AICPA Code Of Professional Conduct
Help Questions
CPA Auditing and Attestation (AUD) › AICPA Code Of Professional Conduct
Your firm performs a review engagement for a nonissuer technology startup. The client’s chief financial officer asks you to design and implement the company’s revenue recognition controls because “you know what auditors look for,” and offers an increased fee if you can complete it before year-end. You are concerned this would involve assuming management responsibilities. How should the auditor ensure compliance with the AICPA Code?
Accept the request but obtain preapproval from the client’s audit committee to satisfy independence requirements.
Decline to design and implement the controls; if any consulting assistance is provided, ensure management retains responsibility and the service does not impair independence.
Accept the request if the firm documents the increased fee and assigns a separate engagement team to the review.
Accept the request because management is requesting the service and will be responsible for operating the controls after implementation.
Explanation
The AICPA Code prohibits members from performing management responsibilities for attest clients, as this creates a management participation threat that cannot be reduced to an acceptable level through safeguards. Designing and implementing internal controls is specifically identified as a management responsibility because it involves making decisions on behalf of management and creating the subject matter of the attest engagement. The member must decline to design and implement the controls, though limited consulting assistance may be acceptable if management retains all responsibilities, makes all decisions, and evaluates the adequacy of the services performed. Option A incorrectly suggests documentation and separate teams could mitigate the threat, Option C incorrectly assumes management's request eliminates the independence concern, and Option D incorrectly implies audit committee approval could permit management responsibilities for a nonissuer. The key principle is that members cannot create or implement the very controls they will later evaluate in an attest engagement, as this impairs the appearance of independence and violates the prohibition on management responsibilities.
Your firm is engaged to audit a nonissuer entity that has adopted new accounting guidance requiring specialized valuation skills. The engagement partner plans to rely on prior-year workpapers and assign the valuation testing to a first-year staff member without involving a specialist to control costs. No one on the team has recent training in valuation techniques. How should the auditor ensure compliance with the AICPA Code?
Proceed as planned because due care is satisfied if the audit is completed within the budgeted hours.
Obtain appropriate competence through training and supervision and/or use a qualified specialist, and adjust the audit plan to perform the work with due professional care.
Rely on management’s valuation because management is responsible for the financial statements and the auditor is not required to be competent in valuation.
Proceed but add a disclaimer paragraph noting that valuation procedures were limited by staffing constraints.
Explanation
The AICPA Code requires members to undertake only those professional services that can be completed with professional competence and to exercise due professional care in the performance of all services. When an engagement requires specialized skills that the engagement team lacks, such as complex valuation expertise, the firm must either obtain the necessary competence through training and supervision or engage a qualified specialist. Assigning complex valuation work to an inexperienced staff member without proper supervision or specialist involvement violates both the competence and due care principles. Option A incorrectly equates due care with meeting time budgets, Option B inappropriately suggests disclaiming responsibility for required audit procedures, and Option D misunderstands that auditor competence is required even though management prepares the financial statements. The key principle is that accepting an engagement creates an obligation to perform it competently, which may require obtaining specialized skills or engaging experts when the subject matter exceeds the engagement team's current capabilities.
You are the engagement partner for the audit of a nonissuer manufacturer. During client acceptance, you learn your spouse owns 2% of the client’s outstanding common stock and the audit is scheduled to begin next week. Management states the investment is “immaterial to the firm” and asks you to proceed without changes. Which action should the auditor take to maintain independence?
Proceed with the audit because the investment is not material to the accounting firm as a whole.
Continue the engagement but add an emphasis-of-matter paragraph disclosing the spouse’s ownership to users of the financial statements.
Resign from the engagement only if those charged with governance refuse to sign an independence representation.
Remove yourself from the engagement and ensure the spouse disposes of the direct financial interest (or the firm declines/withdraws if not resolved) before performing professional services.
Explanation
The AICPA Code requires members to be independent when performing attest services, and independence is impaired when a covered member or their immediate family has a direct financial interest in an attest client. The spouse's 2% ownership of common stock constitutes a direct financial interest that impairs independence regardless of materiality to the firm. The correct response requires the covered member to either remove themselves from the engagement team and ensure the spouse disposes of the interest, or the firm must decline or withdraw from the engagement if the threat cannot be eliminated. Option A incorrectly applies a materiality threshold to direct financial interests, which have no materiality threshold under the Code. Option B incorrectly suggests that an independence representation from governance could cure the impairment, and Option D incorrectly proposes disclosure as a substitute for independence. The fundamental rule is that direct financial interests by covered members or immediate family always impair independence and must be eliminated before performing professional services.
You are the senior on the audit of a nonissuer nonprofit organization. Your sibling is the organization’s finance director and regularly socializes with you; they also review and approve proposed audit adjustments. You are assigned to lead testing over cash and contributions, which are areas your sibling oversees. Which factor would most likely affect the auditor's objectivity?
