Ethics and Terms of Audit Engagements — Practice

Question 1

State the five fundamental principles of the ICAI Code of Ethics, and explain the difference between objectivity and integrity, which candidates commonly conflate.

Accepted Answer

The five fundamental principles are integrity, requiring the member to be straightforward and honest in all professional and business relationships; objectivity, requiring the member not to allow bias, conflict of interest or undue influence of others to override professional or business judgements; professional competence and due care, requiring the member to maintain professional knowledge and skill at the level required to ensure a client or employer receives competent professional service, and to act diligently in accordance with applicable technical and professional standards; confidentiality, requiring the member to respect the confidentiality of information acquired through professional and business relationships and not disclose it without proper authority or use it for personal advantage; and professional behaviour, requiring the member to comply with relevant laws and regulations and avoid conduct that discredits the profession. Integrity and objectivity, though closely related and often confused, address different failure modes: integrity concerns honesty, being straightforward and truthful, and a breach of integrity typically involves deliberate dishonesty or misrepresentation, such as knowingly signing off on a figure known to be false. Objectivity concerns freedom from bias and undue influence in forming a judgement, and a breach of objectivity can occur even where the member is being entirely honest about their conclusion, if that conclusion has itself been distorted by a conflict of interest or an external pressure the member has allowed to affect their judgement, such as a member with a personal financial stake in a client's success reaching an overly favourable, though sincerely believed, conclusion about that client's accounts. A member can therefore be honest, satisfying integrity, while still having reached a biased conclusion, failing objectivity, which is why the Code treats them as two distinct principles rather than one combined concept.

Question 2

Explain the conceptual framework approach the ICAI Code of Ethics adopts, and why this is preferred over a rigid, exhaustive rulebook attempting to list every possible ethical scenario.

Accepted Answer

The conceptual framework approach requires a member to identify threats to compliance with the fundamental principles, evaluate the significance of those threats, and apply safeguards, where necessary, to eliminate the threats or reduce them to an acceptable level, using professional judgement throughout this process applied to the specific facts and circumstances of each situation, rather than mechanically checking a fact pattern against a predetermined, exhaustive list of prohibited scenarios. This is preferred over a rigid rulebook because the range of situations a professional accountant might encounter in practice, across every conceivable type of client relationship, engagement, and personal or business circumstance, is genuinely too vast and too varied for any list of specific rules to anticipate exhaustively; a rulebook approach would inevitably leave gaps, situations not explicitly covered by any specific rule but which nonetheless plainly threaten the fundamental principles in substance, and a member relying purely on the absence of an applicable specific prohibition might conclude, wrongly, that an obviously compromising situation is permitted simply because no rule happened to name it. The conceptual framework approach instead equips the member with a general analytical method, identify the threat, assess how significant it is, and respond appropriately, that can be applied to any new or unusual situation as it arises, relying on the member's own professional judgement informed by the underlying principles rather than requiring an ever-growing, inevitably incomplete list of specific prohibited scenarios.

Question 3

Identify the threat created by each: (a) an audit partner holds a significant shareholding in the audit client; (b) the audit firm prepared the client's financial statements and is now auditing the same statements; (c) the audit engagement partner has served the same client for fifteen consecutive years with no rotation; (d) the client threatens to terminate the engagement unless the auditor withdraws a proposed adjustment; (e) the audit firm's tax department represents the client in a dispute with the tax authorities.

Accepted Answer

Item (a) creates a self-interest threat, since the partner's financial interest, the shareholding, could inappropriately influence judgement or behaviour regarding this client, the partner having a personal financial stake in the client's reported results and continued success. Item (b) creates a self-review threat, since the firm would be evaluating, in the audit, the results of a judgement it made itself when preparing the same financial statements, and a firm is unlikely to appropriately and objectively critique its own prior work product. Item (c) creates a familiarity threat, since a long, fifteen-year relationship with no rotation creates the risk that the engagement partner has become too sympathetic to the client's interests, or too accepting of the client's explanations and work, purely through the closeness and duration of the relationship, regardless of the partner's genuine intentions. Item (d) creates an intimidation threat, since the client is applying pressure, here a threat to terminate the engagement, specifically to deter the auditor from maintaining an objective, professionally justified position on the proposed adjustment. Item (e) creates an advocacy threat, since the firm's tax department representing the client in a dispute with the tax authorities means the firm is promoting the client's position in that dispute, and this advocacy role could compromise the audit team's objectivity when it comes to auditing matters connected to, or potentially affected by, the outcome of that same dispute, such as a related tax provision in the financial statements.

Question 4

For each threat identified in the previous problem, propose a specific safeguard that would address it, explaining briefly why the safeguard is well matched to that specific threat.

