Audit Engagement Questionnaire: Review Questions For Audit Engagements
Audit Engagement Questionnaire: Review Questions For Audit Engagements
Has the engagement team determined whether the opening balances reflect the application of
appropriate accounting policies?
Has the engagement team performed one or more of the following:
(i) Where the prior year financial statements were audited, by reviewing the predecessor
auditor’s working papers to obtain evidence regarding the opening balances;
(ii) Evaluate whether audit procedures performed in the current period provide evidence
relevant to the opening balances; and
(iii) Perform specific audit procedures to obtain evidence regarding the opening balances?
Where the engagement team obtained audit evidence that the opening balances contain
misstatements that could materially affect the current period’s financial statements, has the auditor
performed such additional audit procedures as are appropriate in the circumstances to determine
the effect on the current period’s financial statements?
If the engagement team concludes that such misstatements exist in the current period’s financial
statements, has the engagement team communicated the misstatements with the appropriate level
of management and those charged with governance in accordance with NSA 34?
Where the engagement team is unable to obtain sufficient appropriate audit evidence regarding the
opening balances, has the auditor expressed a qualified opinion or disclaimed an opinion on the
financial statements, as appropriate, in accordance with NSA 29?
Where the engagement team concludes that the opening balances contain a misstatement that
materially affects the current period’s financial statements, and the effect of the misstatement is
not appropriately accounted for or not adequately presented or disclosed, has the auditor
expressed a qualified opinion or an adverse opinion, as appropriate, in accordance with NSA 29?
Engagement Contract
Has the team ensured that it has obtained a signed letter of engagement that clearly states the
terms on which the audit would be performed?
Is the engagement letter in line with the firm's standard policies and procedures on engagement?
Was the engagement letter signed before the commencement of any audit work?
Composition of the Engagement Team
Has the engagement team been properly constituted to include people with relevant qualification
and experience?
Does the engagement leader/ partner possess the relevant skills and experience to lead the
engagement?
Where inexperienced team members are part of the team, have their work been assigned to a
reviewer with experience?
Has the team considered the involvement of experts and specialists where required ? Note that
experts and specialist e.g. Tax, IT specialist, Actuarist, Valuers etc. may be considered relevant to
the engagement team?
Was a quality review or independent review partner appointed in line with the policies and
procedures of the firm?
Risk Assessment Analytics
Has the team performed risk assessment analysis during the planning stage to identify risks?
Has the risk assessment analysis been properly documented?
Note: The engagement team should perform analysis at an aggregated or sufficiently disaggregated
level to assist in identification of unusual or unexpected relationships relevant to the risk
assessment performed. Also documentation of the risk assessment analysis should include the
following:
- The assessment of the reliability of the data used for the risk assessment analysis
-The quantitative or qualitative analysis of the recorded amounts, trends and ratios that were
considered relevant, including the basis for identifying unusual or unexpected relationships
- The unusual or unexpected relationships identified which were believed as being significant for
risk assessment
- The impact on the audit plan, including what further explanation or investigation is considered
necessary.
Materiality
Have the appropriate materiality levels been computed to determine the overall performance and
the de minimus posting levels and have the appropriate benchmarks been used in determining
materiality levels in line with the firm's policies and procedures?
Have the team considered financial statement line items that will be scoped in for the audit based
on the selected materiality levels and consideration of risk within the entity?
Understanding of the Entity and Its Environment
Did the engagement team obtain an understanding of the entity and its environment, including its
products /services, its customers, competitors, legal and regulatory framework, accounting policies,
internal control and performance of the entity?
Did the engagement team hold initial meetings with the client's management as part of its scoping
activities to understand the entity's objectives, strategy, business risk and relevant controls?
Did the engagement team identify and assess the risk of fraud or error (at the assertion level and
the financial statement level) through the understanding of the entity, its environment and internal
control so that appropriate response can be developed to address the risks?.
Did the engagement team consider significant changes, events and developments in the entity's
environment and were changes , events and developments representing high risks identified?
Was the entity's selection and application of accounting policies considered to be appropriate?
