Annual Audit Manual
COPYRIGHT NOTICE — This document is intended for internal use. It cannot be distributed to or reproduced by third parties without prior written permission from the Copyright Coordinator for the Office of the Auditor General of Canada. This includes email, fax, mail and hand delivery, or use of any other method of distribution or reproduction. CPA Canada Handbook sections and excerpts are reproduced herein for your non-commercial use with the permission of The Chartered Professional Accountants of Canada (“CPA Canada”). These may not be modified, copied or distributed in any form as this would infringe CPA Canada’s copyright. Reproduced, with permission, from the CPA Canada Handbook, The Chartered Professional Accountants of Canada, Toronto, Canada.
3042 Preconditions for an audit
Apr-2018
In This Section
Management’s acknowledgement and understanding of its responsibilities
Considerations relevant to smaller entities
Limitation on scope prior to audit engagement acceptance
Overview
This topic explains:
- Determination if the financial reporting framework is acceptable
- Agreement from management that it acknowledges and understands its responsibilities
- Limitation on scope prior to audit engagement acceptance
- Other factors affecting audit engagement acceptance
- Guidance specific to Legislative Auditors
CAS Requirement
In order to establish whether the preconditions for an audit are present, the auditor shall determine whether the financial reporting framework to be applied in the preparation of the financial statements is acceptable (CAS 210.6(a)).
CAS Guidance
A condition for acceptance of an assurance engagement is that the criteria referred to in the definition of an assurance engagement are suitable and available to intended users. Criteria are the benchmarks used to evaluate or measure the subject matter including, where relevant, benchmarks for presentation and disclosure. Suitable criteria enable reasonably consistent evaluation or measurement of a subject matter within the context of professional judgment. For purposes of the CASs, the applicable financial reporting framework provides the criteria the auditor uses to audit the financial statements, including where relevant, their fair presentation (CAS 210.A2).
Without an acceptable financial reporting framework, management does not have an appropriate basis for the preparation of the financial statements and the auditor does not have suitable criteria for auditing the financial statements. In many cases the auditor may presume that the applicable financial reporting framework is acceptable, as described in paragraphs A8-A9 (CAS 210.A3).
Factors that are relevant to the auditor’s determination of the acceptability of the financial reporting framework to be applied in the preparation of the financial statements include (CAS 210.A4):
-
the nature of the entity (for example, whether it is a business enterprise, a public sector entity or a not-for-profit-organization);
-
the purpose of the financial statements (for example, whether they are prepared to meet the common financial information needs of a wide range of users or the financial information needs of specific users);
-
the nature of the financial statements (for example, whether the financial statements are a complete set of financial statements or a single financial statement); and
-
whether law or regulation prescribes the applicable financial reporting framework.
Many users of financial statements are not in a position to demand financial statements tailored to meet their specific information needs. While all the information needs of specific users cannot be met, there are financial information needs that are common to a wide range of users. Financial statements prepared in accordance with a financial reporting framework designed to meet the common financial information needs of a wide range of users are referred to as general purpose financial statements (CAS 210.A5).
In some cases, the financial statements will be prepared in accordance with a financial reporting framework designed to meet the financial information needs of specific users. Such financial statements are referred to as special purpose financial statements. The financial information needs of the intended users will determine the applicable financial reporting framework in these circumstances. CAS 800 discusses the acceptability of financial reporting frameworks designed to meet the financial information needs of specific users (CAS 210.A6).
Deficiencies in the applicable financial reporting framework that indicate that the framework is not acceptable may be encountered after the audit engagement has been accepted. When use of that framework is prescribed by law or regulation, the requirements of paragraphs 19-20 apply. When use of that framework is not prescribed by law or regulation, management may decide to adopt another framework that is acceptable. When management does so, as required by paragraph 16, new terms of the audit engagement are agreed to reflect the change in the framework as the previously agreed terms will no longer be accurate (CAS 210.A7).
At present, there is no objective and authoritative basis that has been generally recognized globally for judging the acceptability of general purpose frameworks. In the absence of such a basis, financial reporting standards established by organizations that are authorized or recognized to promulgate standards to be used by certain types of entities are presumed to be acceptable for general purpose financial statements prepared by such entities, provided the organizations follow an established and transparent process involving deliberation and consideration of the views of a wide range of stakeholders. Examples of such financial reporting standards include (CAS 210.A8):
-
International Financial Reporting Standards (IFRSs) promulgated by the International Accounting Standards Board;
-
International Public Sector Accounting Standards (IPSASs) promulgated by the International Public Sector Accounting Standards Board; and
-
Accounting principles promulgated by an authorized or recognized standards setting organization in a particular jurisdiction, provided the organization follows an established and transparent process involving deliberation and consideration of the views of a wide range of stakeholders.
