Compliance Reporting - CPA Aud

  1. A nonissuer construction contractor is audited under AICPA auditing standards and has significant revenue from contracts subject to prevailing wage requirements under the Davis-Bacon Act. The auditor notes repeated underpayments to employees identified by an internal compliance review, but management has not accrued back wages or disclosed the potential liability, stating it will "resolve it later." The auditor believes the matter is likely and reasonably estimable and could be material. Which compliance reporting action should the auditor take?
    Answer: Request management to record/accrue and disclose as appropriate; if management refuses and the misstatement is material, modify the opinion for a departure from the applicable financial reporting framework This question tests AU-C Section 250 on noncompliance with laws and regulations, specifically wage requirements under the Davis-Bacon Act and their financial statement impact. The key facts are repeated underpayments, likely and estimable material liability, and management's refusal to accrue or disclose. Choice C is correct as AU-C 250 and AU-C 705 require requesting adjustments and modifying the opinion for material departures from the framework if refused. Choice A is incorrect because emphasis-of-matter paragraphs do not substitute for opinion modifications on misstatements per AU-C 706; choice B is wrong as the matter is known before report date and not a subsequent event under AU-C 560; choice D is incorrect because noncompliance does not inherently create a scope limitation under AU-C 705. A professional judgment rule is to assess contingencies for probability and estimability per ASC 450, ensuring accrual or disclosure. Auditors should communicate to governance and modify opinions based on misstatement pervasiveness.
  2. A nonissuer manufacturer is audited under AICPA auditing standards and is subject to Occupational Safety and Health Administration regulations. The auditor becomes aware of a serious workplace incident and an ongoing investigation that could lead to significant fines; management's legal counsel refuses to provide a response letter, and management will not permit alternative procedures. The auditor cannot obtain sufficient appropriate audit evidence about the potential liability and disclosure. Based on the circumstances, which compliance report modification is most appropriate?
    Answer: Issue a qualified opinion or disclaim an opinion due to a scope limitation, depending on the materiality and pervasiveness of the possible effects This question tests AU-C Section 705 on modifications due to scope limitations from inability to obtain evidence on contingencies. The key facts are the ongoing OSHA investigation, potential material fines, refusal of legal response, and no alternative procedures allowed. Choice B is correct as AU-C 705 requires qualified or disclaimer for material scope limitations, based on pervasiveness. Choice A is incorrect because investigations do not necessarily misstate statements, per AU-C 705; choice C is wrong as unmodified with other-matter is not for scope issues; choice D is incorrect because standards allow reporting with modifications rather than indefinite delay. A decision rule is to evaluate evidence gaps for potential effects and modify accordingly. Auditors should attempt alternatives and document limitations thoroughly.
  3. An issuer company is audited under PCAOB standards. Management includes in Management's Discussion and Analysis a statement that the company "is fully compliant with all material laws and regulations," but the auditor has evidence of a material regulatory settlement reached after year-end relating to violations occurring during the year, and the settlement is disclosed in the financial statement notes. The auditor is considering responsibilities related to the other information in the annual report. Which compliance reporting action should the auditor take?
    Answer: Evaluate whether the statement in the other information is materially inconsistent with the audited financial statements or the auditor's knowledge obtained in the audit and respond in accordance with PCAOB other information requirements This question tests PCAOB AS 2710 on other information in documents containing audited financial statements, like MD&A. The key facts are the inaccurate compliance statement in MD&A, contrasting with note disclosures and auditor's knowledge of the settlement. Choice A is correct as AS 2710 requires evaluating inconsistencies with statements or audit knowledge and responding accordingly. Choice B is incorrect because AS 2710 does address other information; choice C is wrong as inaccuracies do not require reissuing with adverse; choice D is incorrect because governance communication may be needed per AS 1301. A framework is to read other information for material inconsistencies and request revisions if found. Auditors should document evaluations and consider report additions if unresolved.
  4. A nonissuer private equity fund is audited under AICPA auditing standards. The auditor identifies that the fund failed to comply with certain limitations in its partnership agreement regarding concentration in a single investment, and the financial statements include a note stating the fund complied with all partnership agreement provisions. Management asserts the agreement is "not a regulation," so no change is needed. Which factor would most likely affect the auditor's compliance assessment?