Accepted Answer

For the self-interest threat arising from the partner's shareholding, the appropriate safeguard is for the partner to dispose of the shareholding entirely, or, if that is not immediately practicable, to be removed from the engagement team for this client altogether; addressing the source of the threat directly, by eliminating the financial interest or the person holding it from the engagement, is the most robust safeguard where a genuine, ongoing conflict of financial interest cannot otherwise be reduced. For the self-review threat arising from the firm having prepared the client's financial statements, the appropriate safeguard is for the firm to decline to perform the audit of statements it prepared itself, since a self-review threat of this kind, involving the audit of the firm's own significant, judgemental work product, is generally considered too significant to be adequately addressed by any lesser safeguard such as a second reviewer, and declining the conflicting engagement removes the threat at its source. For the familiarity threat arising from fifteen years without rotation, the appropriate safeguard is rotating the engagement partner, and potentially other senior members of the engagement team, off this client, introducing fresh perspective and distance to counter the closeness the extended relationship has created; this is precisely why mandatory partner rotation rules exist in many jurisdictions specifically to address familiarity risk on long-standing engagements. For the intimidation threat arising from the termination threat, the appropriate safeguard is to discuss the matter with those charged with governance, such as the audit committee, rather than the management applying the pressure, and to consult with the firm's own ethics or risk function, or seek independent professional advice, ensuring the auditor's position is not simply capitulated to under improper pressure from the very individuals whose figures are being challenged. For the advocacy threat arising from the tax department's representation, the appropriate safeguard is for a different partner and team, entirely separate from the tax dispute engagement, to be involved in reviewing the relevant audit work, or, where the advocacy role is sufficiently significant and connected to matters material to the audit, for the firm to decline to provide one of the two conflicting services altogether.

Question 5

Distinguish safeguards created by the profession, legislation or regulation from safeguards within the work environment, giving two examples of each.

Accepted Answer

Safeguards created by the profession, legislation or regulation operate at a broad, systemic level, applying across the profession as a whole rather than being specific to any individual firm or engagement; examples include educational, training and experience requirements for entry into and continuation within the profession, ensuring only appropriately qualified individuals practise, and continuing professional development requirements, ensuring members maintain their competence over time; further examples include professional standards themselves together with monitoring and disciplinary processes overseen by the professional body, and external review, by a legally empowered third party, of the reports, returns, communications or information produced by a member or firm. Safeguards within the work environment, by contrast, are specific to a particular firm or engagement and are established and applied by the firm or the individual member directly, operating at two further sub-levels: firm-wide safeguards, such as leadership of the firm that stresses the importance of compliance with the fundamental principles and establishes a culture of quality, and policies and procedures for identifying and evaluating threats and applying appropriate safeguards; and engagement-specific safeguards, such as involving an additional appropriately qualified professional to review the work done, or to advise as necessary, and rotating senior personnel on a long-standing engagement. The distinction matters because profession-level safeguards exist as a general backdrop protecting the credibility of the profession as a whole and apply regardless of the specific threat any individual member encounters on a given day, while work-environment safeguards must be actively identified and applied by the specific firm or member facing a specific threat in a specific engagement, and it is this second category that typically forms the direct, tailored response to a threat identified in a specific fact pattern of the kind examined throughout this chapter.

Question 6

An auditor genuinely holds no financial interest in a client and has formed a wholly unbiased opinion, but the auditor's spouse is the client's chief financial officer, a fact known to informed observers. Explain why this situation, despite the auditor's genuine lack of bias, still fails to satisfy independence, connecting the answer to the two components of independence.

Accepted Answer

Independence requires both independence of mind, the actual state of mind permitting an opinion to be expressed without being affected by influences that compromise professional judgement, and independence in appearance, the avoidance of facts and circumstances significant enough that a reasonable and informed third party would conclude the auditor's integrity, objectivity or professional scepticism had been compromised, and both must be satisfied together, since either alone is insufficient. On the facts given, the auditor may well genuinely satisfy independence of mind: the facts state the auditor holds no financial interest and has formed a wholly unbiased opinion, and there is no reason to doubt this genuine, internal state of impartiality. But the situation fails independence in appearance, because a reasonable and informed third party, aware that the auditor's spouse holds the senior financial position of chief financial officer at the very client being audited, would very reasonably conclude that the auditor's objectivity and scepticism could have been compromised by this close family relationship to someone directly responsible for preparing the figures the auditor is examining, regardless of whether the auditor's own conclusions happen, in fact, to be genuinely unbiased. The Code requires both components together precisely because the credibility and public value of an audit depends not only on the auditor genuinely being unbiased, which an outside observer has no direct way of verifying, but also on there being no reasonable basis for a well-informed observer to doubt that impartiality; an audit opinion that is substantively sound but issued in circumstances a reasonable observer would view with suspicion fails to deliver the public confidence the whole institution of independent audit exists to provide, which is exactly why appearance, and not merely genuine internal impartiality, is treated as an independently necessary requirement.

