- If an auditor chooses to communicate significant audit findings orally to those charged with governance, what is the auditor's additional professional responsibility regarding this communication?
Answer: Document the substance of the oral communication, the date, and the individuals involved in the audit documentation.
The correct answer is C. While some matters may be communicated orally, auditing standards (AU-C 260) require the auditor to document these communications. The documentation should include what was communicated, to whom it was communicated, and when the communication took place. This provides evidence of the communication and fulfills the auditor's responsibility.
A is not required by auditing standards.
B is not a specific requirement; the form of communication (oral vs. written) depends on the circumstances, although significant deficiencies and material weaknesses must be in writing.
D is incorrect as the auditor is responsible for their own documentation, not management.
- An auditor's communication with those charged with governance regarding the planned scope and timing of the audit would least likely include a discussion of:
Answer: The detailed list of employees to be interviewed during fieldwork.
The correct answer is B. While the auditor discusses the overall audit plan and approach, communicating a detailed list of specific employees to be interviewed would be too granular and could compromise the effectiveness and unpredictability of audit procedures. Such details are part of the detailed audit program, not the high-level scope communication with governance.
A, C, and D are all appropriate and required topics for discussion with those charged with governance to ensure they understand the audit plan, key risk areas, and the respective responsibilities of the auditor and management.
- Which of the following is most likely to be considered a 'significant finding' from the audit that an auditor is required to communicate to those charged with governance?
Answer: Significant adjustments arising from the audit that were recorded by management.
The correct answer is B. Significant audit adjustments, whether recorded by management or uncorrected, are a key finding from the audit. They provide insight into the effectiveness of the entity's financial reporting process and are required to be communicated to those charged with governance under AU-C 260.
A, C, and D are all matters related to the planning and execution of the audit, but they are not typically considered 'significant findings' that arise from the performance of audit procedures. The concept of materiality (A) is discussed during planning, but specific adjustments found are a result of the audit work.
- You are the auditor of an issuer. During the audit, you identify that management selected an aggressive revenue recognition interpretation that is within a reasonable range but results in materially higher revenue than an alternative acceptable policy. The audit committee is considering whether to change the policy next year. Which information should the auditor prioritize in communication with governance?
Answer: The significant qualitative aspects of the company's accounting practices, including why the policy is aggressive, the judgments involved, and the potential effect on comparability.
The professional standard being tested is PCAOB AS 1301, which requires communication of significant qualitative aspects of accounting practices to those charged with governance in issuer audits. The key facts are the aggressive but acceptable revenue policy and the audit committee's consideration of changes. Choice A aligns with AS 1301 by prioritizing discussion of policy judgments and effects. Choice B is incorrect because AS 1301 does not mandate conservative policies; choice C is wrong as communication is required for qualitative aspects per AS 1301; choice D is incorrect because CAM disclosure follows governance discussion. A judgment framework is to evaluate policy reasonableness and bias, then communicate for governance input. Emphasizing governance communication aids in consistent and transparent accounting practices.
- You are auditing a nonissuer financial services company. You discover that the engagement partner's spouse recently accepted a senior role at the client, and the partner did not report it until late in the audit. The client has an independent audit committee. What is the appropriate course of action for the auditor in this situation?
Answer: Evaluate independence implications immediately, take appropriate safeguards or personnel changes as needed, and communicate relevant independence matters to those charged with governance.
The professional standard being tested is AU-C Section 260, which requires communication of independence matters to those charged with governance in nonissuer audits. The key facts are the late disclosure of the partner's spouse's role and the presence of an audit committee. Choice A aligns with AU-C 260 by mandating immediate evaluation and communication of independence threats. Choice B is incorrect because independence applies to all audits per AU-C 200; choice C is wrong as AU-C 260 requires governance communication; choice D is incorrect because timely assessment is required per AU-C 260. A transferable framework is to identify threats, apply safeguards, and disclose to governance. Effective governance communication upholds auditor objectivity and public trust.
- You are conducting a financial statement audit of a nonissuer with a formal audit committee. You identify multiple control deficiencies in the disbursements process; individually they are not significant, but in combination they increase the risk of misappropriation (e.g., no three-way match, no review of vendor master changes, and inconsistent check signing controls). Management argues each issue is "minor" and asks you to communicate only if you label them significant deficiencies. Which information should the auditor prioritize in communication with governance?
Answer: A clear description of the deficiencies and their potential effects, including that deficiencies may be evaluated in combination and may warrant governance attention even if management views them as minor.
The professional standard being tested is AU-C Section 265, which requires communication of internal control deficiencies, including those in combination, to those charged with governance in nonissuer audits. The key facts are the combined deficiencies increasing misappropriation risk and management's minimization. Choice A aligns with AU-C 265 by mandating description of deficiencies and combined effects. Choice B is incorrect because AU-C 265 requires all relevant deficiencies; choice C is wrong as communication occurs regardless of misstatements; choice D is incorrect because PCAOB CAMs apply to issuers. A framework is to aggregate deficiencies for severity, then communicate holistically. Governance communication enhances control awareness and remediation efforts.
