- A firm's system of quality management includes policies related to resources. This component is designed to provide reasonable assurance that the firm has sufficient and appropriate resources. Which of the following is an example of an intellectual resource?
Answer: The firm's proprietary audit methodology and industry-specific guidance.
The correct answer is B. Intellectual resources are the firm's methodologies, guides, checklists, and other codified knowledge that support the consistent performance of quality engagements. A represents human resources. C represents technological resources. D represents financial resources. All are components of the resources element, but only B is an intellectual resource.
- A CPA firm is performing a nonissuer financial statement audit for a new client in a highly regulated industry. The firm's quality management policies require an engagement quality review when significant risks are identified, but the engagement partner believes the team can handle the risks without an independent review. Based on the firm's policies and the need to apply professional judgment to ensure engagement quality, which response is most appropriate?
Answer: Perform an engagement quality review in accordance with the firm's policy before the auditor's report is issued.
The professional standard being tested is the engagement performance element of a firm's system of quality management under SQCS 8, specifically the requirement for engagement quality reviews (EQRs) when firm policies mandate them for high-risk nonissuer audits. Key facts include the nonissuer audit of a new client in a highly regulated industry with significant risks, where firm policy requires an EQR, but the engagement partner believes it is unnecessary. Choice C is correct because it aligns with AU-C 220 and firm policies by ensuring an objective EQR is performed before the report is issued to enhance audit quality. Choice A is incorrect because annual monitoring inspections under SQCS 8 are not a substitute for a required EQR, as they occur post-engagement and do not provide pre-issuance review. Choice B is incorrect as documenting the rationale without performing the EQR violates firm policy and AU-C 220's emphasis on quality management; choice D is wrong because post-release reviews do not prevent issuance of potentially flawed reports, contrary to timely quality assurance in SQCS 8. A transferable framework is to evaluate engagement risks against firm policies and apply professional judgment to determine if an EQR is needed, prioritizing objective review over individual beliefs. Always document the decision process and ensure reviews are completed before report release to uphold quality standards.
- A firm is performing a nonissuer review of interim financial statements. Near completion, the engagement partner notes that key inquiries and analytical procedures were performed but not documented, and the firm's quality control policies require documentation sufficient to enable an experienced practitioner to understand the work performed and conclusions reached. What is the most appropriate quality control procedure?
Answer: Have the engagement team complete the documentation before the report date and ensure the engagement partner reviews and concludes on the completed workpapers.
Professional standards for review engagements require documentation sufficient for an experienced practitioner to understand the work performed, evidence obtained, and conclusions reached. The critical deficiency is that key inquiries and analytical procedures were performed but not documented, violating both professional standards and firm policies requiring adequate documentation. The correct answer (B) properly requires completion of documentation before report issuance with appropriate partner review, ensuring compliance with documentation standards. Option A incorrectly suggests review engagements have minimal documentation requirements and permits post-issuance documentation, which violates professional standards. Option C inappropriately suggests changing the engagement type to avoid documentation requirements rather than addressing the deficiency. Option D incorrectly defers quality control to future monitoring rather than ensuring current compliance. The decision framework requires that all attest engagements, including reviews, maintain contemporaneous documentation of procedures performed and conclusions reached before report issuance.
- At least annually, the individual assigned ultimate responsibility and accountability for the CPA firm's system of quality management is required to perform an evaluation of the system. This evaluation should result in a conclusion about whether the system provides reasonable assurance that its objectives are being achieved. This conclusion should be based primarily on:
Answer: The information obtained from the firm's monitoring and remediation process.
The correct answer is C. The annual evaluation of the system of quality management must be evidence-based. The primary source of this evidence is the firm's own monitoring and remediation process, which includes inspections of completed engagements and other reviews. This information provides direct insight into how the system is designed and operating. A and D are not reliable indicators of quality; a firm could be profitable or avoid litigation through luck rather than a good system. B is subjective and may not reflect the actual effectiveness of the system.