Team Meeting(s) at the Commencement of the Engagement
Did the engagement team hold a meeting at the commencement of the engagement to discuss the
following:
-The susceptibility of the entity's financial statements to the risk of material misstatements
-The applicable financial reporting framework for the entity and how it will be applied
-The susceptibility of the financial statements to misstatement due to fraud including how fraud
could occur
- Risk of material misstatement due to fraud in Revenue and rationale for rubuttal of that risk for
the particular engagement
-The susceptibility of the financial statements to misstatement due to fraud arising from related
party relationships and transactions.
-Materiality levels
Were the engagement leader/ partner, team members, specialists and experts present at the team
meeting(s)?
Audit Plan
Have the team documented the Team planning meeting agenda, invitees and minutes or action
points on the audit file?
Have the team determined the expected level of reliance to be placed on controls and the level of
substantive work that will be performed based on high/medium/low or no reliance on controls?
Have the team determined whether they propose to use audit evidence about the operating
effectiveness of controls obtained in previous audits. Have this discussion and the effect of reliance
on prior year controls been documented?
Have the team discussed their external confirmation plan for all balances involving third parties
including legal confirmations?
Have the team incorporated an element of unpredictability in the selection of the nature, timing
and extent of audit procedures to address the risks of material misstatement due to fraud at the
financial statement level?
Have the team determined the level of any involvement in the audit plan of specialists? This
includes a consideration of whether systems or tax matters are considered to be complex. Have
they agreed allocation of responsibilities between the audit team and the specialists?
Have the team planned the nature, timing and extent of direction and supervision of the
engagement team members and the review of their work by experienced team members including
the engagement leader?
Internal Control Framework
Was the entity's internal control environment understood, evaluated (i.e. design effectiveness and
operating effectiveness) and documented?
Control Environment
Was an evaluation of the control environment considered from the team's prior experience?
Did the engagement team assess the components of the control environment including the
governance and management functions, attitudes, awareness and actions of those charged with
governance and management concerning the entity's internal control and its importance in the
entity?
Note:
Factors to consider include: Communication and enforcement of integrity and ethical values;
Commitment to competence; Participations of those charged with governance; Management's
philosophy and operating style; Organizational structure; Assignment of authority and responsibility
and Human resource policies and practices.
Was the team's evaluation of the control environment supported through other audit activities
including substantive audit evidence?
Was the documentation of the control environment evaluation sufficient considering the extent of
comfort expected from controls?
Did the engagement team consider whether management has established an organization structure
that considers key areas of authority and responsibility, established appropriate lines of reporting
and defines the framework for delegating and limiting authority commensurate with
Risk Assessment Process
Did the engagement team's understanding of the entity's risk assessment process include how
management:
-Identifies business risks relevant to financial reporting objectives
-Estimates the significance of the risks
-Assesses the likelihood of their occurrence
-Decides upon actions to address them
-Communicates to those charged with governance regarding its processes for identifying and
responding to risks and
-Communicates to employees regarding its views on business practices and ethical behaviour?
Did the engagement team obtain an understanding of how those charged with governance exercise
oversight of management's processes for identifying and responding to the risks of fraud in the
entity and the internal control that management has established to mitigate these risks?
Was the engagement team's evaluation of the clients risk assessment process supported through
other audit activities and/or by obtaining further substantive audit evidence?
If the engagement team identified risks of material misstatement that management failed to
identify, did they obtain an understanding of why that process failed to identify it and determine if
there is a significant deficiency in internal control with regard to the entity risk assessment process?
Did the engagement team determine the impact of any such deficiency on the other components of
the internal control framework and the planned audit strategy?
Did the engagement team confirm whether management has considered the risk of error or fraud
due to lack of appropriate segregation of duties or inappropriate access rights that could result in
material misstatement of the financial statements?
Information and Communication
Were discussions held with management responsible for both business processes and information
systems and technology and relevant documentation reviewed in order to understand how the
entity's financial statements are prepared (including identifying and mapping the link between
significant processes and the financial statements)?
Did the engagement team identify and consider:
-Significant classes of transaction;
-Initiation, recording, processing (including corrections if necessary and transfers to the General
Ledger) and reporting of significant transactions in the financial statements including the related
accounting records.
