Documente Academic
Documente Profesional
Documente Cultură
August 2010
The
Contents Introduction Nature of auditor scepticism Growing importance of auditor scepticism Importance of scepticism in practice Development and promotion of auditor scepticism within audit firms Can more be done to promote auditor scepticism? Questions Appendices 1. Academic research on auditor scepticism 2. References to scepticism in ISAs (UK and Ireland)
Page 3 5 8 9 10 13 18 19 28
The APB and POB welcome the views of those stakeholders and other parties interested in audit quality. In particular we would welcome views on the following: 1. Do you agree with the emphasis that this paper places on the importance of auditor scepticism? Are there aspects of the analysis, including the summary of academic research in Appendix 1, with which you particularly agree, or disagree? If so, what are they? 2. Regulators have recently challenged audit firms on whether sufficient scepticism was demonstrated on some audits: Do you think that this problem is widespread or limited to certain types of audits or circumstances? What factors do you believe do, or could, in practice create disincentives for auditors to apply an appropriate degree of professional scepticism and what should be done about them? In what areas do you think auditors should be more (or less) sceptical in their approach?
3. How do you think audit firms should promote and develop professional scepticism in their partners and staff? Do they need to do more and, if so, what? 4. Do you think that others, including companies, should be doing more to promote, develop and support professional scepticism in auditors? If so, what? Commentators should not feel constrained by these questions, or required to answer all of them. However, it will assist collation of views, if the questions are used to structure responses on this topic. The APB and POB would prefer to receive responses in electronic form. These may be sent by e-mail to j.grant@frc-apb.org.uk. If this is not possible, please send letters of comment to: JEC Grant Financial Reporting Council 5th Floor Aldwych House 71 91 Aldwych London WC2B 4HN In either case, letters of comment should be sent so as to be received no later than 31 October 2010. All responses will be regarded as being on the public record unless confidentiality is expressly requested and will be posted to the APBs website soon after receipt.
The Financial Reporting Council Limited 2010. The Financial Reporting Council Limited is a company limited by guarantee. Registered in England number 2486368. Registered Office: 5th Floor, Aldwych House, 71-91 Aldwych, London WC2B 4HN.
7 8
ISA (UK and Ireland) 200 Paragraph 15 ISA (UK and Ireland) 240 Paragraph 12
For example ISA (UK and Ireland) 500 paragraph 11 states that If: (a) audit evidence obtained from one source is inconsistent with that obtained from another, or (b) the auditor has doubts over the reliability of information to be used as audit evidence, the auditor shall determine what modifications or additions to audit procedures are necessary to resolve the matter, and shall consider the effect of the matter, if any, on other aspects of the audit.
10 11
November 1998. www.frc.org.uk/apb/publications/other June 2001. www.frc.org.uk/apb/publications/other 12 ISA (UK and Ireland) 540 Audit of Accounting Estimates, Including Fair Value Accounting Estimates, and Related Disclosures
13 14
Published on 21 July 2010 Beasley, M.S., J.V. Carcello & D.R Hermanson, 2001. Top 10 audit deficiencies. Journal of Accountancy 191 (4):63-66 15 At the request of the SEC, the Public Oversight Board appointed the Panel on Audit Effectiveness in October1998 to assess whether independent audits of the financial statements of public companies adequately serve and protect the interests of investors. The Panel reviewed and evaluated the way that audits were performed, and assessed trends in audit practices to determine whether they were in the public interest. It studied the audit policies, methodologies and other forms of guidance used primarily by the large audit firms, certain aspects of auditor independence and the auditing professions selfregulatory structure.
16
B Pierce and B Sweeney Cost quality conflict in audit firms: an empirical investigation and M Page A survey of time budget pressure and irregular auditing practices among newly-qualified UK chartered accountants.
