You are on page 1of 30

CA Final

Paper 3

Advanced Auditing, Assurance


&Professional Ethics

Chapter-wise compilation
of RTP, MTP and PYP

May’24

11
Modified as per
new scheme

Amended as per
May'24
Attempts
Compilation
CA _______________________________
(Once you print this write your name in this blank to give you the much-needed motivation. Remember what
you see is what you achieve!)

Disclaimer:
While we have made every attempt to ensure that the information contained in this compilation has
been obtained from reliable sources (from the answers given by the Institute of Chartered Accountants
of India), Vivitsu is not responsible for any errors or omissions, or for the results obtained from the use
of this information. All information on this site is provided "as is," with no guarantee of completeness,
accuracy, timeliness, or of the results obtained from the use of this information, and without warranty
of any kind, express or implied, including, but not limited to warranties of performance,
merchantability, and fitness for a particular purpose.

In no event will Vivitsu, its related partnerships or corporations, or the partners, agents, or employees
thereof be liable to you or anyone else for any decision made or action taken in reliance on the
information on this site or for any consequential, special, or similar damages, even if advised of the
possibility of such damages.

This compilation is presented for informational and educational purposes and should not be
considered a formal book or publication.

It is essential to use critical thinking and judgment when applying the knowledge and information
provided in this compilation. The compiler does not endorse or promote any specific products,
services, or organizations mentioned in this compilation.

By using this compilation, readers agree to accept full responsibility for their actions and decisions
based on the information and content provided, and they acknowledge the limitations and potential
risks associated with any compilation of educational materials.
GETTING THE MOST FROM THIS BOOK
A QUICK GUIDE

1 INITIAL READING
After your initial reading of a
particular chapter in your
study material, go through the
questions in our 3, 5, and 11
attempt’s compilations,
focusing on the chapter
you've just covered. Make
note of challenging questions
for later reference.

2
FIRST REVISION
During your first revision, revisit the marked questions.
If you still can't answer them, highlight them in red and
review the related concepts to improve your
understanding. This process helps you to grasp the key
concepts and address your weak points

3 KEEP GOING WITH THE


REVISIONS
Repeat the reading and revision process
as often as possible before your exams.
Each iteration will enhance your
confidence and knowledge.

4 EXAMINERS COMMENTS
Pay attention to the examiner's comments in
our compilations, as they highlight common
mistakes. Learning from these errors will
help you avoid them in your exams
Frequently Asked Questions
1. Why RTP’s, MTP’s and PYP’s?
RTP’s, MTP’s, and PYP’s are extremely important to ensure that you reproduce ICAI language.
These questions train you to understand what is important and what is expected of you.
At least 41% of questions* are asked from previous RTP’s, MTP’s and PYP’s.

2. What is included?
In this compiler, all questions from the last 3, 5 or 11 attempts depending on the one you have
selected will be available. There will be references to the marks and the attempt from which
they were asked. Identical or similar questions have been removed and references for both
attempts are mentioned.

3. What is the benefit of Chapter-wise?


We have categorized each and every question from all Old RTPs, MTP’s, and PYP’s into
chapters. This means that you don't have to wait until you've completed your entire syllabus
to tackle an RTP, MTP, or past paper. You can start solving these questions to check your
conceptual clarity right after finishing a particular chapter.

4. What does amended for the latest attempt mean?


When we reviewed all the questions from the past 11 attempts of RTP, MTP, and PYP’S, we
didn't just segregate them Chapterwise; we also updated them to reflect the latest provisions.
All the answers provided in the compilation are applicable for the May 2024 examination. So,
there's no need to stress about outdated or incorrect information.

5. How are Old RTP’s, MTP’s & PYP’s beneficial for me?
All old RTPs, MTPs, and PYPs have been organized according to the new syllabus issued by ICAI.
This means that if a specific chapter from the old scheme is not included in the new scheme,
it has been omitted. If a particular chapter in the new scheme is based on concepts from two
or more chapters in the old scheme, it has been adapted to align with how the chapter should
be in the new scheme. If a chapter is only partially included in the new scheme, the questions
related to those specific concepts are only included in the corresponding chapter of the new
scheme. A comprehensive reconciliation of the chapters between the new scheme and the old
scheme is provided on the following page.

6. What if a new attempt is added post my purchase?


If you have purchased materials for the May 2024 attempt, you will receive a file with the
questions segregated Chapterwise specifically for that attempt.

7. What does N/A mean?


It could mean any of the following:
1. No questions from that chapter have been included in the selected attempts.
2. The chapter is newly introduced, and as a result, no questions have been previously asked
in RTP’s, MTP’s, or PYP’s.