- A CPA firm is selecting an engagement quality reviewer for the audit of a publicly-traded company. To maintain objectivity, which of the following individuals would be prohibited from serving in this role?
Answer: The engagement partner responsible for the current year's audit.
The correct answer is D. The fundamental requirement for an engagement quality reviewer is objectivity, which means they cannot be part of the engagement team. The engagement partner has primary responsibility for the audit and therefore cannot objectively review their own work and judgments. A, B, and C describe individuals who are likely to be sufficiently removed from the engagement team to maintain objectivity, although the firm would need to evaluate any specific threats (e.g., the nature of the consultation in choice A).
- Statement on Quality Management (SQMS) No. 1 requires a CPA firm to design and implement a system of quality management. The fundamental purpose of this system is to provide the firm with reasonable assurance that:
Answer: The firm's engagements will be performed in accordance with professional standards and the firm will issue appropriate reports.
The correct answer is C. The objective of the system of quality management, as stated in SQMS No. 1, is to provide reasonable assurance that the firm and its personnel fulfill their professional responsibilities and that reports issued are appropriate in the circumstances. A and B are incorrect because auditing provides reasonable, not absolute, assurance; the system cannot guarantee detection of all misstatements or prevent all litigation. D is a business objective, not the professional objective of the quality management system.
- A firm is conducting a nonissuer review of interim financial statements. Due to staff turnover, the engagement is being reassigned to a manager who has not previously supervised review engagements, and the firm's policies require appropriate supervision and consultation for unfamiliar engagement circumstances. Which action should the firm take to ensure engagement quality?
Answer: Provide targeted coaching and require consultation with an experienced reviewer for key judgments and conclusions.
The concept being tested is the human resources and engagement performance elements under SQCS 8, focusing on ensuring appropriate supervision and consultation for nonissuer review engagements when team members lack experience. Key facts are the nonissuer interim review reassigned to an inexperienced manager due to turnover, with firm policies requiring supervision and consultation for unfamiliar circumstances. Choice B aligns with AR-C 90 and SQCS 8 by providing targeted coaching and consultation to build competence and ensure quality. Choice A is incorrect because reviews still require quality management procedures per AR-C 90, not lesser than audits; choice C is wrong as replacing with an audit exceeds the engagement scope and doesn't address competence per SQCS 8. Choice D is incorrect because relying on year-end monitoring delays corrections and violates timely performance requirements in AR-C 90. Professional judgment should assess team competence and provide necessary support like training or consultation to mitigate risks. Firms should establish decision rules requiring escalation and documentation of supervision plans for inexperienced personnel to maintain engagement quality.
- A firm is engaged to perform a nonissuer audit and identifies a potential independence threat because a senior on the engagement owns a small amount of the client's stock. The firm's quality policies require identification and evaluation of independence threats and implementation of safeguards. Which action should the firm take to ensure engagement quality?
Answer: Remove the senior from the engagement and address the independence violation in accordance with the firm's policies before continuing the audit.
The standard tested is the relevant ethical requirements element under SQCS 8, addressing independence threats in nonissuer audits. Key facts are the nonissuer audit with a senior owning client stock, a potential threat, with policies requiring evaluation and safeguards. Choice A is correct as removing the senior and addressing the violation complies with ET 1.295 and SQCS 8 to maintain independence. Choice B is incorrect because immateriality doesn't excuse ownership prohibitions per ET 1.240; choice C is wrong as disclosure isn't a safeguard for independence under AU-C 220. Choice D is incorrect as relying on EQR delays resolution contrary to timely safeguards in SQCS 8. A judgment framework identifies and mitigates threats promptly. Decision rules should require immediate removal of impaired personnel and documentation of actions taken.
- A firm's monitoring of nonissuer attestation engagements finds that teams often fail to document the criteria used to evaluate the subject matter, leading to inconsistent conclusions. The firm must decide on a response that improves engagement quality. What is the most appropriate quality control procedure?
