Auditing - Module 1
Auditing - Module 1
MODULE 1
FUNDAMENTALS OF AUDITING AND ASSURANCE SERVICES
1. Auditing and Assurance Standards Council (AASC) has its mission to promulgate the auditing standards,
practices and procedures which shall be generally accepted by the accounting profession in the
Philippines.
2. To facilitate the preparation by the AASC of its pronouncements and to attain uniformity of those
pronouncements with international accounting standards , the AASC has approved the adoption of the
International Standards on Auditing (ISAs), International Standards on Assurance Engagements
(ISAEs), International Standards on Review Engagements (ISREs) and International Standards on
Related Services (ISRSs) issued by International Auditing and Assurance Board (IAASB) created by the
International Federation of Accountants (IFAC).
4. AASC was created by the Professional Regulation Commission upon the recommendation of the Board
of Accountancy (BOA) to assist the BOA in the establishment and promulgation of auditing standards
in the Philippines. The AASC replaced the Auditing Standards and Practices Council (ASPC) which was
established by the Philippine Institute of CPAs (PICPA) and the Association of CPAs in Public Practice
(ACPAPP) and previously set generally accepted auditing standards in the Philippines, also based on
International Standards and Practice Statements.
2
• The AASC’s engagement standards contain basic principles and essential procedures
(identified in bold type lettering) together with related guidance in the form of explanatory and
other material, including appendices. The basic principles and essential procedures are to be
understood and applied in the context of the explanatory and other materials that provide guidance
for their application. It is therefore necessary to consider the whole text of a Standard to
understand and apply the basic principles and essential procedures.
6. The nature of the Philippine Standards issued by the AASC requires professional accountants to
exercise professional judgment in applying them. In exceptional circumstances, a professional
accountant may judge it to depart from a basic principle or essential procedure of an Engagement
Standard to achieve more effectively the objective of the engagement. When such a situation arises,
the professional accountant should be prepared to justify the departure.
8. Professional accountants should be aware of and consider Practice Statements applicable to the
engagement. A professional accountant who does not consider and apply the guidance included in a
relevant Practice Statement should be prepared to explain how the basic principles and essential
procedures in the Engagement Standard(s) addressed by the Practice Statement have been complied
with.
9. Exposure period for the proposed Philippine Standard or Practice Statement is generally not shorter
than 90 days. Exposure draft is widely distributed to interested organizations and persons for
comment. The exposure draft shall also be published in the PICPA Accounting Times and ACPAPP
Bulletin to give it further exposure.
10. Issuance of exposure drafts requires approval by a majority of the members of the Council; issuance
of the Philippine Standards and Practice Statements, as well as interpretations, requires approval of at
least ten (10) members.
3
11. Each final Philippine Standard and Practice Statement, as well as interpretations, if deemed appropriate,
shall be submitted to the Professional Regulation Commission (PRC) through the Board of Accountancy
(BOA) for approval after which the pronouncements shall be published in the Official Gazette. After
publication, the AASC pronouncement becomes operative from the effective date stated therein.
12. Numbering of Philippine Standards and Practice Statements that are Philippine specific and are not
adopted from International pronouncements will be numbered consecutively with suffix “Ph” as follows:
• For Philippine Standards – starting from 100Ph
• For Philippine Practice Statements – starting from 1000Ph
Philippine Standards and Practice Statements adopted from International pronouncements will use the
same numbers as their counterpart International pronouncements.
Assurance is a broad concept. Assurance services are designed to improve the quality of decision
making by improving confidence in the information on which decisions are made; the process by which
that information is developed, and the context in which the information is presented to users. The field
of assurance services is much broader than the traditional audits of financial statements.
According to Structure
a. There must be written assertion being made by one party, the reliability of which is of interest to
another party.
b. There must be agreed-upon and objective criteria that can be utilized to assess the accuracy of the
assertion.
c. The assertion must be amenable to verification by independent party.
d. The practitioner or accountant should prepare a written conclusion about the reliability of the
assertion or assertions.
a. An independent audit engagement provides a reasonable (but not absolute) level of assurance
that the subject matter (financial statements) is free of material misstatement.
b. A review engagement provides a moderate level of assurance that the information subject to
review is free from material misstatement; this is expressed in the form of negative assurance (i.e.