*This is on an average based on the last 11 attempts


Table of Contents
Sr. Particulars Page Number
No
Quality Control for Firms that Perform Audit and 1.1 – 1.7
Reviews of Historical Financial Information, and other
1.1 Assurance and Related Services Engagements
1.2 Quality Control for an Audit of Financial Statements 1.2 -1 – 1.2-4
2.1 SA 240- The Auditors Responsibility relating to Fraud 2.1-1 – 2.1-7
SA 250- Consideration of Laws & regulations in an 2.2-1 – 2.2-8
2.2 audit of FS
SA 260- Communication with those charged with 2.3-1 – 2.3-2
2.3 governance
2.4 SA 299- Joint Audit of Financial Statements 2.4-1 – 2.4-3
SA 402- Audit Considerations relating to an Entity 2.5-1 – 2.5-2
2.5 using a Service Organisation
SA 210- Understanding the Terms of Audit 3.1-1 – 3.1-3
3.1 Engagement
3.2 Audit Plan, Audit Programme & Audit Strategy 3.2-1 – 3.2-8
3.3 SA 600-Using the work of another Auditor 3.3-1 – 3.3-4
3.4 SA 610- Using the work of an Internal
222 Auditor 3.4-1 – 3.4-3
3.5 SA 620- Using the work of an Expert 3.5-1 – 3.5-5
3.6 SA 540-Auditing Accounting Estimates 3.6-1 – 3.6-5
3.7 SA 520- Analytical Procedures 3.7-1 – 3.7-1
4.1 Risk Assessment- SA 315 & SA 330 4.1-1 – 4.1-10
4.2 Internal Control 4.2-1 – 4.2-15
4.3 SA 320-Materiality in Planning & Performing an Audit 4.3-1 – 4.3-3
5.1 SA 500- Audit Evidence 5.1-1 – 5.1-7
SA 501- Audit Evidence- Specific Considerations for 5.2-1 – 5.2-7
5.2 selected items
5.3 SA 505- External Confirmations 5.3-1 – 5.3-4
5.4 SA 510- Initial Audit Engagements- Opening Balances 5.4-1 – 5.4-5
5.5 SA 530- Audit Sampling 5.5-1 – 5.5-3
5.6 SA 550- Related Parties 5.6-1 – 5.6-7
6.1 SA 560- Subsequent Events 6.1-1 – 6.1-4
6.2 SA 570- Going Concern 6.2-1 – 6.2-8
6.3 SA 580- Written Representation 6.3-1 – 6.3-1
SA 700 Forming an Opinion and Reporting on Financial 7.1-1 – 7.1-11
7.1 Statements
SA 701 Communicating Key Audit Matters in the 7.2-1 – 7.2-7
7.2 Independent Auditor’s Report
SA 705 Modifications to the Opinion in the 7.3-1 – 7.3-17
7.3 Independent Auditor’s Report
SA 706 Emphasis of Matter Paragraphs and Other 7.4-1 – 7.4-5
Matter Paragraphs in the Independent Auditor’s
7.4 Report
7.5 SA 710-Comparitive Information 7.5-1 – 7.5-2
SA 720- Auditors Responsibility relating to other 7.6-1 – 7.6-4
7.6 information
7.7 Duties of Auditors 7.7-1 – 7.7-5
7.8 CARO 7.8-1 – 7.8-19
SA 800- Special Considerations- Audits of Financial 8.1-1 – 8.1-1
Statements prepared in accordance with Special
8.1 Purpose Framework
SA 805- Special Considerations- Audits of Single *N/A
Financial Statements and specific elements , accounts
8.2 or items of a Financial Statement
SA 810- Engagements to report on Summary Financial 8.3-1 – 8.3-1
8.3 Statements
SRS 4400- Engagements to perform agreed upon 9.1-1 – 9.1-1
9.1 procedures regarding Financial Information
9.2 SRS 4410- Compilation Engagements 9.2-1 – 9.2.1
SRE 2400- Engagement to Review Historical Financial *N/A
10.1 Statements
SRE 2410- Review of Interim Financial Information *N/A
10.2 performed by Independent Auditor of Entity
Prospective Financial Information and Other *N/A
11 Assurance Services
SAE 3400- Examination of Prospective Financial 11.1-1 – 11.1-2
11.1 Information
SAE 3402- Assurance Reports on Controls at a Service *N/A
11.2 Organisation
SAE 3420- Assurance Engagements to Report on the *N/A
Compilation of Pro- Forma Financial Information
11.3 included in the Prospectus
12 Digital Auditing & Assurance 12.1 – 12.3
13 Group Audits 13.1 – 13.17
14.1 Special Features of Audit of Banks 14.1-1 – 14.1-25
14.2 Special Features in Audit of NBFCs 14.2-1 – 14.2-11
15 Overview of Audit of Public Sector Undertakings 15.1 – 15.14
16 Internal Audit 16.1 – 16.12
17 Due Diligence, Investigation & Forensic Audit 17.1 – 17.32
Emerging Areas: Sustainable Development Goals *N/A
(SDG) & Environment, Social and Governance (ESG)
18 Assurance
19 Professional Ethics & Liabilities of Auditors 19.1 – 19.66
SA 200 Overall Objectives of the Independent Auditor 20.1-1 – 20.1-3
and the Conduct of an Audit in Accordance with
20.1 Standards on Auditing
20.2 SA 230 Audit Documentation 20.2-1 – 20.2-2
Evaluation of Misstatements Identified During the 20.3-1 – 20.3-1
20.3 Audit
21 Case Scenarios 21.1 – 21.94

21 MTPs: March’18, April’18, Aug’18, Oct’18, May’19, April’19, Oct’19, May’20,


Oct’20, March’21, April’21, Oct ’21, Nov ’21, March ’22, April ’22, Sep
’22, Oct ’22, March ’23, April '23, Sep ’23 & Oct ‘23
11 PYPs: May’18, Nov’18, May’19, Nov’19, Nov’20, Jan’21, July ’21, Dec ’21,
May’22, Nov ’22, May ‘23
12 RTPs: May’18, Nov’18, May’19, Nov’19, May’20, Nov’20, May’21, Nov ’21,
May ’22, Nov ’22, May ’23, Nov ‘23
1.1-1

Chapter 1.1
SQC 1 – Quality Control for Firm
Question 1
J.A.C.K. & Co., a Chartered Accountant firm was appointed as the statutory auditor of Falcon Ltd. after
ensuring the compliance with relevant provisions of the Companies Act, 2013. Mr. Jay was the
engagement partner for the aforesaid audit and prior to commencement of the audit, Mr. Jay had
called for a meeting of the engagement team in order to direct them and assign them their
responsibilities. At the end of meeting, Mr. Jay assigned review responsibilities to two of the
engagement team members who were the most experienced amongst all, for reviewing the work
performed by the less experienced team members. While reviewing the work performed by the less
experienced members of the engagement team, what shall be the considerations of the reviewers?
(MTP 5 Marks, March 21)
Answer 1
As per SQC 1, “Quality Control for Firms that Perform Audits and Reviews of Historical Financial
Information, and Other Assurance and Related Services Engagements”, review responsibilities are
determined on the basis that more experienced team members, including the engagement partner,
review work performed by less experienced team members.
In the given situation, Mr. Jay, engagement partner assigned review responsibilities to two of the
engagement team members who were the most experienced team members.
While reviewing the work performed by less experienced members of the engagement team, both the
more experienced Reviewers should consider whether:
(i) The work has been performed in accordance with professional standards and regulatory and legal
requirements.
(ii) Significant matters have been raised for further consideration.
(iii) Appropriate consultations have taken place and the resulting conclusions have been documented
and implemented.
(iv) There is a need to revise the nature, timing and extent of work performed.
(v) The work performed supports the conclusions reached and is appropriately documented.
(vi) The evidence obtained is sufficient and appropriate to support the report; and
(vii) The objectives of the engagement procedures have been achieved.