10
17
11
Audit methodologies 38. Audit firms, particularly the largest, invest significant amounts in their audit methodologies and quality control systems. 39. In recent years audit methodologies have grown both in their complexity and their influence on what audit work is done in practice, especially by more junior members of the audit team. This is, in part, influenced by developments in Auditing Standards and other regulatory activity but also by the larger audit firms wish to standardise parts of the audit and to take advantage of control techniques that become available in electronic working papers. 40. The FRCs Promoting Audit Quality observed that electronic working papers had the potential to distance both partners and staff from the company being audited and reported anecdotal evidence that the proportion of audit time spent by staff sitting in the audit room completing electronic schedules seemed to be increasing at the expense of time spent reviewing client records, discussing accounting issues with client staff and otherwise obtaining audit evidence. 41. It is of course easier to imagine auditor scepticism being applied when auditors are walking the floor, observing and inspecting the company's operations, rather than sitting in the audit room completing electronic schedules - but there are also wider issues associated with the integration of methodologies and electronic working papers. Self-determination or freedom to act appears to be one of the character traits that fosters sceptical behaviour. This involves individual auditors having the ability to pursue their own inquiries when needed and the motivation to do so. Rather than requiring auditors to perform predefined audit tasks and complete checklists, professional scepticism might be better fostered by methodologies encouraging auditors to ask management relatively open questions and follow up on responses. 42. Academic research, albeit before the latest generation of electronic working papers, suggests that the firms documentation systems are reducing the amount of detailed comments that show how thinking on a particular topic evolves and how final conclusions are reached. Documentation of this nature would seem to be especially important to support judgements, for example on the acceptability of fair values, when the work of relatively junior staff is reviewed and challenged by more senior members of the audit team who apply their wider knowledge of the entity and their greater experience to the judgements. An absence of a clear thought trail is likely to reduce the opportunity for juniors to learn and inhibit the effectiveness of review processes18.
18
A clear record of the auditors thought process is also likely to be beneficial to audit quality more generally as documentation often helps structure a thought process and helps the author and subsequent reviewers identify illogicalities and inconsistencies.
12
19 20
Extended Clan: External Influences on Audit Team Behaviour Sweeny and Pierce The ISAs (UK and Ireland) are the ISAs issued by the International Auditing and Assurance Standards Board ( IAASB) supplemented, where appropriate, with additional requirements to address specific UK and Irish regulatory requirements and additional guidance that is appropriate in the UK and Irish national legislative, cultural and business context. 21 ISA (UK and Ireland) 200 paragraph 15
13
22
Some of these changes were introduced for UK and Irish audits of accounting periods ending on or after 15 December 2010 when the Clarified ISAs (UK and Ireland) became effective.
14
The AIUs scope is the audits of all UK incorporated companies with listed securities (both equity and non-equity securities) and other entities in whose financial condition there is considered to be a major public interest. The AIU reviews a sample of audits each year.
15
24
16
25 26
An ICAEW film that followed the cross examination of an audit practitioner accused of negligence. The story of the Equity Funding fraud
17
3. How do you think audit firms should promote and develop professional scepticism in their partners and staff? Do they need to do more and, if so, what? 4. Do you think that others, including companies, should be doing more to promote, develop and support professional scepticism in auditors? If so, what?
18
An in-depth review of the literature can be found in: Nelson, M., A Model and Literature review of Professional Skepticism in Auditing, Auditing a Journal of Practice and Theory, Vol. 28, No. 2, November 2009, pp. 1-34.
27
19
28 29
Bell,T.B, M.E. Peecher, and I. Solomon. 2005. The 21st Century Public Company Audit, New York. Hurtt, K., M. Eining and D. Plumtree, Professional Skepticism: A Model with Implications for Research, Practice and Education, working paper, University of Wisconsin Madison, 2002.
20
30
Quadackers, L.,M., T.L.C.M. Groot and A. Wright, Auditors Skeptical Characteristics and their Relationship to Skeptical Judgments and Decisions, working paper, VU Amsterdam, 2009. 31 K. Hurtt, M. Eining and D. Plumlee, Linking professional skepicism to auditor behaviours, Baylor University, working paper 2010. 32 See Nelson M., 2009, op. cit., for a more detailed review of studies on each of these factors.
21
33
Rennie, M.D., L.S. Kopp and W.M. Lemon, "Exploring Trust and the Auditor-Client Relationship: Factors Influencing the Auditor's Trust of a Client Representative", Auditing a Journal of Practice and Theory, 2010. 34 Lewicki, R.J. and B.B. Bunker. 1996. Developing and maintaining trust in work relationships- in Trust in Organizations: Frontiers in Theory and Research edited by Kramer R and T .Tyler: Newbury Park, CA.
22
Characteristics Fragile. An early stage of a relationship where trust is based on a rational assessment of the relative costs and benefits giving or withholding trust. More robust. A higher level of trust based primarily on the history of interaction between individuals. Highly robust. The highest level where an individual identifies with the others desires and intentions
Relationship more forgiving if an adequate explanation can be found for the violation it will often be accepted. Sense-making process likely to apply auditors will favour evidence that confirms their beliefs. Ambiguous or incomplete information will be interpreted in a way not to change the belief.
