- A CPA is considering accepting a nonissuer financial statement audit engagement. The client had a predecessor auditor who resigned after disputes over proposed adjustments. The prospective auditor has obtained permission from management to contact the predecessor auditor. Under AICPA standards, under what circumstances should the auditor communicate with the predecessor auditor before acceptance?
Answer: Before acceptance, to inquire about management integrity, disagreements, and reasons for the change in auditors.
AICPA AU-C Section 210 requires the prospective auditor to communicate with the predecessor auditor before accepting the engagement to obtain information on management integrity, disagreements, and reasons for the change. The predecessor resigned due to disputes over adjustments, which raises potential integrity or scope issues that must be inquired about prior to acceptance. Choice B aligns with AU-C 210 by specifying communication before acceptance to gather this critical information. Choice A is incorrect as communications must occur before acceptance, not after the first report, per AU-C 210; choice C is incorrect because predecessor communications are required for nonissuers under AICPA standards, not just PCAOB. Choice D is incorrect as the predecessor is not required to reperform procedures under AU-C 210. Auditors should assess predecessor information to inform acceptance decisions and plan accordingly. This judgment framework helps identify risks early and ensures ethical engagement acceptance.
- An auditor used nonstatistical sampling to test the existence of accounts receivable. To ensure the audit documentation is sufficient, the workpapers should include a description of:
Answer: the specific customer accounts that were selected for confirmation.
Audit documentation must record the identifying characteristics of the specific items or matters tested. For a test of accounts receivable, this would include the specific customer accounts and invoice numbers selected, allowing another auditor to understand what was tested and to potentially reperform the test.
- An auditor held a significant discussion with the client's Chief Financial Officer regarding the potential impairment of a major asset group. What is the auditor's primary responsibility for documenting this conversation?
Answer: The auditor must prepare a memorandum summarizing the key points of the discussion and include it in the audit file.
Auditing standards require the documentation of significant findings or issues, and discussions with management regarding these issues are a key part of that. The auditor is responsible for documenting these discussions, typically through a memo to the file, to record the nature of the matter discussed and the conclusions reached.
- Regarding the situation described, which of the following is the most appropriate way to document this matter?
Answer: The documentation should include both the contradictory evidence and the final resolution of the matter.
Auditing standards require the auditor to document significant findings or issues, actions taken to address them, and the basis for the conclusions reached. This includes documenting information the auditor has identified that is inconsistent with or contradicts the auditor's final conclusion. Discarding or ignoring such evidence is improper.
- Audit documentation generally should include all of the following except:
Answer: all preliminary thoughts and calculations that were later superseded.
Audit documentation should include records of the work performed and conclusions reached. It is not required to include documentation that is incorrect or has been superseded, such as preliminary thoughts or drafts of workpapers that have been replaced by final versions. The final file should reflect the completed audit.
- An auditor is drafting an engagement letter for a nonissuer financial statement audit of a manufacturing company. Management requests that the letter state the auditor will "detect all fraud" and "certify the accuracy" of the financial statements. Which engagement letter term is most appropriate under AICPA standards?
Answer: State that the auditor's responsibility is to express an opinion and that the audit provides reasonable assurance, not a guarantee, regarding material misstatement due to fraud or error.
AICPA AU-C Section 210 requires engagement letters to clearly state the auditor's responsibility to express an opinion based on reasonable assurance, not absolute assurance or a guarantee against misstatements. Management's request for statements on detecting all fraud and certifying accuracy misaligns with standards, as audits provide reasonable but not absolute assurance. Choice B correctly reflects AU-C 210 and AU-C 240 by stating the auditor's responsibility for an opinion with reasonable assurance regarding material misstatements due to fraud or error. Choice A is incorrect as auditors do not provide absolute assurance or certification under AU-C 200; choice C is incorrect because management retains responsibility for internal control per AU-C 210. Choice D is incorrect as fraud responsibilities must be explicitly addressed in the engagement letter per AU-C 210, not omitted. Auditors should use professional judgment to draft letters that accurately reflect responsibilities and manage client expectations. This framework ensures mutual understanding and reduces engagement risks.
- Which of the following statements best describes the overall objective that governs the form, content, and extent of audit documentation?
Answer: The documentation must provide a sufficient and appropriate record of the basis for the auditor's report.
The fundamental objective of audit documentation is to provide a sufficient and appropriate record of the basis for the auditor's report and to provide evidence that the audit was planned and performed in accordance with auditing standards. This documentation supports the auditor's opinion and demonstrates compliance with professional standards.