- An auditor is required to communicate certain matters to those charged with governance. Which of the following matters is an auditor most likely to communicate only to the appropriate level of management and not to those charged with governance?
Answer: An internal control deficiency that is neither a material weakness nor a significant deficiency.
The correct answer is C. Internal control deficiencies that are of a lesser severity than a significant deficiency (often called 'other control deficiencies') are typically communicated to the appropriate level of management but are not required to be communicated to those charged with governance.
A, B, and D are all examples of 'significant findings from the audit' that auditing standards (AU-C 260) explicitly require the auditor to communicate to those charged with governance.
- What is the primary purpose of an auditor communicating the planned scope and timing of the audit with those charged with governance?
Answer: To provide an overview of the audit approach and facilitate effective two-way communication.
The correct answer is C. According to auditing standards (AU-C 260), communicating the planned scope and timing helps those charged with governance understand the auditor's approach, key risk areas, and responsibilities. It also establishes a constructive working relationship and facilitates a dialogue about significant matters that may arise during the audit.
A is incorrect because the auditor is responsible for the audit plan and does not require approval for specific procedures from governance.
B is incorrect because management, with oversight from those charged with governance, is responsible for preventing and detecting fraud, not the auditor assigning it.
D is incorrect because while the concept of materiality may be discussed, auditors typically do not disclose specific, detailed quantitative thresholds as this could compromise audit effectiveness.
- You are the auditor of a nonissuer in a financial statement audit. Near the end of fieldwork, management informs you that a warehouse fire occurred after year-end but before the auditor's report date; management believes the event is immaterial and does not want to inform the board until insurance proceeds are finalized. You determine the event is a significant subsequent event requiring consideration of disclosure and potentially affects the audit timeline. What is the auditor's responsibility in communicating this issue?
Answer: Communicate the subsequent event to those charged with governance promptly, including the potential financial statement disclosure implications and any effect on the planned report date.
This question addresses the auditor's responsibility under AU-C 560 to communicate significant subsequent events with those charged with governance in a nonissuer audit. The warehouse fire occurring after year-end but before the auditor's report date is a Type II subsequent event requiring disclosure consideration, and management's reluctance to inform the board raises concerns about transparency. Professional standards require the auditor to communicate promptly with governance about significant subsequent events, their potential disclosure implications, and any effects on the audit timeline. Answer B is incorrect because the auditor has a responsibility to ensure governance is aware of significant matters affecting the financial statements, including subsequent events. Answer C is incorrect because waiting until after issuance would prevent governance from fulfilling their oversight role regarding financial statement disclosures. Answer D is incorrect because subsequent events do not automatically require adverse opinions; the key is appropriate disclosure or adjustment. The critical professional judgment is that timely communication about subsequent events enables governance to oversee appropriate financial statement disclosure and maintain transparency with stakeholders.
- What is the auditor's communication responsibility to those charged with governance regarding this deficiency?
Answer: The auditor should communicate the original significant deficiency in writing, and may also communicate the remedial actions taken.
The correct answer is A. The auditor's responsibility is to communicate deficiencies in internal control that existed during the period under audit. Even if management corrects the deficiency before the audit is complete, the original weakness still existed during the audit period and must be communicated in writing to both management and those charged with governance. The auditor may also choose to communicate the corrective actions taken by management.
B is incorrect because the correction does not eliminate the requirement to report the deficiency that existed during the period.
C is incorrect because a significant deficiency requires written communication to both management and those charged with governance.
D is incorrect because the communication must be timely and relate to the current period's audit.
- What is the auditor's responsibility regarding the communication of this material weakness?
Answer: Communicate the material weakness in writing to management and those charged with governance in connection with the year-end audit.
The correct answer is A. The auditor's responsibility is to report the material weakness found during the financial statement audit in accordance with auditing standards (AU-C 265). This requires a written communication to management and those charged with governance by the audit report release date. The fact that it wasn't found during an interim review (which provides only limited assurance) does not change the communication requirement for the audit.
B is incorrect because the auditor is not required to retroactively amend a prior review report for information discovered during a subsequent audit.
C is incorrect because a material weakness must be communicated to both management and those charged with governance.
D is incorrect because communication must be timely for the period under audit and cannot be delayed.
- You are auditing an issuer. The audit committee asks whether the engagement team had any significant disagreements with management during the audit. There were disagreements about the classification of certain expenses, but management ultimately accepted the auditor's position. What is the auditor's responsibility in communicating this issue?
Answer: Communicate significant disagreements with management to the audit committee, including those resolved, and describe the subject matter and how they were resolved.