Lewicki and Bunker suggest that the optimal level is calculus-based trust. They indicate that trust can be strongly influenced by members of management previously being employed by the audit firms especially if that individual is personally known to the audit team. In such cases past-trust is often not re-evaluated in the new context. The authors also note the influence that the provision of advice / non- audit services can have on trust35. Also in the US, Shaub and Lawrence36 noted that the Independence Standards Board37 had identified inappropriate trust as one of the five biggest threats to auditor independence and explored the auditor-client relationship. They identified two types of trust: (a) rational (emotional) trust and (b) deep auditor-client interdependence and postulated that deep auditor-client interdependence is likely to be troublesome for auditor independence / scepticism (especially where there is information asymmetry).
The authors cite the Panel on Audit Effectiveness 2000 report which noted that some services can subvert neutrality, impartiality and scepticism and create a mutuality of interest with management. 36 Shaub, M.K. Trust as a Threat to Independence : Emotional Trust, Auditor-client Interdependence, and their impact on Professional Skepticism, 2004 37 The Independence Standards Board (ISB) was established in May 1997 as a result of discussions between the American Institute of Certified Public Accountants (AICPA) and the U.S. Securities and Exchange Commission (SEC). The operating policies of the ISB were designed to permit timely, thorough, and open study of issues involving auditor independence and to encourage broad public participation in the process of establishing and improving independence standards. The ISB ceased its operations in 2001.
35
23
38
Sweeney, B. and B. Pierce, The Extended Clan: External Influences on Audit Team Behaviour, working paper. 39 The clients were listed companies audited by the Big Four, generally out of their Dublin offices. 40 Nelson, M., 2009, op. cit.
24
41
Shaub, M.K. and J.E. Lawrence, Differences in Auditors Professional Skepticism Across Career Levels in the Firm Advances in Behavioural Accounting Research, 2: 61-83, 1999. 42 For example, see: Pratt, J., and P. Beaulieu, Organizational Culture in Public Accounting: Size, Technology, Rank, and Functional Area. Accounting, Organizations & Society, 17(7):.667-684.. 43 Ponemon, L., Ethical reasoning and selection-socialization in accounting, Accounting, Organizations and Society, 17(3-4): 171-189, 1992 44 Harrison, J.R. and G.R. Carroll.. Keeping the Faith: A Model of Cultural Transmission in Formal Organizations, Administrative Science Quarterly, 36: 552-582, 1991. 45 Shaub, M.K. and J.E. Lawrence, A Taxonomy of Auditors Professional Skepticism , Research on Accounting Ethics, 8: 167 -194, 2002. 46 The original sample was 710 but pre-screening eliminated those that did not consistently fit the categorisation system.
25
26
Summary
This brief review has illustrated how academic research has investigated the characteristics underlying auditor scepticism, the manner in which factors such as knowledge, personal attributes and incentives influence the degree of scepticism reflected in the judgements and actions of auditors and the behaviour of individuals in the context of the audit firm. The results provide insights into the nature of scepticism in auditing, variations between the likely judgements and actions between different auditors and the manner on which different elements can be used to enhance professional scepticism. There remains considerable scope for research into the culture of scepticism in UK auditing and how this is realised in actual audit practice.
47
Shaub, M.K. and J.E. Lawrence, Exercising Professional Skepticism Through Client Confrontation, 2004
27
200. Overall Objectives of the Independent Auditor and the Conduct of an Audit in Accordance with International Standards on Auditing (UK and Ireland) 7. The ISAs (UK and Ireland) contain objectives, requirements and application and other explanatory material that are designed to support the auditor in obtaining reasonable assurance. The ISAs (UK and Ireland) require that the auditor exercise professional judgment and maintain professional skepticism throughout the planning and performance of the audit and, among other things: . Professional skepticism An attitude that includes a questioning mind, being alert to conditions which may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence. The auditor shall plan and perform an audit with professional scepticism recognizing that circumstances may exist that cause the financial statements to be materially misstated. (Ref: Para. A18-A22) In the case of an audit engagement it is in the public interest and, therefore, required by the IFAC Code, that the auditor be independent of the entity subject to the audit. The IFAC Code describes independence as comprising both independence of mind and independence in appearance. The auditors independence from the entity safeguards the auditors ability to form an audit opinion without being affected by influences that might compromise that opinion. Independence enhances the auditors ability to act with integrity, to be objective and to maintain an attitude of professional scepticism.