“nothing has come to the auditor’s attention”). For the purpose of expressing negative assurance
in the review report, the auditor should obtain sufficient appropriate evidence primarily through
inquiry and analytical procedures to be able to draw conclusions
In direct reporting engagement, the practitioner either directly performs the evaluation or
measurement of the subject matter, or obtains a representation from the responsible party that has
performed the evaluation or measurement that is not available to the intended users. The subject
matter information is provided to the intended users in the assurance report.
Criteria are made available to the intended users in one or more of the following ways:
a. Publicly
b. Through inclusion in a clear manner in the presentation of the subject matter information
c. Through inclusion in a clear manner in the assurance report
d. By general understanding, for example the criterion for measuring time in hours and minutes.
Criteria may also be available to specific intended users, for example, the terms of a contract, or
criteria issued by an industry association that are available only those in the industry. When identified
criteria are available only to specific intended users, or are relevant only to a specific purpose, use
of the assurance report is restricted to those users or for that purpose.
6
In a reasonable assurance engagement, the practitioner expresses the conclusion in the positive
form, for example: “In our opinion internal control is effective, in all material respects, based on XYZ
criteria.” This form of expression conveys “reasonable assurance”.
In a limited assurance engagement, the practitioner expresses the conclusion in the negative form,
for example: “Based on our work described in this report, nothing has come to our attention that
causes us to believe that the internal control is not effective, in all material respects, based on XYZ
criteria. This form of expression conveys a level of “limited assurance” that is proportional to the level
of the practitioner’s evidence –gathering procedures given the characteristics of the subject matter
and other engagement circumstances described in the assurance report
Assurance Engagements
1. Audits – high level of assurance that the financial statements are free of material misstatements
2. Reviews – limited investigation of much narrower scope than the audit and undertaken for the
purpose of providing limited (negative) assurance that the statements are presented in accordance
with identified Financial Reporting Standards. For example, a financial institution may require
debtors to engage CPAs to provide assurance about the debtor’s compliance with certain
covenant provisions stated in the loan agreement. It may also include providing assurance
about the effectiveness of a client’s internal controls over financial reporting, review of
investment performance statistics for organizations such as mutual funds and
computer software review.
7
• CPA Web Trust – provide assurance to users of web sites in the Internet. The CPA’s electronic
Web Trust Seal is affixed to the website. This seal assures the user that the website owner
has met established criteria related to business practices, transaction integrity and information
processes. Web Trust is an attestation service and Web Trust seal s a symbolic representation
of the CPA’s report on management assertions about its disclosure of electronic commerce
practices.
• SysTrust – provide assurance on any defined electronic system. The system components
include its infrastructure, software, personnel, procedures and data, In a SysTrust engagement,
the CPA is engaged to examine only that a client maintained effective controls over the system
based on the Trust Services Principles and Criteria. The practitioner performs tests to
determine whether those controls were operating as effectively during the specified report.
Both WebTrust and SysTrust are designed to incorporate a seal management process by
which a seal (logo) may be included on a client’s Web site as an electronic representation of
the practitioner’s unqualified WebTrust report. If a client wishes to use the seal (logo), the
engagement must be updated at least annually. Also, the initial reporting period must include
at least two months.
• Eldercare Plus – focuses on the needs of the elderly and whether caregivers are providing
services that meet the specified objectives or at an acceptable level.
• Information Reliability Services – provide assurance that information system has been
designed and operated to produce reliable data including tests of the system to determine
whether the system protects against potential causes of data defects
• Risk Assessment Services – involves the study of the link between risks and organization’s
vision, mission, objectives and strategies and development of new and relevant measures to
address these risks.
• CPA Performance View. This service is intended to demonstrate that the public accountants
can aide client firms in developing an integrated set of financial and non-financial performance
and measures to employ in managing the client’s business. It also identifies and measures key
activities that are critical to the entity.
• Health Care Performance Measurement – involves the evaluation of the quality of health
care, medical services and outcome.