Question 2
M/s Chandra & Co., Chartered Accountants were appointed as Statutory Auditors of Green Essence
Limited for the F.Y 2021-2022. The previous year's audit was conducted by M/s. Nath & Associates.
After the audit was completed and report submitted, it was found that closing balances of last
financial year i.e., 2020-21 were incorrectly brought forward. It was found that M/s Chandra & Co.
did not apply any audit procedures to ensure that correct opening balances have been brought
forward to the current period. Accordingly, a complaint was filed against Chandra & Co. in relation to
this matter. You are required to inform what policies are required to be implemented by Chandra &
Co. for dealing with such complaints and allegations as required by Standard on Quality Control (SQC).
(MTP 5 Marks March 22, PYP 5 Marks Jan’21)
Answer 2
In the given question, Chandra & Co. did not apply audit procedures to ensure that opening balances had
been correctly brought forward. A complaint was filed against the auditors in this context. As per Standard
on Quality Control (SQC) 1 “Quality Control for Firms that Perform Audits and Reviews of Historical
Financial Information, and Other Assurance and Related Services Engagements”,
(i) The firm should establish policies and procedures designed to provide it with reasonable assurance
that it deals appropriately with:
Chapter 1.1 SQC 1 – Quality Control for Firm
1.1-2

(a) Complaints and allegations that the work performed by the firm fails to comply with
professional standards and regulatory and legal requirements; and
(b) Allegations of non-compliance with the firm’s system of quality control.
(ii) Complaints and allegations (which do not include those that are clearly frivolous) may originate
from within or outside the firm. They may be made by firm personnel, clients or other third parties.
They may be received by engagement team members or other firm personnel.
(iii) As part of this process, the firm establishes clearly defined channels for firm personnel to raise any
concerns in a manner that enables them to come forward without fear of reprisals.
(iv) The firm investigates such complaints and allegations in accordance with established policies and
procedures. The investigation is supervised by a partner with sufficient and appropriate experience
and authority within the firm but who is not otherwise involved in the engagement, and includes
involving legal counsel as necessary. Small firms and sole practitioners may use the services of a
suitably qualified external person or another firm to carry out the investigation. Complaints,
allegations and the responses to them are documented.
(v) Where the results of the investigations indicate deficiencies in the design or operation of the firm’s
quality control policies and procedures, or non-compliance with the firm’s system of quality control
by an individual or individuals, the firm takes appropriate action.

Question 3 (Includes concepts of SA 220-Quality Control for an Audit of Financial Statements)


CA Ragini is offered an appointment to act as Engagement Quality Control Reviewer (EQCR) for the
audit of the financial year 2022-23 of XPM Limited, a listed company operating from a small town.
She is also based in the same town and was not engaged previously to conduct an audit of a listed
entity. She accepts the appointment to act as ECQR. She performs the review by ticking a Yes/No
checklist and signing on some of the working papers prepared by the engagement team. The audit file
does not contain any material misstatement which shows that the work of EQCR is separate from the
work of the engagement team. Do you agree with the approach adopted by EQCR? Comment. (MTP 5
Marks Sep ‘23)
Answer 3
As per SQC 1 engagement quality control reviewer can be a partner, other person in the firm (member of
ICAI), suitably qualified external person, or a team made up of such individuals, with sufficient and
appropriate experience and authority to objectively evaluate, before the report is issued, the significant
judgments the engagement team made and the conclusions they reached in formulating the report.
It also states that the engagement quality control reviewer for an audit of the financial statements of
a listed entity is an individual with sufficient and appropriate experience and authority to act as an
audit engagement partner on audits of financial statements of listed entities.
In addition, the work of EQCR involves objective evaluation of the significant judgments made by the
engagement team and ensuring that the conclusions reached by the team in formulating audit report
are appropriate. It is necessary for EQCR to have the requisite technical expertise and experience to
enable her to perform the assigned role of evaluating the work of engagement team so that any
possible misstatement can be avoided. Without ensuring the appropriate technical expertise and
experience, the whole purpose of EQCR is defeated. Therefore, it was not appropriate for her to accept
appointment as ECQR for listed entity.
Further, SA 220 states that the engagement quality control reviewer shall document, for the audit
engagement reviewed, that the procedures required by the firm’s policies on engagement quality
control review have been performed. It also states that it shall also be documented that the reviewer
is not aware of any unresolved matters that would cause the reviewer to believe that the significant
judgments the engagement team made and the conclusions they reached were not appropriate.
In the given situation, CA Ragini is offered an appointment to act as Engagement Quality Control
Reviewer (EQCR) for the audit of the financial year 2022-23 of XPM Limited, a listed company operating

Chapter 1.1 SQC 1 – Quality Control for Firm


1.1-3

from a small town. She has accepted the appointment and performed the review by ticking a Yes / No
checklist and signing on some of the working papers prepared by the engagement team.
In the instant case, there are no working papers to show that evaluation has been done by EQCR on
conclusions reached by engagement team. Mere ticking of a Yes/No checklist and signing on some
working papers of engagement team shows that no such evaluation and review of work performed by
engagement team has been made by EQCR. Therefore, her approach was not proper in performing
work of EQCR.

