2070 Use of Experts
Dec-2022

Overview

In some performance audits or special examinations, the engagement leader may decide to consult or include on the audit team an individual with expertise in a specialized area—either from within the OAG (an internal expert) or on contract (an external expert), and/or to rely on the work prepared by an audited entity’s expert. Using “experts” is subject to certain requirements that are explained in this section.

OAG Policy

The audit team shall consult an internal expert (i.e. an internal specialist), as deemed necessary according to the risk assessment that is conducted during the planning phase of the audit. [Nov-2015]

When a special expertise is necessary and is not available internally, the audit team shall use an external expert and comply with requirements related to the selection, supervision, and use of his/her work. [Nov-2015]

When an audit team decides to rely on the work of an audited entity expert (i.e. responsible party’s expert), it shall evaluate the competence, capabilities, and objectivity of this expert, obtain an understanding of the work of that expert, and evaluate the adequacy of the work done for the audit. [Nov-2015]

OAG Guidance

What CSAE 3001 means by “experts”

CSAE 3001 refers to four different types of experts: a practitioner’s internal expert, a practitioner’s external expert, a responsible party’s expert, and another practitioner. Following CSAE 3001 requirements and OAG policies and practices, the OAG is using the following definitions of experts.

A practitioner’s expert is an individual possessing expertise in a field other than assurance, whose work is used to help the audit team obtain sufficient appropriate evidence. The practitioner’s expert may be either an internal expert or an external expert.

A practitioner’s internal expert (i.e. an internal specialist in the context of the OAG) is a staff member who is subject to quality management policies and procedures in accordance with CSQM 1, and who needs to comply with ethical requirements, including those pertaining to independence.

A practitioner’s external expert (i.e. a consultant in the context of the OAG) is not a member of the engagement team and is not subject to quality management policies and procedures in accordance with CSQM 1.

A responsible party’s expert (i.e. an audited entity expert in the context of the OAG) is an expert who is employed or engaged by the audited entity to conduct work on its behalf in an area other than assurance work (for example, engineering, information systems, etc.). A responsible party’s expert is usually engaged by the audited entity when the audited entity does not possess the needed skills and experience.

Another practitioner is a practitioner who is not part of the engagement team (i.e. outside the OAG), but who has conducted assurance work that is used by the audit team. It could be, as an example, a Crown corporation with multiple subsidiaries that was audited by firms other than the OAG, and their audit work and conclusions are relevant to an OAG special examination; or in a performance audit of capital assets, an audited entity that engaged another auditor (other than the OAG) to provide assurance and conclusions on its controls over the procurement process, which is relevant to the OAG audit.

Determining the need to use an expert

The OAG may use a broad range of internal experts (i.e. internal specialists) in its audits—for example specialists in IT, in research and quantitative analysis, financial instruments, human resources, or grants and contributions. In some cases, the engagement leader may need to use an external expert (i.e. consultant) from outside the OAG if the expertise is not available internally—for example, a scientist with expertise in the release of pollutants from industrial processes in an audit on environmental monitoring.

The audit team may use a practitioner’s expert in a variety of ways, such as by:

  • seeking input on relevant research materials and best practices related to the underlying subject matter;

  • confirming the practitioner’s understanding of the key risks;

  • obtaining advice in determining which aspects of the underlying subject matter are most important;

  • obtaining reports on specific aspects of the performance audit, such as valuations;

  • obtaining input on the analysis and interpretation of key findings; or

  • undertaking assurance work.

The need to use an internal or an external expert as a team member to conduct some audit work or simply to get advice from is identified during the planning phase of an audit, when the audit team assesses the subject matter risks and its own engagement risks. See OAG Audit 4020 Risk assessment for more information about this assessment.

Selecting an expert

The requirements that apply to selecting an expert differ if that expert is an internal expert (i.e. internal specialists) or an external expert (i.e. consultant).

Internal experts (i.e. internal specialists) are staff members who are subject to quality management policies and procedures in accordance with CSQM 1. They need to comply with ethical requirements, including those pertaining to independence, as does any other audit team member. OAG Audit 1031 Ethical requirements relating to an assurance engagement sets out the ethical requirements that apply to all team members. Ethical requirements include objectivity and independence, due care (honesty and diligence), and confidentiality. OAG Audit 3031 Independence provides specific guidance related to the independence of team members from the entity being audited.

There is no need to evaluate the competence and capabilities of an internal expert because the OAG’s systems for recruitment, training, and assignment ensure that OAG internal specialists are competent and have the needed capabilities to support audit teams.

External experts (i.e. consultants) are not considered to be members of the engagement team and are not subject to quality management policies and procedures in accordance with CSQM 1. The audit team needs to have reasonable assurance concerning the external expert’s ethical conduct.

During the selection process of an external expert, the audit team needs to evaluate whether the practitioner’s external expert has the necessary competence, capabilities (and that there are no threats to that expert’s objectivity), before working on an audit. The significance of the threat to objectivity depends on the role that the external expert will play during the audit and the importance of that expert’s work in the context of the audit. When evaluating the objectivity of an external expert, it may be relevant to inquire about any known interests or relationship between the external expert and the audited entity that could affect his/her objectivity and determine if any applicable safeguards can be put in place to reduce threats to an acceptable level.

