- A group audit is being performed for an issuer under PCAOB standards. The group auditor plans to use the work of a component auditor for a significant component and to assume the component auditor tested revenue controls. The component auditor's report indicates they performed a substantive-only approach and did not test controls. Based on the auditor's assessment, which factor should influence the reliance on component auditors?
Answer: Align the group audit plan with the component auditor's actual scope; if control reliance is needed, instruct additional control testing or perform group-level procedures to address the gap.
The concept being tested is PCAOB AS 1201, on component auditors in issuer group audits. Key facts include planned reliance on component auditor for controls, but their report shows substantive-only approach without control testing. The correct answer aligns with AS 1201 by requiring alignment of plans, additional instructions or procedures to address gaps. Choice A is incorrect because substantive testing does not test controls; choice C is wrong as opinions do not imply control testing; choice D is erroneous since PCAOB standards govern issuers. For a transferable framework, auditors should reconcile component approaches with group strategy, issue tailored instructions, and evaluate work to ensure consolidated evidence sufficiency.
- An auditor engaged an external specialist to assist in auditing the valuation of level 3 financial instruments. The specialist's findings indicate that the instruments are materially overstated. After performing additional procedures, the auditor concurs with the specialist's findings and the client refuses to adjust the financial statements. The auditor decides to issue a qualified opinion. How should the auditor's report be modified?
Answer: Refer to the specialist in the Basis for Qualified Opinion paragraph to explain the misstatement.
While an auditor generally does not refer to a specialist in an unmodified report, if the auditor's opinion is modified as a result of the specialist's work, the auditor may refer to the specialist in the Basis for Modification paragraph. This reference can help explain the nature of the matter giving rise to the modification. Such a reference does not reduce the auditor's responsibility for the opinion.
- An external auditor is evaluating a client's internal audit function. The auditor discovers that the chief audit executive reports administratively to the chief financial officer but has unrestricted access to and meets regularly with the audit committee. How does this reporting structure affect the auditor's assessment of the internal audit function?
Answer: It may represent a threat to objectivity that the auditor must consider, but it is not an absolute impairment.
While the ideal reporting structure for a chief audit executive (CAE) is directly to the audit committee, a dual-reporting relationship to both management (like the CFO) and the audit committee is common. The CAE's direct access to and communication with the audit committee provides a safeguard that mitigates the threat to objectivity from reporting to the CFO. The external auditor must evaluate the specific facts and circumstances to determine the overall effect on objectivity.
- A nonissuer real estate entity is audited under AICPA standards. Management's external appraiser (MAI designation) valued investment property using an income approach with a capitalization rate selected from a range. The appraiser also performs brokerage services for the entity and earns commissions on property sales. Which action should the auditor take when relying on a specialist's report?
Answer: Assess the appraiser's competence and evaluate potential threats to objectivity from brokerage commissions, and perform procedures to evaluate key assumptions such as the capitalization rate.
The professional standard being tested is AU-C Section 500, on management's specialists in nonissuer audits. Key facts include appraiser's designation, use of income approach with selected rate, and commission-based services. The correct answer aligns with AU-C 500 by requiring competence assessment, objectivity threats evaluation, procedures on assumptions. Choice A is incorrect because designations do not ensure objectivity; choice C is wrong as approaches are not sole rejection basis; choice D is erroneous since PCAOB is for issuers. For transferable professional judgment, auditors should identify compensation-related biases, benchmark assumptions, and consider alternative valuations for corroboration.
- In considering the use of an auditor's specialist to evaluate a client's inventory of rare art, which of the following statements correctly describes the auditor's responsibility?
Answer: The auditor must evaluate the adequacy of the specialist's work for the auditor's purposes.
Even when using the work of a specialist, the external auditor retains sole responsibility for the audit opinion. To fulfill this responsibility, the auditor must evaluate whether the specialist's findings and conclusions are appropriate as audit evidence. This includes understanding and evaluating the specialist's methods, assumptions, and the overall adequacy of their work.