-Capture significant events and conditions other than transactions including recurring and non-
recurring adjustments
-Communications between management and those charged with governance and
-External communications such as those with regulatory authorities?
Did the engagement team consider the effectiveness of communication ( e.g. of control
responsibilities, financial reporting roles and responsibilities) within the entity and externally such
as those with regulatory authorities?
Did the engagement team evaluate whether the design and implementation of the processes/
controls were adequate to provide accurate information?
Did the engagement team consider whether management clearly communicated roles and
responsibilities and function/ duties in a manner that supports the relevant internal control
objectives?.
Control Activities
Did the engagement team focus on controls designed to meet the relevant financial statements
assertions for the significant financial statements line items?
Where the engagement team assessed that the direct entity level controls were ineffective at an
adequate level of precision to prevent or detect on a timely basis material misstatements to one or
more relevant assertions: did they seek to understand the transaction level controls?
Did the engagement team perform a walkthrough to confirm their understanding of the controls, in
place evaluate the effectiveness of the design of the controls and confirm whether the controls
implemented address the risk of material misstatements?
Where the engagement team has determined that an understanding of controls can be achieved
without performing a walkthrough of all control activities, have they documented the other
procedure performed to obtain an understanding of controls sufficient to prevent misstatements?
Did the engagement team document the key elements of the understanding obtained regarding
each of the aspects of the entity and its environment and of each of the internal control
components, the sources of information from which the understanding was obtained and the risk
assessment procedures performed?
Monitoring of Controls
Did the engagement team consider both ongoing monitoring activities including those of internal
audits and separate evaluations ( periodic monitoring)?
Where the engagement team has planned to rely on management controls, have they obtained
sufficient evidence regarding the quality of the information being used in this respect?
Did the engagement team consider segregation of duties to the extent necessary (i.e. did the
engagement team consider if management monitors the controls over access rights and restrictions
to verify that they remain appropriate over time)?
Estimates
Did the engagement team adequately perform and document the procedures required for
estimates?
Did the team identify balances affected by accounting estimates and for those identified as specific
Note:
NSA 20 requires the engagement team to understand the following in order to identify and assess
the risks of material misstatement for accounting estimates (NSA 20.9):
(a) The requirements of the applicable financial reporting framework relevant to estimates
(including disclosures).
(b) How management identifies those transactions, events and conditions that may give rise to the
need for accounting estimates. In particular, inquire of management about changes in
circumstances that may give rise to new, or the need to revise existing, accounting estimates.
(c) How management makes the accounting estimates and the data on which they are based:
(I) Method used (and model, if applicable)
(ii) Relevant controls
(iii) Whether management has used an expert
(iv) Underlying assumptions
(v) If there has been or ought to have been a change in the method from the prior period
(vi) If and how management has assessed the effect of estimation uncertainty.
(d) The outcome of accounting estimates included in prior period financial statements or, where
applicable, their subsequent re-estimation for the purpose of the current period (NSA 20.10).
Also NSA 20 requires the evaluation of the degree of estimation uncertainty associated with
accounting estimates (NSA 20.11) and determine whether any of the estimates with high estimation
uncertainty give rise to significant risks
Audit Risk
Have all audit risks identified during the planning phase been documented and have appropriate
responses been developed to respond to the identified risks?
Audit File
Has an electronic or manual file been created ?
Does this clearly capture the audit risks and the audit plan with the intention of responding to the
identified risks?
Understanding of the Entity's use of Information Technology
Did the engagement team obtain an understanding of the level of complexity of controls
automation, system complexity, platforms used, approach to security and the security architecture,
known problems and nature and volume of transactions that could impact the audit?
Communication Plan – Public Interest Clients
If the client was a public interest client and had an independent governance function, did the
engagement team discuss and mutually agree with the audit committee (or equivalent body) and
management on a documented communication plan (how, when and what they would be
communicating)?
Communication - Audit Strategy
Did the engagement team present the Audit Planning Memorandum (APM)and discuss it with those
charged with governance, in a style appropriate for the engagement?
