Audit And Assurance Quality
Help Questions
CPA Auditing and Attestation (AUD) › Audit And Assurance Quality
A firm is performing a nonissuer audit and the engagement team identifies significant deficiencies in internal control. The firm’s internal quality review of the engagement also identified shortcomings in how the deficiencies were evaluated and documented. The firm must determine how to communicate the quality review findings. Which action is most appropriate?
Communicate the quality review findings only to client management because they are responsible for internal control.
Do not communicate quality review findings externally because firm quality processes are always confidential and never shared with those charged with governance.
Communicate the quality review findings to those charged with governance when relevant, in addition to addressing the engagement deficiencies with the engagement team.
Communicate the quality review findings only to the firm’s monitoring leader and avoid involving the engagement partner to preserve independence.
Explanation
The standard tested is communication of internal quality findings under SQCS 8 and AU-C 260 for nonissuer audits, including to governance when relevant. Key facts include internal control deficiencies and quality shortcomings in a nonissuer audit, requiring appropriate communication. Choice A is correct as it communicates to the team and governance per AU-C 260 and SQCS 8 if impactful. Choice B is incorrect as quality findings aren't solely client responsibilities under SQCS 8; choice C is wrong because external communication may be needed per AU-C 260. Choice D is incorrect as involving the partner is essential per SQCS 8. A judgment framework assesses finding relevance for communication levels. Decision rules should document communications and escalate if affecting report reliability.
A firm’s monitoring of nonissuer attestation engagements finds that teams often fail to document the criteria used to evaluate the subject matter, leading to inconsistent conclusions. The firm must decide on a response that improves engagement quality. What is the most appropriate quality control procedure?
Treat the issue as a client acceptance matter only and stop performing attestation engagements.
Direct teams to omit criteria from documentation to reduce risk of being second-guessed by users.
Apply issuer (PCAOB) audit documentation rules to nonissuer attestation engagements as the only corrective action.
Require engagement teams to document the applicable criteria and how they were applied, and provide training and templates to support consistent implementation.
Explanation
The concept being tested is the monitoring and remediation under SQCS 8 for nonissuer attestation engagements, improving documentation consistency. Key facts involve monitoring finding inconsistent criteria documentation in nonissuer attestations, needing quality improvements. Choice A aligns with AT-C 105 and SQCS 8 by requiring documentation, training, and templates for consistency. Choice B is incorrect as omitting documentation increases risks per AT-C 105; choice C is wrong because stopping engagements isn't remedial under SQCS 8. Choice D is incorrect as PCAOB rules don't apply to nonissuers per AICPA standards. Professional judgment designs responses to deficiency patterns. A decision rule is to implement and evaluate corrective actions through follow-up monitoring.
A firm’s monitoring process for nonissuer reviews found that some engagement partners signed reports without evidence that all review notes were cleared. The firm must apply professional judgment about timing and completion of engagement review procedures. Which action should the firm take to ensure engagement quality?
Move note clearing to the monitoring phase because monitoring is designed to resolve engagement review comments.
Have client management decide which review notes must be cleared before issuance.
Require that review notes be resolved and documented before the review report is dated and issued.
Allow partners to sign the report if they believe unresolved notes are unlikely to change the conclusion.
Explanation
The concept being tested is the completion of review procedures under AR-C 90 and SQCS 8 for nonissuer reviews, ensuring resolution before issuance. Key facts include monitoring finding uncleared review notes in nonissuer reviews, requiring judgment on timing. Choice A aligns with AR-C 90 by mandating resolution and documentation pre-issuance. Choice B is incorrect as beliefs don't override evidence requirements per SQCS 8; choice C is wrong because monitoring isn't for resolving notes under AR-C 90. Choice D is incorrect as clients don't decide auditor procedures per AR-C 90. Professional judgment prioritizes complete reviews before dating. A decision rule is to document note resolutions and withhold issuance until cleared.
A CPA firm is performing a nonissuer financial statement audit for a new client in a highly regulated industry. The firm’s quality management policies require an engagement quality review when significant risks are identified, but the engagement partner believes the team can handle the risks without an independent review. Based on the firm’s policies and the need to apply professional judgment to ensure engagement quality, which response is most appropriate?
Document the engagement partner’s rationale and proceed without an engagement quality review because the engagement partner is responsible for engagement quality.
Obtain a concurring partner review only after report release to confirm the engagement file is complete and properly assembled.
Rely on the firm’s annual internal monitoring inspection results as a substitute for an engagement quality review on this engagement.
Perform an engagement quality review in accordance with the firm’s policy before the auditor’s report is issued.
