Professional Documents
Culture Documents
Reviewing The SOQM
Reviewing The SOQM
System of Quality
Management (SOQM)
October 2023
It is possible to review an SOQM without using a checklist but that would be extremely difficult and
inefficient and would give rise to completeness, accuracy and documentation risks. Most regulators
expect to see the use of checklists in monitoring reviews. However, it is important to note that few
regulators would be entirely satisfied with a checklist that required no written amplification and
restricted itself to ticking boxes.
In some jurisdictions, there is a regulatory requirement to use checklists produced or approved by the
regulators. Where this is the case, the firm must consider whether any additional evaluation needs to
be performed and documented and if so, the firm must provide a checklist to cover the performance
and documentation of the additional required work.
The reviewer must perform specific review activities, for example:
• Enquiry,
• Observation,
• Examination of completed documentation (perhaps on a sample basis).
The reviewer will also ordinarily make observations during either the preliminary procedures or the file
reviews. As noted in a separate guide (Reviewing a File), file reviews are an integral part of the
SOQM review, even though they may be done at different times and by different reviewers. The
reviewer may, depending on the structure of the monitoring process, need to consult with other (file)
reviewers and read their reports to help inform the completion of the SOQM evaluation.
Specific SOQM review activities may include (but need not be restricted to):
• Talking to the person/people with operational responsibility for e.g., SOQM, Learning and
Development, recruitment, ethical dilemmas, dispute resolution, Monitoring and Remediation
process;
• Reading the information within the SOQM documentation and considering whether:
o Objectives have been truly established.
o All relevant risks have been identified and appropriately assessed with sufficient
appropriate justification.
o Appropriate responses that might mitigate identified assessed risks have been
appropriately designed and implemented and are effective in operation.
• Reviewing (on a sample basis) items as appropriate which may include but may not be limited
to:
In some firms, the person with operational responsibility for the Monitoring and Remediation process
may be the person conducting the SOQM review. Where this is the case, if possible, a different
reviewer should perform the evaluation of the design and implementation of the Monitoring and
Remediation process.
When making observations, the reviewer may consider issues including (but not restricted to):
• Overall:
o Have Objectives been tailored to the Firm’s nature and circumstances?
o Are all the Objectives you might expect to see actually there?
o Have all relevant Risks been identified?
o Are risk assessments sensible and supported?
o Have all identified Risks been appropriately linked to all the Objectives they might
impact?
o Do you believe selected Response elements are likely to mitigate identified and assessed
Risks?
o Have all mandatory Objectives and specified responses been incorporated appropriately
within the SOQM?
o Does the whole thing hang together?
o Does the tone at the top roar like a lion or whisper like a mouse?
• Ethical Requirements:
o If there are any ethical dilemmas evident on any engagement files, were they handled in
an appropriate way?
• Engagement Performance:
o Is there evidence in reviewed completed engagement files that the methodology (or the
use of it in practice) is fit for purpose?
o Is direction, supervision and review done properly?
o Do engagement time budgets include sufficient time for DSR?
o Is scepticism evidenced sufficiently and appropriately?
• Resources:
o Is there evidence in the completed engagement files that Learning and Development is
effective (i.e., that there are no common issues that crop up again and again and never
seem to be resolved/improved)?
o Is there evidence that recruitment is effective (i.e., that staff are suited to their roles)?
o Are learning and development plans outcome based?
o Do learning and development plans flow from the firm's root cause analysis of previous
review findings?
o Are meaningful evaluations of Service Providers and the services they provide
performed?
• Monitoring:
o Do previous review reports and documentation indicate that the quality of reviewers is
sufficient?
o Are reviewers reaching conclusions which are appropriate in the circumstances?
o Where an oversight function exists, does it seem to be working?
o Where they have taken place, have regulatory or network level reviews been positive
about the monitoring process?
• Remediation:
o Are RCA exercises meaningful (i.e., not cosmetic)?
o Do RCA exercises address all relevant deficiencies?
o Do RCA conclusions flow through to the Action Plan?
o Is there buy-in from the Firm and its staff?
Crowe Global is a leading international network of separate and independent accounting and consulting firms that are licensed to use “Crowe” in connection with the provision
of professional services to their clients. Crowe Global itself is a non-practicing entity and does not provide professional services to clients. Services are provided by the
member firms. Crowe Global and its member firms are not agents of, and do not obligate, one another and are not liable for one another’s acts or omissions.
© 2023 Crowe Global