13(l)
15.
A16.
A18. Professional skepticism includes being alert to, for example: Audit evidence that contradicts other audit evidence obtained. Information that brings into question the reliability of documents and responses to inquiries to be used as audit evidence. Conditions that may indicate possible fraud. Circumstances that suggest the need for audit procedures in addition to those required by the ISAs (UK and Ireland).
28
A19.
Maintaining professional skepticism throughout the audit is necessary if the auditor is, for example, to reduce the risks of: Overlooking unusual circumstances. Over generalizing when drawing conclusions from audit observations. Using inappropriate assumptions in determining the nature, timing, and extent of the audit procedures and evaluating the results thereof.
A20.
Professional skepticism is necessary to the critical assessment of audit evidence. This includes questioning contradictory audit evidence and the reliability of documents and responses to inquiries and other information obtained from management and those charged with governance. It also includes consideration of the sufficiency and appropriateness of audit evidence obtained in the light of the circumstances, for example in the case where fraud risk factors exist and a single document, of a nature that is susceptible to fraud, is the sole supporting evidence for a material financial statement amount. The auditor may accept records and documents as genuine unless the auditor has reason to believe the contrary. Nevertheless, the auditor is required to consider the reliability of information to be used as audit evidence.48 In cases of doubt about the reliability of information or indications of possible fraud (for example, if conditions identified during the audit cause the auditor to believe that a document may not be authentic or that terms in a document may have been falsified), the ISAs (UK and Ireland) require that the auditor investigate further and determine what modifications or additions to audit procedures are necessary to resolve the matter.49 The auditor cannot be expected to disregard past experience of the honesty and integrity of the entitys management and those charged with governance. Nevertheless, a belief that management and those charged with governance are honest and have integrity does not relieve the auditor of the need to maintain professional skepticism or allow the auditor to be satisfied with lessthan-persuasive audit evidence when obtaining reasonable assurance.
A21.
A22.
48 49
ISA (UK and Ireland) 500, Audit Evidence, paragraphs 7-9. ISA (UK and Ireland) 240, paragraph 13; ISA (UK and Ireland) 500, paragraph 11; ISA (UK and Ireland) 505, External Confirmations, paragraphs 10-11, and 16.
29
A43.
Detection risk relates to the nature, timing, and extent of the auditors procedures that are determined by the auditor to reduce audit risk to an acceptably low level. It is therefore a function of the effectiveness of an audit procedure and of its application by the auditor. Matters such as: . the application of professional scepticism; and .
assist to enhance the effectiveness of an audit procedure and of its application and reduce the possibility that an auditor might select an inappropriate audit procedure, misapply an appropriate audit procedure, or misinterpret the audit results. A69. In using the objectives, the auditor is required to have regard to the interrelationships among the ISAs (UK and Ireland). This is because, as indicated in paragraph A53, the ISAs (UK and Ireland) deal in some cases with general responsibilities and in others with the application of those responsibilities to specific topics. For example, this ISA (UK and Ireland) requires the auditor to adopt an attitude of professional skepticism; this is necessary in all aspects of planning and performing an audit but is not repeated as a requirement of each ISA (UK and Ireland). . Quality Control for an Audit of Financial Statements Direction of the engagement team involves informing the members of the engagement team of matters such as: Their responsibilities, including the need to comply with relevant ethical requirements, and to plan and perform an audit with professional skepticism as required by ISA (UK and Ireland) 200.50 ..
220 A13.
50
ISA (UK and Ireland) 200, Overall Objectives of the Independent Auditor and the Conduct of an Audit in Accordance with International Standards on Auditing (UK and Ireland), paragraph 15.
30
230 A7
Audit Documentation In relation to requirements that apply generally throughout the audit, there may be a number of ways in which compliance with them may be demonstrated within the audit file: o For example, there may be no single way in which the auditors professional skepticism is documented. But the audit documentation may nevertheless provide evidence of the auditors exercise of professional skepticism in accordance with the ISAs (UK and Ireland). Such evidence may include specific procedures performed to corroborate managements responses to the auditors inquiries.
240 8.