Question 4
BSS & Associates is a partnership firm of Chartered Accountants which was established five years
back. The firm was offering only advisory services at the beginning, however, after audit rotation and
advent of GST, firm sees lot of potential in these areas also and started looking for opportunities in
these areas also. These services being assurance in nature, the firm required some internal
restructuring and set up some policies and procedures for compliance year on year.
The firm started getting new clients for these new services and is now looking to obtain such
information as it considers necessary in the circumstances before accepting an engagement with a
new client, when deciding whether to continue an existing engagement, and when considering
acceptance of a new engagement with an existing client. Where issues have been identified, and
the firm decides to accept or continue the client relationship or a specific engagement, it has been
setting up a process to document how the issues were resolved.
The firm is now looking to work with only select clients which are in line with the policies of the firm.
The firm understands that the extent of knowledge it will have regarding the integrity of a client will
grow within the context of an ongoing relationship with that client. With regard to the integrity of a
client, you are required to give some examples of the matters to be considered by the firm as per
the requirements of SQC 1. (RTP May 19, PYP 4 Marks, Nov-19, Old SM)
OR
MB & Associates is a partnership firm of Chartered Accountants which was established seven years
back. The firm is getting new clients and has also, been offered new engagement services with existing
clients. The firm is concerned about obtaining such information as it considers necessary in the
circumstances before accepting an engagement with a new client and acceptance of a new
engagement with an existing client. The firm is looking to work with only select clients to adhere to
the Quality Control Standards. Guide MB & Associates about the matters to be considered with regard
to the integrity of a client, as per the requirements of SQC 1. (New SM)
Answer 4
The firm should obtain such information as it considers necessary in the circumstances before accepting
an engagement with a new client, when deciding whether to continue an existing engagement, and when
considering acceptance of a new engagement with an existing client. Where issues have been identified,
and the firm decides to accept or continue the client relationship or a specific engagement, it should
document how the issues were resolved.
With regard to the integrity of a client, matters that the firm considers include, for example:
 The identity and business reputation of the client’s principal owners, key management, related parties
and those charged with its governance.
 The nature of the client’s operations, including its business practices.
 Information concerning the attitude of the client’s principal owners, key management and those
charged with its governance towards such matters as aggressive interpretation of accounting
standards and the internal control environment.
 Whether the client is aggressively concernedwith maintainingthefirm’s fees as low as possible.
 Indications of an inappropriate limitation in the scope of work.
 Indications that the client might be involved in money laundering or other criminal activities.

Chapter 1.1 SQC 1 – Quality Control for Firm


1.1-4

 The reasons for the proposed appointment of the firm and non-reappointment of the previous firm.
The extent of knowledge a firm will have regarding the integrity of a client will generally grow within
the context of an ongoing relationship with that client.

EXAMINERS’ COMMENTS ON THE PERFORMANCE OF EXAMINEES:

Matters to be considered with regard to integrity of a client: Only few Examinees have
given correct answers while most of the Examinees wrongly mentioned about KYC and
background of clients.

Question 5
HK & Co. Chartered Accountants have been auditors of SAT Ltd (a listed entity) for the last 8 financial
years. CA. H, partner of the firm, has been handling the audit assignment very well since the
appointment. The audit work of CA. H and her team is reviewed by a senior partner CA. K to assure
that audit is performed in accordance with professional standards and regulatory and legal
requirements. CA. K was out of India for some personal reasons, so this year CA. G has been asked to
review the audit work. In your opinion, what areas CA. G should consider at the time of review. List
any four areas and also comment whether firm is complying with Standard on Quality Control or not.
(PYP 5 Marks July 21)
Answer 5
Compliance with Standard on Quality Control on review of audit work -
As per SQC 1, an engagement quality control review for audits of financial statements of listed entities
includes considering the following:
(i) The work has been performed in accordance with professional standards and regulatory and
legal requirements;
(ii) Significant matters have been raised for further consideration;
(iii) Appropriate consultations have taken place and the resulting conclusions have been
documented and implemented;
(iv) There is a need to revise the nature, timing and extent of work performed;
(v) The work performed supports the conclusions reached and is appropriately documented;
(vi) The evidence obtained is sufficient and appropriate to support the report; and
(vii) The objectives of the engagement procedures have been achieved.

The firm should establish policies and procedures:


(i) Setting out criteria for determining the need for safeguards to reduce the familiarity threat to
an acceptable level when using the same senior personnel on an assurance engagement over
a long period of time; and
(ii) For all audits of financial statements of listed entities, requiring the rotation of the
engagement partner after a specified period in compliance with the Code.
The familiarity threat is particularly relevant in the context of financial statement audits of listed entities.
For these audits, the engagement partner should be rotated after a pre- defined period, normally not
more than seven years.
From the facts given in the question and from the above stated paras of SQC 1, it can be concluded
that firm is not complying with SQC 1 as Engagement Partner H is continuing for more than 7 years.

Chapter 1.1 SQC 1 – Quality Control for Firm


1.1-5

EXAMINERS’ COMMENTS ON THE PERFORMANCE OF EXAMINEES:

Most of the examinees did not highlight regarding the rotation of the engagement partner for a
maximum period of seven years and hence the firm is not complying with SQC 1.