The professional standard being tested is the auditor's responsibility to communicate with those charged with governance, specifically regarding significant issues encountered during the audit as outlined in PCAOB AS 1301 and AU-C Section 260. The key facts are that the audit involves an issuer, there were significant disagreements with management about expense classification that were ultimately resolved by management accepting the auditor's position, and the audit committee inquired about such disagreements. The correct answer aligns with authoritative guidance because auditors must communicate significant disagreements with management to the audit committee, including resolved ones, to ensure transparency and oversight of the financial reporting process, describing the subject matter and resolution method. Choice B is incorrect because guidance requires reporting both resolved and unresolved disagreements if they are significant, as per AU-C 260.A27; choice C is wrong as communication is not limited to material weaknesses in internal control but extends to significant audit issues under PCAOB standards; choice D is incorrect because the audit committee, as those charged with governance, must be informed of such disputes, not just the CEO, to fulfill their oversight role. Effective communication with governance promotes accountability and helps mitigate risks in financial reporting. Auditors should exercise professional judgment in determining the significance of disagreements, prioritizing timely and complete disclosures to support governance's decision-making and enhance audit quality.
- You are the auditor of a nonissuer manufacturing company in a financial statement audit. During walkthroughs and testing, you identify that (1) the controller can set up new vendors and approve payments without independent review, and (2) bank reconciliations are not prepared timely and lack evidence of review; two instances of duplicate payments were noted but corrected by management. Management agrees to remediate but asks that you wait until the end of fieldwork to inform the audit committee because "it will distract them." What is the appropriate course of action for the auditor in this situation?
Answer: Communicate the significant deficiencies in writing to those charged with governance on a timely basis and also communicate them to management, without waiting until the end of fieldwork.
The professional standard being tested is AU-C Section 265, which requires auditors to communicate internal control deficiencies identified during an audit of a nonissuer to those charged with governance. The key facts are the identification of significant deficiencies in vendor setup and bank reconciliations, along with management's request to delay communication to the audit committee. Choice A aligns with AU-C 265 by requiring timely written communication to governance and also to management, ensuring transparency without delay. Choice B is incorrect because AU-C 265 mandates communication even if deficiencies are corrected, as governance needs awareness; choice C is wrong as communication to governance is required for significant deficiencies in nonissuer audits, not just material weaknesses; choice D is incorrect because AU-C 265 requires communication regardless of the audit opinion. A transferable framework is to evaluate the severity of deficiencies using indicators like potential for misstatement and compensating controls, then prioritize timely governance communication. Effective communication with governance fosters oversight and remediation, enhancing the entity's internal control environment and audit quality.
- You are the auditor of an issuer in an integrated audit. Testing of controls over journal entries identifies that the company's system allows users with general ledger posting access to also modify the audit trail settings, and you observe that audit logs were disabled for two weeks during the year; management states it was for system maintenance. You conclude this is at least a significant deficiency and potentially a material weakness in internal control over financial reporting. Which information should the auditor prioritize in communication with governance?
Answer: The nature of the control deficiency, its potential impact on financial reporting and the auditor's internal control opinion, and the fact that it will be communicated in writing on a timely basis.
This question tests the auditor's responsibility under AS 1305 to communicate material weaknesses and significant deficiencies in internal control over financial reporting for an issuer. The control deficiency allowing users to modify audit trail settings and the observed disabling of audit logs represents at least a significant deficiency affecting the reliability of the control environment and potentially rising to a material weakness. PCAOB standards require timely written communication to the audit committee about the nature of control deficiencies, their potential impact on financial reporting and the internal control opinion, and management's response. Answer A is incorrect because detailed testing results and individual employee names are not required in governance communications; the focus should be on the deficiency's nature and impact. Answer C is incorrect because all material weaknesses and significant deficiencies must be communicated regardless of whether misstatements are found. Answer D is incorrect because significant deficiencies must be communicated on a timely basis, not delayed until after filing. The critical professional judgment is that prompt communication of control deficiencies enables governance oversight and timely remediation to improve internal control effectiveness.
- You are conducting a financial statement audit of a nonissuer construction contractor. You discover that the chief executive officer directed accounting staff to record revenue on an unapproved change order to meet a bonus target; management proposes to reverse it next period. The company has a board of directors that meets quarterly. Based on the auditor's findings, what should be communicated to those charged with governance?
Answer: The fraud involving senior management and its implications for the audit, including the need for governance oversight, communicated timely to those charged with governance.