Question 7

State the preconditions for an audit under SA 210, and advise an auditor approached by a prospective client whose management refuses to acknowledge responsibility for the entity's internal control.

Accepted Answer

Before accepting an audit engagement, SA 210 requires the auditor to determine that the preconditions for an audit are present, comprising two elements: first, confirming that the financial reporting framework to be applied in the preparation of the financial statements is acceptable, and second, obtaining the agreement of management that it acknowledges and understands its responsibility for the preparation of the financial statements in accordance with the applicable financial reporting framework, including where relevant their fair presentation, for such internal control as management determines is necessary to enable the preparation of financial statements that are free from material misstatement, whether due to fraud or error, and for providing the auditor with access to all information of which management is aware that is relevant to the preparation of the financial statements, additional information the auditor may request, and unrestricted access to persons within the entity from whom the auditor determines it necessary to obtain audit evidence. A prospective client whose management refuses to acknowledge responsibility for the entity's internal control has failed to satisfy the second precondition, since this acknowledgement of responsibility is one of the specific matters management must expressly agree to before the engagement can properly proceed as an audit; without this acknowledgement, the fundamental division of responsibility this whole subject has repeatedly emphasised, that management prepares and is responsible for the financial statements and the internal control necessary to support them, while the auditor examines and opines, cannot be properly established, and the auditor should not accept the engagement until management is willing to provide this acknowledgement, since proceeding without it would leave the audit built on an unclear and disputed foundation regarding who is actually responsible for what.

Question 8

A prospective client proposes engagement terms that would deny the auditor access to a significant subsidiary's records entirely, and the auditor believes this restriction would necessarily result in a disclaimer of opinion. State what SA 210 requires the auditor to do, and the reasoning behind this requirement.

Accepted Answer

SA 210 provides that if management imposes a limitation on the scope of the auditor's work in the terms of a proposed audit engagement such that the auditor believes the limitation will result in the auditor disclaiming an opinion on the financial statements, the auditor shall not accept such a limited engagement as an audit engagement, unless required by law or regulation to do so. On these facts, the auditor believes the proposed restriction on access to the significant subsidiary's records would necessarily result in a disclaimer of opinion, and the auditor should accordingly decline to accept the engagement on these terms at all, rather than accepting it and simply issuing a disclaimer at the end. The reasoning behind this requirement is that accepting an engagement the auditor already knows, at the outset, cannot produce a meaningful audit opinion would be an exercise with little genuine value, consuming client and audit resources to arrive at a foregone, uninformative conclusion the auditor could have identified before any work began, and it could also risk misleading users into believing a genuine audit process was undertaken when, in substance, the engagement was never capable of reaching a substantive conclusion from the outset given the restriction management itself has imposed. Requiring the auditor to decline such an engagement upfront, rather than accepting it and disclaiming later, protects the integrity and credibility of what an audit engagement actually represents: an undertaking the auditor genuinely believes, going in, is capable of supporting a meaningful conclusion, subject of course to whatever the audit work actually reveals once genuinely performed under terms that do not predetermine an uninformative outcome.

Question 9

State whether an auditor must send a new engagement letter every year for a long-standing recurring audit client, and list three factors that would make it appropriate to do so despite the general rule.

Accepted Answer

There is no general requirement to send a new engagement letter every single year for a recurring audit; SA 210 recognises that the auditor may decide not to send a new engagement letter or other written agreement each period, since the terms agreed for a prior period generally remain applicable and there is no need to formally re-document them afresh purely because a new financial year has begun. However, certain factors may make it appropriate to revise the terms of the audit engagement or to remind the entity of existing terms despite this general position, and three such factors are: any indication that the entity misunderstands the objective and scope of the audit, which if left unaddressed could lead to a mismatch between what the entity expects and what the auditor is actually obligated to deliver; a recent change in senior management, such as a new chief executive or finance director, who may not be personally familiar with the previously agreed terms and would benefit from having them freshly communicated and reaffirmed; and a significant change in the nature or size of the entity's business, which might itself call for a genuine revision of the engagement's scope or terms rather than merely a reminder of what was previously agreed, since the previously agreed terms may no longer be appropriate to the entity's now-changed circumstances. Other recognised factors include any revised or special terms of the engagement, a significant change in ownership, a change in legal or regulatory requirements, and a change in the applicable financial reporting framework, each representing a circumstance significant enough to warrant revisiting whether the existing, unrevised terms genuinely remain adequate and mutually understood.