The Auditors Responsibilities Relating to Fraud in an Audit of Financial Statements When obtaining reasonable assurance, the auditor is responsible for maintaining professional skepticism throughout the audit, considering the potential for management override of controls and recognizing the fact that audit procedures that are effective for detecting error may not be effective in detecting fraud. The requirements in this ISA (UK and Ireland) are designed to assist the auditor in identifying and assessing the risks of material misstatement due to fraud and in designing procedures to detect such misstatement. In accordance with ISA (UK and Ireland) 200, the auditor shall maintain professional skepticism throughout the audit, recognizing the possibility that a material misstatement due to fraud could exist, notwithstanding the auditors past experience of the honesty and integrity of the entitys management and those charged with governance. (Ref: Para. A7- A8) Unless the auditor has reason to believe the contrary, the auditor may accept records and documents as genuine. If conditions identified during the audit cause the auditor to believe that a document may not be authentic or that terms in a document have been modified but not disclosed to the auditor, the auditor shall investigate further. (Ref: Para. A9) Maintaining professional skepticism requires an ongoing questioning of whether the information and audit evidence obtained suggests that a material misstatement due to fraud may exist. It includes considering the reliability of the information to be used as audit evidence and the controls over its preparation and maintenance where relevant. Due to the characteristics of fraud, the auditors professional skepticism is particularly important when considering the risks of material misstatement due to fraud.
12.
13.
A7.
31
A8.
Although the auditor cannot be expected to disregard past experience of the honesty and integrity of the entitys management and those charged with governance, the auditors professional skepticism is particularly important in considering the risks of material misstatement due to fraud because there may have been changes in circumstances. An audit performed in accordance with ISAs (UK and Ireland) rarely involves the authentication of documents, nor is the auditor trained as or expected to be an expert in such authentication.51 However, when the auditor identifies conditions that cause the auditor to believe that a document may not be authentic or that terms in a document have been modified but not disclosed to the auditor, possible procedures to investigate further may include:
A9.
Confirming directly with the third party. Using the work of an expert to assess the documents authenticity.
A17.
Management is often in the best position to perpetrate fraud. Accordingly, when evaluating managements responses to inquiries with an attitude of professional skepticism, the auditor may judge it necessary to corroborate responses to inquiries with other information. Determining overall responses to address the assessed risks of material misstatement due to fraud generally includes the consideration of how the overall conduct of the audit can reflect increased professional skepticism, for example, through:
A33.
Increased sensitivity in the selection of the nature and extent of documentation to be examined in support of material transactions. Increased recognition of the need to corroborate management explanations or representations concerning material matters.
It also involves more general considerations apart from the specific procedures otherwise planned; these considerations include the matters listed in paragraph 29, which are discussed below. 250 A Consideration of Laws and Regulations in an Audit of Financial Statements 8. The auditor is required by this ISA (UK and Ireland) to remain alert to the possibility that other audit procedures applied for the purpose of forming an opinion on financial statements may bring instances of identified or suspected non-compliance to the auditors attention. Maintaining professional skepticism throughout the audit, as required by ISA (UK and Ireland) 200,52 is important in this context, given the extent of laws and regulations that affect the entity.
51 52
ISA (UK and Ireland) 200, paragraph A47. ISA (UK and Ireland) 200, paragraph 15.
32
. The manner in which the auditor emphasizes to engagement team members the need to maintain a questioning mind and to exercise professional skepticism in gathering and evaluating audit evidence. .
330 A1.
The Auditors Responses to Assessed Risks Overall responses to address the assessed risks of material misstatement at the financial statement level may include:
540 A40.
Auditing Accounting Estimates, Including Fair Value Accounting Estimates, and Related Disclosures The review of prior period accounting estimates may also assist the auditor, in the current period, in identifying circumstances or conditions that increase the susceptibility of accounting estimates to, or indicate the presence of, possible management bias. The auditors professional skepticism assists in identifying such circumstances or conditions and in determining the nature, timing and extent of further audit procedures. Related Parties Planning and performing the audit with professional scepticism as required by ISA (UK and Ireland) 20053 is therefore particularly important in this context, given the potential for undisclosed related party relationships and transactions. The requirements in this ISA (UK and Ireland) are designed to assist the auditor in identifying and assessing the risks of material misstatement associated with related party relationships and transactions, and in designing audit procedures to respond to the assessed risks.
550 7.
53
33
A9.
Matters that may be addressed in the discussion among the engagement team include:
. An emphasis on the importance of maintaining professional scepticism throughout the audit regarding the potential for material misstatement associated with related party relationships and transactions. .
34