The professional standard being tested is AU-C Section 260, which requires communication of fraud involving senior management to those charged with governance in nonissuer audits. The key facts are the CEO's directive to record unapproved revenue, indicating fraud, and the proposal to reverse it later. Choice A aligns with AU-C 260 by mandating timely communication of fraud and its audit implications to governance. Choice B is incorrect because AU-C 260 requires both quantitative and qualitative fraud aspects; choice C is wrong as governance communication is required per AU-C 260; choice D is incorrect because AU-C 260 limits communication to governance, not external parties. A judgment framework is to assess fraud indicators like intent and materiality, then escalate to governance for oversight. Emphasizing governance communication deters fraud and strengthens internal accountability.
- You are the auditor of a nonissuer in a financial statement audit. During the audit, you learn that the chief financial officer offered your senior associate tickets to a major sporting event shortly before year-end fieldwork, and the associate initially accepted but later returned them after discussing with the engagement partner. There is no evidence of misstatement, but the situation raises concerns about independence and ethics. What is the appropriate course of action for the auditor in this situation?
Answer: Communicate to those charged with governance the relevant independence considerations and safeguards applied, and document the communication and conclusions.
This question addresses the auditor's responsibility under AU-C 260 to communicate independence matters with those charged with governance in a nonissuer audit. The acceptance and subsequent return of valuable gifts from client management raises independence concerns that, while ultimately resolved through appropriate safeguards, require communication to governance. Professional standards require communication of relevant independence considerations and safeguards applied when circumstances arise that could reasonably be thought to bear on independence. Answer A is incorrect because resolved independence matters still require communication when they could reasonably affect perceptions of auditor objectivity. Answer C is incorrect because the gift was returned and appropriate safeguards were applied; this does not automatically impair independence or require a disclaimer. Answer D is incorrect because independence matters are within the scope of required auditor communications with governance, not limited to legal counsel. The critical professional judgment is that transparent communication about independence considerations, even when resolved, maintains trust and enables governance to fulfill their oversight role regarding auditor independence.
- Which of these deficiencies is the auditor required to communicate in writing to those charged with governance?
Answer: The lack of segregation of duties in accounts payable and the CFO's ability to post journal entries.
The correct answer is B. The auditor must communicate significant deficiencies and material weaknesses. The lack of segregation of duties in accounts payable (item 2) creates an opportunity for fraudulent payments and would likely be considered at least a significant deficiency. The CFO's ability to post journal entries without review (item 3) is a classic example of a risk of management override and would also be considered at least a significant deficiency, if not a material weakness. The minor pricing errors (item 1) would likely be classified as a control deficiency to be discussed with management but not communicated to governance.
A and D are incorrect because both items 2 and 3 represent significant risks that merit the attention of those charged with governance.
C is incorrect because the minor pricing errors are likely not severe enough to be considered a significant deficiency.
- In communicating with those charged with governance, how should the auditor most likely classify this deficiency?
Answer: As a significant deficiency, because the lack of segregation of duties is a key control weakness, despite the presence of a mitigating control.
The correct answer is D. The ability of one person to both record and authorize transactions for fixed assets is a significant gap in segregation of duties. While the CFO's review is a mitigating control, it is a detective control, not a preventative one, and it is performed only quarterly. The underlying weakness is important enough to merit the attention of those charged with governance, making 'significant deficiency' the most appropriate classification.
A may be too severe, as the mitigating control reduces the likelihood of a material misstatement.
B is incorrect because the weakness is too significant to be communicated to management only.
C is incorrect because even fully depreciated assets can be misappropriated, and the control weakness is real.
- You are the auditor of an issuer and are nearing completion of the audit. A key specialist needed to evaluate an environmental remediation liability becomes unavailable, and management will not provide an alternative specialist's report for three weeks, pushing the expected report date past the Form 10-K filing deadline. Which information should the auditor prioritize in communication with governance?
Answer: The expected delay, the reasons for it, and the potential effects on the timing of the auditor's report and the company's filing obligations.
The professional standard being tested is PCAOB AS 1301, which requires communication of significant audit timing issues and their effects to those charged with governance in issuer audits. The key facts are the specialist's unavailability delaying the report past the filing deadline and the need to inform the audit committee. Choice A aligns with AS 1301 by prioritizing discussion of the delay's reasons and implications. Choice B is incorrect because AS 1301 prohibits backdating representations; choice C is wrong as auditors cannot issue reports without sufficient evidence per AS 1301; choice D is incorrect because AS 1301 mandates communication of timing matters. A transferable rule is to identify delays affecting deadlines, then communicate promptly to governance for contingency planning. Effective governance communication ensures compliance with reporting obligations and enhances audit coordination.
- For the audit of a nonissuer, what is the deadline for the required written communication of significant deficiencies and material weaknesses in internal control identified during the audit?
Answer: By the audit report release date.
The correct answer is B. AU-C 265 states that the auditor's written communication of significant deficiencies and material weaknesses should be made by the report release date. While earlier communication is encouraged to allow management to take corrective action, the final deadline is the date the audit report is released to the client.
A, C, and D are all incorrect timings according to auditing standards.
