Attestation Reporting

Help Questions

CPA Auditing and Attestation (AUD) › Attestation Reporting

Questions 1 - 10
1

You are performing agreed-upon procedures for a nonissuer related to a schedule of employee headcount used for a state incentive program, under AICPA attestation standards (AT-C). After performing the procedures, you discover an error in the schedule that management refuses to correct, but your procedures were performed as agreed. How should discrepancies be communicated in the report?

Report the procedures performed and the related findings, including the error identified, without providing assurance

Issue an opinion on the schedule’s fairness in accordance with generally accepted accounting principles

Provide negative assurance that nothing came to your attention indicating the schedule is misstated

Withdraw from the engagement because management refused to correct the error

Explanation

This question covers reporting in an agreed-upon procedures engagement under AT-C Section 215, where an error is identified but uncorrected. The key facts are discovery of an error during procedures, with management refusing correction, yet procedures completed as agreed. The report should detail procedures and findings, including the error, without assurance, as AUP reports factual results per AT-C standards. Negative assurance or an opinion on fairness is incorrect because AUP provides no assurance, and withdrawal is unnecessary if procedures are performed. Practitioners should communicate findings objectively to allow users to draw conclusions. This approach maintains AUP's non-assurance nature while ensuring transparency.

2

A nonissuer engages you to perform an examination of management’s compliance with a debt covenant ratio as of year-end under AICPA attestation standards (AT-C). Management will not provide the underlying loan agreement, and the bank will not confirm the covenant terms; you cannot determine the applicable criteria for the ratio. Which factors would most likely affect the report's conclusions?

Whether you can perform tests of controls over revenue recognition to reduce substantive testing

Whether the entity is an issuer subject to PCAOB attestation standards

Whether you can obtain sufficient appropriate evidence about the criteria and the ratio calculation

Whether management’s forecasted cash flows support future compliance with the covenant

Explanation

This question assesses planning considerations in an examination of compliance with debt covenants under AT-C Section 205, where criteria are unobtainable. The key facts involve inability to access the loan agreement or confirm terms, preventing determination of applicable criteria. The ability to obtain sufficient evidence about criteria and the ratio most affects conclusions, as AT-C requires suitable criteria and evidence for an opinion. Forecasting cash flows or testing controls is irrelevant without criteria, and issuer status does not apply to nonissuers under AICPA standards. Practitioners must evaluate criteria availability early to avoid scope limitations. This framework ensures engagements are feasible and reports are based on verifiable standards.

3

A nonissuer engages you for agreed-upon procedures under AICPA attestation standards (AT-C) over a schedule of rent abatements granted to tenants. After you complete the procedures, management asks you to add a statement that the schedule is “fairly stated in all material respects.” How should discrepancies be communicated in the report?

Add negative assurance that nothing came to your attention indicating the schedule is misstated

Refuse to add an assurance statement and report only the procedures performed and findings

Convert the report to an examination without additional work because procedures are already complete

Add the statement because it is limited to materiality and does not provide assurance

Explanation

This question covers adding assurance in agreed-upon procedures under AT-C Section 215. The key facts are management's post-procedure request for a fairness statement. Refuse and report only procedures and findings, as AT-C prohibits assurance in AUP. Adding statements or converting is incorrect without proper engagement. Practitioners clarify report limitations. This maintains AUP's factual nature.

4

A nonissuer asks you to perform agreed-upon procedures over a schedule of royalty revenues to be submitted to a private lender. The lender wants procedures that address completeness and accuracy of royalties, but management requests you only agree to procedures that compare the schedule to the general ledger without testing underlying contracts. Under AICPA attestation standards (AT-C), what procedures should be performed to address the findings?

