c) Other audit clients
An audit plan contains the overview of the engagement, outlining the nature
and characteristics of the client's business operations and the overall audit
strategy.
Risk Assessment — Part 1 252
The following information are included in a typical audit plan:
Normally, the audit plan is prepared before starting work at the client's
office. It may, however be modified throughout the engagement as the
auditor deems necessary depehding on his consideration of internal
control or as special problems are encountered.
It is far easier to plan for a repeat engagement than planning for a first
audit of a new client. The working papers in the previous year's audit
provide a wealth of information useful in planning the recurring
engagement. Of course, the auditor-in-charge of a repeat engagement
would have a good working knowledge of the client's business. The
253 Chapter 9
auditor however should not merely duplicate last year 5 audit program but
should modify his approach to the audit for any changes in the client's
operations, internal control structure, or business environment.
Risk Assessment — Part 254
Questions
4. Criticize the following statement. "Throughout this audit, for all purposes
we will define a "material amount" as "P500,000".
6. Many CPA firms are taking a business risk approach to audits. Define what is
meant by business risk. Provide an example of a business risk that could result
in a risk of material misstatement of 'the financial statements.
7. Should a separate audit program be prepared for each audit engagement, or can
a standard program be used for most engagements?
8. "An audit plan is desirable when new staff members are assigned to an
engagement, but an experienced auditor should be able to conduct an audit
without reference to an audit program." Do you agree? Discuss.
10. Certain audit risks are significant in that they require special audit
consideration. Describe the typical characteristics of these risks.
255 Chapter 9
I I. Suggest some factors that might cause an audit engagement to exceed the
original time estimate. Would the extra time be charged to the client?
12. What problems are created for a CPA firm when audit staff members
underreport the amount of time spent in performing the specific audit
procedures?
13. The overall audit strategy, the audit plan, and the time budget are
three important working papers prepared early in an audit. What
functions do these working papers serve in the auditors' compliance
with generally accepted auditing standards? Discus.
14. Auditing standards require the auditors to have a team meeting
regarding the risk of fraud for the engagement. What is the purpose of
this meeting?
15. When planning an audit, the auditors should assess the levels of risk
and materially for the engagement. Explain how the auditors'
judgments about these two factors affect the auditors' planned audit
procedures.
4. Which of the following should the auditor obtain from the predecessor
auditors before accepting an audit engagement?
a. Analysis of balance sheet accounts.
b. Analysis of income statement accounts.
c. All matters of continuing accounting significance.
d. Facts that might bear on the integrity of management.
5. The primary objective of tests of details of transactions performed as
substantive procedures is to:
a. Comply with generally accepted auditing standards.
b. Attain assurance about the reliability of the accounting system.
c. Detect material misstatements in the in the financial statements.
d. Evaluate whether management's policies and procedures are opening
effectively.
6. The risk that the auditor will conclude, based on substantive procedures,
that a material misstatement does not exist in an account balance when, in
fact, such misstatement does exist is referred to as
a. Business risk c. Control risk
b. Engagement risk d. Detection risk
7. Which of the following best describes what is meant.by the term "fraud risk
factor"?
a. Factors that, when present, indicate that risk exists.
b. Factors often observed in circumstances where frauds have
occurred.
c. Factors that, when present, require modification of planned audit
procedures.
Cases
Case 1
The audit committee of the Board of Directors of Violet Corp. asked Argante &
Tan, CPAs, to audit Violet's financial statements for the year ended December
3 1, 2013. Argante & Tan explained the need to make an inquiry of the
predecessor auditor and requested permission to do so. Violet's management
agreed and authorized the predecessor auditor to respond fully to Argante &
Tan's inquiries,
After a satisfactory communication with the predecessor auditor, Argante & Tan
drafted an engagement letter that was' mailed to the audit committee of the
Board of Directors of Violet Corp. The engagement letter clearly set forth
arraogements Eonceming the involvement of the predecessor auditor and other
matters.
Required:
a. What information should Argante & Tan have obtained during their
inquiry of the predecessor auditor prior to acceptance of the engagement?
b. Describe what other matters Argante & Tan would generally have included
in the engagement lettei.
Risk Assessment — Part 258
Case 2
A CPA has been asked to audit the financial statements of a company for
the first time. All preliminary verbal discussions and inquiries have been
completed between the CPA, the company, the predecessor auditor, and all
other necessary parties. The CPA is now preparing an engagement letter.
Required:
a. List the items that should be included In the typical engagement letter.
Describe the benefits derived from preparing an engagement letter.
c. Who should prepare and sign the engagement letter?
d. Why should the engagement letter be sent?
e. Why should the engagement letter be renewed periodically?
1
Case 3
Nikolai, Inc., a closely held company, wishes to engage Francis, CPA, to examine its
annual financial statements. Nikolai was generally pleased with the services
provided by its prior CPA, 10, but thought the audit work performed was too
detailed and interfered excessively with Nikolai's normal office routines. Francis asked
Nikolai to inform Jo of the decision to change auditors but Nikolai did not wish to do
so.
Required:
a. List and discuss the steps Francis should follow before accepting the engagement.
b. What additional procedures should Francis perform on this first-time engagement
over and beyond those Francis would perform on the Nikolai engagement of the
following year?
Case 4
You are a CPA is a regional accounting firm that has 5 offices in the Philippines. Mr.
Sello has approached you with a request for an audit. He is president of Funtech
Software and Games, Inc., a five-year old company that has recently grown to P40
million in sales and P20 million in total assets. Mr. Sello is thinking about going public
with a P 17 million issuq of common stock, of which FIG million would be a secondary
259 Chapter 9
issue of shares he holds. You are very happy about this opportunity because you know
Mr. Sello is the new president of the Symphony Society board and has made quite a
civic impression since he came to your medium-size city seven years ago. Funtech
Required:
a. Discuss the sources of information and the types of inquiries you and the firm's
partners can make in connection with accepting Funtech as a new client.
b. Suppose Mr. Sello has also told you that 10 years ago his closely held hamburger
franchise business went bankrupt, and upon investigation you learn from its former
auditors (your own firm) that Sello played "fast and loose" with franchise-fee
income recognition rules and presented such difficulties that your office in another
city resigned from the audit (before the bankruptcy). Do you think the partner in
charge of the audit practice should accept Funtech as a new client?
260
Case 5
Nah, the sole owner of a small hardwarc business, has been told that the
business should have financial statements audited by an independent CPA.
Filan, having some bookkeeping experience, has personally prepared the
company's financial statements and docs not understand why such
statements should be audited by a CPA. Filan discussed the matter with Egan,
a CPA, and asked Egan to explain why an audit is considered important.
Required:
a. Describe the objectives ofan independent audit.
b. Identify five ways in which an independent audit may be beneficial to
Filan.
Case 6
Jn planning every audit, the auditors are required to consider materiality for
audit purposes. Described below are financial statement data from two
separate companies:
Franklin Co. T erCo.
Total assets P2,700.ooo
Total revenue 29,600.000 4 500,000
13,800.00