Annual Audit Manual
COPYRIGHT NOTICE — This document is intended for internal use. It cannot be distributed to or reproduced by third parties without prior written permission from the Copyright Coordinator for the Office of the Auditor General of Canada. This includes email, fax, mail and hand delivery, or use of any other method of distribution or reproduction. CPA Canada Handbook sections and excerpts are reproduced herein for your non-commercial use with the permission of The Chartered Professional Accountants of Canada (“CPA Canada”). These may not be modified, copied or distributed in any form as this would infringe CPA Canada’s copyright. Reproduced, with permission, from the CPA Canada Handbook, The Chartered Professional Accountants of Canada, Toronto, Canada.
5026 Understanding the Entity’s Climate-Related Risks
Sep-2022
In This Section
CAS Requirement
The auditor shall perform risk assessment procedures to obtain an understanding of (CAS 315.19):
-
The following aspects of the entity and its environment:
- The entity’s organizational structure, ownership and governance, and its business model, including the extent to which the business model integrates the use of IT;
- Industry, regulatory and other external factors; and
- The measures used, internally and externally, to assess the entity’s financial performance;
- The applicable financial reporting framework, and the entity’s accounting policies and the reasons for any changes thereto; and
- How inherent risk factors affect susceptibility of assertions to misstatement and the degree to which they do so, in the preparation of the financial statements in accordance with the applicable financial reporting framework, based on the understanding obtained in (a) and (b).
OAG Guidance
A wide range of entities may be affected by climate change either directly or indirectly. While climate-related impacts may vary depending on a variety of factors, certain industries are more likely to be directly impacted, such as those that rely on mining, refining or burning fossil fuels, those relying on climate conditions for sufficient agricultural yields, or those that insure, finance or invest in entities that are impacted by climate change. Even if an entity is not in a directly impacted industry, its operations may be indirectly affected if, for example, its supply chain, input costs, customers, financing, insurance or applicable laws and regulations are impacted.
Management is responsible for preparing the financial statements of the entity in accordance with the applicable financial reporting framework. Financial reporting frameworks provide requirements that address the recognition and measurement of items in the financial statements (e.g., assets, liabilities, revenue, income, expenses and cash flows), as well as requirements for related disclosures. It is management’s responsibility to appropriately reflect the impact of climate change in the entity’s financial statements, including related disclosures.
As auditors, we are responsible for obtaining reasonable assurance about whether the financial statements as a whole are free from material misstatement whether due to fraud or error. We need to obtain an understanding of how climate change may impact the entity, consider whether these impacts could be material to the entity, assess whether they give rise to a risk of material misstatement to the entity’s financial statements and develop appropriate audit responses to address the assessed risks of material misstatement. For further guidance on risk assessment, refer to OAG Audit 5040 and OAG Audit 5500.
We also need to consider whether management’s required assessment of the entity’s ability to continue as a going concern has taken into account material impacts of climate change both when identifying events or conditions that may cast significant doubt on the entity’s ability to continue as a going concern and impacts on the underlying assumptions and data used in the entity’s assessment. For guidance on going concern procedures, refer to OAG Audit 7520.
This subsection provides guidance to assist engagement teams in understanding climate-related risks that our clients may be facing and performing an effective assessment of whether they may result in a risk of material misstatement of the financial statements due to fraud or error.
Understanding the entity and its environment
Climate change impacts are considered as part of the procedures we perform when obtaining and updating our understanding of the entity. The following table illustrates some of the areas where obtaining our understanding of the entity’s operating environment might encompass considerations specific to climate change.