Question 6
PQR & Associates, Chartered Accountants, is a partnership firm having 3 partners CA P, CA Q and CA
R. PQR & Associates are appointed as Statutory Auditors of ABC Limited, a listed entity for the
financial year 2021-22 and CA P is appointed as Engagement Partner for the audit of ABC Limited.
Before issuing the Audit Report of ABC Limited, CA P asked CA R to perform Engagement Quality
Control Review and is of the view that his responsibility will be reduced after review by CA R. Whether
the contention of CA P is correct? What are the aspects that need to be considered by CA R while
performing Engagement Quality Control Review for audit of financial statements of ABC Limited? (PYP
5 Marks May ‘22)
Answer 6
As per SQC 1, “Quality Control for Firms that Perform Audit and Reviews of Historical Financial
Information, and other Assurance and Related Services Engagements”, the review does not reduce the
responsibilities of the engagement partner. Hence, contention of CA. P that after engagement quality
control review by CA. R, his responsibility will be reduced, is not correct.
However, CA. R needs to consider the following aspect while performing Engagement Quality Control
Review for audit of financial statements of a listed entity ABC Ltd.:
1. The engagement team’s evaluation of the firm’s independence in relation to the specific
engagement.
2. Significant risks identified during the engagement and the responses to those risks.
3. Judgments made, particularly with respect to materiality and significant risks.
4. Whether appropriate consultation has taken place on matters involving differences of opinion
or other difficult or contentious matters, and the conclusions arising from those consultations.
5. The significance and disposition of corrected and uncorrected misstatements identified during
the engagement.
6. The matters to be communicated to management and those charged with governance and,
where applicable, other parties such as regulatory bodies.
7. Whether working papers selected for review reflect the work performed in relation to the
significant judgments and support the conclusions reached.
8. The appropriateness of the report to be issued.
Engagement quality control reviews for engagements other than audits of financial statements of
listed entities may, depending on the circumstances, include some or all of these considerations.

Question 7
AP & Associates, Chartered Accountants, are Statutory Auditors of XP Limited for the last four years.
XP Limited is engaged in the manufacture and marketing of FMCG Goods in India. During 2021-22, the
Company has diversified and commenced providing software solutions in the area of "e-commerce"
in India as well as in certain European countries. AP & Associates, while carrying out the audit for the
current financial year, came to know that the company has expanded its operations into a new
segment as well as new geography. AP & Associates does not possess necessary expertise and
infrastructure to carry out the audit of this diversified business activities and accordingly wishes to
withdraw from the engagement and client relationship. Discuss the issues that need to be addressed
before deciding to withdraw. (PYP 5 Marks Nov 22)

Chapter 1.1 SQC 1 – Quality Control for Firm


1.1-6

Answer 7
Acceptance and Continuance of Client Relationships and Specific Engagements: As per SQC 1, “Quality
Control for Firms that Perform Audit and Reviews of Historical Financial Information, and other
Assurance and Related Services Engagements”, the firm should establish policies and procedures for
the acceptance and continuance of client relationships and specific engagements, designed to provide
it with reasonable assurance that it will undertake or continue relationships and engagements only
where it is competent to perform the engagement and has the capabilities, time and resources to do
so.
In the given case, AP & Associates, Chartered Accountants, statutory auditors of XP Limited for the last
four years, came to know that the company has expanded its operations into a new segment as well
as new geography. AP & Associates does not possess necessary expertise for the same, therefore, AP
& Associates wish to withdraw from the engagement and client relationship. Policies and procedures
on withdrawal from an engagement or from both the engagement and the client relationship address
issues that include the following:
 Discussing with the appropriate level of the client’s management and those charged with its
governance regarding the appropriate action that the firm might take based on the relevant facts
and circumstances.
 If the firm determines that it is appropriate to withdraw, discussing with the appropriate level of
the client’s management and those charged with its governance withdrawal from the engagement
or from both the engagement and the client relationship, and the reasons for the withdrawal.
 Considering whether there is a professional, regulatory or legal requirement for the firm to remain
in place, or for the firm to report the withdrawal from the engagement, or from both the
engagement and the client relationship, together with the reasons for the withdrawal, to
regulatory authorities.
 Documenting significant issues, consultations, conclusions and the basis for the conclusions.
AP & Associates should address the above issues before deciding to withdraw.

Question 8
JJJ & Associates, an audit firm working mainly in field of statutory audits, has been selected by Quality
Review Board (QRB) for review. During review, it has been found that Audit Firm Under Review (AFUR)
has not maintained quality of audits of selected companies as evidenced from their respective audit
files. AFUR has not complied with requirements of SA 501 and SA 505 in these cases. Further, in these
cases, companies had not complied with accounting standards as required by law and AFUR has issued
clean audit reports. Dwell upon functions of QRB in this regard.
(MTP 5 Marks Oct ‘23)
Answer 8
Central Government has constituted a Quality Review Board as an independent body under the
Chartered Accountants Act, 1949 to review the quality of services provided by the Chartered
Accountants in India including audit services.
Accordingly, u/s 28B of the Chartered Accountants Act, 1949, the Board shall perform the
following functions, namely: -
(a) to make recommendations to the Council with regard to the quality of services provided by
the members of the Institute
(b) to review the quality of services provided by the members of the Institute including audit
services
(c) to guide the members of the Institute to improve the quality of services and adherence to
the various statutory and other regulatory requirements and
(d) to forward cases of non-compliance with various statutory and regulatory requirements by
the members of the Institute or firms, noticed by it during the course of its reviews, to the
Disciplinary Directorate for its examination.
Chapter 1.1 SQC 1 – Quality Control for Firm
1.1-7

In the given situation, AUFR has not performed audits of selected companies qualitatively and has
failed to perform audits in accordance with Standards on Auditing, Further, it has issued clean reports
despite non-adherence to accounting standards by respective companies. Therefore, QRB is
empowered to act on the lines mentioned above in respect of AUFR.