Question 10

State when a member may disclose confidential client information without breaching the confidentiality principle, and give one example of each permitted category.

Accepted Answer

The confidentiality principle requires a member to respect the confidentiality of information acquired through professional and business relationships and not to disclose it to third parties without proper and specific authority, unless there is a legal or professional right or duty to disclose. Disclosure is permitted where authorised by the client, meaning the client has given specific consent, an example being a client authorising the auditor to share specific financial information with a prospective lender as part of a loan application. Disclosure is also permitted, and in some cases required, where there is a legal duty to disclose, such as where the member is compelled to produce documents or give evidence in legal proceedings, or is required to report a suspected offence such as money laundering under applicable law, in which case confidentiality does not permit the member to withhold information a court or a statutory reporting obligation genuinely requires to be disclosed. Disclosure is further permitted where there is a professional duty or right to disclose, such as complying with a quality review conducted by or on behalf of the professional body, responding to an inquiry or investigation by the professional body or a regulator, or protecting the member's own professional interests in legal proceedings, for instance where the member needs to disclose otherwise confidential information to defend against a claim brought by the client. In each of these categories, disclosure is permitted precisely because the member is not acting purely on personal discretion but is responding to a specific authorisation or a genuine, recognised legal or professional obligation that overrides the general default of confidentiality.

Question 11

An auditor, competent in general commercial audits, accepts an engagement to audit a complex derivatives trading firm without any specific experience or additional training in that specialised area, and does not seek assistance from anyone with relevant expertise. Identify which fundamental principle is at risk and explain why.

Accepted Answer

The principle at risk is professional competence and due care, which requires a member to maintain professional knowledge and skill at the level required to ensure that a client or employer receives competent professional service, based on current developments in practice, legislation and techniques, and to act diligently and in accordance with applicable technical and professional standards when providing professional services. The auditor's general competence in ordinary commercial audits does not automatically extend to a highly specialised area such as complex derivatives trading, which typically involves distinctive valuation techniques, specialised accounting treatments, and risks that a general auditor without specific experience or training in that area may not be equipped to properly identify, assess or test; accepting this engagement without either possessing the necessary specialised competence, obtaining relevant additional training, or seeking assistance from someone who does have the necessary expertise, risks the auditor performing an audit that fails to meet the standard of competent professional service the principle requires, potentially missing risks or misapplying procedures in ways a genuinely competent specialist auditor would not. The principle does not require every auditor to be an expert in every possible specialised area before accepting any engagement, but it does require the auditor to honestly assess whether they, or their firm with appropriate support, genuinely possess or can readily acquire the competence a specific engagement demands, and where that competence is genuinely lacking and cannot be adequately supplemented, declining the engagement, or engaging appropriate specialist assistance, is what the principle requires rather than proceeding regardless.

Question 12

An audit engagement partner has personally audited the same client for twelve consecutive years, during which the client has become the firm's single largest source of fee income, and the partner's adult child recently joined the client as a junior accountant. Identify all the threats present, and explain why a single safeguard is unlikely to be sufficient here.

Accepted Answer

This scenario presents at least three distinct threats operating simultaneously. The twelve consecutive years of the same partner auditing the same client creates a familiarity threat, the risk that the extended relationship has made the partner too sympathetic to the client's interests or too accepting of its explanations and work. The client having become the firm's single largest source of fee income creates a self-interest threat, since the firm's financial dependence on retaining this specific client could inappropriately influence the objectivity of decisions made about the audit, particularly any decision that might risk the relationship, such as raising a difficult qualification or disagreement. The partner's adult child recently joining the client as a junior accountant creates a further, distinct self-interest threat, and depending on the closeness of the relationship and the child's role, potentially a familiarity threat as well, since a close family member's employment at the client could influence the partner's judgement, whether through a desire to protect the child's position or through informal access to information that could compromise objectivity. A single safeguard is unlikely to be sufficient here because each of these threats arises from a different underlying cause and would require a different specific response: rotating the partner off the engagement would address the familiarity threat from the long relationship and would also remove the direct conflict created by the child's employment there, but would not on its own address the firm-level self-interest threat arising from fee dependency, which would instead require separate measures such as an independent quality review of the engagement by someone outside the immediate relationship, or broader firm-level action to reduce reliance on this single client's fees over time. A genuinely appropriate response would likely need to combine several safeguards together, addressing each identified threat specifically rather than assuming that resolving one, such as partner rotation, automatically resolves the others.