    Answer: Whether the partnership agreement provisions are relevant to financial statement disclosures and whether the asserted compliance claim is materially misstated This question tests AU-C Section 250 on laws and regulations, extended to contractual agreements and their financial statement implications. The key fact is the violation of partnership agreement limits, with a false compliance note, and management's claim it's not regulatory. Choice A is correct as AU-C 250 requires evaluating if violations affect disclosures and if assertions are misstated, considering materiality. Choice B is incorrect because nonissuers are not required to report to SEC unless specified; choice C is wrong as contractual compliance can be relevant if it impacts statements per AU-C 250; choice D is incorrect because violations do not automatically maximize control risk or require disclaimers. A framework is to treat significant contracts like regulations if they affect assertions. Auditors should verify notes against evidence and assess misstatement impacts.
  5. An issuer manufacturing company is audited under PCAOB standards, including an audit of internal control over financial reporting. The auditor identifies a control deficiency where management's compliance monitoring over environmental regulations is not designed to identify violations that could lead to material remediation liabilities, and a recent violation has occurred. Management argues the control is "operational" and not relevant to internal control over financial reporting. Which compliance reporting action should the auditor take?
    Answer: Evaluate whether the deficiency represents a material weakness in internal control over financial reporting and report accordingly if it could result in a material misstatement This question tests PCAOB AS 2201 on internal control over financial reporting (ICFR), including controls over compliance that affect financial reporting. The key facts are the deficient monitoring of environmental regulations, potential material liabilities, and a recent violation, despite management's claim it's operational. Choice A is correct as AS 2201 requires evaluating deficiencies for material weakness if they could lead to material misstatements, including compliance-related controls. Choice B is incorrect because compliance controls can be relevant to ICFR if they impact liabilities per AS 2201; choice C is wrong as control findings are included in ICFR reporting under AS 2201; choice D is incorrect because substantive testing does not substitute for control evaluations per AS 2201. A judgment framework is to assess if deficiencies prevent detection of material misstatements, classifying severity accordingly. Auditors should integrate compliance risks into ICFR assessments for comprehensive reporting.
  6. An issuer pharmaceutical company is audited under PCAOB standards. The auditor identifies that management recorded revenue from sales in a foreign jurisdiction without required regulatory approval to market the product, and the company may be required to refund customers. Management argues the issue is "regulatory" and therefore not relevant to revenue recognition. Which compliance reporting action should the auditor take?
    Answer: Evaluate whether the lack of approval affects the existence of an enforceable contract and collectability, and require adjustment/disclosure if the financial statements are materially misstated This question tests PCAOB AS 2405 on illegal acts and AS 2301 on revenue recognition, considering regulatory approvals. The key facts are revenue recorded without required approval, potential refunds, and management's claim it's not relevant. Choice A is correct as AS 2405 requires evaluating if noncompliance affects enforceability and collectability, requiring adjustments if misstated. Choice B is incorrect because effects extend beyond controls to statements per AS 2810; choice C is wrong as PCAOB audits do not include separate compliance opinions; choice D is incorrect because approvals are within scope if impacting revenue per AS 2301. A framework is to link compliance to assertion validity, like existence and collectability. Auditors should propose adjustments and assess materiality for opinion impacts.
  7. A bank requires a borrower to provide a report from its independent auditor on compliance with certain restrictive debt covenants. This report is to be issued in conjunction with the annual financial statement audit. The auditor's report on compliance should most appropriately be structured to do which of the following?
    Answer: Be a separate report that provides negative assurance on compliance. When reporting on compliance with contractual agreements in connection with a financial statement audit, the auditor typically issues a separate report. This report provides negative assurance, stating that nothing came to the auditor's attention that caused them to believe the entity failed to comply with the specified provisions. Positive assurance would require an examination-level engagement.
  8. A nonissuer community bank engages an accountant to perform a review of interim financial statements under Statements on Standards for Accounting and Review Services. During inquiry, the accountant learns of a cease-and-desist order from a banking regulator requiring increased loan loss reserves, but management has not adjusted the allowance and has not disclosed the order. The accountant believes the omission may result in a material misstatement. Which compliance reporting action should the accountant take?