Answer: Require engagement teams to document the applicable criteria and how they were applied, and provide training and templates to support consistent implementation.
The concept being tested is the monitoring and remediation under SQCS 8 for nonissuer attestation engagements, improving documentation consistency. Key facts involve monitoring finding inconsistent criteria documentation in nonissuer attestations, needing quality improvements. Choice A aligns with AT-C 105 and SQCS 8 by requiring documentation, training, and templates for consistency. Choice B is incorrect as omitting documentation increases risks per AT-C 105; choice C is wrong because stopping engagements isn't remedial under SQCS 8. Choice D is incorrect as PCAOB rules don't apply to nonissuers per AICPA standards. Professional judgment designs responses to deficiency patterns. A decision rule is to implement and evaluate corrective actions through follow-up monitoring.
- A firm accepts a nonissuer attestation engagement (examination) over a service organization's controls. The engagement team includes a senior associate who previously worked for the client and will be supervising testing; the firm's quality control policies require evaluation of independence threats and assignment of personnel with appropriate objectivity. Which factor would most likely affect the firm's quality assurance process?
Answer: The former employment relationship, which may create a familiarity or self-interest threat requiring safeguards such as reassignment or additional review.
Professional standards require evaluation of independence threats for all attest engagements, including consideration of prior employment relationships that may create familiarity or self-interest threats. The critical fact is that a senior associate with supervisory responsibilities previously worked for the client, creating potential independence impairments that must be evaluated and mitigated through appropriate safeguards. The correct answer (A) properly identifies the former employment relationship as requiring threat assessment and potential safeguards such as reassignment or additional review procedures. Option B incorrectly suggests client preferences override independence requirements. Option C erroneously claims attestation engagements don't require independence, when all attest services require independence under professional standards. Option D inappropriately suggests data analytics automatically mitigate independence threats without addressing the underlying relationship issue. The professional framework requires systematic evaluation of all independence threats, including prior employment relationships, with implementation of safeguards proportionate to the significance of identified threats.
- A firm's internal monitoring identified that engagement quality reviews (EQRs) were sometimes performed by partners who had recent involvement with the client, creating a potential threat to objectivity. The firm performs nonissuer audits and must apply professional judgment in designing responses. Which factor would most likely affect the firm's quality assurance process?
Answer: Whether the engagement quality reviewer meets eligibility criteria, including appropriate objectivity and independence from the engagement team.
The concept tested is the eligibility and objectivity requirements for engagement quality reviewers under SQCS 8 and AU-C 220 in nonissuer audits. Key facts include monitoring findings of reviewers with recent client involvement threatening objectivity in nonissuer audits, requiring improved quality assurance. Choice A is correct as it highlights reviewer eligibility, including objectivity, aligning with SQCS 8 to safeguard quality. Choice B is incorrect because client agreement on scope expansions isn't relevant to EQR eligibility per AU-C 220; choice C is wrong as budget hours don't affect reviewer selection under SQCS 8. Choice D is incorrect as monitoring communications should be broader, not confidential to partners, per SQCS 8. Professional judgment assesses threats to objectivity and implements safeguards like rotation. A decision rule is to verify reviewer independence from the engagement before assignment to ensure unbiased quality reviews.
- Which of the following describes the relationship between a firm's system of quality management and its engagement-level quality control procedures?
Answer: The firm's system of quality management provides the overall framework within which quality control is exercised on individual engagements.
The correct answer is B. The firm's system of quality management (governed by SQMS) is the comprehensive, firm-wide system. The quality control activities on a specific engagement (e.g., supervision, review, compliance with firm policies) are performed within the context of and in compliance with this overarching system. The firm's system and engagement-level controls are integrated and interdependent. A, C, and D are incorrect because they describe a separation that does not exist; the two are directly linked.
- A firm is performing a nonissuer audit and the engagement team identifies significant deficiencies in internal control. The firm's internal quality review of the engagement also identified shortcomings in how the deficiencies were evaluated and documented. The firm must determine how to communicate the quality review findings. Which action is most appropriate?
