Audit & Assurance

Chapter 4
Engagement Acceptance and Audit Quality Management

Chartered Certified Accountant (CCA)
Audit & Assurance   •   Post Graduate

Engagement Acceptance and Audit Quality Management

Introduction

An audit engagement begins before substantive testing, sampling, or the preparation of working papers. It begins with a decision: should the firm accept or continue serving this client, and can it perform the engagement in accordance with professional standards? That decision is both commercial and professional. An unsuitable client can expose the firm to litigation, reputational damage, regulatory sanction, independence threats, and poor audit quality. Conversely, a disciplined acceptance process helps the auditor understand risk, secure appropriate resources, establish clear responsibilities, and protect the public interest.

This chapter examines client acceptance and continuance, engagement terms, the preconditions for an audit, ethical screening, resource decisions, and quality management at firm and engagement levels. The discussion is framed principally by International Standards on Auditing (ISAs), the International Code of Ethics for Professional Accountants, and the quality management standards ISQM 1, ISQM 2, and ISA 220 (Revised). Local law, listing rules, sector regulation, and professional-body requirements may impose additional obligations.

Learning objectives

By the end of this chapter, the reader should be able to:

  1. Evaluate whether a prospective or existing client should be accepted or continued.
  2. Identify the preconditions for an audit and establish appropriate engagement terms.
  3. Apply independence, integrity, competence, confidentiality, and conflict-of-interest screening.
  4. Decide whether sufficient time, expertise, technology, and supervision are available.
  5. Distinguish firm-level quality management from engagement-level quality management.
  6. Explain the role of consultation, engagement quality reviews, documentation, and monitoring.
  7. Analyse a complex acceptance decision involving ethical, commercial, and audit-risk considerations.

1. Why acceptance decisions are quality decisions

Audit quality is not created solely by detecting misstatements. It is influenced by whether the firm accepts appropriate clients, assigns capable personnel, applies professional scepticism, obtains sufficient appropriate evidence, communicates effectively, and reaches a conclusion supported by evidence. Acceptance is therefore a preventive control.

A useful conceptual model is:

Client suitability + ethical eligibility + feasible resources + acceptable risk + clear terms → responsible acceptance

The model is not a mathematical equation. It expresses a decision logic: failure in any essential component may make acceptance inappropriate, even where the engagement is financially attractive.

Acceptance decisions are normally made for two situations:

  • Initial acceptance: the firm has not previously audited the entity.
  • Continuance: the firm decides whether to retain an existing audit client for another period.

Continuance is not automatic. Circumstances may change through ownership changes, management integrity concerns, financial distress, regulatory investigations, independence threats, technological complexity, or the firm’s own lack of capacity.

2. The acceptance and continuance framework

A robust process should be risk-based, documented, approved at the appropriate level, and revisited when significant facts change. The following sequence is effective.

2.1 Understand the prospective or continuing client

The firm should obtain enough information to understand:

  • the entity’s ownership, governance, management, and group structure;
  • its industry, business model, markets, funding, and regulatory environment;
  • financial condition, including liquidity pressure and covenant risk;
  • accounting policies and reporting framework;
  • significant estimates, unusual transactions, related parties, and off-balance-sheet arrangements;
  • prior audit history and reasons for changing auditors;
  • allegations of fraud, corruption, money laundering, sanctions breaches, or other unlawful conduct;
  • the identity and reputation of beneficial owners and senior management.

Information sources may include the predecessor auditor, public filings, regulatory databases, credit reports, legal searches, independent references, and discussions with management and those charged with governance. Public information should not be treated as a substitute for professional enquiry.

2.2 Communicate with the predecessor auditor

Where a predecessor exists and professional rules permit or require communication, the proposed auditor should request permission to communicate and ask relevant questions. These may include:

  • reasons for the change of auditor;
  • management integrity and cooperation;
  • disagreements over accounting, auditing, or disclosures;
  • suspected fraud or illegal acts;
  • significant control deficiencies;
  • difficulties obtaining evidence;
  • unpaid fees or fee disputes;
  • issues concerning independence or scope limitations.