8
1. Agreed-upon procedures – an engagement in which the auditor is engaged to carry out those
procedures of an audit nature to which the auditor and the entity and any appropriate third parties
have agreed and to report on factual findings. The recipients of the report must form their own
conclusions from the report issued by the auditor. The report is restricted to those parties who
have agreed to the procedures to be performed since others, unaware of the results may
misinterpret the results.
4. Management consulting and other advisory services – professional services that employ the
practitioner’s technical skills, education, observation, experiences and knowledge of the analytical
approach and procedures used in consulting engagement. Those procedures may involve
determining client objectives, fact-finding definition of problems or opportunities, evaluation of
alternatives, formulation of proposed action, and communication of results, implementation and
follow-up.
Assurance engagement risk is the risk that the practitioner expresses an inappropriate conclusion
when the subject matter information is materially misstated.
However, in a limited assurance engagement, the combination of the nature, timing and extent of
evidence gathering procedure is at least sufficient for the practitioner to obtain a meaningful level of
assurance as the basis for a negative form of expression. To be meaningful, the level of assurance
obtained by the practitioner is likely to enhance the intended users’ confidence about the subject
matter information to a degree that is clearly more than inconsequential.
9
In general, assurance engagement risk can be represented by the following components, although
not all of these components will necessarily be present or significant for all assurance engagements:
a) The risk that the subject matter information is materially misstated, which in turn consists of:
i) Inherent risk: the susceptibility of the subject matter information to a material
misstatement, assuming that there are no related controls; and
ii) Control risk: the risk that a material misstatement that could occur will not be prevented,
or detected and corrected, on a timely basis by related internal controls. When control risk
is relevant to the subject matter; some control risk will always exist because of the inherent
limitations of the design and operation of internal control; and
b) Detection risk: the risk that the practitioner will not detect a material misstatement that exists.
The degree to which the practitioner considers each of these components is affected by the
engagement circumstances, in particular by the nature of the subject matter and whether a
reasonable assurance or a limited assurance engagement is being performed.
C. Introduction to Auditing
Key elements:
b. Is independent of management and the third-parties, and can thus provide an objective opinion
on the fairness of financial statements.
Origin of Auditing
The word “auditor” was initially derived from the Latin word audire that is “to hear” and later acquired a
secondary meaning: “one who satisfies himself as to the truth of the accounting of another.”
Procedures: a. Evaluate the client’s background and reasons for the audit.
b. Determine whether the auditor is able to meet the ethical requirements regarding the
client.
c. Determine need for other professionals or experts.
d. Communicate with predecessor auditor.
e. Prepare client proposal.
f. Select staff to perform audit.
g. Obtain an engagement letter.
Objective: Determine the amount and type of evidence required to give the auditor assurance
that there is no material misstatement of the financial statements.
Procedures: a. Perform audit procedures to understand the entity and its environment
including the entity’s internal control.
b. Assess the risks of material misstatements of the financial statements.
c. Determine materiality.
d. Prepare the planning memorandum and audit program containing auditor’s
response to the identified risks.
Objective: Test for evidence supporting internal controls and the fairness of the financial
statements.
1. Perform risk assessment procedures (PSA 315 “Understanding the Entity and Its
Environment and Assessing the Risks of Material Misstatement”)
Assess the risks of material misstatement at the financial statement level and assertion level by:
• Identifying risks through understanding the entity and its environment, including internal
control , classes of transactions, account balances disclosures.
• Relating the identified risks to what can go wrong at the assertion level.
• Considering the significant risks and likelihood of the risks.
3. Respond to assessed risks (PSA 330 “The Auditor’s Procedures in Response to Assessed
Risks”)
Respond to the risks at the financial statement level and assertion level by
• Developing overall responses to the assessed risks at the financial statement level; and
• Determining the nature, timing and extent of further audit procedures at the assertion level.
4. Perform further audit procedures. (PSA 330 “The Auditor’s Procedures in Response to
Assessed Risks”)
Perform further audit procedures that are clearly linked to risks at the assertion level by
• Performing tests of the operating effectiveness of controls.
• Performing substantive procedures.