- A nonissuer bank is audited under AICPA standards. The firm's IT auditor evaluated logical access controls over the core banking system and found several exceptions, but management asserts compensating monitoring controls mitigate the risk. The audit team plans to rely on automated controls for interest income calculations. What criteria should the auditor consider when determining the extent of reliance on IT auditors?
Answer: Consider the nature and severity of IT control exceptions, whether compensating controls are designed and operating effectively, and adjust the planned reliance on automated controls and substantive procedures accordingly.
The standard being tested is AU-C Section 620, on using auditor's specialists like IT auditors in nonissuer audits. Key facts include IT auditor findings of access control exceptions, management's compensating controls, and planned reliance on automated controls for interest income. The correct answer complies with AU-C 620 by requiring consideration of exception nature and severity, compensating controls' effectiveness, and adjustments to reliance and substantive procedures. Choice A is incorrect because exceptions require evaluation regardless of testing frequency; choice C is wrong as substantive testing may not detect all misstatements; choice D is erroneous since SOC 1 reports are for service organizations, not internal systems. For transferable judgment, auditors should evaluate specialist findings against risk assessments, test compensating controls for design and operation, and scale substantive procedures inversely with control reliance to maintain audit assurance.
- A group audit is being performed for an issuer under PCAOB standards. A significant foreign component (35% of consolidated revenue) is audited by a component auditor in another network firm. The group engagement partner has limited prior experience with that office, and the component operates in a higher-risk jurisdiction with frequent regulatory changes. Based on the auditor's assessment, which factor should influence the reliance on component auditors?
Answer: Increase group auditor involvement by evaluating the component auditor's competence and independence, reviewing selected workpapers, and communicating required instructions given the component's significance and higher risk.
The concept being tested is PCAOB AS 1201, which addresses supervision of component auditors in group audits for issuers. Key facts include the component's significance (35% of revenue), the component auditor's different network, the group partner's limited experience, and the higher-risk jurisdiction. The correct answer adheres to AS 1201 by increasing group auditor involvement through evaluation of competence and independence, workpaper reviews, and specific instructions due to significance and risk. Choice A is incorrect because network affiliation does not allow reliance without involvement; choice C is wrong as direct communication is required for effective supervision; choice D is erroneous since PCAOB standards mandate greater involvement for issuers compared to AICPA nonissuer guidance. For a transferable framework, auditors should classify components by financial significance and risk, determine involvement levels using factors like materiality and regulatory environment, and document communications and evaluations to support the group opinion.
- A nonissuer financial services company is audited under AICPA standards. The firm's IT auditor plans to test user access reviews performed quarterly by management. However, management's review is evidenced only by an email stating "access review completed," with no listing of users reviewed or changes made. What criteria should the auditor consider when determining the extent of reliance on IT auditors?
Answer: Consider whether the evidence supports precision and performance of the control, and if not, expand procedures (e.g., inspect user listings, reperform the review, or test alternative controls).
The standard being tested is AU-C Section 620, on auditor's specialists in nonissuer audits. Key facts include IT auditor's testing of access reviews with inadequate email-only evidence lacking details. The correct answer complies with AU-C 620 by requiring evidence evaluation for precision, expansions if insufficient. Choice A is incorrect because frequency does not substitute evidence; choice C is wrong as documentation is needed for reviews; choice D is erroneous since PCAOB is for issuers. For transferable judgment, auditors should ensure evidence demonstrates performance, test alternatives if gaps exist, and adjust reliance based on control precision.
- An external auditor is assessing whether to use the work of a client's internal audit function to reduce the extent of substantive testing. The auditor's reliance on the internal audit function's work would be most limited in which of the following areas?
Answer: Assessing the valuation of goodwill for impairment.
The external auditor should limit reliance on the work of the internal audit function in areas that involve significant judgment or have a high risk of material misstatement. Assessing goodwill for impairment involves complex, subjective estimates and assumptions. Therefore, the external auditor would perform more of the work directly and place less reliance on the internal auditors' work in this area.