If management refuses permission without a credible explanation, or the predecessor refuses communication because of serious unresolved matters, the refusal itself is a risk indicator. The proposed auditor should not accept merely because management offers a higher fee or a compressed timetable.

2.3 Evaluate management integrity and governance

Management integrity is central because management prepares the financial statements and controls access to information. Warning signs include:

  • pressure to achieve a target result at any cost;
  • aggressive or inconsistent accounting policies;
  • resistance to correcting known misstatements;
  • attempts to restrict auditor access;
  • unexplained related-party transactions;
  • a history of regulatory breaches or misleading disclosures;
  • domination by one executive and ineffective oversight;
  • excessive emphasis on fee reduction or an unrealistically short audit timetable.

No single warning sign automatically proves dishonesty. However, multiple indicators may make the engagement unacceptable because the risk of management misrepresentation cannot be reduced to an acceptable level.

2.4 Identify engagement risk and firm risk

Engagement risk is the risk associated with issuing an inappropriate audit opinion. Firm risk also includes litigation, reputational harm, regulatory exposure, independence impairment, client concentration, and failure to comply with law or professional standards.

Risk assessment should consider both inherent characteristics of the client and the firm’s ability to respond. A complex bank, multinational group, cryptocurrency exchange, or entity using sophisticated valuation models may be acceptable to a specialist firm but unsuitable for a small practice without the necessary expertise.

2.5 Determine whether acceptance conditions are satisfied

The final decision should state:

  • whether the client is accepted, continued, declined, or accepted subject to specified safeguards;
  • who approved the decision;
  • significant risks and planned responses;
  • independence conclusions and safeguards;
  • required specialists, locations, technology, and time;
  • any limitations or conditions in the engagement letter;
  • the date for reassessment.

Acceptance should not be approved by a person whose commercial incentives override professional judgement. For high-risk engagements, approval may require a partner, risk partner, ethics function, or governance committee.

3. Ethical screening and independence

3.1 Fundamental ethical principles

The International Code of Ethics identifies five fundamental principles:

  1. Integrity — being straightforward and honest.
  2. Objectivity — avoiding bias, conflicts of interest, and undue influence.
  3. Professional competence and due care — maintaining knowledge and acting diligently.
  4. Confidentiality — protecting information acquired through professional work.
  5. Professional behaviour — complying with laws and avoiding conduct that discredits the profession.

The conceptual framework requires the auditor to identify, evaluate, and address threats to compliance with these principles. Common threats are self-interest, self-review, advocacy, familiarity, and intimidation.

3.2 Independence

Independence comprises:

  • Independence of mind: the state of mind permitting an opinion without influences that compromise professional judgement.
  • Independence in appearance: avoidance of circumstances that would cause a reasonable and informed third party to conclude that integrity, objectivity, or professional scepticism has been compromised.

The firm should screen the engagement team, partners, specialists, network firms, and relevant financial interests. The screening should cover financial interests, loans and guarantees, business relationships, family relationships, employment negotiations, gifts and hospitality, long association, non-audit services, unpaid fees, and contingent fees.

3.3 Non-audit services and self-review threats

A self-review threat arises when the auditor evaluates work previously performed by the auditor or the firm. Examples include preparing accounting records, designing financial reporting systems, performing valuation work used in the financial statements, or providing internal audit services whose results are then audited.

Rules differ by jurisdiction and by whether the entity is a public interest entity. The correct approach is not simply to ask whether a service is profitable. The firm must determine whether the service is prohibited, whether management assumes responsibility, whether safeguards can reduce threats, and whether an objective and informed third party would regard independence as impaired.

3.4 Conflicts of interest and confidentiality

A conflict may arise where the firm serves competing clients, advises parties on opposite sides of a transaction, or possesses confidential information relevant to another engagement. Possible safeguards include informed consent, separate teams, information barriers, restricted access, independent review, and withdrawal. Safeguards cannot justify disclosure where law or confidentiality obligations prohibit it.