The fact that the engagement is a nonissuer, which reduces objectivity concerns compared to an issuer.
The finance director’s agreement to sign the management representation letter at the end of the audit.
The sibling relationship and close personal interactions with the finance director who has a key role in the financial reporting process.
The nonprofit’s use of contribution revenue, which is inherently complex and requires judgment.
Explanation
The AICPA Code identifies immediate family relationships with client personnel in key positions as creating familiarity and self-interest threats that impair independence and objectivity. The sibling relationship with the finance director, who has significant influence over financial reporting and reviews audit adjustments, creates an unacceptable threat to objectivity that cannot be reduced through safeguards. The regular social interactions further compound the familiarity threat, as personal relationships can unconsciously bias professional judgment. Option B incorrectly focuses on technical complexity rather than relationship threats, Option C misunderstands that nonissuer status does not reduce objectivity requirements, and Option D incorrectly suggests that signing representations eliminates relationship threats. The fundamental principle is that close personal relationships with client personnel in key positions compromise the appearance of objectivity and the ability to maintain professional skepticism, regardless of the individual's integrity or the engagement type.
Your firm audits a nonissuer healthcare clinic. A subpoena is served on your firm requesting specific audit documentation related to a government investigation of the clinic’s billing practices. The clinic’s chief executive officer instructs you to ignore the subpoena due to confidentiality and to “let our attorneys handle it.” What is the most appropriate response to the confidentiality issue?
Provide the entire audit file to the requesting party immediately without consulting counsel to ensure cooperation.
Refuse to provide any documents because client confidentiality always overrides legal demands.
Consult legal counsel and respond as required by the valid subpoena/court order, disclosing only information that is legally required.
Provide requested information only after obtaining written approval from the clinic’s chief executive officer, regardless of the subpoena.
Explanation
The AICPA Code recognizes that confidentiality obligations may be overridden when disclosure is required by law, including response to a validly issued and enforceable subpoena or court order. When served with a subpoena for audit documentation, the member should consult with legal counsel to understand the scope of required disclosure and respond appropriately, providing only the specific information legally required. The client's instruction to ignore the subpoena does not relieve the member of legal obligations, though the member should inform the client of the subpoena unless prohibited by law. Option A incorrectly suggests confidentiality always prevails over legal requirements, Option B fails to exercise appropriate care in determining the scope of required disclosure, and Option D incorrectly conditions legal compliance on client approval. The key principle is that while confidentiality is fundamental, members must comply with legal obligations after appropriate consultation with counsel, disclosing only what is specifically required by valid legal process.
While performing an audit of a nonissuer retail entity, you discover evidence suggesting the controller has been skimming cash receipts. A local newspaper contacts you after hearing rumors and asks you to confirm whether fraud occurred. The engagement letter contains standard confidentiality language and you have not received client permission to disclose. What is the most appropriate response to the confidentiality issue?
Decline to comment and maintain confidentiality unless the client consents or disclosure is required by law or a valid subpoena/court order.
Report the suspected fraud directly to law enforcement as part of the auditor’s standard responsibilities under the AICPA Code.
Disclose the details only to the client’s employees so they can protect themselves from the controller.
Confirm the fraud to the newspaper because the public has a right to know and it may prevent further losses.
Explanation
The AICPA Code's confidentiality rule prohibits members from disclosing confidential client information without the client's consent, except in specific circumstances such as compliance with a validly issued subpoena, summons, or court order. The discovery of potential fraud during an audit does not create an exception to confidentiality that would permit voluntary disclosure to the media or other third parties. The member must decline to comment and maintain confidentiality unless the client provides consent or disclosure is legally required through proper legal channels. Option A violates confidentiality by confirming fraud to the media without legal compulsion, Option C inappropriately discloses to employees without authority, and Option D incorrectly suggests auditors have a standard duty to report fraud to law enforcement under the AICPA Code. The key principle is that confidentiality obligations continue even when wrongdoing is discovered, and members must resist pressure to disclose information publicly unless legally compelled or specifically permitted by professional standards in limited circumstances.
You are the engagement partner for the audit of a nonissuer private equity portfolio company. Management proposes recording a large “one-time” restructuring reserve without sufficient support and asks you to “just accept it” to avoid delaying the closing of a planned acquisition. Management implies they will replace your firm if you do not agree. What measure should be taken to address the integrity challenge?
Reduce audit procedures in the reserve area to avoid conflict and issue an unmodified opinion if the financial statements are otherwise fairly stated.
Require sufficient appropriate audit evidence for the reserve, communicate with those charged with governance regarding the pressure, and modify the report or withdraw if a material misstatement is not corrected.
Document management’s request and then report the matter directly to the acquisition target’s management to prevent the transaction.
Accept the reserve because losing the client would harm the firm and the amount will reverse in future periods.