Consider:
Did the audit strategy or accompanying documentation discussed with the client include at least the
following:
• Our objectives;
• Developments affecting the client's business;
• Frequency and prospective topics of Audit Committee meetings;
• Audit approach (NSA 7 requirement), Risk Analysis (Communication on Risk Analysis), and Audit
Scope by Business Unit;
• Reporting timetable;
• Mutual expectations and responses;
• Engagement Team;
• General explanation of how materiality is applied on the audit; and
• Where applicable, use of the work of internal audit?
Related Parties
Has the engagement team documented the names of the identified related parties and the nature
of the related party relationships? In identifying these related parties has the team:
- made inquiries of management (including nature, type and purpose of transactions)
- understood the entity's controls in relation to related party transactions
- identified any significant transactions outside the normal course of business (and if related parties
are involved)?
Going Concern
Did the team document their consideration of the appropriateness of the going concern basis
underlying the preparation of the financial report at the planning stage of the audit?
This documentation should include consideration of the financial position of the company and
current funding arrangements and refer to management’s assessment.
Where a going concern risk was identified, was an appropriate risk brought into the audit file, and
associated evidence gathering activities (EGAs)?
Was the consideration as to whether this is an elevated/significant risk appropriately documented?
Has the team obtained and evaluated management’s assessment to be able to continue as a going
concern? Has an appropriate period been applied to that evaluation?
Fraud Risk Assessment and Related Activities
When addressing identified risks of material misstatement due to fraud, did the engagement team:
-consider the assignment and supervision of personnel;
-consider the selection and application of accounting policies used by the entity, particularly
those related to subjective measurements and complex transactions;
-incorporate unpredictability in the nature, timing and extent of audit procedures; and
-document those procedures that were deemed unpredictable in nature?
Did the engagement team :
-consider the fraud risk factors in its audit strategy and planned approach;
-discuss fraud risks at the initial team meeting led by the engagement leader/ partner;
- discuss fraud with key members of management including the board and audit committee;
-identify fraud risks considering all the information gathered on the audit and assessing risk in
conjunction with the client's controls and programs
-communicate findings to clients;
-consider the type of risks, its significance , likelihood and pervasiveness for each risk identified;
- design an appropriate response to the results of their assessment; and
- consider the involvement of specialists (e.g. Forensic specialists).
Did the engagement team consider the risk of management override of controls as a significant risk
of fraud and designed and performed appropriate procedures to respond to the risk of fraud?
Note: That NSA requires the following procedures to be performed in response to the risk of
management override of controls:
-Journal entry testing; -reviewing accounting estimates; and evaluating the business rational for
significant unusual transactions ;and (where also considered appropriate considering significant
subsequent payments after year end and physical inspection of material fixed assets).
Did the engagement team consider the risk of fraud associated with revenue recognition and
where this is identified as a significant risk, designed and performed appropriate procedures to
respond to the risk of fraud?
Did the engagement team make appropriate enquiries ( including knowledge of any actual,
suspected or alleged fraud affecting the entity, management's process for identifying and
responding to fraud risk) of management, internal audit, those charged with governance and
If there were inconsistencies in responses to enquiries of those charged with governance and
management were they adequately resolved?
Were appropriate consultations done when the integrity or honesty of management or those
charged with governance was doubted?
Note: that consultation should follow the policies and procedures of the firm.
Use of the Work of Internal Auditor
If the work of internal auditors was relied upon, was the impact on the audit approach considered?
Was evidence of the quality of work, their competence and objectivity planned to be obtained?
Consider:
a) Was there effective co-ordination with the internal audit function?
b) Where applicable, did the engagement team conclude that the quality of internal audit was
appropriately assessed as required under generally accepted auditing standards (GAAS) including:
· a discussion of the controls, transactions or balances examined, actions taken and follow up;
· reperformance of tests of controls on each significant account(s), class of transactions and
disclosure to corroborate the results thereof;
· performing independent tests of controls related to each significant account(s), class of
transactions and disclosure; and
· assessing the audit comfort obtained as a result of the above and an evaluation of the need
for additional work?
Note that the extent of this testing will depend on our judgment as to the risk and materiality of the
area concerned, the preliminary assessment of internal audit and the evaluation of the specific
work by internal audit.