4. Preconditions for an audit and engagement terms

ISA 210 requires the auditor to agree the basis on which the audit is to be performed. Before accepting, the auditor should establish the preconditions for an audit.

4.1 Acceptable financial reporting framework

The applicable framework must be acceptable in the circumstances. Examples include IFRS Accounting Standards, a national framework, or a special-purpose framework permitted by law. The auditor should consider whether the framework provides suitable criteria for preparing and presenting financial statements.

An inappropriate framework creates a fundamental problem: the auditor may be unable to express a meaningful opinion even if sufficient evidence is obtained.

4.2 Management’s responsibilities

Management must acknowledge responsibility for:

  • preparing and fairly presenting the financial statements in accordance with the applicable framework;
  • maintaining internal control necessary to enable financial statements free from material misstatement, whether due to fraud or error;
  • providing the auditor with access to information, records, explanations, and relevant personnel;
  • informing the auditor of all known or suspected fraud and non-compliance where required;
  • making accounting estimates and judgements responsibly.

The auditor does not accept responsibility for preparing the financial statements merely because the firm assists with technical accounting matters. Management must retain responsibility and make the decisions.

4.3 Engagement letter

The engagement letter normally records:

  • the objective and scope of the audit;
  • the auditor’s responsibilities;
  • management’s responsibilities;
  • the applicable financial reporting framework;
  • the expected form and content of reports;
  • the possibility that the report may differ from expectations;
  • access to records, personnel, and external confirmations;
  • use of specialists, internal auditors, component auditors, or technology providers;
  • fee arrangements and billing assumptions;
  • arrangements for group audits and communications with those charged with governance.

The letter is not merely a contract for billing. It is an instrument of expectation management and a defence against scope ambiguity.

4.4 Scope limitations before acceptance

If management imposes a limitation that would lead to a disclaimer or prevent the auditor from obtaining sufficient appropriate evidence, the auditor should not accept the engagement unless law or regulation requires acceptance and the reporting consequences are understood. A limitation that appears minor at acceptance may become significant when it affects a material balance or pervasive evidence source.

4.5 Recurring audits

For recurring engagements, a new engagement letter may not be required each year if circumstances remain unchanged, but the auditor should assess whether terms should be revised. Reconfirmation is particularly important after changes in ownership, management, reporting framework, regulation, group structure, or audit scope.

5. Resource decisions and engagement feasibility

Acceptance is irresponsible if the firm lacks the capacity to perform the work properly. The resource assessment should address:

  • number and experience of personnel;
  • partner and manager availability;
  • industry and accounting expertise;
  • valuation, tax, actuarial, IT, cybersecurity, or forensic specialists;
  • language and geographic coverage;
  • data analytics and audit software;
  • component auditor coordination;
  • time available before reporting deadlines;
  • budget sufficient for quality work rather than merely winning the tender.

A low fee does not reduce the audit procedures required by professional standards. If the agreed fee cannot support the necessary work, the firm should renegotiate, redesign the team, change the timetable, or decline the engagement.

A resource decision matrix

IssueEvidence requiredPossible response
Complex valuationNature of models and assumptionsAppoint valuation specialist and reviewer
Group operationsLocations, components, currenciesUse competent component auditors and clear instructions
IT dependenceSystems, interfaces, access controlsInvolve IT audit specialists
Tight deadlineReporting date and data availabilityNegotiate timetable and interim work
High fraud riskIncentives, opportunities, prior allegationsAssign experienced staff and enhanced supervision
Public interest statusLegal and regulatory requirementsApply stricter independence and review rules

6. Quality management at firm level: ISQM 1

ISQM 1 adopts a proactive, risk-based system of quality management. It is broader than a checklist of policies. A firm must design, implement, and operate a system that provides reasonable assurance that:

  • the firm and its personnel fulfil responsibilities in accordance with professional standards and applicable legal requirements; and
  • reports issued by the firm are appropriate in the circumstances.