Chapter 1.1 SQC 1 – Quality Control for Firm


1.2-1

Chapter 1.2
SA 220 – Quality Control
Question 1
OP & Associates are the statutory auditors of BB Ltd. BB Ltd is a listed company and started its operations
5 years back. The field work during the audit of the financial statements of the company for the year ended
31 March 2018 got completed on 1 May 2018. The auditor’s report was dated 12 May 2018. During the
documentation review of the engagement, it was observed that the engagement quality control review
was completed on 15 May 2018. Engagement partner had completed his reviews in entirety by 10 May
2018. Please comment. (MTP 5 Marks, Mar 19 & Oct 18)
Answer 1
Review by Engagement Partner: As per SA 220, “Quality Control for an Audit of Financial Statements”,
the engagement partner shall take responsibility for reviews being performed in accordance with the
firm’s review policies and procedures. For audits of financial statements of listed entities, the
engagement partner shall:
 Determine that an engagement quality control reviewer has been appointed;
 Discuss significant matters arising during the audit engagement, including those identified during the
engagement quality control review, with the engagement quality control reviewer; and
 Not date the auditor’s report until the completion of the engagement quality control review. SA 700,
“Forming an Opinion and Reporting on Financial Statements”, requires the auditor’s report to be
dated no earlier than the date on which the auditor has obtained sufficient appropriate evidence on
which to base the auditor’s opinion on the financial statements. In cases of an audit of financial
statements of listed entities where the engagement meets the criteria for an engagement quality
control review, such a review assists the auditor in determining whether sufficient appropriate
evidence has been obtained.
Conducting the engagement quality control review in a timely manner at appropriate stages during the
engagement allows significant matters to be promptly resolved to the engagement quality control
reviewer’s satisfaction on or before the date of the auditor’s report.
In the instant case, OP & Associates are the statutory auditors of a listed company BB Ltd. Which started
its operations 5 years back. The field work during the audit of the financial statements of the company
for the year ended March 31, 2018 got completed on May 1, 2018. The auditor’s report was dated May
12, 2018. During the documentation review of the engagement, i t was observed that the engagement
quality control review was completed on May 15, 2018.
Thus, in the given case, signing of auditor’s report i.e., on May 12, 2018 which is before the completion
of review engagement quality control review i.e., May 15, 2018, is not in order.

Question 2
During the audit of FMP Ltd, a listed company, Engagement Partner (EP) completed his reviews and also
ensured compliance with independence requirements that apply to the audit engagement. The
engagement files were also reviewed by the Engagement Quality Control Reviewer (EQCR) except the
independence assessment documentation. Engagement Partner was of the view that matters related to
independence assessment are the responsibility of the Engagement Partner and not Engagement Quality
Control Reviewer. Engagement Quality Control Reviewer objected to this and refused to sign off the
documentation. Please advise as per SA 220 (MTP 4 Marks, Oct 19, RTP May’22 & RTP May’19, Old & New
SM)
Answer 2
As per SA 220, Engagement Partner shall form a conclusion on compliance with independence
requirements that apply to the audit engagement. In doing so, Engagement Partner shall:

a) Obtain relevant information from the firm and, where applicable, network firms, to identify and
Chapter 1.2 SA 220 – Quality Control
1.2-2

evaluate circumstances and relationships that create threats to independence;


b) Evaluate information on identified breaches, if any, of the firm’s independence policies and procedures to
determine whether they create a threat to independence for the audit engagement; and
c) Take appropriate action to eliminate such threats or reduce them to an acceptable level by
applying safeguards, or, if considered appropriate, to withdraw from the audit engagement,
where withdrawal is permitted by law or regulation. The engagement partner shall promptly
report to the firm any inability to resolve the matter for appropriate action.
Engagement Partner shall take responsibility for reviews being performed in accordance with the firm’s
review policies and procedures.
As per SA 220, “Quality Control for Audit of Financial Statements”, for audits of financial statements of
listed entities, Engagement Quality Control Reviewer (EQCR), on performing an engagement quality
control review, shall also consider the engagement team’s evaluation of the firm’s independence in
relation to the audit engagement.
In the given case, Engagement Partner is not right. The independence assessment documentation should
also be given to Engagement Quality Control Reviewer for his review.

Question 3
Rishi Kumar & Co. has been appointed as an auditor of PK Ltd. for the financial year 2016 -17. CA. Kumar,
one of the partners of M/s Rishi Kumar & Co., completed entire routine audit work by 29th May, 2017.
Unfortunately, on the very next morning, while roving towards office of PK Ltd. to sign final audit report,
he met with a road accident and died. CA. Rishi, another partner of M/s Rishi Kumar & Co., therefore, signed
the accounts of PK Ltd., without reviewing the work performed by CA. Kumar. Advise, whether CA. Rishi is
right in expressing an opinion on financial statements the audit of which is performed by another auditor.
(5 Marks, April 18)
Answer 3
Relying on Work Performed by Another Auditor: As per SA 220 “Quality Control for an Audit of Financial
Statements”, an engagement partner taking over an audit during the engagement may apply the review
procedures such as the work has been performed in accordance with professional standards and
regulatory and legal requirements; significant matters have been raised for further consideration;
appropriate consultations have taken place and the resulting conclusions have been documented and
implemented; there is a need to revise the nature, timing and extent of work performed; the work
performed supports the conclusions reached and is appropriately documented; the evidence obtained
is sufficient and appropriate to support the auditor’s report; and the objectives of the engagement
procedures have been achieved.
Further, one of the basic principles, which govern the auditor’s professional responsibilities and which
should be complied with wherever an audit is carried, is that when the auditor delegates work to
assistants or uses work performed by other auditor and experts, he will continue to be responsible for
forming and expressing his opinion on the financial information. However, he will be entitled to rely on
work performed by others, provided he exercises adequate skill and care and is not aware of any reason
to believe that he should not have so relied. This is the fundamental principle which is ethically required
as per Code of Ethics.
However, the auditor should carefully direct, supervise and review work delegated. He should obtain
reasonable assurance that work performed by other auditors/experts and assistants is adequate for his
purpose.
In the given case, all the auditing procedures before the moment of signing of final report have been
performed by CA. Kumar. However, the report could not be signed by him due to his unfortunate death.
Later on, CA. Rishi signed the report relying on the work performed by CA. Kumar. Here, CA. Rishi is
allowed to sign the audit report, though, will be responsible for expressing the opinion. He may rely on
the work performed by CA. Kumar provided he further exercises adequate skill and due care and review
the work performed by him as required in compliance with SA 220.