Convert the engagement to a review so you can provide limited assurance without lender involvement

Expand procedures to include contract-to-schedule testing if the specified parties agree to the procedures

Perform risk assessment procedures and design additional audit procedures until sufficient evidence is obtained

Perform only the procedures management requests because the engaging party is management

Explanation

This question addresses the determination of procedures in an agreed-upon procedures (AUP) engagement under AT-C Section 215, where parties disagree on procedure scope. The key facts are the lender's request for completeness and accuracy testing versus management's limitation to ledger comparisons, requiring agreement among specified parties. Procedures should be expanded to include contract testing if specified parties agree, as AT-C requires consensus on procedures for the engagement to proceed appropriately. Performing only management's requested procedures is incorrect because AUP engagements must meet the needs of all specified parties, not just the engaging party. Converting to a review or performing risk assessments is wrong as AUP does not provide assurance and follows agreed procedures, not audit-style planning. Practitioners should document agreement from all specified parties to ensure the report's relevance and restricted use. This framework maintains the integrity of AUP by aligning procedures with user expectations and standards.

5

You are issuing an examination report for a nonissuer on management’s assertion about the effectiveness of internal control over compliance with specified requirements. You identify several nonconformities that are material but confined to one program area and not pervasive to the overall subject matter. Under AICPA attestation standards (AT-C), how should discrepancies be communicated in the report?

Express an adverse opinion and describe the nonconformities in a basis-for-adverse paragraph

Express a qualified opinion and describe the nonconformities in a basis-for-qualified paragraph

Express an unmodified opinion and describe the nonconformities only in an other-matter paragraph

Disclaim an opinion and communicate the nonconformities only to those charged with governance

Explanation

This question tests reporting on internal control over compliance in an examination under AT-C Section 205, where material but non-pervasive nonconformities are identified. The key facts include nonconformities confined to one program area, material yet not pervasive to the overall subject matter. A qualified opinion with a basis-for-qualified paragraph is required, as AT-C standards mandate qualification for material, non-pervasive issues affecting the assertion. An adverse opinion is incorrect because adversity applies only to pervasive effects, and an unmodified opinion with other-matter disclosure cannot address material deficiencies. A disclaimer is wrong as evidence is sufficient, and communication to governance alone does not fulfill public reporting duties. Practitioners should evaluate materiality and pervasiveness by considering the impact on the subject matter as a whole. This judgment framework ensures transparent reporting of control effectiveness while adhering to attestation principles.

6

You are performing an examination of a nonissuer entity’s compliance with specified requirements of a contract under AICPA attestation standards (AT-C). Near report date, management provides a representation letter but refuses to include representations about its responsibility for the subject matter and the applicable criteria. What type of report should be issued?

Issue an unmodified opinion because the practitioner’s procedures provide sufficient evidence without representations

Issue an agreed-upon procedures report describing the missing representations as a finding

Disclaim an opinion due to a scope limitation resulting from management’s refusal to provide necessary written representations

Issue a qualified opinion and include the missing representations in an other-matter paragraph

Explanation

This question addresses representation requirements in an examination under AT-C Section 205 for compliance. The key facts involve management's refusal to provide essential representations about responsibility and criteria. A disclaimer is required due to the scope limitation from missing representations, per AT-C standards. An unmodified or qualified opinion is incorrect without required representations, and converting to AUP does not fit. Practitioners should obtain written representations to confirm management's role. This rule enhances evidence reliability in attestations.

7

You are performing an examination of a nonissuer entity’s assertion about the effectiveness of controls over a payroll system, under AICPA attestation standards (AT-C). You identify a material misstatement in management’s description of the system, but management agrees to correct the description before the report is issued. What type of report should be issued?

An adverse opinion because the misstatement was originally identified during fieldwork

An unmodified opinion, assuming the corrected description is fairly presented and evidence supports it

A qualified opinion because any identified misstatement requires qualification even if corrected

A disclaimer of opinion because corrections indicate management’s assertion is unreliable

Explanation

This question evaluates reporting in an examination under AT-C Section 205 with a corrected misstatement. The key facts are a material misstatement in the description, corrected by management. An unmodified opinion is issued if the corrected description is fair and supported, per AT-C. Qualified or adverse is incorrect post-correction, and a disclaimer is unwarranted. Practitioners should verify corrections before reporting. This framework encourages remediation for reliable assertions.