Engagement Manager and Engagement Leader/ Partner Involvement in the Planning Process
Have the engagement partner/ leader and manager been sufficiently involved in the planning
process?
Have they demonstrated their involvement by signing off the electronic or manual audit file?
Quality / Independent Review Partner involvement in the Planning Process
Where a quality/ independent review partner is involved on the engagement, have they been
involved during the planning process?
Have they demonstrated their involvement by signing off the electronic or manual audit file?
FIELD WORK
Responding to Audit Risk and Evidence
Tests of Controls
Was the extent of test performed to validate controls in compliance with policies and procedures of
the firm in terms of frequency of performance and was it appropriate in the circumstances?
Consider:
Did the extent of test take into account:
• The significance of the risk addressed by the control;
• The engagement team’s assessment of the control environment;
• The importance of control in addressing risks;
• The relevance and reliability of the audit evidence that the control prevents, detects and corrects
material misstatements at the assertion level;
• The extent to which audit evidence is obtained from tests of other controls related to the
assertion;
• The degree to which the control is cumulative;
• The risk that observation of controls and answers to inquiries may not accurately represent the
proper and continued operation of controls; and
• The expected deviation from the control?
Was the number of items for control testing appropriately determined?
When testing manual controls, did the engagement team follow the firm's policies and procedures
on minimum number of items to test?
Did the engagement team test the operating effectiveness of controls on which they relied upon
and for ITGCs, and where necessary controls identified for significant risks?
Evaluation of the Test of Controls
Was an appropriate evaluation performed on the results of the validation of controls to assess
whether controls were achieving their objectives?
Consider:
Where the engagement team assessed exceptions recorded as negligible, was this judgment
acceptable in the circumstance, taking into account the level of assurance required and the nature
of controls?
Were both qualitative and quantitative factors taken into account in assessing whether exceptions
rate is acceptable?
Did the engagement team increase their tests, where necessary?
Was there adequate test of mitigating controls, where identified, to cover for exceptions found in
controls initially tested?
Where tests resulted in the engagement team being unable to place any reliance on a control, did
they assess whether a material misstatement could have occurred and whether additional audit
procedures were necessry to achieve the degree of assurance required?
Key Reconciliations
Did the engagement team test key reconciliations through a combination of tests of controls and
tests of details or from tests of details alone and was the approach adopted appropriate?
Consider:
- Was the level of test appropriate given the risk of material misstatement, and is the justification
for that level of test recorded on file?
- Were the types of tests chosen appropriate? Note: when the control test of the reconciliation
throughout the year is less than reperformance (e.g. inspection), the reconciliation should also be
tested at least once substantively, showing all reconciling items (i.e. prepared on a ‘gross’ basis).
Was the number of items to test determined in line with firm's testing guidance?
For reconciliations selected for testing, were reconciling items properly investigated and cleared to
subsequent third party statements or other appropriate supporting evidence?
Were matters arising from tests, including all exceptions, considered by senior audit team
members?
Specific Considerations for Significant Account Balances or Financial Statements Disclosures Apart from the Audit Proced
Revenue Recognition
Was sufficient work performed and documented on revenue recognition?
Consider:
Did the engagement team understand the products/ services and the types of customers to whom
those products and services were sold?
Were appropriate procedures performed on important contracts or other sales arrangements with
major customers where terms are complex and/or critical to revenue recognition? Were
procedures performed to ascertain whether such transactions involved any side agreements?
Were other important revenue recognition issues appropriately addressed including large/unusual
transactions, those at or near the year-end, bill and hold transactions, transactions with right of
return, extended credit terms or unusual financing arrangements, products vulnerable to rapidly
changing technology, and related party transactions?
With respect to gains and losses on the sale of assets (e.g. investments or property), were such
transactions complete (i.e. were there no unresolved contingencies)?
Long-Term Investments
Was sufficient work performed and documented on long-term investments (if they are material)?
Consider:
Were long-term investments properly evaluated and the financial statements classification,
valuation methodologies and disclosures considered?
Was consideration given to whether the entity has the ability and intention to continue to hold the
investments on a long-term basis?