5. Evaluate audit evidence obtained. (PSA 330 “The Auditor’s Procedures in Response to
Assessed Risks”)
F. PSA 200 Revised and Redrafted, “Overall Objectives of the Independent Auditor
and the Conduct of an Audit in Accordance with PSAs”
This sets out the overall objective of the independent auditor, and explains the nature and scope of an
audit designed to enable the independent auditor to meet those objectives.
The general purpose of an audit is to enhance the credibility of the financial statements, thus ensuring the
user of the financial statements can make reasonable, informed decisions about an entity. This is achieved
by the expression of an opinion by the auditor on whether the information contained within the financial
statements is presented fairly, in all material respects, in accordance with applicable financial reporting
framework. Auditors who follow the PSAs and the ethical guidelines will be able to form an opinion provided
evidence is available to support their opinion. If the evidence is lacking, the auditor will not able to form
an opinion and should modify their report accordingly.
In conducting an audit of financial statements, the overall objectives of the auditor are:
a. To obtain reasonable assurance about whether the financial statements as a whole are free from
material misstatement, whether due to fraud or error, thereby enabling the auditor to express an
opinion on whether the financial statements are prepared, in all material respects, in accordance with
an applicable financial reporting framework,
b. To report on the financial statements, and communicate as required by the PSAs, in accordance with
the auditor’s findings.
- The financial reporting framework adopted by management and, where appropriate, those charged
with governance in the preparation and presentation of the financial statements that is acceptable in
view of the nature of the entity and the objective of the financial statements, or that is required by law
or regulation.
“Fair presentation framework” is used to refer to a financial reporting framework that requires
compliance with the requirements of the framework and
1. Acknowledges explicitly or implicitly that, to achieve fair presentation of the financial statements,
it may be necessary for management to provide disclosures beyond those specifically required by
the framework.
2. Acknowledges explicitly that it may be necessary for management to depart from a requirement of
the framework to achieve fair presentation of the financial statements. Such departures are
expected to be necessary only in extreme rare circumstances.
The term “scope of the audit” refers to the audit procedures deemed necessary in the circumstances to
achieve the objective of the audit. The procedures required to conduct an audit in accordance with PSAs
should be determined by the auditor having regard to the requirements of PSAs, relevant professional
bodies, legislation, regulations and where appropriate, the terms of the audit engagement and reporting
requirements.
13
1. Government audit – determination of whether government funds are being handled properly and in
compliance with existing laws and whether the programs are being conducted efficiently and
economically.
▪ Financial and compliance audit – determines whether financial operations are properly conducted,
the financial reports of an audited entity are presented fairly, and the entity has complied with
applicable laws and regulations.
▪ Economy and efficiency audit – determines whether the entity is managing and utilizing its
resources economically and efficiently, the causes of inefficiencies or uneconomical practices and
whether the entity has complied with laws and regulations concerning matters of economy and
efficiency.
▪ Programs results – determines if the desired results and benefits are being achieved, if the
objectives established by the legislative or other authorizing body are being met and if the agency
has considered alternatives which might yield results at a lower cost.
The Commission on Audit is recognized as the Supreme Audit Institution in the Republic of the
Philippines.
Three Main Divisions of State Audit (based on 1984 Primer on Government and Auditing in
the Philippines)
a. Compliance Audit - examination, audit, and settlement in accordance with laws and regulations.
b. Financial Audit – audit of the accounting, and financial system and controls to ensure reliability of
recorded financial data. The objective of this audit is the expression of an opinion on the fairness
with which the financial condition and results of operation are presented
c. Performance audit – objective examination of the financial and operational performance of an
organization, program, activity or function and is oriented towards opportunities for greater
economy, efficiency and effectiveness.
2. Internal audit – an independent, objective assurance and consulting activity designed to add value
and improve an organization’s operations. It helps an organization to accomplish its objectives by
bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk
management, control and governance processes.
c. Financial audit – historically oriented, independent evaluation performed by the internal auditor for
the purpose of ensuring the fairness, accuracy, and reliability of the financial data.
3. Comprehensive audit – usually includes the components of compliance, performance and financial
statements audit.
4. Integrated audit - covers financial statements audit and internal control audit.
5. Environmental audit – covers environmental issues which may have an impact on the financial
statements.