Area | Relevant considerations |
---|---|
Industry factors |
Industry factors include industry conditions such as the competitive environment, supplier and customer relationships, and technological developments. Entities in certain industries or geographic locations may need to implement changes to allow for continuing business activities in the event of extreme events, such as wildfires or flooding. These measures may require significant expenditures and may increase operating costs. Alternatively, entities in these industries who do not take such actions may face the impacts of business disruptions and property loss. Longer term technological improvements intended to facilitate a transition to a lower carbon, energy-efficient economy may also have a significant impact on entities. For example, the development and use of technologies such as renewable energy, battery storage, or carbon sequestration may affect the competitiveness of entities utilizing older technology, their production and distribution costs and, ultimately, may impact customer demand for their products or services. |
Regulatory factors |
The regulatory environment encompasses, among other matters, the legal and political environment in which an entity operates. Some entities face uncertainty over future climate policy and regulation. For example, some regulations may create economic disincentives for entities to continue carbon emissions by imposing levies or taxes on high-emissions sources, while other regulations may seek to incentivize entities to adopt specific operating practices, for example, by requiring or promoting a change to lower emission sources of inputs, or more sustainable land-use practices. Changes in climate regulation or policy may affect a wide range of business inputs and outputs such as energy pricing, carbon taxes, mandatory emission and energy standards and/or industry targets. The rapid emergence of climate-related legislation in different jurisdictions means that entities need to be aware of any existing or proposed climate-related laws and regulations and the extent to which those laws and regulations may impact the entity’s operations, its existing or potential liabilities, or its planned acquisitions, financing, investment or new projects. The financial impact of such regulatory or policy changes depends on the nature and timing of the change and needs to be considered for both the entity and its supply and distribution chains. In some countries, regulators have implemented, or have announced plans to implement, climate-related disclosure requirements. As part of our understanding of the entity and its environment, we need to consider such disclosure requirements so that we can consider these disclosures when assessing risks of material misstatement. We also need to understand whether the entity has publicly disclosed certain information or made public commitments to implement specific measures related to climate change impacts (e.g., a commitment to reach net zero carbon emissions by a specified date) and consider whether it is appropriate (or even required) for the entity to disclose such information as part of the entity’s financial statements or in information provided outside of the financial statements (e.g., a separate sustainability report or a disclosure in another part of the entity’s annual report). |
Other external factors | This may include the impacts of climate change on general economic conditions, shifting consumer preferences toward environmentally friendly alternatives, interest rates and availability of financing. For example, investors or banks may be less inclined to provide capital to entities not viewed to be responding sufficiently to environmental responsibilities or known to have heightened risks of business interruptions during extreme weather events. |
Geographic locations | Some geographic locations may be more likely to be directly affected by climate-related events, such as wildfires and flooding. If an entity has operations in such locations, it may indicate an increased risk of climate-related impacts that may give rise to a risk of material misstatement. When obtaining our understanding of the entity, we need to consider the geographic locations of the entity’s own operations, as well as those of its suppliers and customers (e.g., geographic location of customers underwritten by a property and casualty insurance company), their significance to the entity’s operations and whether mitigating actions, such as relocation or diversification of suppliers or customers, are plausible, including consideration of related costs, impairments or lost revenues. |
Understanding the entity’s risk assessment process
We need to obtain an understanding of the entity’s risk assessment process relevant to the preparation of the financial statements. The understanding that we obtain about an entity’s risk assessment process encompasses a broad array of considerations which may include material climate-related risks. The table below provides examples of questions that we may consider when obtaining an understanding of how management identifies climate-related risks impacting the entity. These questions are intended to help us develop questions appropriate to the engagement circumstances when seeking to understand how management and those charged with governance have incorporated climate change considerations into their existing risk identification and assessment processes. These questions are not intended to be a required nor an exhaustive list of considerations. We may consider these questions in light of the specific engagement circumstances, including industry, geographies, economies and other circumstances, such as regulations in territories where the entity operates.
Element of risk assessment process | Illustrative questions |
---|---|
Understanding of the context |
What knowledge and awareness does management have of scientifically forecasted impacts of climate change on their industry, geographical locations, and regulatory and policy changes? How do the entity’s finance teams work together with those assessing climate impacts to ensure that available scientific data, including scenario analysis, informs the financial information reported? What background information has management gathered to keep up to date (e.g., regarding regulatory updates, known impacts, how peers are assessing and developing climate risk assessment processes, latest technological developments)? How are climate change considerations integrated into the existing enterprise risk management and related decision-making processes? Who within the entity is responsible for the risk assessment process and what resources are available to them? Do those charged with governance provide oversight of management’s risk assessment activities and plans for mitigation of the risks? Has management used any subject matter experts to assist in carrying out the risk assessment and, if so, what are their credentials and what level of understanding do those experts have of the entity’s objectives, strategy and business? |
Objectives and scope of management’s risk assessment process |
Have the purpose and expected output of the risk assessment process been defined? Have both climate-related risks and climate-related opportunities (e.g., energy transition to low carbon or renewable technology) been considered? Which types of opportunities have been considered, and on what basis were they selected? Have both sector-specific and geographically specific factors been considered? Is the entire value chain, both upstream and downstream, considered? At what level has the risk assessment been conducted (e.g., at entity level, operating segment level, product/service level, asset or liability class, or asset/liability/transaction level)? What time horizon has been considered in assessing future impacts? Have climate impacts on macroeconomic conditions and trends been considered? How has the risk assessment been conducted (e.g., by whom, when, how, using what sources of information, tools, modelling)? |
Climate-related risk assessment |
Which acute and/or chronic climate-related impacts have been considered? What climate scenarios have been used and what is the source of assumptions used? How have climate and socioeconomic data been brought together in climate scenarios? How does management determine that the identified risks are consistent with the scenarios used? How has management identified new or potential regulatory or policy changes, in all jurisdictions, that may affect the entity? How has management identified operations, suppliers or markets that may be affected by shifts in consumer preferences toward environmentally friendly alternatives, the transition to low carbon economies, or by the entity, itself, transitioning to low carbon alternatives? What time horizon has management used to consider the climate-related risks, including variability in transition timing for different elements of the entity’s operations or value chain? Has management considered any past actions by the entity that may present climate-related risk, for example, potential environmental clean-up costs, or potential litigation or claims as a result of past actions? |
Monitoring, managing and reporting climate-related risks |
Have a range of risk management responses been considered, by whom, and on the basis of what information? How are risk management responses prioritized and selected from the range of possible responses? How will climate-related risks be integrated into the monitoring process, what will be monitored, by whom and how often? How have the financial impacts of the identified risks been assessed and incorporated into existing financial budgeting and financial reporting processes? What is the role of those charged with governance in monitoring the entity’s risk assessment processes, including climate-related risks? What has management done to ensure that emerging regulations or expectations on disclosures have been followed, and that there is a reasonable basis for information presented or disclosed in its annual report? |
Identifying risks of material misstatement
Climate change impacts are considered as part of the audit procedures we perform to identify and assess risks of material misstatement due to fraud or error. Based on our understanding of the entity, including information about the entity’s industry, operations and regulatory considerations, as well as management’s assessment of climate-related risks, we consider how climate-related risks may materially impact the entity’s financial statements. If we expect climate-related risks to have a significant impact on the entity, we use this understanding to independently assess whether climate change may give rise to risks of material misstatement due to fraud or error at the financial statement or FSLI assertion level.