The system includes eight interrelated components:

  1. The firm’s risk assessment process.
  2. Governance and leadership.
  3. Relevant ethical requirements.
  4. Acceptance and continuance of client relationships and specific engagements.
  5. Engagement performance.
  6. Resources.
  7. Information and communication.
  8. The monitoring and remediation process.

6.1 Governance and leadership

Leadership must demonstrate that quality is the firm’s overriding priority. Performance evaluation, promotion, partner compensation, and budgeting should not reward revenue growth while ignoring audit quality. A culture that treats consultation as weakness or budget overruns as failure can undermine professional scepticism.

6.2 Risk assessment process

The firm identifies quality risks, assesses their likelihood and magnitude, and designs responses. A quality risk might be that teams accept engagements in industries where they lack expertise. A response could require industry approval, mandatory specialist involvement, and a pre-issuance review.

Responses should be tailored. Generic annual reminders are weaker than controls linked to actual risks, supported by responsible owners and measurable evidence.

6.3 Resources and information

Resources include human, technological, intellectual, and financial resources. Policies should address competence, recruitment, training, retention, workload, software reliability, data security, methodology updates, and access to technical guidance.

Communication must flow both ways. Engagement teams should be able to report ethical concerns, scope pressures, and resource shortages without fear of retaliation.

6.4 Monitoring and remediation

Monitoring includes ongoing evaluations and periodic inspections of completed engagements. Findings should be analysed for root causes. If several files show inadequate documentation of estimates, the response should not be limited to criticising individual teams; the firm may need revised methodology, training, consultation requirements, or review procedures.

7. Engagement-level quality management: ISA 220 (Revised)

ISA 220 (Revised) places responsibility on the engagement partner for managing and achieving quality on the audit engagement. The partner must remain sufficiently and appropriately involved throughout the engagement, not merely sign the report at the end.

Key responsibilities include:

  • establishing that independence and ethical requirements are met;
  • determining that the engagement team collectively has appropriate competence, capabilities, and sufficient time;
  • directing, supervising, and reviewing the work;
  • ensuring consultation on difficult or contentious matters;
  • resolving differences of opinion;
  • evaluating whether sufficient appropriate audit evidence supports the conclusion;
  • determining whether an engagement quality review is required;
  • ensuring appropriate documentation.

Delegation does not remove accountability. A manager may review working papers, but the engagement partner remains responsible for the engagement’s quality.

7.1 Consultation

Consultation is required where the team encounters complex, unusual, or contentious issues. Effective consultation involves a person with appropriate expertise, sufficient facts, and adequate time. The conclusion should be documented, including the issue, information considered, advice obtained, and how the conclusion was implemented.

7.2 Differences of opinion

A difference may arise between team members, the engagement partner, a specialist, a component auditor, or an engagement quality reviewer. It must be resolved before the report is dated. No report should be released while a material unresolved difference remains.

7.3 Engagement quality review

An engagement quality review is an objective evaluation of significant judgements and conclusions before the report is issued. It is required for engagements specified by law or regulation and for engagements designated by the firm’s policies, often including audits of listed entities or other public interest engagements.

The reviewer must possess appropriate competence, authority, objectivity, and sufficient time. The reviewer does not assume responsibility for the engagement and should not be selected merely because of availability.

8. Documentation as evidence of quality

Documentation should enable an experienced auditor, having no previous connection with the engagement, to understand:

  • the nature, timing, and extent of procedures performed;
  • the results and evidence obtained;
  • significant matters and professional judgements;
  • who performed and reviewed the work and when;
  • how contradictory evidence was evaluated;
  • how consultation and differences of opinion were resolved;
  • why the acceptance or continuance decision was appropriate.

Documentation prepared after a challenge is less persuasive than contemporaneous documentation. However, documentation is not a substitute for performing the work. A well-written file cannot cure an unsupported audit conclusion.

9. Technology, data, and artificial intelligence

Modern acceptance decisions must consider technology risk. A client may use cloud systems, automated controls, blockchain records, algorithmic pricing, or generative artificial intelligence. The auditor should understand:

  • who owns and controls the data;
  • whether records are complete, accurate, and retrievable;
  • system access and change controls;
  • model governance and validation;
  • cybersecurity incidents and third-party dependencies;
  • whether the audit firm’s tools are reliable and secure.