- An issuer is undergoing an integrated audit. The client implemented a new cloud-based ERP during the year, and management's IT staff performed most configuration changes. The audit team plans to use the work of the auditor's IT specialists to test general IT controls (access provisioning and change management) that support automated controls over inventory valuation. What criteria should the auditor consider when determining the extent of reliance on IT auditors?
Answer: Evaluate the IT specialists' competence and the nature, timing, and extent of their procedures, and assess whether identified IT control deficiencies affect the planned reliance on automated controls and related substantive procedures.
This question addresses using IT specialists in an integrated audit under PCAOB standards, focusing on general IT controls that support automated controls. The critical facts are that this is an issuer engagement, a new cloud-based ERP was implemented with management performing configurations, and IT controls support inventory valuation controls. The correct answer (C) properly requires evaluation of IT specialists' competence, assessment of their procedures' nature, timing, and extent, and consideration of how IT control deficiencies affect reliance on automated controls and substantive procedures. Answer A incorrectly assumes audit firm specialists require no evaluation of their work. Answer B inappropriately relies on management assertions rather than audit evidence. Answer D incorrectly applies review engagement standards to an integrated audit. The professional framework emphasizes that IT controls are foundational to automated controls and system-generated reports, requiring careful evaluation of IT specialists' work scope and findings to determine appropriate reliance on technology-dependent controls and the need for additional substantive procedures.
- An issuer is audited under PCAOB standards. Internal audit performed walkthroughs and limited testing of controls over the financial close process but did not test controls over journal entry approvals for entries posted after normal business hours. The external auditor has assessed a heightened fraud risk related to management override. What is the most appropriate response when evaluating the internal audit function's work?
Answer: Given the fraud risk and scope gap, perform additional auditor procedures focused on journal entries and approvals, and use internal audit work only to the extent it is relevant and sufficiently tested.
The concept being tested is PCAOB AS 1205, for using internal auditors in issuer audits. Key facts include internal audit's walkthroughs and limited testing excluding journal entry approvals, amid heightened fraud risk from override. The correct answer follows AS 1205 by requiring additional procedures for gaps and fraud risks, using internal work only where relevant and tested. Choice A is incorrect because walkthroughs do not reduce substantive testing in fraud-risk areas; choice C is wrong as reporting lines affect objectivity but not solely determine reliance; choice D is erroneous since review procedures are insufficient for audits. For a transferable framework, auditors should identify scope gaps relative to risks, prioritize direct testing in subjective areas, and document how internal work informs but does not replace external evidence.
- A group audit is being performed for a nonissuer under AICPA standards. A component auditor audited a component that is not financially significant individually but contains a high-risk related-party transaction that is material to the group. The group auditor initially planned minimal involvement due to low quantitative significance. Based on the auditor's assessment, which factor should influence the reliance on component auditors?
Answer: Increase involvement due to qualitative risk (material related-party transaction), including specific instructions and evaluation of the component auditor's procedures over that transaction.
The concept being tested is AU-C Section 600, for component auditors in nonissuer group audits. Key facts include component's low quantitative but high qualitative risk from material related-party transaction, initial minimal involvement plan. The correct answer follows AU-C 600 by increasing involvement for qualitative risks, with instructions and evaluations. Choice A is incorrect because qualitative factors matter; choice C is wrong as exclusions are not permitted; choice D is erroneous since AICPA applies to nonissuers. For a transferable framework, auditors should weigh quantitative and qualitative significance, tailor involvement to risks, and document rationale for reliance levels.
- An auditor engaged a specialist to analyze a client's potential liability from complex pending litigation. The specialist's report is unclear and appears to be based on incomplete information. What is the auditor's most appropriate initial course of action?
Answer: Discuss the issues with the specialist to understand the report and request additional information or work.
If the auditor concludes that the specialist's work is not adequate for the auditor's purposes, the auditor's first step should be to attempt to resolve the matter. This would involve discussing the issues with the specialist to see if the report can be clarified or if additional work can be performed to provide sufficient evidence. Modifying the audit opinion is a later step, taken only if sufficient appropriate evidence cannot be obtained through other means.