Chapter 1.2 SA 220 – Quality Control


1.2-3

Question 4 (Includes concepts of SQC 1)


NEMI Limited (manufacturer of textile goods) got an order of manufacturing of PPE kits in December 2021.
But there was shortage of machinery and manpower to accomplish the ordered requirement of PPE kits.
NEMI Limited approached another manufacturing unit Rathnemi Limited for purchase of the unit. Rathnemi
Limited was interested in the sale of unit, so the deal went through, and NEMI Limited acquired ninety five
percent shares of Rathnemi Limited. The new management of Rathnemi Limited proposed and appointed
Mani Associates, Chartered Accountants, (already auditors of NEMI Limited) as new auditors of Rathnemi
Limited. Mani Associates accepted the assignment without considering information whether the
conclusions reached regarding the acceptance and continuance of client relationships and audit
engagements are appropriate. Comment with respect to appropriate Standard on Auditing what type of
information assists the engagements partner in determining whether the conclusions reached regarding
the acceptance and continuance of client relationships and audit engagements are appropriate or not?
(MTP 5 Marks Sep 22)
Answer 4
Acceptance and Continuance of Client Relationships and Audit Engagements : As per SA 220, “Quality
Control for an Audit of Financial Statements” , SQC 1, “Quality Control for Firms that Perform Audits and
Reviews of Historical Financial Information, and Other Assurance and Related Services Engagements”,
requires the firm to obtain information considered necessary in the circumstances before accepting an
engagement with a new client, when deciding whether to continue an existing engagement, and when
considering acceptance of a new engagement with an existing client.
Information such as the following assists the engagement partner in determining whether the
conclusions reached regarding the acceptance and continuance of client relationships and audit
engagements are appropriate:
(i) The integrity of the principal owners, key management and those charged with governance of the
entity.
(ii) Whether the engagement team is competent to perform the audit engagement and has the
necessary capabilities, including time and resources.
(iii) Whether the firm and the engagement team can comply with relevant ethical requirements; and
(iv) Significant matters that have arisen during the current or previous audit engagement, and their
implications for continuing the relationship.

MULTIPLE CHOICE QUESTIONS (MCQS)

Question 1
VKPL & Associates, a firm of Chartered Accountants, have been operating for the last 5 years having
its office in Gurgaon. The firm has staff of around 25 persons with 3 Partners.
The firm has been offering statutory audit, risk advisory and tax services to its various clients. The
major work of the firm is for taxation services. The audit partners also discussed that the firm needs
to work significantly to improve the quality of the services they offer and that would also help the
firm to grown its business. Considering this objective, the firm started training programmes for the
staff which were made mandatory to be attended.
During one of the training programmes on quality, a topic was discussed regarding the information
that should be obtained by the firm before accepting an engagement with a new client, when deciding
whether to continue an existing engagement, and when considering acceptance of a new engagement
with an existing client. It was explained that the following points may assist the engagement partner
in determining whether the conclusions reached regarding the acceptance and continuance of client
relationships and audit engagements are appropriate (as per SA 220):
(i) The integrity of the principal owners, key management and those charged with governance of

Chapter 1.2 SA 220 – Quality Control


1.2-4

the entity;
(ii) The qualification of all the employees of the entity;
(iii) Whether the engagement team is competent to perform the audit engagement and has the
necessary capabilities, including time and resources;
(iv) The remuneration offered by the entity to its various consultants;
(v) Whether the firm and the engagement team can comply with relevant ethical requirements; and
(vi) Significant matters that have arisen during the current or previous audit engagement, and their
implications for continuing the relationship.

We would like to understand from you which of the above mentioned points are relevant for the
topic under discussion or not?
(a) i, ii, iv and v.
(b) ii, iv, v and vi.
(c) iii, iv, v and vi.
(d) i, iii, v and vi. (RTP Nov 19)
Ans : (d)

Chapter 1.2 SA 220 – Quality Control


2.1-1

Chapter 2.1
SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial
Statements
Question 1 (Includes concepts of 143(12) Duties of Auditor & CARO)
th
On 15 March, 2020, the directors of Phony Ltd. instructed their accountant to enter purchases
amounting Rs. 1.02 crores from a company incorporated dated 11th March, 2020. However, no
amount was actually paid and Rs. 1.02 crore was provided in the books of account as purchases for
st
the year ending on 31 March, 2020.
On inspection, no documentary or other evidence of such purchases was found. As the auditor of Phony
Ltd., what would be your approach regarding reporting of such bogus purchases? (MTP 5 Marks, May
20)
Answer 1
Reporting of Fraud Committed by Management/Directors of the Company: As per SA 240 on “The
Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements”, fraud can be committed
by management overriding controls using such techniques as recording fictitious journal entries,
particularly close to the end of an accounting period, to manipulate operating results or achieve other
objectives.
In the given case, Phony Ltd. has made purchases amounting Rs. 1.02 crores, at year-end. It also debited
the sum in the books of account; however, no documentary or other evidence of such purchases was
found, on investigation. It is clear that company has passed fictitious journal entries, near year-end, to
manipulate the operating results.
Accordingly, the auditor would adopt the approach which will be based on the result of misstatement
on the basis of such fictitious journal entry, i.e. if, as a result of a misstatement resulting from fraud or
suspected fraud, the auditor encounters exceptional circumstances that bring into question the
auditor’s ability to continue performing the audit, the auditor shall determine the professional and
legal responsibilities applicable in the circumstances, including whether there is a requirement for the
auditor to report to the person or persons who made the audit appointment or, in some cases, to
regulatory authorities; or the auditor may consider for appropriateness of withdrawal from such
engagement, where withdrawal from the engagement is legally permitted.
In addition, the auditor is required to report according to section 143(12) of the Companies Act, 2013.
As per section 143(12), if an auditor of a company in the course of the performance of his duties as
auditor, has reason to believe that an offence of fraud, which involves or is expected to involve
individually an amount of Rs. 1 crore or above is being or has been committed in the company by its
officers or employees, he shall report the matter to the Central Government in prescribed manner.
The auditor is also required to report under clause (x) clause (xi)of paragraph 3 of Companies (Auditor’s
Report) Order, 2020, whether any fraud by the company or any fraud on the Company by its officers or
employees has been noticed or reported during the year. If yes, the nature and the amount involved is
to be indicated.