Was an indication of value obtained from an independent source (e.g. market quotations) and
compared to the carrying amount of the investments at the date of the audit report?
If such values do not exceed the carrying amounts, was consideration given to whether a write-
down was required?. Where there is uncertainty as to whether the carrying amount will be
recovered, have appropriate adjustments and/or disclosures been made?
Fair Value
Was sufficient work performed and documented on fair value?
Consider:
Did the engagement team obtain an understanding of the entity's process for determining fair value
measurements and disclosures and of the relevant control activities sufficient to identify and assess
the risks of material misstatement at the assertion level and to design and perform further audit
procedures?
Did the engagement team ensure that significant assumptions used by management are
reasonable?
Did the engagement team evaluate the method for fair value measurement used by the client to
determine whether measurements and disclosures were in accordance with the client's applicable
financial reporting framework and that the method of measurement was consistently applied?
Did the engagement team perform audit procedures on the data used to develop the fair value
measurements and disclosures and evaluate whether the fair value measurement has been
properly determined?
Consolidation
Was sufficient work performed and documented on consolidations?
Segment Information
Was sufficient work performed and documented on segment information?
Restructuring and Discontinued Operations
Was sufficient work performed and documented on restructurings and discontinued operations?
Was appropriate consideration given to restructuring charges; and with regard to restructuring
charges were current issues appropriately addressed?
Asset Impairments
Was sufficient work performed and documented on asset impairments?
Were the client's policies for identifying impaired assets evaluated for reasonableness in light of
current conditions and were appropriate procedures performed to determine whether the client's
methodology for recognition and measurement of impairment was appropriate?
In-process Research and Development
Was sufficient work performed and documented on in-process research and development?
Were the underlying valuation methodology and purchase price allocation of in-process research
and development (R&D) appropriately addressed, including the reasonableness of amounts
Labour Costs, Employee Benefits and Pensions
Was sufficient work performed and documented on labour costs and employee benefits, including
pensions, deferred compensation arrangements and stock compensation and on disclosures of
pensions and other post-employment benefits?
Off Balance Sheet Arrangements
Was sufficient work performed and documented on off balance sheet arrangements and is there
sufficient and clear disclosure of:
• The business purpose of the arrangements;
• Key terms and conditions of any guarantees, commitments or similar arrangements with off
balance sheet entities; and
• Amounts receivable or payable and revenues and expenses relating to transactions with off
balance sheet entities?
Going Concern
Did the scope and conduct of the audit appropriately address and document going concern
considerations?
Consider:
Did the engagement team and management assess going concern for a period of 12 months from
the date of approval of the accounts and did the engagement team evaluate management’s
assessment?
Did the engagement team inquire as to events and conditions and related business risks beyond the
period of assessment used by management that may cast significant doubt on the client's ability to
continue as a going concern?
If events were identified that indicated that there may be substantial doubt about going concern,
were auditing procedures extended to obtain information about management’s plans that may
alleviate the substantial doubt?
If auditing procedures were extended because of going concern considerations, were the
conclusions reached and the wording of the report and the client’s disclosures appropriate?
Was there consultation in line with the firm's policies and procedures?
Was any consideration of a going concern issue, other than routine work, documented for the
engagement partner's attention?
Related Parties
Were auditing procedures regarding related party transactions and balances appropriately designed
and performed to ensure that they were properly recorded and disclosed in the financial
statements?
Consider:
Was adequate risk assessment performed in regard to related parties transactions and appropriate
response to those risks developed?
Where transactions are highly complex, was confirming our understanding directly with the
counterparty considered?
Accounting Estimates
Was sufficient appropriate evidence regarding accounting estimates (including disclosures) obtained
and appropriately documented?
Consider:
Was one (or combination) of the following approaches to testing appropriately used in accordance
with the firm's policies and procedures:
• Review and test the process used by management to develop the estimate;
• Use an independent estimate for comparison with that prepared by management; and
• Review subsequent events which confirm the estimates made?
Significant Contracts
Did the engagement team examine significant contracts and ensure that they are valid and that
they are properly disclosed in the financial statements?
