Guide to Using International Standards on Auditing in - IFAC

Guide to Using International Standards on Auditing in - IFAC Guide to Using International Standards on Auditing in - IFAC

17.03.2014 Views

10 ong>Guideong> ong>toong> ong>Usingong> ong>Internationalong> ong>Standardsong> on Auditing in the Audits of Small- and Medium-Sized Entities Volume 1—Core Concepts The overview is followed by a more detailed discussion of the subject matter, and practical step-by-step guidance/methodology on how ong>toong> implement the relevant ISAs. This can include some cross-references ong>toong> the applicable ISAs. While the ong>Guideong> focuses exclusively on the ISAs (other than the 800 series) that apply ong>toong> audits of hisong>toong>rical financial information, reference is also made ong>toong> the Code of Ethics for Professional Accountants issued by the ong>Internationalong> Ethics ong>Standardsong> Board for Accountants (the IESBA Code), and the ong>Internationalong> Standard on Quality Control 1 (ISQC 1), Quality Control for Firms that Perform Audits and Reviews of Financial Statements, and Other Assurance and Related Services Engagements. • Consider Points A number of Consider Points are included throughout the ong>Guideong>. These Consider Points provide practical guidance on audit matters that can easily be overlooked, or where practitioners often have difficulty understanding and implementing certain concepts. • Illustrative Case Studies To demonstrate how the ISAs can be applied in practice, Volume 2 of the ong>Guideong> includes two case studies. At the end of many chapters within Volume 2, two possible approaches ong>toong> documenting the application of the ISA requirements are discussed. Please refer ong>toong> Volume 2, Chapter 2 of this ong>Guideong> for details about the case studies. The purpose of the case studies and the documentation presented are purely illustrative. The documentation provided is a small extract from a typical audit file, and it outlines just one possible way of complying with the ISA requirements. The data, analysis, and commentary provided represent only some of the circumstances and considerations that the audiong>toong>r will need ong>toong> address in a particular audit. As always, the audiong>toong>r must exercise professional judgment. The first case study is based on a fictional entity called Dephta Furniture. This is a local, family-owned furniture manufacturer with 10 fulltime employees. The entity has a simple governance structure, few levels of management, and straightforward transaction processing. The accounting function uses an offthe-shelf, standard software package. The second case study is based on another fictional entity called Kumar & Co. This is a micro-sized entity with two fulltime staff plus the owner and one part-time bookkeeper. Other IFAC Publications The ong>Guideong> ong>toong> Quality Control for Small- and Medium-Sized Practices may also be read in conjunction with this ong>Guideong> which can be downloaded free of charge from the IFAC online publications and resources site at http:// web.ifac.org/publications/small-and-medium-practices-committee/implementation-guides 1.3 Glossary of Terms The ong>Guideong> uses many of the terms as defined in the IESBA Code, Glossary of Terms, and ISAs (as contained in the 2010 IFAC Handbook of ong>Internationalong> Quality Control, Auditing, Review, Other Assurance, and Related Services Pronouncements). Both partners and staff must be aware of these definitions. The ong>Guideong> also uses the following terms: Anti-Fraud Controls These are controls designed by management ong>toong> prevent or detect and correct frauds. With respect ong>toong> management override, these controls may not prevent a fraud from occurring, but would act as a deterrent and make perpetrating a fraud more difficult ong>toong> conceal. Typical examples are:

11 ong>Guideong> ong>toong> ong>Usingong> ong>Internationalong> ong>Standardsong> on Auditing in the Audits of Small- and Medium-Sized Entities Volume 1—Core Concepts • Policies and procedures that provide additional accountability, such as signed approval for journal entries; • Improved access controls for sensitive data and transactions; • Silent alarms; • Discrepancy and exception reports; • Audit trails; • Fraud contingency plans; • Human resource procedures such as identifying/moniong>toong>ring individuals with above-average fraud potential (for example, an excessively lavish lifestyle); and • Mechanisms for reporting potential frauds anonymously. Entity-Level Controls Entity-level controls address pervasive risks. They set the “ong>toong>ne at the ong>toong>p” of an organization and establish expectations for the control environment. They are often less tangible than controls that operate at the transaction level, but have a pervasive and significant impact and influence over all other internal controls. As such, they form the all-important foundation upon which other internal controls (if any) are built. Examples of entity level controls include management’s commitment ong>toong> ethical behavior, attitudes ong>toong>ward internal control, hiring and competence of staff employed, and anti-fraud and period-end financial reporting. These controls will have an impact on all other business processes within the entity. Management The person(s) with executive responsibility for the conduct of the entity’s operations. For some entities in some jurisdictions, management includes some or all of those charged with governance—for example, executive members of a governance board, or an owner-manager. Those Charged With Governance (TCWG) The person(s) or organization(s) (for example, a corporate trustee) with responsibility for overseeing the strategic direction of the entity and obligations related ong>toong> the accountability of the entity. This includes overseeing the financial reporting process. For some entities, in some jurisdictions, those charged with governance may include management personnel—for example, executive members of a governance board of a private or public secong>toong>r entity, or an owner-manager. Owner-Manager This refers ong>toong> the proprieong>toong>rs of an entity involved in the running of the entity on a day-ong>toong>-day basis. In most instances, the owner-manager will also be the person charged with governance of the entity. Small- and Medium-Sized Accounting Practices/Firms (SMP) Accounting practices/firms that exhibit the following characteristics: its clients are mostly small- and mediumsized entities (SMEs); external sources are used ong>toong> supplement limited in-house technical resources; and it employs a limited number of professional staff. What constitutes an SMP will vary from one jurisdiction ong>toong> another.

10<br />

<str<strong>on</strong>g>Guide</str<strong>on</strong>g> <str<strong>on</strong>g>to</str<strong>on</strong>g> <str<strong>on</strong>g>Us<strong>in</strong>g</str<strong>on</strong>g> <str<strong>on</strong>g>Internati<strong>on</strong>al</str<strong>on</strong>g> <str<strong>on</strong>g>Standards</str<strong>on</strong>g> <strong>on</strong> <strong>Audit<strong>in</strong>g</strong> <strong>in</strong> the Audits of Small- and Medium-Sized Entities Volume 1—Core C<strong>on</strong>cepts<br />

The overview is followed by a more detailed discussi<strong>on</strong> of the subject matter, and practical step-by-step<br />

guidance/methodology <strong>on</strong> how <str<strong>on</strong>g>to</str<strong>on</strong>g> implement the relevant ISAs. This can <strong>in</strong>clude some cross-references<br />

<str<strong>on</strong>g>to</str<strong>on</strong>g> the applicable ISAs. While the <str<strong>on</strong>g>Guide</str<strong>on</strong>g> focuses exclusively <strong>on</strong> the ISAs (other than the 800 series)<br />

that apply <str<strong>on</strong>g>to</str<strong>on</strong>g> audits of his<str<strong>on</strong>g>to</str<strong>on</strong>g>rical f<strong>in</strong>ancial <strong>in</strong>formati<strong>on</strong>, reference is also made <str<strong>on</strong>g>to</str<strong>on</strong>g> the Code of Ethics for<br />

Professi<strong>on</strong>al Accountants issued by the <str<strong>on</strong>g>Internati<strong>on</strong>al</str<strong>on</strong>g> Ethics <str<strong>on</strong>g>Standards</str<strong>on</strong>g> Board for Accountants (the IESBA<br />

Code), and the <str<strong>on</strong>g>Internati<strong>on</strong>al</str<strong>on</strong>g> Standard <strong>on</strong> Quality C<strong>on</strong>trol 1 (ISQC 1), Quality C<strong>on</strong>trol for Firms that Perform<br />

Audits and Reviews of F<strong>in</strong>ancial Statements, and Other Assurance and Related Services Engagements.<br />

• C<strong>on</strong>sider Po<strong>in</strong>ts<br />

A number of C<strong>on</strong>sider Po<strong>in</strong>ts are <strong>in</strong>cluded throughout the <str<strong>on</strong>g>Guide</str<strong>on</strong>g>. These C<strong>on</strong>sider Po<strong>in</strong>ts provide<br />

practical guidance <strong>on</strong> audit matters that can easily be overlooked, or where practiti<strong>on</strong>ers often have<br />

difficulty understand<strong>in</strong>g and implement<strong>in</strong>g certa<strong>in</strong> c<strong>on</strong>cepts.<br />

