Guide to Using International Standards on Auditing in - IFAC

172
<strong>Guide</strong> <strong>to</strong> <strong>Using</strong> <strong>International</strong> <strong>Standards</strong> on Auditing in the Audits of Small- and Medium-Sized Entities Volume 1—Core Concepts
15.2 ISA 250 — Consideration of Laws and Regulations in an Audit of Financial Statements
Exhibit 15.2-1
Risk Assessment
Understand:
Legal/regula<strong>to</strong>ry framework and
its industry/sec<strong>to</strong>r.
How entity is complying with
framework.
Inquire about compliance with laws
and regulations.
Inspect correspondence with
licensing and regula<strong>to</strong>ry authorities.
Risk Response
Determine instances of non-compliance
through audit procedures such as reading
documents, inquiring of management,
and substantive tests.
Determine the nature of any noncompliance,
discuss with management
and evaluate impact on the financial
statements.
Reporting
Have instances of material non-compliance
been appropriately disclosed in the financial
statements?
Report <strong>to</strong> management and those charged
with governance.
Obtain management representations.
Paragraph #
ISA Objective(s)
250.10 The objectives of the audi<strong>to</strong>r are:
(a) To obtain sufficient appropriate audit evidence regarding compliance with the provisions
of those laws and regulations generally recognized <strong>to</strong> have a direct effect on the
determination of material amounts and disclosures in the financial statements;
(b) To perform specified audit procedures <strong>to</strong> help identify instances of non-compliance with
other laws and regulations that may have a material effect on the financial statements; and
(c) To respond appropriately <strong>to</strong> non-compliance or suspected non-compliance with laws and
regulations identified during the audit.
Paragraph #
Relevant Extracts from ISAs
250.11 For the purposes of this ISA, the following term has the meaning attributed below:
Non-compliance—Acts of omission or commission by the entity, either intentional or
unintentional, which are contrary <strong>to</strong> the prevailing laws or regulations. Such acts include
transactions entered in<strong>to</strong> by, or in the name of, the entity, or on its behalf, by those charged
with governance, management or employees. Non-compliance does not include personal
misconduct (unrelated <strong>to</strong> the business activities of the entity) by those charged with
governance, management or employees of the entity.