These financial reporting standards are often identified as the applicable financial reporting framework in law or regulation governing the preparation of general purpose financial statements.
In accordance with paragraph 6(a), the auditor is required to determine whether the financial reporting framework, to be applied in the preparation of the financial statements, is acceptable. In some jurisdictions, law or regulation may prescribe the financial reporting framework to be used in the preparation of general purpose financial statements for certain types of entities. In the absence of indications to the contrary, such a financial reporting framework is presumed to be acceptable for general purpose financial statements prepared by such entities. In the event that the framework is not considered to be acceptable, paragraphs 19-20 apply (CAS 210.A9).
When an entity is registered or operating in a jurisdiction that does not have an authorized or recognized standards setting organization, or where use of the financial reporting framework is not prescribed by law or regulation, management identifies a financial reporting framework to be applied in the preparation of the financial statements. Appendix 2 contains guidance on determining the acceptability of financial reporting frameworks in such circumstances (CAS 210.A10).
CAS Requirement
In order to establish whether the preconditions for an audit are present, the auditor shall obtain the agreement of management that it acknowledges and understands its responsibility (CAS 210.6(b)):
(i) For the preparation of the financial statements in accordance with the applicable financial reporting framework, including, where relevant, their fair presentation;
(ii) For such internal control as management determines is necessary to enable the preparation of financial statements that are free from material misstatement, whether due to fraud or error; and
(iii) To provide the auditor with:
- Access to all information of which management is aware that is relevant to the preparation of the financial statements such as records, documentation and other matters;
- Additional information that the auditor may request from management for the purpose of the audit; and
- Unrestricted access to persons within the entity from whom the auditor determines it necessary to obtain audit evidence.
CAS Guidance
An audit in accordance with CASs is conducted on the premise that management has acknowledged and understands that it has the responsibilities set out in paragraph 6(b). In certain jurisdictions, such responsibilities may be specified in law or regulation. In others, there may be little or no legal or regulatory definition of such responsibilities. CASs do not override law or regulation in such matters. However, the concept of an independent audit requires that the auditor’s role does not involve taking responsibility for the preparation of the financial statements or for the entity’s related internal control, and that the auditor has a reasonable expectation of obtaining the information necessary for the audit (including information obtained from outside of the general and subsidiary ledgers) insofar as management is able to provide or procure it. Accordingly, the premise is fundamental to the conduct of an independent audit. To avoid misunderstanding, agreement is reached with management that it acknowledges and understands that it has such responsibilities as part of agreeing and recording the terms of the audit engagement in paragraphs 9-12 (CAS 210.A11).
The way in which the responsibilities for financial reporting are divided between management and those charged with governance will vary according to the resources and structure of the entity and any relevant law or regulation, and the respective roles of management and those charged with governance within the entity. In most cases, management is responsible for execution while those charged with governance have oversight of management. In some cases, those charged with governance will have, or will assume, responsibility for approving the financial statements or monitoring the entity’s internal control related to financial reporting. In larger or public entities, a subgroup of those charged with governance, such as an audit committee, may be charged with certain oversight responsibilities (CAS 210.A12).
CAS 580 requires the auditor to request management to provide written representations that it has fulfilled certain of its responsibilities. It may therefore be appropriate to make management aware that receipt of such written representations will be expected, together with written representations required by other CASs and, where necessary, written representations to support other audit evidence relevant to the financial statements or one or more specific assertions in the financial statements (CAS 210.A13).
Where management will not acknowledge its responsibilities, or agree to provide the written representations, the auditor will be unable to obtain sufficient appropriate audit evidence. In such circumstances, it would not be appropriate for the auditor to accept the audit engagement, unless law or regulation requires the auditor to do so. In cases where the auditor is required to accept the audit engagement, the auditor may need to explain to management the importance of these matters, and the implications for the auditor’s report (CAS 210.A14).
Most financial reporting frameworks include requirements relating to the presentation of the financial statements; for such frameworks, preparation of the financial statements in accordance with the financial reporting framework includes presentation. In the case of a fair presentation framework the importance of the reporting objective of fair presentation is such that the premise agreed with management includes specific reference to fair presentation, or to the responsibility to ensure that the financial statements will “give a true and fair view” in accordance with the financial reporting framework (CAS 210.A15).