Generative AI may assist with document classification, risk brainstorming, and summarising contracts, but it can produce fabricated or incomplete outputs. Confidential client information must not be entered into an unauthorised system. AI output is not audit evidence merely because it appears plausible. Human judgement, source verification, confidentiality, and documentation remain essential.

10. Applied case: Northstar Digital Markets Ltd.

This is an illustrative case.

Background

Northstar Digital Markets Ltd. operates a rapidly growing digital-asset trading platform. It seeks to appoint Meridian Assurance as auditor because its previous auditor resigned. Northstar offers a substantial fee, but requests completion within four weeks. The company reports significant holdings of digital assets, uses an internally developed valuation model, and has customers in several jurisdictions.

Problem

The chief executive refuses permission to contact the predecessor auditor, stating that the predecessor was “too conservative.” Northstar has outstanding fees with that auditor. The proposed engagement partner owns shares in a technology supplier used by Northstar. Meridian has no specialist in digital-asset valuation and its IT audit manager is committed to another engagement. Management also asks Meridian to design controls over a new financial reporting system.

Analysis

Several risks arise:

  1. Management integrity: refusal to permit predecessor communication and criticism of a conservative auditor require explanation.
  2. Fee and financial distress risk: unpaid fees may create a self-interest threat and indicate liquidity problems.
  3. Independence: the partner’s financial interest must be assessed and likely disposed of or otherwise addressed under applicable rules.
  4. Competence and resources: valuation and IT expertise are insufficient for the proposed timetable.
  5. Self-review threat: designing controls that Meridian would later audit may be prohibited or create an unacceptable threat.
  6. Evidence risk: digital-asset ownership, existence, rights, valuation, and completeness may be difficult to verify.
  7. Regulatory risk: cross-border customers may create licensing, sanctions, and anti-money-laundering concerns.

Approach and solution

Meridian should not accept immediately. It should request permission to communicate with the predecessor and investigate the fee dispute and regulatory history. The partner’s investment must be removed or the partner replaced, subject to the ethical requirements. Meridian should determine whether qualified valuation and IT specialists can be engaged and whether the timetable can be extended. The proposed system-design service should be declined or structured only in a manner permitted by independence requirements, with management retaining responsibility.

If predecessor communication is refused without a persuasive explanation, if reliable evidence cannot be obtained, or if specialists cannot be secured, Meridian should decline. If the matters are satisfactorily resolved, acceptance should be conditional on a revised timetable, a carefully drafted engagement letter, enhanced acceptance approval, and an engagement quality review.

Outcome

Assume Meridian discovers that the predecessor resigned after management refused to provide evidence of asset custody and that a regulator is investigating customer-fund segregation. Meridian declines the engagement and documents the reasons. Although the firm loses a lucrative fee, it avoids accepting an engagement where the risk of an inappropriate opinion and reputational damage is excessive.

Learning points

  • A high fee is not compensation for unacceptable risk.
  • Refusal to permit predecessor communication is itself significant information.
  • Independence must be assessed before commercial negotiations are finalised.
  • Capacity and specialist availability are acceptance conditions, not post-acceptance conveniences.
  • Declining an engagement can be evidence of strong quality management.

11. Challenges and limitations

Commercial pressure

Competitive tendering can encourage firms to underprice work, promise unrealistic deadlines, or soften responses to management demands. Governance should ensure that commercial personnel cannot override ethical and quality decisions.

Judgement and uncertainty

Acceptance decisions often rely on incomplete information. The objective is not certainty but a sufficiently informed and defensible decision. Where uncertainty concerns management integrity or access to evidence, caution is appropriate.

Global and group engagements

Cross-border engagements introduce differences in law, ethics, data protection, language, component auditor quality, and regulatory oversight. The group engagement partner must assess whether component auditors are competent, independent, and responsive to group instructions.