Explanation
The professional standard being tested is the engagement performance element of a firm's system of quality management under SQCS 8, specifically the requirement for engagement quality reviews (EQRs) when firm policies mandate them for high-risk nonissuer audits. Key facts include the nonissuer audit of a new client in a highly regulated industry with significant risks, where firm policy requires an EQR, but the engagement partner believes it is unnecessary. Choice C is correct because it aligns with AU-C 220 and firm policies by ensuring an objective EQR is performed before the report is issued to enhance audit quality. Choice A is incorrect because annual monitoring inspections under SQCS 8 are not a substitute for a required EQR, as they occur post-engagement and do not provide pre-issuance review. Choice B is incorrect as documenting the rationale without performing the EQR violates firm policy and AU-C 220's emphasis on quality management; choice D is wrong because post-release reviews do not prevent issuance of potentially flawed reports, contrary to timely quality assurance in SQCS 8. A transferable framework is to evaluate engagement risks against firm policies and apply professional judgment to determine if an EQR is needed, prioritizing objective review over individual beliefs. Always document the decision process and ensure reviews are completed before report release to uphold quality standards.
A firm is conducting a nonissuer audit and, during completion, identifies that significant audit judgments (including revenue cutoff and inventory obsolescence) were discussed verbally with the engagement partner but not documented, and the firm’s quality control policies emphasize documentation of significant findings and conclusions. The engagement partner believes oral discussions are sufficient because the team is experienced. Which action should the firm take to ensure engagement quality?
Issue the report now and rely on the firm’s annual monitoring process to document the judgments retroactively if selected for inspection.
Request that management document the auditor’s significant judgments in a memo to be retained in the audit file as a substitute for auditor documentation.
Document the significant judgments and conclusions in the audit file before report release and ensure appropriate review of the added documentation.
Apply PCAOB documentation rules for issuers and extend the documentation completion period to the issuer standard to avoid rework.
Explanation
Professional standards require documentation of significant audit matters, judgments, and conclusions in sufficient detail for an experienced auditor to understand the work performed and support for conclusions reached. The key deficiency is that significant judgments regarding revenue cutoff and inventory obsolescence were only discussed verbally without documentation, violating both professional standards and firm policies. The correct answer (A) properly requires documentation of these significant matters before report release with appropriate review of the added documentation to ensure completeness and accuracy. Option B incorrectly defers documentation to future monitoring processes, violating the requirement for contemporaneous documentation. Option C inappropriately attempts to shift auditor documentation responsibilities to client management. Option D incorrectly applies issuer documentation timelines to a nonissuer audit without addressing the immediate documentation deficiency. The professional framework requires that all significant audit judgments be documented contemporaneously and reviewed before report issuance, regardless of team experience levels.
A firm performs nonissuer review engagements and has a policy that significant engagement deficiencies identified during monitoring must be communicated to engagement leadership and those charged with governance when relevant to the engagement. A monitoring inspection finds that a review engagement file lacked evidence of inquiry and analytical procedures over a significant revenue decline. Which action is most appropriate regarding communication?
Communicate the deficiency only to the firm’s human resources department to address staff performance.
Communicate the deficiency to the engagement partner and consider whether communication to those charged with governance is necessary based on the circumstances and firm policy.
Communicate the deficiency only to client management because monitoring findings relate to management’s financial reporting process.
Do not communicate the deficiency because review engagements provide limited assurance and documentation is optional.
Explanation
The concept being tested is the communication of monitoring deficiencies under SQCS 8 for nonissuer review engagements, including when to involve governance. Key facts include monitoring finding missing evidence of procedures in a nonissuer review, with policies requiring communication to leadership and potentially governance. Choice B is correct as it follows SQCS 8 and AR-C 90 by communicating to the partner and assessing governance needs based on relevance. Choice A is incorrect because deficiencies relate to firm quality, not just client processes, per SQCS 8; choice C is wrong as documentation is required for reviews under AR-C 90. Choice D is incorrect as limiting to HR ignores engagement impacts per SQCS 8. Professional judgment evaluates deficiency severity for communication scope. A decision rule is to document communications and escalate to governance if deficiencies could affect reliance on the report.
During a nonissuer audit, the engagement team encounters a complex going concern judgment and consults with the firm’s technical group. The team documents only the final conclusion but not the alternatives considered or the basis for the conclusion. The firm’s quality policies emphasize sufficient engagement documentation to support significant judgments. Which action should the firm take to ensure engagement quality?
Require the engagement team to document the consultation process, significant judgments, and conclusions in the engagement file on a timely basis.
Wait until the firm’s next monitoring cycle to determine whether consultation documentation is necessary for this engagement.
Permit minimal documentation because consultations are internal and do not need to be included in the engagement file.
Replace documentation with an oral debrief to the engagement partner, who can attest to the consultation if questioned later.
Explanation
The standard being tested is the documentation requirements under AU-C 230 and SQCS 8 for consultations in nonissuer audits, emphasizing sufficient records of significant judgments. Key facts are the nonissuer audit with a complex going concern consultation, where only the conclusion was documented, conflicting with firm policies for comprehensive documentation. Choice B is correct as it complies with AU-C 230 by requiring timely documentation of the process, judgments, and conclusions to support quality. Choice A is incorrect because consultations must be documented per AU-C 230, not treated as optional internal matters; choice C is wrong as oral debriefs don't meet sufficient documentation standards in SQCS 8. Choice D is incorrect as delaying to monitoring violates timely assembly rules in AU-C 230. A judgment framework is to evaluate consultation complexity and document proportionally to enable reconstruction. Decision rules should mandate including alternatives considered and implementation in files for all significant consultations.