Management maintains such internal control as it determines is necessary to enable the preparation of financial statements that are free from material misstatement, whether due to fraud or error. Internal control, no matter how effective, can provide an entity with only reasonable assurance about achieving the entity’s financial reporting objectives due to the inherent limitations of internal control (CAS 210.A16).
An independent audit conducted in accordance with the CASs does not act as a substitute for the maintenance of internal control necessary for the preparation of financial statements by management. Accordingly, the auditor is required to obtain the agreement of management that it acknowledges and understands its responsibility for internal control. However, the agreement required by paragraph 6(b)(ii) does not imply that the auditor will find that internal control maintained by management has achieved its purpose or will be free of deficiencies (CAS 210.A17).
It is for management to determine what internal control is necessary to enable the preparation of the financial statements. The term “internal control” encompasses a wide range of activities within components of the system of internal control that may be described as the control environment; the entity’s risk assessment process; the entity’s process to monitor the system of internal control, the information system and communication; and control activities. This division, however, does not necessarily reflect how a particular entity may design, implement and maintain its internal control, or how it may classify any particular component. An entity’s internal control (in particular, its accounting books and records, or accounting systems) will reflect the needs of management, the complexity of the business, the nature of the risks to which the entity is subject, and relevant laws or regulation (CAS 210.A18).
In some jurisdictions, law or regulation may refer to the responsibility of management for the adequacy of accounting books and records, or accounting systems. In some cases, general practice may assume a distinction between accounting books and records or accounting systems on the one hand, and internal control or controls on the other. As accounting books and records, or accounting systems, are an integral part of internal control as referred to in paragraph A18, no specific reference is made to them in paragraph 6(b)(ii) for the description of the responsibility of management. To avoid misunderstanding, it may be appropriate for the auditor to explain to management the scope of this responsibility (CAS 210.A19).
Additional information that the auditor may request from management for the purpose of the audit may include, when applicable, matters related to other information in accordance with CAS 720. When the auditor expects to obtain other information after the date of the auditor's report, the terms of the audit engagement may also acknowledge the auditor's responsibilities relating to such other information including, if applicable, the actions that may be appropriate or necessary if the auditor concludes that a material misstatement of the other information exists in other information obtained after the date of the auditor's report (CAS 210.A20).
CAS Guidance
One of the purposes of agreeing the terms of the audit engagement is to avoid misunderstanding about the respective responsibilities of management and the auditor. For example, when a third party has assisted with the preparation of the financial statements, it may be useful to remind management that the preparation of the financial statements in accordance with the applicable financial reporting framework remains its responsibility (CAS 210.A21).
CAS Requirement
If management or those charged with governance impose a limitation on the scope of the auditor’s work in the terms of a proposed audit engagement such that the auditor believes the limitation will result in the auditor disclaiming an opinion on the financial statements, the auditor shall not accept such a limited engagement as an audit engagement, unless required by law or regulation to do so (CAS 210.7).
CAS Requirement
If the preconditions for an audit are not present, the auditor shall discuss the matter with management. Unless required by law or regulation to do so, the auditor shall not accept the proposed audit engagement (CAS 210.8):
(a) If the auditor has determined that the financial reporting framework to be applied in the preparation of the financial statements is unacceptable, except as provided in paragraph 19; or
(b) If the agreement referred to in paragraph 6(b) has not been obtained.
CAS Guidance
In Canada, incorporating or other governing legislation often specifies that generally accepted accounting principles be used when preparing general purpose financial statements. Such legislation usually indicates that generally accepted accounting principles means “the standards set out in the Handbook of The Canadian Institute of Chartered Accountants.” The Handbook contains the accounting standards promulgated by the Accounting Standards Board and the Public Sector Accounting Standards Board. In Canada, these standards are generally accepted and are relevant in determining the acceptability of the applicable financial reporting framework even when incorporating or other governing legislation does not specify that generally accepted accounting principles be used when preparing general purpose financial statements. [This is a Canadian-only paragraph. There is no equivalent paragraph in corresponding ISA 210]. (CAS 210.CA8A)
Some legislation and regulation also permits certain reporting issuers to use International Financial Reporting Standards, promulgated by the International Accounting Standards Board, or United States generally accepted accounting principles, promulgated by the US Financial Accounting Standards Board. [This is a Canadian-only paragraph. There is no equivalent paragraph in corresponding ISA 210.] (CAS 210.CA8B)