Independence complexity

Large firms may provide multiple services through network firms, affiliates, or overseas offices. A robust independence system must identify relationships across the relevant network, not only within the local office.

Quality indicators

Inspection findings, restatements, report modifications, consultation frequency, staff turnover, overtime, and complaint data can inform quality management. However, metrics may be gamed or misinterpreted. No single indicator measures audit quality completely; quantitative indicators should be combined with qualitative evaluation.

12. Best-practice checklist

Before acceptance or continuance, the firm should be able to answer “yes” to the following questions:

  • Is the client’s management sufficiently trustworthy to support an audit relationship?
  • Is the financial reporting framework acceptable?
  • Has the predecessor auditor been contacted where appropriate?
  • Are independence and conflicts clear and addressed?
  • Can sufficient appropriate evidence reasonably be obtained?
  • Does the firm have appropriate people, time, specialists, and technology?
  • Are legal, regulatory, sanctions, and money-laundering risks understood?
  • Are management responsibilities accepted in writing?
  • Is the engagement letter clear and current?
  • Are consultation, review, and engagement quality review arrangements adequate?
  • Has the decision been approved and documented by an appropriately senior person?

Chapter Summary

Engagement acceptance and continuance are foundational audit-quality decisions. A firm should evaluate client integrity, predecessor information, engagement risk, independence, conflicts, legal requirements, reporting framework, management responsibilities, evidence availability, and resource capacity before accepting work. The preconditions for an audit and the engagement letter establish the basis of the professional relationship and prevent misunderstanding about responsibilities and scope.

Ethical screening must address fundamental principles, independence, conflicts, non-audit services, financial interests, and threats such as self-review and familiarity. ISQM 1 requires a firm-wide, proactive, risk-based system of quality management covering governance, ethics, acceptance, engagement performance, resources, communication, and monitoring. ISA 220 (Revised) makes the engagement partner responsible for managing and achieving quality, including supervision, consultation, review, resolution of differences, and appropriate documentation. ISQM 2 strengthens objective engagement quality reviews for designated engagements.

Technology and AI create additional issues concerning data reliability, cybersecurity, model risk, confidentiality, and human oversight. Ultimately, quality management is demonstrated not by the size of a policy manual but by disciplined decisions, adequate resources, professional scepticism, and the willingness to decline work that cannot be performed properly.

Key Terms

Acceptance: The decision to undertake a new audit engagement.

Continuance: The decision to retain an existing audit client.

Preconditions for an audit: Conditions concerning an acceptable reporting framework and management’s responsibilities that must exist before acceptance.

Engagement letter: Written agreement defining the audit’s objective, scope, responsibilities, and terms.

Independence of mind: Ability to act objectively without compromising influences.

Independence in appearance: Avoidance of circumstances that would reasonably appear to impair objectivity.

Self-review threat: Threat arising when the auditor evaluates work previously performed by the auditor or the firm.

Familiarity threat: Threat arising from a close or longstanding relationship with a client.

Management integrity: Honesty, transparency, and reliability of those responsible for the entity.

Professional scepticism: An attitude involving a questioning mind and critical assessment of evidence.

ISQM 1: Standard establishing firm-level quality management requirements.

ISQM 2: Standard governing engagement quality reviews.

ISA 220 (Revised): Standard on quality management for an audit of financial statements.

Engagement partner: Partner responsible for the audit engagement and its quality.

Engagement quality review: Objective evaluation of significant judgements and conclusions before report issuance.

Consultation: Seeking appropriate technical advice on difficult or contentious matters.

Difference of opinion: Unresolved disagreement among personnel or reviewers concerning an engagement matter.

Component auditor: Auditor performing work on a component of a group audit.

Quality risk: Circumstance that could prevent the firm from achieving quality objectives.

Monitoring and remediation: Evaluation of the quality system and correction of identified deficiencies.

Review Questions

Short Answer Questions

  1. What is the difference between client acceptance and client continuance?
  2. Identify the two dimensions of auditor independence.
  3. State two preconditions for an audit under ISA 210.
  4. What is the purpose of an engagement letter?
  5. Name three resources that should be assessed before accepting a complex audit.