The team should also obtain a sufficient understanding of the field of expertise of that external expert and be familiar with his/her work or have references from others with whom the expert is associated or has worked for. If relevant, the team checks whether the specialist is a member in good standing of a professional body or industry association, or has a licence to practice, and researches the consultant’s expertise and reputation. Published papers, books, or other peer‑reviewed materials are also evidence of the external expert’s reputation.

As part of its selection process the audit team needs to document

  • the reason for using an external expert and for selecting the particular expert (qualifications, etc.),
  • the expert’s role in the audit and his/her relationship with the audit team, and
  • information concerning the external expert’s independence and objectivity.

A responsible party’s expert—The OAG may also use information prepared by a responsible party’s expert as evidence, for example, a technical engineering report prepared for the entity.

When assessing whether the work of the responsible party’s expert is adequate for the purposes of the engagement, the audit team may consider factors such as:

  • the objective of the work;
  • the relevance of the work to the subject matter or criteria of the performance audit; and
  • the reputation and expertise of the other practitioner or responsible party’s expert.

Planning and supervising the work of an expert

It is important for the entire audit team, including internal or external experts, to be clear about their roles and responsibilities in the audit. The following aspects need to be understood by the experts and all others on the team:

  • the context of the audit, and its significance and risks;
  • the extent of the expert’s involvement;
  • the nature, timing, and extent of the expert’s work and of the review of that work;
  • the deliverable expected from the expert;
  • requirements such as due care, objectivity, confidentiality, exchange of information, and documentation; and
  • how the expert’s working papers—the property of the OAG—will be handled and by whom.

In supervising an expert, it is essential to ensure that the expert’s work meets the OAG’s standards for evidence and that the expert’s findings are fully corroborated. Internal experts who are OAG employees are likely to be familiar with OAG policies, standards, processes, and procedures and how these ensure that the OAG meets or exceeds applicable CPA Canada assurance standards. However, external experts hired from outside the OAG usually need strong guidance from the audit team on OAG policies and procedures.

It should be noted that the relationship and communication between the OAG and the external expert is formalized in the OAG’s contract with the individual arranged through Contract and Procurement Services. For further information to request professional service contracts, see the Other Guidance section below.

Using the work of an external expert, an audited entity’s expert, or another practitioner

External expert

When the work of an external expert is used, the audit team needs to review it, to ensure its adequacy, and to ensure that it follows appropriate standards and OAG policies.

The expert’s evidence is subject to the same scrutiny and professional judgment and skepticism as the evidence gathered by other members of the team (OAG Audit 1041 Applying professional skepticism and OAG Audit 1042 Applying professional judgment). However, the audit team needs to consider additional risk factors that may be associated with using an external expert. One team member normally reviews the data, assumptions, and methods the expert used, and looks at

  • the relevance and reasonableness of that expert’s findings or conclusions, and their consistency with other audit findings to make sure the evidence the expert provided is sufficient and appropriate (OAG Audit 7021 Evaluate the sufficiency and appropriateness of audit evidence);

  • the relevance and reasonableness of assumptions and methods used in the circumstances; and

  • the relevance, completeness, and accuracy of source data used.

When the audit team determines that the work of the external expert is not adequate, options available include:

  • agreeing with that expert on the nature and extent of further work to be performed by that expert, and
  • performing additional procedures appropriate to the circumstances.

During the external expert’s involvement in the audit, the audit team needs to

  • ensure that external expert’s work is appropriately saved in the audit file,
  • prepare a description of the work conducted by the external expert and its relationship to other audit findings,
  • document the review of the external expert’s work and findings, and
  • integrate the external expert’s findings with those of the rest of the team.

The engagement leader in consultation with the audit director decides which of the expert’s findings to report in the audit report. This decision is made in the context of the audit as a whole and a separate conclusion is not reached based only on the expert’s work.

Audited entity’s expert or another practitioner

The audit team may use information prepared by an entity’s expert as evidence, for example, a technical engineering report prepared for the responsible party. The audit team needs to make inquiries regarding whether the audited entity has used any experts in dealing with the subject matter of the audit. When it is the case, and when information to be used as evidence in the audit report has been prepared using the work of an audited entity’s expert or the assurance work of another practitioner, the audit team needs, to the extent necessary, according to the importance of that evidence for the subject matter of the audit

  • evaluate the competence, capabilities, and objectivity of that expert;
  • obtain an understanding of the work of that expert; and
  • evaluate the appropriateness of that expert’s work as evidence.

Access to entity records and personnel

Any external expert engaged by the OAG and who works as part of the audit team has a right of access to entity records and personnel at all convenient times during the course of an audit (OAG Audit 2060 Accessing/requesting audit documentation). The expert must strictly observe all OAG requirements for security of audit information held by the OAG (see Other Guidance below to get further information on the Guide on Handling Protected and Classified Information and Asset). If the external expert has his or her own confidentiality requirements set by his or her profession, these are to be discussed and agreed upon with the engagement leader and the audit director.

Reporting considerations

The audit report does not refer to using experts. The name of an external expert does not appear in the audit report when engaged from outside the OAG; however, if an internal expert (an internal specialist) was used, his or her name may appear in the report in the list of team members, depending on the extent of his or her involvement.

If the work of an expert (internal or external) is mentioned in the audit report, the wording must not imply that the engagement leader’s responsibility for the conclusion is reduced because of the involvement of that expert (OAG Audit 7030 Drafting the audit report).