• Illustrative Case Studies<br />

To dem<strong>on</strong>strate how the ISAs can be applied <strong>in</strong> practice, Volume 2 of the <str<strong>on</strong>g>Guide</str<strong>on</strong>g> <strong>in</strong>cludes two case<br />

studies. At the end of many chapters with<strong>in</strong> Volume 2, two possible approaches <str<strong>on</strong>g>to</str<strong>on</strong>g> document<strong>in</strong>g the<br />

applicati<strong>on</strong> of the ISA requirements are discussed. Please refer <str<strong>on</strong>g>to</str<strong>on</strong>g> Volume 2, Chapter 2 of this <str<strong>on</strong>g>Guide</str<strong>on</strong>g> for<br />

details about the case studies.<br />

The purpose of the case studies and the documentati<strong>on</strong> presented are purely illustrative. The<br />

documentati<strong>on</strong> provided is a small extract from a typical audit file, and it outl<strong>in</strong>es just <strong>on</strong>e possible way<br />

of comply<strong>in</strong>g with the ISA requirements. The data, analysis, and commentary provided represent <strong>on</strong>ly<br />

some of the circumstances and c<strong>on</strong>siderati<strong>on</strong>s that the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r will need <str<strong>on</strong>g>to</str<strong>on</strong>g> address <strong>in</strong> a particular audit.<br />

As always, the audi<str<strong>on</strong>g>to</str<strong>on</strong>g>r must exercise professi<strong>on</strong>al judgment.<br />

The first case study is based <strong>on</strong> a ficti<strong>on</strong>al entity called Dephta Furniture. This is a local, family-owned<br />

furniture manufacturer with 10 fulltime employees. The entity has a simple governance structure, few<br />

levels of management, and straightforward transacti<strong>on</strong> process<strong>in</strong>g. The account<strong>in</strong>g functi<strong>on</strong> uses an offthe-shelf,<br />

standard software package.<br />

The sec<strong>on</strong>d case study is based <strong>on</strong> another ficti<strong>on</strong>al entity called Kumar & Co. This is a micro-sized entity<br />

with two fulltime staff plus the owner and <strong>on</strong>e part-time bookkeeper.<br />

Other <strong>IFAC</strong> Publicati<strong>on</strong>s<br />

The <str<strong>on</strong>g>Guide</str<strong>on</strong>g> <str<strong>on</strong>g>to</str<strong>on</strong>g> Quality C<strong>on</strong>trol for Small- and Medium-Sized Practices may also be read <strong>in</strong> c<strong>on</strong>juncti<strong>on</strong> with this<br />

<str<strong>on</strong>g>Guide</str<strong>on</strong>g> which can be downloaded free of charge from the <strong>IFAC</strong> <strong>on</strong>l<strong>in</strong>e publicati<strong>on</strong>s and resources site at http://<br />

web.ifac.org/publicati<strong>on</strong>s/small-and-medium-practices-committee/implementati<strong>on</strong>-guides<br />

1.3 Glossary of Terms<br />

The <str<strong>on</strong>g>Guide</str<strong>on</strong>g> uses many of the terms as def<strong>in</strong>ed <strong>in</strong> the IESBA Code, Glossary of Terms, and ISAs (as c<strong>on</strong>ta<strong>in</strong>ed <strong>in</strong><br />

the 2010 <strong>IFAC</strong> Handbook of <str<strong>on</strong>g>Internati<strong>on</strong>al</str<strong>on</strong>g> Quality C<strong>on</strong>trol, <strong>Audit<strong>in</strong>g</strong>, Review, Other Assurance, and Related Services<br />

Pr<strong>on</strong>ouncements). Both partners and staff must be aware of these def<strong>in</strong>iti<strong>on</strong>s.<br />

The <str<strong>on</strong>g>Guide</str<strong>on</strong>g> also uses the follow<strong>in</strong>g terms:<br />

Anti-Fraud C<strong>on</strong>trols<br />

These are c<strong>on</strong>trols designed by management <str<strong>on</strong>g>to</str<strong>on</strong>g> prevent or detect and correct frauds. With respect <str<strong>on</strong>g>to</str<strong>on</strong>g><br />

management override, these c<strong>on</strong>trols may not prevent a fraud from occurr<strong>in</strong>g, but would act as a deterrent<br />

and make perpetrat<strong>in</strong>g a fraud more difficult <str<strong>on</strong>g>to</str<strong>on</strong>g> c<strong>on</strong>ceal. Typical examples are:

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!