AA – L2 – Q22 – Risk Assessment

(a) ISA 315 (Revised 2019) Identifying and Assessing the Risks of Material Misstatement deals with the auditor’s responsibility to identify and assess the risks of material misstatement in the financial statements.

Required:

(i) Explain the purpose of risk assessment procedures. (3 marks)

(ii) Outline the sources of audit evidence the auditor can use as part of risk assessment procedures. (3 marks)

 

(b) Roberts & Co, an audit firm, has seven partners. The firm has a number of audit clients in different industrial sectors, with a wide range of fee income.
An audit partner of Roberts & Co has just delegated to you the planning work for the audit of Vantage Communications LLC. This company provides a range of mobile communication facilities and this will be the second year your firm has provided audit services.
You have just met with the financial controller of Vantage prior to agreeing the engagement letter for this year.
The controller has informed you that Vantage has continued to grow quickly, with financial accounting systems changing rapidly and appropriate systems of internal control being difficult to maintain. Additional services in terms of review and implementation of a system of internal control have been requested. An internal audit function has recently been established and the controller wants you to ensure that external audit work is limited by using this function.
You have also learnt that Vantage is to market a new type of mobile telephone, which is able to intercept messages from law enforcement agencies. The legal status of this telephone is unclear at present and development is not being publicised.
The granting of the licence to market the mobile telephone is dependent on the financial stability of Vantage. The financial controller has indicated that Roberts & Co may be asked to provide a report to the mobile telephone licensing authority regarding Vantage’s cash flow forecast for the year ending December 20X5 to support the licence application.

Required:
As part of your risk assessment procedures for the audit of Vantage Communications LLC for the year ending 31 December 20X8, identify and describe the issues to be considered when providing services to this client.

(c) When reporting on a cash flow forecast, explain the term ‘negative assurance’ (4 marks) and why this is used.

(a) Risk assessment procedures
(i) Purpose
The main purpose of risk assessment procedures is to provide an appropriate basis for:

  • identifying and assessing risks of material misstatement (due to fraud or error) at the financial statement and assertion levels.
  • designing further audit procedures.
    Risk assessment procedures help the auditor obtain an understanding of the audit client, specifically:
  • the audit client’s structure, ownership, governance, and business model
  • industry, regulatory, and other external factors impacting the audit client
  • measures used to assess the audit client’s financial performance
  • the applicable financial reporting framework
  • the audit client’s accounting policies, and
  • inherent risk factors impacting the susceptibility of the audit client’s financial statements to misstatement.

(ii) Sources of audit evidence
The auditor may obtain evidence from:

  • Enquiries of management and others connected with the entity such as external legal counsel or valuation experts
  • Analytical procedures including ratio analysis to obtain high-level data on the client
  • Observation of entity activities and inspection of documents, etc.

(b) Issues to be considered when providing services required
Vantage requires an enhanced range of services this year including review and implementation of additional control systems. This service provides the following risks:

Skills necessary
Roberts & Co must check whether they can provide these services. Roberts & Co is only a seven-partner firm and so the company must ensure it has the necessary staff and skills to undertake this work.

Self-review threat
There is a self-review threat. If Roberts & Co is to implement a new system of internal control then they may also be auditing those systems as part of the statutory audit. Roberts & Co must ensure different staff implement and audit the systems. Preferably different departments in the firm should undertake the work. If insufficient staff are available then Roberts & Co must refuse the additional systems work.

Acceptance of non-audit work
There is a possibility that Roberts & Co will be breaching the IESBA International Code of Ethics for Professional Accountants by accepting the work. In West Africa, the provision of non-assurance services to audit clients follows the IESBA Code.
Non-assurance work is generally not prohibited so long as the audit firm can demonstrate through appropriate safeguards that the threats to independence are reduced to an acceptable level. Firms must also be careful not to assume management responsibility.
Vantage has asked Roberts & Co to review and implement a new system of internal control. Designing internal controls is considered a management responsibility by the Code and this could not be performed by Roberts & Co.

Fee income
Acceptance of additional work will result in additional fee income for Roberts & Co. IESBA’s International Code of Ethics for Professional Accountants states that there is a presumed self-interest threat if the amount of fee income derived from one audit client represents a large proportion of the firm’s total fee income.
The rules are more stringent for public interest entities. Currently, this is not an issue as Vantage is not a public interest entity. However, given Vantage’s growth, this will need careful monitoring in the future should Vantage decide to list.

Client growth
Vantage is growing quickly. The company has poor internal controls providing high risk of financial misstatement. Roberts & Co will need to ensure that sufficient staff of appropriate experience are available and that enough time is allocated to the audit to complete all audit procedures.

Internal audit
Client expectations regarding the use of internal audit may be difficult to meet. As a new department, it will take time for the internal auditors to understand the systems at Vantage and produce any useful reports. Expectation of reduced fees will have to be managed carefully and checks made to ensure the auditor does not limit work because of fee pressure.

Association threat
Vantage is producing a new mobile telephone. The legal status of the telephone is currently uncertain; it may be illegal. Roberts & Co need to determine the likelihood that the telephone is illegal. The audit firm may not wish to be associated with a company producing illegal products.

Report on cash flow
The mobile telephone application also requires a report on Vantage’s cash flow forecast. This will be a separate engagement, with risk to Roberts & Co because Vantage may attempt to show an unrealistic cash position in the forecast. Vantage must determine exactly what type of report is required (positive or negative) and ensure they have the time and staff with the necessary skills to provide the service.

Possible going concern issues
It is not clear whether failure to obtain the new mobile telephone licence will result in Vantage no longer being a going concern. Roberts & Co will need to review the cash flow forecasts closely to determine the company’s status in the future.

(c) Meaning of negative assurance

The term negative assurance means that the auditor has carried out work on the cash flow but that the accuracy of the forecast cannot be confirmed. The auditor will report that the cash flow appears to be reasonable, but not that it shows a true and fair view. The auditor is therefore not confirming that the cash flow is correct, rather that there is nothing to indicate it is incorrect.

This type of report is appropriate for a forecast because it relates to the future and it is therefore not possible to state that the forecast is materially correct in the context of truth and fairness because the forecast has not been tested against the actual results, which are therefore uncertain. It may not be correct simply because future conditions do not agree with those under which the forecast was prepared.