- In a nonissuer financial statement audit, the auditor performed sampling for accounts payable and concluded completeness was fairly stated. The documentation lists the sample size but does not identify the specific items selected or how they were selected. The partner is deciding whether documentation is sufficient. Which documentation is necessary to support this audit conclusion under AICPA standards?
Answer: Identification of the population, sampling method, and the specific items selected (or other means to identify the items tested), along with results.
AICPA AU-C Section 230 requires documentation for sampling to identify the population, method, specific items selected, and results to support conclusions. The lack of item identification and selection details undermines sufficiency for the completeness conclusion. Choice A aligns with AU-C 230 and AU-C 530 by specifying required sampling documentation. Choice B is incorrect as item identification is required per AU-C 530; choice C is incorrect because full populations do not replace sample documentation. Choice D is incorrect as judgment alone without details is insufficient. Auditors should ensure sampling documentation allows procedure replication. This rule supports reliable testing conclusions.
- A CPA is asked to perform an issuer integrated audit (financial statements and internal control over financial reporting) under PCAOB standards. Management wants the engagement letter to state that management is responsible only for providing access to records, while the auditor will be responsible for internal control. What is required to be included in the engagement letter for an issuer audit under PCAOB standards?
Answer: A statement that management is responsible for the financial statements and for establishing and maintaining effective internal control over financial reporting.
PCAOB AS 2101 requires the engagement letter for an issuer integrated audit to state management's responsibilities for the financial statements and for establishing and maintaining effective internal control over financial reporting. Management's desire to shift internal control responsibility to the auditor contradicts standards, as the auditor does not assume this role. Choice A aligns with AS 2101 by correctly stating management's responsibilities. Choice B is incorrect as the auditor does not design or operate controls per AS 2101; choice C is incorrect because auditors do not provide going concern assurance in the engagement letter under AS 2415. Choice D is incorrect as PCAOB audits must reference PCAOB standards, not solely ISA, per AS 2101. Auditors should confirm responsibilities in writing to establish clear terms. This framework prevents misunderstandings and ensures compliance with regulatory requirements.
- A CPA is preparing an engagement letter for a nonissuer financial statement review under AICPA SSARS. Management asks the accountant to describe the engagement as providing "audit-level assurance." Which engagement letter language is most appropriate?
Answer: State that a review provides limited assurance primarily through inquiry and analytical procedures and does not express an audit opinion.
AICPA AR-C Section 90 requires review engagement letters to describe the limited assurance provided through inquiry and analytical procedures, without expressing an audit opinion. Management's request for 'audit-level assurance' misrepresents the review's scope, which is less than an audit. Choice B aligns with AR-C 90 by correctly stating the limited assurance and procedures. Choice A is incorrect as reviews do not provide reasonable assurance or include internal control understanding per AR-C 90; choice C is incorrect because reviews do not express opinions or require confirmations. Choice D is incorrect as the level of assurance must be described per AR-C 90. Accountants should clarify service scope in letters to manage expectations. This framework aids in distinguishing assurance levels and avoiding liability.
- A senior auditor is reviewing a junior auditor's documentation of a test of a control that requires a manager's signature for approval on all purchase orders over $10,000. The workpaper states, 'Selected 30 POs over $10,000 and verified manager approval.' The senior auditor determines this documentation is insufficient primarily because it:
Answer: fails to identify the specific 30 purchase orders that were selected for the test.
A fundamental requirement of audit documentation is to record the identifying characteristics of the specific items tested. Simply stating '30 POs' is insufficient because it does not allow a reviewer or successor auditor to understand exactly which items were tested. The documentation must list the specific purchase order numbers or other identifiers.
- In a nonissuer financial statement audit, the audit documentation includes extensive copies of client invoices and contracts, but it does not clearly document the auditor's conclusions on key assertions for revenue and the linkage to the procedures performed. The engagement partner is evaluating documentation sufficiency. Which documentation is necessary to support audit conclusions under AICPA standards?
Answer: Documentation that clearly shows the objectives of the procedures, the work performed, the results, and the auditor's conclusions, including significant judgments.
AICPA AU-C Section 230 requires documentation that shows procedure objectives, work performed, results, and conclusions, including significant judgments, to support audit opinions. The extensive copies without conclusion linkages fail to meet sufficiency for revenue assertions. Choice A aligns with AU-C 230 by requiring clear documentation of objectives, work, results, and judgments. Choice B is incorrect as quantity does not ensure sufficiency; choice C is incorrect because checklists do not replace conclusions. Choice D is incorrect as standards do not mandate per-transaction memos. Auditors should link documentation to assertions and judgments. This rule ensures comprehensive and defensible audit files.