    Answer: Request management to provide additional information and revise the financial statements; if management refuses, modify the review report to disclose the departure from the applicable financial reporting framework This question tests AR-C Section 90 on review engagements, specifically known departures from the financial reporting framework due to regulatory noncompliance. The key facts are the cease-and-desist order requiring increased reserves, unadjusted allowance, omitted disclosure, and potential material misstatement. Choice B is correct as AR-C 90 requires requesting revisions and modifying the report to disclose departures if refused. Choice A is incorrect because reviews cannot be expanded to audits without a new engagement per AR-C 90; choice C is wrong as reviews consider known matters, including regulations, per AR-C 90; choice D is incorrect because review standards do not require direct reporting to regulators. A transferable framework is to inquire about known issues and evaluate their impact on the statements. Accountants should document refusals and highlight departures in the report to inform users.
  9. During a single audit, an auditor identifies a material weakness in internal control over compliance for a major program. How should this finding affect the auditor's reports?
    Answer: It must be described in the auditor's report on internal control over compliance. A material weakness in internal control over compliance must be reported in writing in the auditor's report on internal control over compliance. It does not automatically lead to an adverse opinion on compliance itself (as compliance could still be achieved), but it is a required reporting element for the internal control portion of the audit.
  10. An issuer company is audited under PCAOB standards. The auditor identifies that management has not disclosed a material uncertainty related to ongoing regulatory investigations that could result in significant penalties, and management argues that disclosure would prejudice the company's defense. The auditor has obtained sufficient evidence that the investigation is probable to result in a loss that is at least reasonably possible and potentially material. Based on the circumstances, which compliance report modification is most appropriate?
    Answer: Modify the opinion for a departure from the applicable financial reporting framework if the required disclosure is omitted and the effect is material, with qualification or adverse depending on pervasiveness This question tests PCAOB AS 2810 on contingencies and AS 3105 on modifications for omitted disclosures. The key facts are the omitted material uncertainty from investigations, probable loss, and management's prejudice claim. Choice B is correct as AS 3105 requires modification for material departures if disclosures are required under ASC 450. Choice A is incorrect because strategy does not override requirements; choice C is wrong as investigations do not inherently limit scope; choice D is incorrect because emphasis does not substitute for modifications on omissions. A rule is to assess contingencies for probability and disclose if reasonably possible. Auditors should modify if management refuses required disclosures.
  11. During a financial statement audit conducted under Government Auditing Standards, an auditor identifies a significant deficiency in internal control over compliance with provisions of a grant agreement. The auditor is required to communicate this finding in which of the following reports?
    Answer: The written report on internal control over financial reporting and on compliance. GAGAS requires the auditor to issue a written report on internal control over financial reporting and on compliance. This report must describe the scope of testing and include any identified significant deficiencies and material weaknesses in internal control, as well as instances of fraud, noncompliance, waste, or abuse.
  12. A nonissuer city government undergoes an audit under Government Auditing Standards (Yellow Book) and is also subject to state procurement regulations. The auditor identifies that management awarded several contracts without required competitive bidding, and the noncompliance is material to the procurement program but not material to the financial statements. Those charged with governance request that the auditor "keep it out of the report" and handle it informally. What disclosure is required for this compliance issue?
    Answer: Report the noncompliance in the Yellow Book report on internal control and compliance, describing the nature of the finding and its effect This question tests Government Auditing Standards (Yellow Book) Chapter 6 on reporting findings from audits of governmental entities. The key facts are material noncompliance with procurement regulations, not material to financial statements, and governance's request for confidentiality. Choice A is correct as Yellow Book requires reporting material noncompliance in the report on internal control and compliance, describing nature and effects. Choice B is incorrect because Yellow Book mandates reporting based on program materiality, not just financial statements; choice C is wrong as confidentiality requests do not override reporting requirements per Yellow Book; choice D is incorrect because Yellow Book does not require adverse opinions for noncompliance unless pervasive misstatements exist. A decision rule is to evaluate findings for significance to objectives and report transparently. Auditors should resist pressures to omit findings and ensure reports meet standards for public accountability.