Answer: Communicate the quality review findings to those charged with governance when relevant, in addition to addressing the engagement deficiencies with the engagement team.
The standard tested is communication of internal quality findings under SQCS 8 and AU-C 260 for nonissuer audits, including to governance when relevant. Key facts include internal control deficiencies and quality shortcomings in a nonissuer audit, requiring appropriate communication. Choice A is correct as it communicates to the team and governance per AU-C 260 and SQCS 8 if impactful. Choice B is incorrect as quality findings aren't solely client responsibilities under SQCS 8; choice C is wrong because external communication may be needed per AU-C 260. Choice D is incorrect as involving the partner is essential per SQCS 8. A judgment framework assesses finding relevance for communication levels. Decision rules should document communications and escalate if affecting report reliability.
- A firm is performing a nonissuer attestation engagement and, after report issuance, discovers that certain required documentation was missing from the engagement file. The firm's policies require remediation of documentation deficiencies and evaluation of whether the report remains appropriate. Which action should the firm take to ensure engagement quality?
Answer: Follow the firm's documentation remediation policy, clearly identifying additions/changes, when and by whom they were made, and evaluate whether the report remains appropriate.
This question examines documentation requirements under AT-C Section 105 for attestation engagements, which mandate complete and timely assembly of documentation and procedures for post-issuance remediation if deficiencies are discovered. The key facts involve the discovery of missing documentation after report issuance and the firm's policy requiring remediation with clear identification of changes and evaluation of the report's appropriateness. Choice B aligns with AT-C Section 105 and QC Section 10, as it requires documenting additions, including dates, responsible parties, and reasons, while assessing the report's continued validity to uphold engagement quality. Choice A is incorrect because adding documentation without notation violates AT-C Section 105's prohibition on backdating or altering files without transparency, potentially misleading reviewers. Choices C and D are incorrect as destroying files contravenes ethical standards in QC Section 10 on integrity, and ignoring deficiencies fails to address quality control obligations under SQCS No. 8. Professionals should always follow firm remediation policies by transparently documenting changes and evaluating impacts when post-issuance issues arise. This framework ensures documentation integrity and supports defensible professional judgments in attestation engagements.
- A firm's monitoring process for nonissuer reviews found that some engagement partners signed reports without evidence that all review notes were cleared. The firm must apply professional judgment about timing and completion of engagement review procedures. Which action should the firm take to ensure engagement quality?
Answer: Require that review notes be resolved and documented before the review report is dated and issued.
The concept being tested is the completion of review procedures under AR-C 90 and SQCS 8 for nonissuer reviews, ensuring resolution before issuance. Key facts include monitoring finding uncleared review notes in nonissuer reviews, requiring judgment on timing. Choice A aligns with AR-C 90 by mandating resolution and documentation pre-issuance. Choice B is incorrect as beliefs don't override evidence requirements per SQCS 8; choice C is wrong because monitoring isn't for resolving notes under AR-C 90. Choice D is incorrect as clients don't decide auditor procedures per AR-C 90. Professional judgment prioritizes complete reviews before dating. A decision rule is to document note resolutions and withhold issuance until cleared.
- A CPA firm's system of quality management must establish policies and procedures to provide reasonable assurance that the firm and its personnel comply with relevant ethical requirements. Such policies would most likely include:
Answer: Requiring all personnel to complete an annual confirmation of their compliance with independence policies.
The correct answer is A. Requiring annual independence confirmations is a standard and effective firm-level procedure to monitor compliance with ethical requirements. It serves as a regular reminder to personnel of their obligations and provides documented evidence of their compliance. B relates to client acceptance, not the firm's own ethical compliance. C is incorrect because independence is the auditor's responsibility to maintain and assess, not management's to confirm. D is impractical and not required; firms have consultation processes, but not a dedicated ethics partner on every engagement.