- A PCAOB-registered firm is performing an issuer financial statement audit. The engagement team performed walkthroughs and identified a control deficiency but did not document the basis for concluding it was not a material weakness. The engagement partner is evaluating documentation sufficiency under PCAOB standards. Which documentation is necessary to support the conclusion?
Answer: Documentation of the severity evaluation, including likelihood and magnitude considerations, and the evidence supporting the conclusion.
PCAOB AS 2201 requires documentation of the evaluation of control deficiency severity, including likelihood and magnitude, to support conclusions on material weaknesses in issuer audits. The lack of basis for the non-material conclusion necessitates documented evidence and rationale. Choice A aligns with AS 2201 and AS 1215 by requiring severity evaluation documentation. Choice B is incorrect as the audit report does not substitute for internal documentation per AS 1215; choice C is incorrect because severity is auditor-determined, not solely by remediation. Choice D is incorrect as legal opinions are not required for severity per AS 2201. Auditors should document evidence-based conclusions on deficiencies. This framework ensures defensible ICFR opinions.
- The primary purpose of audit documentation is to provide:
Answer: the principal support for the auditor's report and the representation that the audit was conducted in accordance with GAAS.
According to auditing standards (AU-C 230 and AS 1215), the primary purpose of audit documentation is to provide the principal support for the auditor's opinion expressed in the report and to provide evidence that the audit was planned and performed in accordance with generally accepted auditing standards (GAAS) and applicable legal and regulatory requirements.
- In an issuer financial statement audit under PCAOB standards, the engagement team documents significant findings in separate memos but does not include cross-references to the underlying evidence in the workpapers. The engagement partner is evaluating whether documentation is sufficient to enable an experienced auditor to understand the work performed. Which documentation approach best meets PCAOB documentation sufficiency expectations?
Answer: Include cross-references or other clear links from significant findings and conclusions to the supporting evidence and procedures in the workpapers.
PCAOB AS 1215 requires audit documentation to include clear links from findings and conclusions to supporting evidence via cross-references, enabling an experienced auditor to understand the work. The separate memos without references fail to meet this linkage requirement. Choice B is correct as it emphasizes cross-references to evidence, aligning with AS 1215. Choice A is incorrect because lack of references hinders understanding; choice C is incorrect as written links are required over oral. Choice D is incorrect as review notes alone do not suffice. Auditors should use cross-references for traceability. This framework facilitates inspections and quality control.
- To be considered sufficient documentation under professional standards, what additional information is most critical?
Answer: The unique serial number or other specific identification of each physical asset that was inspected.
Sufficient documentation requires recording the identifying characteristics of the items tested. For the physical inspection of assets, this means documenting the unique serial number, asset tag number, or other specific description that ties the physical asset inspected back to the client's accounting records. This allows for reperformance and review of the work.
- An audit manager reviews a staff accountant's workpaper and leaves a review note identifying a procedural error. Which of the following best demonstrates sufficient documentation related to the clearance of this review note?
Answer: The staff accountant documents the corrective action taken, and the manager documents that the review note has been satisfactorily resolved.
Sufficient documentation requires evidence of supervision and review. This includes documenting the review process itself. The review note, the action taken to resolve it, and the reviewer's sign-off on the resolution should all be part of the final audit documentation to demonstrate proper supervision and quality control.
- An audit firm has completed the audit of a nonissuer entity. According to AICPA professional standards, for how long must the firm retain the audit engagement documentation from the report release date?
Answer: Five years.
For audits of nonissuers, AICPA Statement on Auditing Standards (AU-C 230) requires audit documentation to be retained for a period of not less than five years from the report release date.
- For an audit of an issuer, PCAOB Auditing Standards require that the final audit file be fully assembled within what timeframe following the report release date?
Answer: 45 days.
PCAOB Auditing Standard (AS) 1215 requires the auditor to assemble a complete and final set of audit documentation for retention in an audit file no more than 45 days after the report release date. This is often referred to as the documentation completion date.
- In an audit area with a high assessed risk of material misstatement, how does this assessment generally affect the sufficiency of the auditor's documentation?
Answer: The extent of documentation is expected to be more comprehensive and detailed.
The form, content, and extent of audit documentation are influenced by factors such as the risk of material misstatement associated with an assertion or account balance. In areas of higher risk, more extensive documentation is generally required to demonstrate the nature, timing, and extent of the audit procedures performed to address that risk.