Because of the wide range of potential climate change impacts on an entity’s future operations, as well as the complexity and inherent uncertainty in estimating the impacts, it is particularly important that we consider how the impact of climate change was taken into account by the entity when developing relevant accounting estimates when assessing risks of material misstatement. We need to consider whether climate change may affect the entity’s significant assumptions about future operations and cash flows, which were part of assumptions and data used by management to develop accounting estimates. For example, for entities significantly affected by climate change, management may need to re-assess their asset impairment analyses and we may need to revise our audit procedures to recognize a higher level of estimation uncertainty underlying the projected cash flows used in management’s assessment.
Likewise, we need to consider whether management’s required assessment of the entity’s ability to continue as a going concern has taken into account material impacts of climate change on the underlying assumptions and data used in the entity’s going concern assessment.
The following table provides some examples of climate-related considerations that may be relevant to our risk assessment procedures for certain classes of transaction and account balances. These risk considerations are intended to illustrate how climate-related risks may impact an entity’s accounting and financial reporting and therefore become relevant to our assessment of risks of material misstatement. This is not intended to be an exhaustive list of risk considerations or financial statement impacts.
Financial reporting area | Illustrative risk considerations |
---|---|
Revenues |
|
Assets and liabilities |
|
Costs and expenditures |
The impacts of climate change may cause increases in an entity’s operating costs and capital expenditures which can have a broad range of financial reporting and compliance implications. For example, lower current and future profitability and cash flows can give rise to declining asset values and impairments, loan covenant violations and may even challenge an entity’s ability to continue as a going concern. Examples of how climate change may increase an entity’s costs and expenditures include, but are not limited to, the following:
|
Capital and financing |
The impacts of climate change may make access to capital more challenging for some entities and may also make compliance with contractual covenants more difficult. If an entity’s profitability and cash flows are declining it is typically more difficult or costly to attract debt or equity financing and can be more difficult to comply with existing loan covenants. Some investors and lenders have also begun to consider climate-related impacts of an entity’s business and/or the entity’s climate-related commitments to reduce their impact on climate when making decisions and setting terms. An inability to obtain sufficient capital or violation of loan covenants can, among other things, challenge an entity’s ability to continue as a going concern. Examples of how climate change impacts may make it more difficult for an entity to obtain capital and financing or to comply with related covenants include, but are not limited to, the following:
|
Financial statement disclosures and other information
The entity’s management is responsible for the preparation of the financial statements, including climate-related disclosures, in accordance with the applicable financial reporting framework and regulatory requirements. We need to consider these disclosures when assessing risks of material misstatement of the entity’s financial statements. We also need to consider whether required financial statement disclosures have been omitted, because omission of information necessary for intended users’ understanding of material climate-related risks may also give rise to a material misstatement. For example, if an entity has made public disclosure of material changes to its operating model that would be necessary if a proposed new carbon emissions regulation is enacted, the entity would likely also need to include disclosure of this potentially material uncertainty in its financial statements.
Some entities produce a standalone “sustainability report” or otherwise include information about their climate-related commitments and/or actions in their annual report to stakeholders. In many cases such information is not required by the applicable financial reporting framework or other regulations and therefore is not included in the entity’s financial statements. When reading the annual report, CAS 720, Auditor’s Responsibilities Relating to Other Information clarifies that our responsibility for other information is limited to considering whether there is a material inconsistency between the other information and the financial statements; and the other information and our knowledge obtained in the audit. We read and consider the other information related to climate change impacts that may be included in the entity’s annual report and consider whether there are such material inconsistencies. For example, a statement in the entity’s annual report indicating that climate change is not expected to materially impact operations may be inconsistent with information in the financial statements if the entity has made material capital expenditures at one of its manufacturing facilities in order to implement new technology needed to comply with new carbon emissions regulations.