- A firm is engaged to perform a nonissuer attestation engagement (examination) on a service organization's description of its system and controls. The firm's policies require an engagement quality review when the report will be widely distributed, and the client plans to provide the report to multiple user entities and their auditors. What type of review should be conducted?
Answer: An engagement quality review performed before the practitioner's report date, by an eligible reviewer independent of the engagement team.
The concept tested is engagement quality control under AT-C 105 and SQCS 8 for nonissuer attestation examinations, particularly when firm policy requires an EQR for widely distributed reports. Key facts include the nonissuer attestation on a service organization's system, with the report for multiple users and firm policy mandating an EQR by an independent reviewer before issuance. Choice A aligns with AT-C 105 and SQCS 8 by ensuring an eligible, objective reviewer performs the EQR pre-issuance to enhance quality. Choice B is incorrect as post-issuance monitoring isn't the only review and doesn't substitute for pre-issuance EQR per SQCS 8; choice C is wrong because client internal audit lacks independence for EQR under AT-C 105. Choice D is incorrect as conditional post-identification reviews don't prevent errors, contrary to proactive quality in SQCS 8. Professional judgment involves assessing distribution risks to determine EQR needs, prioritizing independence and timeliness. A decision rule is to document reviewer eligibility and complete EQRs before report release for high-impact attestations.
- A CPA firm is considering accepting a new audit client in a highly specialized and regulated industry where the firm has no prior experience. According to the firm's quality management policies on acceptance and continuance, which action is most critical before accepting the engagement?
Answer: Determining if the firm has, or can obtain, the necessary competence and resources to perform the engagement.
The correct answer is C. A core principle of a firm's system of quality management is ensuring that it only undertakes engagements for which it has the necessary capabilities, including competence, time, and resources. Accepting an engagement in a new, specialized industry without this determination would pose a significant risk to audit quality. A and D are procedures that might be performed during the audit, but the firm's capability is a prerequisite for acceptance. B, while important, is part of evaluating management integrity, but the firm's own competence is a more fundamental quality management consideration in this specific scenario.
- A firm is performing its annual continuance evaluation for an audit client. The firm discovers that the client's management has a reputation for being overly aggressive in its financial reporting and has frequently disputed the audit firm's proposed adjustments. Which component of the firm's quality management system is most directly relevant to this situation?
Answer: Acceptance and continuance of client relationships and specific engagements.
The correct answer is C. The acceptance and continuance component of the quality management system requires the firm to evaluate the integrity and ethical values of the client's management. Information suggesting management is overly aggressive and disputes adjustments calls their integrity into question, increasing the risk associated with the engagement and requiring careful consideration of whether to continue the relationship.
- A firm is conducting a nonissuer audit and, during completion, identifies that significant audit judgments (including revenue cutoff and inventory obsolescence) were discussed verbally with the engagement partner but not documented, and the firm's quality control policies emphasize documentation of significant findings and conclusions. The engagement partner believes oral discussions are sufficient because the team is experienced. Which action should the firm take to ensure engagement quality?
Answer: Document the significant judgments and conclusions in the audit file before report release and ensure appropriate review of the added documentation.
Professional standards require documentation of significant audit matters, judgments, and conclusions in sufficient detail for an experienced auditor to understand the work performed and support for conclusions reached. The key deficiency is that significant judgments regarding revenue cutoff and inventory obsolescence were only discussed verbally without documentation, violating both professional standards and firm policies. The correct answer (A) properly requires documentation of these significant matters before report release with appropriate review of the added documentation to ensure completeness and accuracy. Option B incorrectly defers documentation to future monitoring processes, violating the requirement for contemporaneous documentation. Option C inappropriately attempts to shift auditor documentation responsibilities to client management. Option D incorrectly applies issuer documentation timelines to a nonissuer audit without addressing the immediate documentation deficiency. The professional framework requires that all significant audit judgments be documented contemporaneously and reviewed before report issuance, regardless of team experience levels.