Long Answer Questions

  1. Explain how management integrity affects an acceptance or continuance decision.
  2. Discuss the relationship between ISQM 1, ISQM 2, and ISA 220 (Revised).
  3. Explain the main threats to auditor independence and possible safeguards.
  4. Analyse why inadequate staffing or unrealistic deadlines can create audit-quality risks.
  5. Discuss the role of consultation, differences of opinion, and documentation in engagement quality management.

Analytical / Application Questions

  1. A prospective client refuses predecessor communication, has unpaid audit fees, and demands a two-week completion deadline. Evaluate whether the firm should accept and identify further procedures required.
  2. An audit firm has been asked to design a client’s accounting system and subsequently audit the resulting financial statements. Analyse the ethical threats and recommend an appropriate response.
  3. A multinational group uses automated valuation models and several overseas component auditors. Design an acceptance and quality-management plan addressing independence, competence, technology, supervision, and engagement quality review.

Multiple Choice Questions with Answers

Question 1

Which condition is a precondition for accepting an audit under ISA 210?

A. Management accepts responsibility for preparing the financial statements

B. The auditor guarantees an unmodified opinion

C. The client agrees to the lowest available fee

D. The auditor performs all bookkeeping personally

Correct Answer: A. Management accepts responsibility for preparing the financial statements

Question 2

Which situation most directly creates a self-review threat?

A. Auditing a client in a highly regulated industry

B. Evaluating financial statements prepared using accounting records designed by the audit firm

C. Using an external valuation specialist

D. Discussing audit findings with those charged with governance

Correct Answer: B. Evaluating financial statements prepared using accounting records designed by the audit firm

Question 3

Who retains overall responsibility for audit engagement quality under ISA 220 (Revised)?

A. The client’s chief financial officer

B. The external valuation specialist

C. The engagement partner

D. The internal audit director

Correct Answer: C. The engagement partner

Question 4

Which standard primarily establishes the firm-level system of quality management?

A. ISQM 1

B. ISA 210

C. ISA 315

D. ISA 505

Correct Answer: A. ISQM 1

Question 5

Why is refusal to permit communication with a predecessor auditor a significant acceptance indicator?

A. It automatically proves that fraud occurred

B. It may conceal disagreements, integrity concerns, or scope problems

C. It means the audit fee must be increased

D. It eliminates the need for an engagement letter

Correct Answer: B. It may conceal disagreements, integrity concerns, or scope problems

Question 6

Which statement best describes independence in appearance?

A. The auditor has completed all planned procedures

B. The auditor has no specialist knowledge

C. A reasonable and informed third party would not conclude that objectivity is impaired

D. The client is satisfied with the audit report

Correct Answer: C. A reasonable and informed third party would not conclude that objectivity is impaired

Question 7

Which of the following is a firm-level quality-management component under ISQM 1?

A. Preparing the client’s journal entries

B. Monitoring and remediation

C. Guaranteeing the client’s solvency

D. Setting the client’s accounting policies

Correct Answer: B. Monitoring and remediation

Question 8

What is the principal purpose of an engagement quality review?

A. To replace the engagement partner

B. To approve the client’s budget

C. To objectively evaluate significant judgements and conclusions before report issuance

D. To prepare the client’s financial statements

Correct Answer: C. To objectively evaluate significant judgements and conclusions before report issuance

Question 9

A firm lacks the specialists needed to audit a client’s complex digital-asset valuations. What is the most appropriate response?

A. Accept immediately and omit valuation procedures

B. Accept only if the client promises not to report valuation uncertainty

C. Obtain appropriate specialist resources or decline the engagement

D. Issue an opinion based solely on management representations

Correct Answer: C. Obtain appropriate specialist resources or decline the engagement

Question 10

Which principle requires the auditor to maintain knowledge and act diligently?

A. Confidentiality

B. Professional competence and due care

C. Advocacy

D. Familiarity

Correct Answer: B. Professional competence and due care

Audit & Assurance
Chapter 4 of 14