A CPA firm performs a nonissuer audit and identifies during internal monitoring that several engagements lacked documentation of key consultations on complex revenue recognition issues. The firm must decide how to address this deficiency in its quality management system. What is the most appropriate quality control procedure?
Implement remedial actions such as updated consultation documentation requirements, training, and follow-up monitoring to evaluate effectiveness.
Apply issuer (PCAOB) engagement quality review requirements to all nonissuer audits to eliminate documentation deficiencies.
Require engagement partners to obtain client management approval for consultation conclusions to strengthen documentation.
Treat the issue as an engagement performance matter only and take no firm-level corrective action because monitoring is not intended to identify documentation issues.
Explanation
The standard tested is the monitoring element of quality management under SQCS 8, addressing deficiencies in nonissuer audit documentation through remedial actions. Key facts involve internal monitoring revealing missing documentation of consultations on complex revenue issues in nonissuer audits, requiring firm-level corrective procedures. Choice B is correct as it follows SQCS 8 by implementing updates, training, and follow-up to remediate and prevent recurrence. Choice A is incorrect because monitoring identifies deficiencies for firm action, not just engagement matters, per SQCS 8; choice C is wrong as requiring client approval for consultations isn't a standard safeguard and shifts responsibility inappropriately under AU-C 260. Choice D is incorrect because applying PCAOB EQR to nonissuers exceeds AICPA requirements and doesn't target documentation per SQCS 8. A framework for judgment is to analyze monitoring findings for root causes and design scalable responses like policy updates or training. Decision rules should include evaluating remediation effectiveness through subsequent monitoring to ensure sustained quality improvements.
A firm performs a nonissuer audit and the engagement quality reviewer (required by firm policy due to client financial distress) identifies an unresolved disagreement with the engagement team regarding the adequacy of allowance for credit losses. The engagement partner wants to issue the report while the matter is still being debated to meet lender deadlines. Based on the firm's policies, which response is most appropriate?
Communicate the disagreement only to the client’s accounts receivable supervisor because the issue is operational rather than governance-related.
Issue the audit report and document the disagreement as an open item to be resolved during the next firm monitoring inspection.
Escalate the matter within the firm and do not issue the report until the engagement quality reviewer’s concerns are resolved and conclusions are supported and documented.
Ask management to decide the appropriate allowance amount and accept it to avoid an audit delay, since the client is responsible for the estimates.
Explanation
Professional standards and firm quality control policies require resolution of significant disagreements between engagement teams and quality reviewers before report issuance, particularly for matters affecting financial statement amounts. The critical issue is an unresolved disagreement about the adequacy of credit loss allowances—a significant accounting estimate—with the engagement partner prioritizing deadlines over resolution. The correct answer (B) properly requires escalation within the firm and prohibits report issuance until the reviewer's concerns are resolved and properly documented, maintaining audit quality over client pressures. Option A incorrectly permits report issuance with unresolved quality review matters, violating quality control standards. Option C inappropriately delegates auditor judgment responsibilities to management for significant estimates. Option D incorrectly limits communication to operational personnel when the matter requires engagement leadership and potentially governance attention. The decision framework mandates that engagement quality reviewer objections on significant matters must be resolved before report release, with firm escalation procedures ensuring appropriate resolution regardless of external pressures.
A firm is performing a nonissuer review of interim financial statements. Near completion, the engagement partner notes that key inquiries and analytical procedures were performed but not documented, and the firm’s quality control policies require documentation sufficient to enable an experienced practitioner to understand the work performed and conclusions reached. What is the most appropriate quality control procedure?
Rely on the firm’s next monitoring inspection to identify and correct documentation gaps as part of the annual quality review process.
Have the engagement team complete the documentation before the report date and ensure the engagement partner reviews and concludes on the completed workpapers.
Convert the engagement to an audit to avoid documentation requirements applicable to reviews.
Issue the review report and add the missing documentation after report release because review engagements do not require detailed documentation.
Explanation
Professional standards for review engagements require documentation sufficient for an experienced practitioner to understand the work performed, evidence obtained, and conclusions reached. The critical deficiency is that key inquiries and analytical procedures were performed but not documented, violating both professional standards and firm policies requiring adequate documentation. The correct answer (B) properly requires completion of documentation before report issuance with appropriate partner review, ensuring compliance with documentation standards. Option A incorrectly suggests review engagements have minimal documentation requirements and permits post-issuance documentation, which violates professional standards. Option C inappropriately suggests changing the engagement type to avoid documentation requirements rather than addressing the deficiency. Option D incorrectly defers quality control to future monitoring rather than ensuring current compliance. The decision framework requires that all attest engagements, including reviews, maintain contemporaneous documentation of procedures performed and conclusions reached before report issuance.