8

You are a practitioner performing an examination of a nonissuer service organization’s description of its system and the suitability of the design and operating effectiveness of controls (a SOC 1–type engagement) under AICPA attestation standards (AT-C). During testing, you identify a deviation in a key control that management asserts is isolated, but your sample indicates the deviation occurred multiple times and affects user entities’ transaction completeness. Management refuses to revise its assertion or expand the description of the deviation. What type of report should be issued?

A qualified or adverse opinion, depending on the pervasiveness of the deviation’s effect on the subject matter

An unmodified opinion with an emphasis-of-matter paragraph describing the deviation

An unmodified opinion because the deviation is operational and does not affect the description of the system

A disclaimer of opinion because all deviations require a disclaimer in an examination engagement

Explanation

This question tests the reporting requirements in an examination engagement under AT-C Section 320 for SOC 1 reports, where a deviation in controls is identified. The key facts are that the deviation in a key control occurred multiple times, affects transaction completeness materially, and management refuses to revise its assertion or description. A qualified or adverse opinion is appropriate because AT-C standards require modification when material deviations exist, with the type depending on whether the effect is pervasive to the subject matter. An unmodified opinion is incorrect because the deviation materially affects the operating effectiveness of controls, not just operations, and an emphasis-of-matter paragraph cannot substitute for a modified opinion on material issues. A disclaimer is wrong as deviations do not inherently require disclaimers unless evidence is insufficient; here, evidence supports the deviation's identification. Practitioners should evaluate the pervasiveness of deviations by considering their impact on user entities and the overall system. This framework ensures reports communicate risks accurately to intended users while aligning with attestation standards.

9

You are performing an examination for a nonissuer on a schedule of investment performance prepared using a defined methodology, under AICPA attestation standards (AT-C). You are unable to obtain sufficient appropriate evidence for a material portion of the schedule because a third-party custodian will not provide confirmations and alternative procedures are not effective. What type of report should be issued?

An unmodified opinion because the custodian is responsible for the missing evidence

A PCAOB report with a scope limitation paragraph and an unmodified opinion

An adverse opinion because lack of evidence indicates the schedule is misstated

A qualified or disclaimer of opinion, depending on whether the scope limitation is material but not pervasive or material and pervasive

Explanation

This question addresses scope limitations in an examination under AT-C Section 205 for performance schedules. The key facts are inability to obtain evidence for a material portion, with ineffective alternatives. A qualified or disclaimer opinion depends on pervasiveness, per AT-C for scope limitations. Adverse is incorrect without misstatement evidence, and unmodified or PCAOB does not apply. Practitioners assess limitation impact. This ensures appropriate modification levels.

10

A nonissuer engages you to perform an examination of a compliance schedule under AICPA attestation standards (AT-C). The schedule includes a note stating it is prepared on a cash basis, but the engagement letter and applicable criteria require accrual basis; management refuses to change the basis or disclose the departure as a departure from the criteria. Which modification is required for the report?

Unmodified opinion because the basis is disclosed and users can adjust

Qualified opinion if material but not pervasive, or adverse opinion if material and pervasive, due to departure from the applicable criteria

Disclaimer of opinion because a basis difference is a scope limitation

PCAOB adverse opinion on internal control over financial reporting

Explanation

This question tests basis departures in an examination under AT-C Section 205 for compliance schedules. The key facts are use of cash basis instead of accrual, with refusal to revise or disclose. Qualified or adverse opinion based on pervasiveness, as AT-C requires modification for criteria departures. Unmodified or disclaimer is incorrect, and PCAOB does not apply. Practitioners evaluate departure effects. This framework ensures criteria adherence.

Page 1 of 2