- A nonissuer energy company is undergoing a financial statement audit. Management engaged a petroleum engineer (licensed professional engineer) to estimate proved oil and gas reserves used in the impairment analysis of long-lived assets; the engineer is also negotiating a success fee with management tied to future drilling approvals. The auditor intends to use the engineer's reserve report as audit evidence supporting impairment conclusions. Which action should the auditor take when relying on a specialist's report?
Answer: Use the reserve report only after evaluating the specialist's competence and objectivity (including the success-fee threat) and performing procedures to evaluate the relevance and reasonableness of key assumptions and data used.
This question addresses using a management's specialist under AU-C 500 when significant objectivity threats exist. The critical facts are that the petroleum engineer has appropriate credentials (licensed PE), the reserve estimates affect impairment analysis of material assets, and the engineer has a success fee arrangement creating an objectivity threat. The correct answer (B) correctly requires evaluation of competence and objectivity including the success-fee threat, plus procedures to evaluate the relevance and reasonableness of assumptions and data, consistent with professional standards for using specialist work. Answer A incorrectly assumes professional licensure overrides objectivity concerns from fee arrangements. Answer C inappropriately suggests reserve estimates cannot be tested by auditors, when standards require evaluation of specialist work. Answer D incorrectly applies group audit requirements to a specialist engagement. The professional framework requires heightened skepticism and additional procedures when specialists have financial interests aligned with management, with the auditor performing sufficient procedures to evaluate the specialist's assumptions, methods, and conclusions rather than accepting them without scrutiny.
- A nonissuer construction company is audited under AICPA standards. Management's specialist (licensed professional engineer) provided an estimate of percentage-of-completion based on a cost-to-cost method for a material contract, including a revised estimate of total costs due to design changes. The specialist works for the company and reports to the project executive whose bonus is tied to gross margin. Which action should the auditor take when relying on a specialist's report?
Answer: Evaluate the specialist's competence and assess threats to objectivity from reporting lines and incentives, and perform audit procedures over underlying data and significant assumptions used in the estimate.
The professional standard being tested is AU-C Section 500, focusing on using management's specialists in nonissuer audits. Key facts include the specialist's licensing, employment by the client, reporting to a bonus-incentivized executive, and the material estimate involving revised costs for percentage-of-completion. The correct answer follows AU-C 500 by requiring evaluation of competence, threats to objectivity from internal ties and incentives, and procedures over data and assumptions. Choice A is incorrect because licensing does not ensure objectivity or eliminate testing; choice C is wrong as employment by the client is permissible if objectivity is assessed; choice D is erroneous since specialist involvement does not inherently lower risk or reduce procedures. For transferable professional judgment, auditors should identify objectivity threats like financial incentives or relationships, test the appropriateness of methods and assumptions, and consider alternative evidence sources when reliance is limited by bias risks.
- A nonissuer manufacturing company is undergoing a financial statement audit. Management engaged an external valuation specialist (ASA credential) to estimate the fair value of a customer-relationship intangible acquired in a business combination; the valuation uses significant unobservable inputs and management provides key assumptions (attrition rate and discount rate). The auditor has not used this specialist before and notes the specialist's fee is contingent on the transaction closing. Which action should the auditor take when relying on a specialist's report?
Answer: Evaluate the specialist's competence, capabilities, and objectivity (including the contingent-fee threat), and perform procedures to assess the methods and significant assumptions before using the report as audit evidence.
This question tests AU-C 620 requirements for using the work of an auditor's specialist in evaluating fair value measurements with significant unobservable inputs. The key facts are that the specialist has appropriate credentials (ASA), the valuation involves Level 3 inputs requiring management assumptions, and the specialist has a contingent fee arrangement that creates an objectivity threat. The correct answer (B) aligns with professional standards requiring the auditor to evaluate the specialist's competence, capabilities, and objectivity, including consideration of threats such as contingent fees, and to perform procedures on the methods and assumptions used. Answer A is incorrect because credentials alone do not provide sufficient evidence without evaluating objectivity and the appropriateness of the specialist's work. Answer C incorrectly applies PCAOB independence rules to a nonissuer engagement where AU-C standards govern. Answer D violates the auditor's responsibility to evaluate management's assumptions, especially for significant estimates. The professional judgment framework requires auditors to assess both the specialist's qualifications and any threats to objectivity, then determine the extent of procedures needed based on the significance and complexity of the matter.