  13. An auditor is reporting on financial statements prepared on a regulatory basis of accounting to meet the requirements of a government agency. The auditor concludes that the financial statements are fairly presented in accordance with that basis. The auditor's report should include an other-matter paragraph that does which of the following?
    Answer: Restricts the use of the report to the entity and the specified regulatory agency. When an auditor reports on financial statements prepared using a special purpose framework (such as a regulatory or contractual basis), and the framework is not suitable for general use, the auditor's report should include an other-matter paragraph restricting the use of the report to specified parties (in this case, the entity and the regulator). The description of the framework itself is in the Basis for Opinion section and an emphasis-of-matter paragraph.
  14. An issuer energy company is audited under PCAOB standards. The auditor identifies a likely material asset retirement obligation arising from environmental regulations, but management has neither recorded the liability nor disclosed it, asserting the regulation is "uncertain" and enforcement is unlikely. The auditor has obtained regulatory correspondence indicating enforcement actions are active in the region. Which compliance reporting action should the auditor take?
    Answer: Propose an adjustment and required disclosures; if management refuses and the misstatement is material, modify the opinion for a departure from the applicable reporting framework This question tests PCAOB AS 2810 on contingencies, including asset retirement obligations from regulations. The key facts are the likely material obligation, no recording or disclosure, despite enforcement evidence, and management's uncertainty claim. Choice B is correct as AS 3105 requires proposing adjustments and modifying for material departures if refused. Choice A is incorrect because environmental matters affect the framework and may require emphasis only if unmodified; choice C is wrong as it's not a subsequent event; choice D is incorrect because PCAOB does not require direct reporting to regulators. A decision rule is to assess obligations per ASC 410 using available evidence. Auditors should ensure statements reflect probable liabilities or modify opinions accordingly.
  15. A nonissuer broker-dealer engages an auditor to perform an audit under PCAOB standards because it files reports with the Securities and Exchange Commission. During the audit, the auditor identifies that the broker-dealer did not maintain required net capital under Securities and Exchange Commission Rule 15c3-1 for several days near year-end, and management has not disclosed the deficiency. The auditor concludes the deficiency is material to regulatory reporting and may indicate a material weakness in controls. Which compliance reporting action should the auditor take?
    Answer: Communicate the noncompliance to those charged with governance and consider implications for the auditor's report(s), including required reporting in the broker-dealer compliance report context This question tests PCAOB Auditing Standard (AS) 6115 on reporting for broker-dealers, including compliance with net capital requirements under SEC Rule 15c3-1. The key facts are the temporary net capital deficiency, material to regulatory reporting, potential material weakness, and lack of disclosure. Choice B is correct as AS 6115 requires communicating noncompliance to governance and considering implications for the compliance report, including material weaknesses. Choice A is incorrect because PCAOB standards apply as the entity files with SEC, not AICPA for nonissuers per AS 1001; choice C is wrong as net capital is relevant and requires testing beyond substantives under AS 6115; choice D is incorrect because AS 2401 mandates governance communication for significant deficiencies. A transferable framework is to evaluate regulatory noncompliance for financial and control impacts, ensuring disclosure in relevant reports. Auditors should integrate findings into both financial and compliance opinions based on materiality.
  16. In an audit conducted in accordance with the Uniform Guidance for a nonfederal entity that expends federal awards, the auditor is required to express an opinion on which of the following?
    Answer: The entity's compliance with the types of compliance requirements applicable to each of its major federal programs. A single audit under the Uniform Guidance requires the auditor to plan and perform the audit to obtain sufficient appropriate audit evidence to form an opinion on the auditee's compliance with the direct and material compliance requirements for each major program.
  17. An issuer financial services company is audited under PCAOB standards. The auditor learns that the company violated a debt covenant that triggers an acceleration clause, but management has obtained a waiver after year-end and classified the debt as long-term without adequate disclosure of the violation and waiver terms. The auditor concludes the disclosure is required under the applicable financial reporting framework. Which compliance reporting action should the auditor take?