SUPERVISION AND REVIEW
Review of Work Done
Was the engagement adequately managed and was an appropriate review performed on all work
done to ensure compliance with the firm's audit policy and was that review evidenced and
documented in accordance with firm's audit policy?
Consider:
Were audit execution and review roles and responsibilities appropriately assigned based on the
relative experience/expertise of team managers and team members? Was allocation of the related
roles and responsibilities documented?
Is there evidence on the file that an adequate review was performed of all the work done?
Note:discuss with the staff members the nature, timing and extent of procedures performed, the
sufficiency of audit evidence obtained and conclusions drawn; discuss with the staff members if
critical self-review has been performed by the team members; discuss if review of audit steps in the
file entailed review of the file attachments; ensure that the work supports the conclusions and
opinion and that appropriate consultations have taken place.
Were differences of professional opinion among the engagement team appropriately recorded and
resolved?
Were any of the working papers completed and reviewed by the same person? Note that best
practice is that work prepared should be reviewed by another person that is more experienced.
Where a quality / independent review partner is involved, did he consider the following:
• The engagement team’s evaluation of the firm’s independence;
• Significant risks identified and the responses to those risks, including the assessment of fraud risk;
• Judgments made, particularly with respect to materiality and significant risks;
• Conclusions reached in formulating the opinion;
• Whether appropriate consultation have taken place and the conclusions arising from those
consultations;
• The significance and disposition of corrected and uncorrected misstatements identified during the
audit;
• The matters communicated to those charged with governance and other parties, if appropriate;
• Whether audit documentation selected for review supports the conclusions reached; and
• The appropriateness of the audit report?
Were the hours spent/ charged by the quality / independent review partner reasonable?
OTHER SUPERVISORY MATTERS
File Management
Were the electronic or paper audit files complete?
Consider:
Did the electronic or paper audit files include substantive e-mail communications with third parties
and other electronic files etc.?
Were all hard copy audit papers which contain evidence supporting our opinion assembled ?
Is there a full cross-referencing between the paper and electronic files?
Were all required procedures to address NSA requirements included in the file and addressed
accordingly?
COMPLETION
Update preliminary assessments
Have the team re-assessed their initial assessment during the planning phase including, but not
limited to, going concern, risk assessment for fraud, compliance with laws and regulations, related
party transactions, accounting estimates, ethical requirements including independence.
Have the team considered a re-assessment of materiality taking into consideration misstatements
identified during the audit? Were a revision to materiality levels is necessary, have appropriate
work been performed in line with the revised materiality?
Journal Entries
Is there evidence in the file that the engagement team examined material, unusual and non-
recurring journal entries during the audit year as well as non-standard adjusting journal entries
recorded by the client to finalize the general ledger, and the related support?
Consider:
Were appropriate procedures related to the journal entries performed as part of the audit
planning?
Was the population for testing appropriately identified and tested for completeness in line with the
firm's audit policies and procedures?
Was particular emphasis placed on entries recorded in the last few days of the period?
If the entries examined were corrections of errors in the financial statements of previous periods,
was there consideration of whether previously reported financial statements should be restated
accordingly?
Subsequent Events
Were subsequent events tests appropriately designed, performed and documented on file?
Consider:
Those events that provide further evidence of conditions that existed at the balance sheet date or
arose subsequent to that date, may require adjustments or disclosure in the financial statements.
If the issuance of the firm’s report was significantly delayed beyond the date of the report (two
weeks or more), were subsequent events auditing procedures extended to the date of issuance?
If significant matters came to the attention of the engagement team after the date of the report but
before the financial statements were issued, was appropriate action taken and was the matter
properly resolved?
If significant matters came to the attention of the engagement team after the issuance of our
report, which, if known at the date of the report, would have affected the issuance of such report,
was appropriate action taken and was the matter properly resolved?
In cases involving the offering of securities to the public, did the engagement team consider the
legal and related requirements applicable to the auditor in all jurisdictions in which the securities
are offered?
Unadjusted Misstatement
Does the file contain a summary of unadjusted misstaments showing the statement of financial
position, statement of profit or loss, statement of changes in equity and statement of cash flows
effects of each entry and the aggregate effect, before and after tax, the impact of prior period
waived items and a conclusion?