Explanation
The AICPA Code requires auditors to maintain integrity and professional skepticism when evaluating management's accounting estimates and to resist pressure to accept unsupported accounting treatments. Management's proposal to record a large restructuring reserve without sufficient support, coupled with threats to replace the firm, represents both an attempt to manipulate financial reporting and an intimidation threat to the auditor's objectivity. The appropriate response is to insist on obtaining sufficient appropriate audit evidence for any recorded amounts, communicate the pressure and disagreement to those charged with governance, and if management refuses to correct a material misstatement, either modify the audit opinion or withdraw from the engagement. Option A violates integrity by accepting unsupported accounting, Option B inappropriately reduces audit procedures in response to pressure, and Option D breaches confidentiality by reporting to the acquisition target. The fundamental principle is that auditors must maintain professional standards even when faced with client threats, ensuring that financial statements are not materially misstated due to unsupported or fraudulent entries.
You are assigned to the audit of a nonissuer family-owned business. The owner is a close friend who offers you an all-expenses-paid weekend trip after you complete fieldwork, stating it is a “thank you for working so hard” and not tied to the audit opinion. You have not yet finalized significant estimates and will be involved in concluding procedures. Which factor would most likely affect the auditor's objectivity?
The absence of an audit committee, because only those charged with governance can create objectivity threats.
The timing of the offer because objectivity concerns arise only after the audit report is issued.
Acceptance of a significant gift from the client during the engagement, creating a self-interest and familiarity threat.
The fact that the business is family-owned, which typically reduces audit risk and objectivity concerns.
Explanation
The AICPA Code prohibits members from accepting gifts or entertainment from attest clients that create undue influence or the appearance of compromised objectivity. An all-expenses-paid weekend trip from a client, especially when offered by a close friend during the engagement while significant judgments remain unresolved, creates both self-interest and familiarity threats to objectivity. The value and nature of the gift, combined with the personal relationship and timing during the engagement, would likely be viewed by a reasonable observer as potentially influencing professional judgment. Option B incorrectly suggests family ownership reduces objectivity concerns when it may actually increase them, Option C misunderstands that objectivity threats exist throughout the engagement not just after reporting, and Option D incorrectly limits threat sources to governance bodies. The key principle is that members must decline gifts of more than token value from attest clients to maintain both actual objectivity and the appearance of independence, with particular scrutiny when personal relationships compound the threat.
You are auditing a nonissuer construction contractor. Near the end of fieldwork, management asks you to reduce the proposed allowance for doubtful accounts adjustment so the company can meet its bank covenant, and offers to “move future tax work” to your firm if you agree. The proposed adjustment is supported by audit evidence and management’s estimate appears biased. What measure should be taken to address the integrity challenge?
Treat the matter as a PCAOB critical audit matter and include it in the auditor’s report to increase transparency.
Accept management’s estimate because the allowance is inherently subjective and the client is offering additional business.
Issue the auditor’s report as planned and separately notify the bank about management’s pressure to avoid the covenant violation.
Communicate the pressure and the proposed adjustment to those charged with governance and, if management refuses to correct a material misstatement, modify the audit opinion or withdraw when appropriate.
Explanation
The AICPA Code requires members to maintain integrity and objectivity, which includes resisting client pressure to accept inappropriate accounting treatments and addressing attempts to influence professional judgment through inducements. When management pressures the auditor to accept a biased estimate to avoid covenant violations and offers future business as an inducement, this creates both an advocacy threat and a self-interest threat. The appropriate response is to communicate the issue to those charged with governance, insist on proper accounting treatment supported by audit evidence, and if management refuses to correct a material misstatement, either modify the audit opinion or withdraw from the engagement. Option A violates integrity by accepting a biased estimate for business reasons, Option B inappropriately breaches confidentiality by notifying the bank, and Option D incorrectly references PCAOB standards for a nonissuer audit. The fundamental principle is that auditors must maintain professional skepticism and integrity even when faced with client pressure or inducements, ensuring that financial statements are not materially misstated due to management bias.
You are assigned to the audit of a nonissuer insurance agency. The engagement partner is a close personal friend of the client’s CEO and frequently socializes with the CEO during the audit, including discussing audit issues informally at social events. Which factor would most likely affect the auditor's objectivity?
The client’s use of an outside actuary to estimate liabilities.
A familiarity threat due to a close personal relationship with client management.
The audit team’s use of analytical procedures during planning.
The firm’s policy requiring partner review of significant audit judgments.
Explanation
Objectivity is impaired by familiarity threats from close personal relationships with client management, as per the AICPA Code. The partner’s friendship and informal discussions with the CEO create a familiarity threat that could bias audit judgments. This aligns with ET 1.110.010, identifying such relationships as risks. Use of actuaries, analytics, or partner reviews are standard practices not affecting objectivity per ET 1.100.001. These factors relate to procedures, not biases. Auditors should limit social interactions that could impair appearance. A framework is to evaluate relationships for familiarity threats and apply safeguards like reassignment. Document mitigations to ensure objective professional judgment.