6. Compliance audit- is used to determine whether a person or entity has adhered to laws and
regulations. Results of compliance audits are generally reported to a specific user within the
organization.
7. Forensic audit (Fraud Audit) – refers to the examination of evidence regarding an assertion to
determine its correspondence to established criteria carried out in a manner suitable to the court.
H. Types of Auditors
1. External (independent) auditors – public accountants, both individuals and firms, who perform audit,
tax, consulting and other types of services for external clients.
2. Internal auditors – perform services for a single organization for which they are employed on a full-
time basis, typically reporting to the board of directors who are the primary users of their work.
3. Government auditors – are full-time employees of the government tasked to determine compliance
with laws, statutes, policies and procedures.
4. Forensic auditors – financial auditing specialists who focus on unearthing the truth and/or providing
evidence in a legal/financial disputes and/or irregularities (including fraud), as well as providing
preventive advice on the subject.
I. Limitations Of Audit
a. The auditor should comply with the “Code of Professional Ethics for Certified Public Accountants”
promulgated by the Board of Accountancy.
Part A of the Code sets out the fundamental ethical principles that all professional accountants are
required to observe, including:
1. Integrity;
2. Objectivity;
3. Professional competence and due care;
4. Confidentiality; and
5. Professional behavior.
b. The auditor should conduct an audit in accordance with Philippine Standards on Auditing.
c. The auditor should plan and perform the audit with an attitude of professional skepticism
recognizing that circumstances may exist which may cause the financial statements to be materially
misstated.
1. There is a potential conflict between those who prepare information (management) and those who use
information (owners, creditors, investors and regulators). This potential conflict can result in biased
information.
2. Information can have substantial economic consequences for a decision maker. (Financial
Consequences)
3. Expertise is often required for preparing and verifying information.
4. Users of information frequently are prevented from directly assessing the quality of information.
(Remoteness)
5. Voluminous data.
The philosophical theories that explain the demand for auditing and support the performance of an
independent audit are as follows: (a) stewardship or agency theory, (2) motivational theory, (3) information
theory, and (4) insurance theory.
1. Stewardship or Agency Theory – Stewardship or agency theory implies that the manager (as well
as the owners or investors) wants the credibility of an audit adds to the financial statement
assertions. The manager is the agent or steward of the owners or investors, but each party acts in
his or her own self-interest and the goals or objectives of each party are different.
2. Motivational Theory - Preparers of financial statements know that their assertions will be subjected
to an audit; thus, financial statements will be brought more in line with accounting standards.
3. Information Theory – An assurance service is a means of improving the quality of information.
4. Insurance Theory – The insurance theory states the demand for assurance occurs from those who
may suffer loss when things go wrong.
1. Partner
- Concerned about the overall quality of each audit and ultimately responsible for the resolution of
technical matters, such as application of accounting principles or which auditing
procedures are to be performed. An audit partner signs the audit report and is generally
involved in maintaining client relationships, planning audits and evaluating the audit findings.
2. Manager/Supervisor
- Administers important aspects of audit engagements, scheduling the audit work to be done with
client personnel, assigning work to audit staff, supervising audit staff and reviewing staff work.
Q. Factors That Influence The Setting Of Audit Fees - (Fair Reflection Of The Value
Of Work)
1. Risks involved.
2. Complexity.
3. Time and volume involved.
4. Responsibility involved.
5. Conditions of accounting records and supporting documents.
6. Cooperation to be extended by the client’s staff.
1. Sole Proprietorships.
2. Partnerships.
T. Core Values
These are the essential and enduring beliefs that a CPA professional upholds over time. These enable the
CPAs to retain their unique character and value as they embrace the changing dynamics of the global
economy.
1. Integrity
2. Competence
3. Lifelong Learning
4. Objectivity
5. Commitment to Excellence
6. Relevance in the Global Marketplace
18
U. Core Competencies
These are the unique combination of human skills, knowledge and technology that provides value and
results to users.
1. Communication Skills
2. Leadership Skills
3. Critical Thinking and Problem – Solving Skills
4. Anticipating and Serving Evolving Needs
5. Synthesizing Intelligence to Insight
6. Integration and Collaboration
************