Consider:
Is there evidence that the engagement team considered the impact of prior period waived
adjustments?
Does the file contain a final conclusion on whether the aggregate of uncorrected differences that
have been identified during the audit is material?
Is there a need to consult in line with the risk management procedures of the firm?
For any audit, irrespective of whether the client is rated as higher risk or is a listed company, if there
is evidence that the client has deliberately created misstatements in the financial statements and
the client’s management has elected not to correct the misstatements on the basis of materiality,
was there documented consultation between the engagement team and the risk management
team/ partner?
Where a misstatement was indicative of fraud, were the implications in relation to other aspects of
the audit considered?
Was materiality, including a final assessment of materiality for the financial statements, considered
when evaluating the effect of misstatements?
Have the effect of the unadjusted misstatements been communicated to those charged with
governance within the entity?
Are unadjusted misstatements individually and in aggregate considered material? Have the team
evaluated the impact of material unadjusted misstatements on the audit opinion?
Evaluating misstatements
Have the team accumulated misstatements identified during the audit (both quantitative and
qualitative) except those that are insignificant, and evaluated their impact on the audit
plan/strategy? Does the nature of the identified misstatement(s) indicate that other misstatements
could exist in the financial statement? Are the accumulated misstatements close to or exceed the
materiality? Does the audit plan and audit strategy need to be revised and have the team
documented their rationale for any conclusion reached?
Have the team evaluated whether identified misstatements indicate a pervasive effect on the
controls? And have they determined whether a conclusion can be made on the operating
effectiveness of the controls? Are the controls operating effectively?
Have all identified misstatements been communicated to appropriate management and to thise
charged with governance?
Financial Statements
Does it appear that the financial statements were presented fairly, in all material respects, in
conformity with GAAP and relevant laws and regulations, or, if not, was the audit report
appropriately qualified?
Consider:
Was the relevant Disclosure Checklist tailored, completed and reviewed?
were exceptions appropriately responded to? And was a copy of the completed checklist retained
on the file?
Were notes and statements inclusive of all informative disclosures required in the circumstances
and by professional standards and relevant laws and regulations?
Were assets, liabilities, revenues ,expenses and equity appropriately classified?
Where applicable, was there adequate disclosure of the risks and uncertainties inherent in the
operations of the client?
Is there evidence in the file that the engagement team:
• Checked the reconciliation of the management information to the financial statements;
• Agreed current year information in the financial statements to the entity’s records and to
supporting information in the audit file;
• Agreed comparative information to the final prior-year financial statements;
• Checked all cross-references between the financial statements and supporting notes; and
• Checked the financial statements for mathematical, spelling and typographical errors?
OTHER COMMUNICATIONS
Communication - Update on Accounting/Audit Issues and Risk Analysis
Did the engagement team update management and, where applicable, the audit committee on
Accounting/Audit Issues and additional risks identified as part of their procedures prior to the year
end?
Communication - Internal Control and Business Issues Report
Did the engagement team report to management and the audit committee, where applicable,
observations on internal control and business issues and was that evidenced on file?
Note: At a minimum, significant weaknesses in the design or operation of the accounting and
internal control systems, as well as other significant audit findings, that came to the engagement
team’s attention and recommendations for improvement need to be identified in the firm’s report.
Did the audit report contain the name, signature and FRC Number of the partner signing onbehalf
of the firm
Audit Opinion
Was the nature of the opinion expressed appropriate?
Consider:
If a qualification or the addition of explanatory language existed, were the reason(s) disclosed in the
report?
If there was uncertainty about the client’s ability to continue as a going concern was the audit
report appropriately modified?
Where the uncertainty associated with an item or the lack of objective data made it incapable of
reasonable estimation, was the effect on the audit report considered?
When management refused to provide a representation letter, was the audit report appropriately
modified?
Where, as a result of the work of an expert, it is decided to issue a modified audit report, was the
need to refer to the expert work in the audit report considered?
When the engagement team is unable to conclude whether the financial statements are materially
misstated as a result of fraud, was the effect on the audit report considered?