- An external auditor's documentation regarding the use of the work of a client's internal audit function should include:
Answer: The evaluation of the internal audit function's competence and objectivity and the basis for that conclusion.
According to AU-C 610, the external auditor's documentation must include the results of the evaluation of the internal audit function's competence and objectivity, the basis for the conclusions reached, and the nature and extent of the work used. This documentation is crucial to support the auditor's decision to rely on the work of internal audit.
- A nonissuer healthcare entity is undergoing a financial statement audit. The auditor plans to use internal audit's work on controls over patient billing adjustments; internal audit has relevant certifications (CIA) but the internal audit director's annual bonus is tied to operating margin. Internal audit's workpapers show limited evidence of supervision and inconsistent sample selection. What is the most appropriate response when evaluating the internal audit function's work?
Answer: Reduce or avoid reliance on internal audit due to objectivity and quality concerns, and perform additional auditor procedures over billing adjustments.
This question tests AU-C 610 requirements for using internal audit's work when objectivity and quality concerns exist. The key facts include the internal audit director's compensation tied to operating margin (creating an objectivity threat), relevant professional certification (CIA), and documented quality issues including limited supervision and inconsistent sampling. The correct answer (C) appropriately responds to these red flags by reducing or avoiding reliance and performing additional auditor procedures, consistent with professional standards that require modification of reliance when objectivity or quality concerns exist. Answer A incorrectly prioritizes credentials over objectivity concerns and ignores documented quality issues. Answer B incorrectly suggests controls testing has lower documentation requirements than substantive testing. Answer D inappropriately applies PCAOB independence rules to a nonissuer engagement. The professional judgment framework requires auditors to holistically evaluate competence, objectivity, and work quality, with any significant deficiency in these areas warranting reduced reliance and increased auditor-performed procedures, especially for significant accounts like patient billing adjustments.
- An auditor is evaluating the competence of a client's internal audit function. Which of the following procedures would provide the best evidence regarding the competence of the internal audit staff?
Answer: Examining the quality of the internal audit function's documentation, reports, and workpapers.
Competence refers to the attainment and maintenance of knowledge and skills of the internal audit function as a whole. While inquiries and considering qualifications are part of the assessment, examining the actual work product (documentation, reports, workpapers) provides direct evidence of the quality and rigor of their work, which reflects their competence in practice.
- An issuer is undergoing an integrated audit. Management uses an external actuarial specialist to measure the defined benefit pension obligation; the actuary is well-qualified but uses a discount rate derived from a proprietary model, and the obligation is highly material. The auditor plans to use the actuary's report and also notes that internal audit performed limited testing of HR data inputs used by the actuary. Which action should the auditor take when relying on a specialist's report?
Answer: Evaluate the actuary's competence and objectivity and assess the reasonableness of significant assumptions (including the discount rate) and the underlying data, performing additional procedures as needed given the high materiality.
This question tests using a management's specialist for complex pension valuations under PCAOB standards. The key facts include high materiality of the pension obligation, use of a proprietary discount rate model, qualified actuary, and limited internal audit testing of data inputs. The correct answer (B) correctly requires evaluation of competence and objectivity, assessment of significant assumptions including the proprietary discount rate, and data reliability testing with additional procedures as needed for high materiality items, consistent with AS 1210 requirements. Answer A incorrectly accepts specialist work without evaluation despite the complexity and materiality. Answer C inappropriately suggests internal audit's limited testing eliminates data testing requirements. Answer D incorrectly applies review standards to an audit engagement. The professional framework emphasizes that for highly material estimates using proprietary models, auditors must understand and test key assumptions rather than treating them as black boxes, with increased procedures proportional to materiality and estimation uncertainty, including potential use of auditor specialists to evaluate complex actuarial methods.