Question 13

List the typical contents of an audit engagement letter, and explain why identifying the applicable financial reporting framework is included as a specific, named item rather than being left implicit.

Accepted Answer

The typical contents of an audit engagement letter include the objective and scope of the audit of the financial statements; the responsibilities of the auditor; the responsibilities of management; identification of the applicable financial reporting framework for the preparation of the financial statements; and reference to the expected form and content of any reports to be issued by the auditor, together with a statement that there may be circumstances in which a report may differ from its expected form and content. Identifying the applicable financial reporting framework is included as a specific, named item rather than being left implicit because the framework against which the financial statements are prepared, and against which the auditor's opinion is ultimately expressed, is not always self-evident or beyond dispute; different entities may properly apply different frameworks depending on their size, listing status or specific regulatory requirements, as this whole syllabus has explored in the context of Level I through IV applicability and the Ind AS versus AS distinction, and a misunderstanding or disagreement about which framework genuinely applies could fundamentally undermine the value of the audit, since the auditor's opinion is meaningful only with reference to a specific, agreed framework. Making this an explicit, named term of the engagement removes any ambiguity at the outset about what standard the financial statements, and therefore the audit itself, will be measured against, ensuring both parties share a clear, common understanding of the very benchmark the entire engagement is built around before any audit work begins.

Question 14

Explain what the professional behaviour principle requires beyond mere compliance with the law, and give an example of conduct that might be lawful but would still breach this principle.

Accepted Answer

The professional behaviour principle requires a member to comply with relevant laws and regulations and to avoid any conduct that the member knows or should know may discredit the profession, which extends the principle's reach beyond mere legal compliance to encompass a broader standard of conduct that protects the reputation and standing of the profession as a whole in the eyes of the public and of those who rely on the work of its members. This means a member's conduct is judged not only by whether it is technically lawful, but by whether a reasonable and informed third party would consider it to reflect poorly on the profession's reputation for integrity and competence, a standard that can be breached even by conduct that involves no actual illegality at all. An example of conduct that might be lawful but would still breach this principle is a member making exaggerated, misleading, or disparaging claims about competitors' work or qualifications in advertising or public statements about their own services; such statements might not violate any specific law against defamation or false advertising if carefully worded to avoid outright legal liability, but conduct of this kind, seeking to enhance one's own standing by unfairly disparaging fellow professionals rather than through genuine demonstration of competence, is widely regarded within the profession as discreditable and inconsistent with the collegial, trust-based standing the profession as a whole depends upon, illustrating why the principle is deliberately framed more broadly than simple legal compliance.

Question 15

A client requests, partway through the audit, that the auditor change the engagement from a reasonable assurance audit to a lower-assurance review engagement, citing cost concerns. Explain the considerations the auditor should apply before agreeing to this request, connecting to the concepts developed elsewhere in this subject.

Accepted Answer

The auditor should exercise considerable caution before agreeing to change the engagement from a reasonable assurance audit to a lower-assurance review, since a request to reduce the level of assurance partway through an already-commenced engagement raises a specific and important concern about the reason behind the request, over and above the client's stated cost justification. The auditor should consider whether there is a reasonable justification for the change, such as a genuine, legitimate change in the client's circumstances or a misunderstanding about the nature of the originally requested service now being corrected, as against the possibility that the request has been prompted by information that has come to light during the course of the audit itself, such as the audit work to date revealing findings, difficulties or emerging concerns the client would prefer not to have subjected to the more rigorous scrutiny a full audit, and its more assertive form of opinion, would involve; a review engagement, providing only limited rather than reasonable assurance, involves less extensive procedures and a correspondingly weaker form of conclusion, and a request to downgrade specifically once problems begin to surface during audit fieldwork would itself be a significant red flag warranting particular scepticism rather than routine accommodation. If the auditor is not satisfied that a reasonable justification exists for the change, and suspects the request is instead motivated by a desire to avoid the fuller scrutiny and stronger conclusion the original audit engagement would produce, the auditor should decline to change the terms of the engagement and should consider whether it remains appropriate to continue with the original engagement at all, given what the client's request itself may reveal about management's attitude and the reliability of representations made. This connects directly to the professional scepticism principle developed at the very start of this subject: a request of this kind is exactly the sort of circumstance that should heighten, rather than relax, the auditor's questioning mindset.

Practice — Ethics and Terms of Audit Engagements

Sign in to save attempts to your dashboard and track your accuracy over time

Find a verified tutor

Join a live course

Browse coaching centres

About

Categories

Support

Documentation

Get Study Tips & Updates

Download Our App

Download for iOS

Download for Android

Popular Cities