    Answer: Require management to correct the classification/disclosure; if management refuses and the misstatement is material, modify the opinion for a departure from the applicable reporting framework This question tests PCAOB AS 2810 on evaluating contingencies and debt classifications, including covenant violations and waivers. The key facts are the violated covenant triggering acceleration, post-year waiver, incorrect long-term classification, and inadequate disclosure. Choice B is correct as AS 3105 requires modifications for material departures from the framework if management refuses corrections. Choice A is incorrect because waivers do not eliminate disclosure requirements under ASC 470 if violations occurred; choice C is wrong as PCAOB does not require notifying creditors; choice D is incorrect because disclosure evaluation is necessary beyond substantive testing per AS 2810. A professional rule is to assess classifications and disclosures for compliance with ASC 470, proposing adjustments as needed. Auditors should modify opinions based on the materiality of omitted disclosures.
  18. The auditor's report on internal control over compliance, required by the Uniform Guidance for a single audit, should include a statement that describes which of the following?
    Answer: The inherent limitations of internal control. The report on internal control over compliance under the Uniform Guidance must include a paragraph describing the inherent limitations of internal control. The purpose of the audit is to opine on compliance, not on the effectiveness of internal control over compliance.
  19. An issuer retail company is audited under PCAOB standards. A new state privacy law becomes effective during the year and requires disclosure of certain data breaches to customers and regulators within a specified timeframe; the company experienced a breach but delayed notification beyond the legal deadline. Management has accrued estimated costs but has not disclosed the noncompliance, asserting disclosure could harm the company's reputation. Which factor would most likely affect the auditor's compliance assessment?
    Answer: Whether the noncompliance is clearly inconsequential to the financial statements, including whether it could result in material penalties or litigation exposure This question tests PCAOB AS 2405 on illegal acts and AS 2810 on evaluating contingencies, focusing on noncompliance with privacy laws and disclosure requirements. The key fact is the delayed breach notification under state law, with accrual but no disclosure, despite potential material penalties or litigation. Choice A is correct as AS 2405 requires assessing if noncompliance is inconsequential, considering penalties and exposure, which affects disclosure under ASC 450. Choice B is incorrect because reputational harm does not override disclosure per ASC 450 and AS 2810; choice C is wrong as auditors cannot rely solely on internal audit without procedures per AS 2605; choice D is incorrect because PCAOB does not require direct reporting to regulators in audit reports. A framework is to evaluate noncompliance for financial impact, including contingent liabilities, regardless of management's assertions. Auditors should consider all evidence to determine if disclosures are necessary to avoid material misstatements.
  20. A nonissuer entity engages a practitioner for an examination under Statements on Standards for Attestation Engagements over management's assertion of compliance with a loan covenant (debt service coverage ratio) for the year. The practitioner's recalculation indicates the covenant was not met, but management insists the calculation method used in the assertion is "industry standard" and refuses to revise the assertion or criteria. Which compliance reporting action should the practitioner take?
    Answer: Evaluate whether the criteria are suitable and applied consistently; if the assertion is materially misstated, issue a qualified or adverse opinion on the subject matter, depending on pervasiveness This question tests the practitioner's responsibilities in an examination engagement under Statements on Standards for Attestation Engagements (SSAE), specifically AT-C Section 205, regarding the evaluation of criteria suitability and handling misstatements in management's assertion. The key facts are the practitioner's recalculation showing noncompliance with the loan covenant, management's refusal to revise the assertion or criteria despite the discrepancy, and the claim of an 'industry standard' method. Choice B aligns with SSAE guidance, as the practitioner must assess if the criteria are suitable and consistently applied, and if the assertion is materially misstated, issue a qualified or adverse opinion based on the pervasiveness of the issue to ensure the report reflects the true compliance status. Choice A is incorrect because under AT-C 205, the practitioner cannot issue an unmodified opinion if the assertion is misstated, regardless of management's chosen method, as suitability of criteria is the practitioner's responsibility. Choice C is wrong as AT-C standards do not permit converting an examination to a review without client agreement and proper planning, and it would change the assurance level; Choice D is incorrect because PCAOB standards apply to issuers, not nonissuers under AICPA SSAE. A transferable framework for attestation engagements involves first evaluating the suitability, objectivity, and consistency of criteria before opining on the assertion. Professional judgment requires documenting evidence of misstatements and modifying the opinion accordingly to maintain report reliability.

Start this quiz