Question 2 (Includes concepts of 143(12) Duties of Auditor & CARO)


The Managing Director of the Company has committed a “Teeming and Lading” Fraud. The amount
involved has been however subsequently after the year end deposited in the company. As a Statutory
Auditor, how would you deal? (MTP 4 Marks, March 18)
Answer 2
Fraud Committed by Managing Director: The Managing Director of the company has committed a
“Teeming and Lading” fraud. The fact that the amount involved has been subsequently deposited after
the year end is not important because the auditor is required to perform his responsibilities as laid down
in SA 240, “The Auditor’s responsibilities relating to Fraud in an Audit of Financial Statements”. First of
Chapter SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements
2.1-2

all, as per SA 240, the auditor needs to perform procedures whether the financial statements are
materially misstated. Because an instance of fraud cannot be considered as an isolated occurrence and
it becomes important for the auditor to perform audit procedures and revise the audit risk assessment.
Secondly, the auditor needs to consider the impact of fraud on financial statements and its disclosure
in the audit report. Thirdly, the auditor should communicate the matter to the Chairman and Board of
Directors. Finally, in view of the fact that the fraud has been committed at the highest level of
management, it affects the reliability of audit evidence previously obtained since there is a genuine
doubt about representations of management.
Further, as per section 143(12) of the Companies Act, 2013, if an auditor of a company, in the course of
the performance of his duties as auditor, has reason to believe that an offence involving fraud is being
or has been committed against the company by officers or employees of the company, he shall
immediately report the matter to the Central Government (in case amount of fraud is ` 1 crore or
above)or Audit Committee or Board in other cases (in case the amount of fraud involved is less than ` 1
crore) within such time and in such manner as may be prescribed.
The auditor is also required to report under clause (x) clause (xi)of paragraph 3 of Companies (Auditor’s
Report) Order, 2020, whether any fraud by the company or any fraud on the Company by its officers or
employees has been noticed or reported during the year. If yes, the nature and the amount involved is
to be indicated.

Question 3 (Includes concepts of 143(12) Duties of Auditor, CARO & SA 580- Written representations)
In the course of audit of K Ltd., its auditor Mr. 'N' observed that there was a special audit conducted
at the instance of the management on a possible suspicion of a fraud and requested for a copy of the
report to enable him to report on the fraud aspects. Despite many reminders it was not provided. In
absence of the special audit report, Mr. 'N' insisted that he be provided with at least a written
representation in respect of fraud on/by the company. For this request also, the management
remained silent. Please guide Mr. 'N'. (MTP 5 Marks, Oct 18, RTP May’18)
Answer 3
Auditor’s Responsibilities Relating to Fraud: As per SA 240 on “The Auditor’s Responsibilities Relating to
Fraud in an Audit of Financial Statements”, the auditor is responsible for obtaining reasonable assurance
that the financial statements, taken as a whole, are free from material misstatement, whether caused
by fraud or error.
As per SA 580 “Written Representations”, if management modifies or does not provide the requested
written representations, it may alert the auditor to the possibility that one or more significant issues
may exist.
In the instant case, the auditor observed that there was a special audit conducted at the instance of the
management on a possible suspicion of fraud. Therefore, the auditor requested for special audit report
which was not provided by the management despite of many reminders. The auditor also insisted for
written representation in respect of fraud on/by the company. For this request also management
remained silent.
It may be noted that, if management does not provide one or more of the requested written
representations, the auditor shall discuss the matter with management; re-evaluate the integrity of
management and evaluate the effect that this may have on the reliability of representations (oral or
written) and audit evidence in general; and take appropriate actions, including determining the possible
effect on the opinion in the auditor’s report.
Further, as per section 143(12) of the Companies Act, 2013, if an auditor of a company, in the course of
the performance of his duties as auditor, has reason to believe that an offence involving fraud is being
or has been committed against the company by officers or employees of the company, he shall
immediately report the matter to the Central Government (in case amount of fraud is Rs. 1 crore or
above) or Audit Committee or Board in other cases (in case the amount of fraud involved is less than Rs.
1 crore) within such time and in such manner as may be prescribed.
The auditor is also required to report under clause (x) clause (xi)of paragraph 3 of Companies (Auditor’s
Report) Order, 2020, whether any fraud by the company or any fraud on the Company by its officers or
Chapter SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements
2.1-3

employees has been noticed or reported during the year. If yes, the nature and the amount involved is
to be indicated.
If, as a result of a misstatement resulting from fraud or suspected fraud, the auditor encounters
exceptional circumstances that bring into question the auditor’s ability to continue performing the
audit, the auditor shall:
(i) Determine the professional and legal responsibilities applicable in the circumstances,
including whether there is a requirement for the auditor to report to the person or persons
who made the audit appointment or, in some cases, to regulatory authorities;
(ii) Consider whether it is appropriate to withdraw from the engagement, where withdrawal
from the engagement is legally permitted; and
(iii) If the auditor withdraws:
(1) Discuss with the appropriate level of management and those charged with governance,
the auditor’s withdrawal from the engagement and the reasons for the withdrawal;
and
(2) Determine whether there is a professional or legal requirement to report to the person
or persons who made the audit appointment or, in some cases, to regulatory
authorities, the auditor’s withdrawal from the engagement and the reasons for the
withdrawal.

Question 4
In the course of audit of Kushal Ltd, you suspect that the management has made misstatements in
the financial statements intentionally to deceive the users and to succumb to pressures to meet
market expectations. Elucidate how the fraudulent financial reporting may be accomplished and also
discuss the techniques of committing fraud by management overriding controls. (MTP 5 Marks Oct
21, PYP 5 Marks Nov’20)
Answer 4
In the given case, management of Kushal Ltd has made intentional misstatements to deceive the users
in order to meet market expectations. Auditor is suspecting such intentional behavior of the
management and in such situations, SA 240 discusses how fraudulent financial reporting may be
accomplished and also discusses techniques of committing fraud by management overriding controls.

As per SA 240 on “The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements”

Fraudulent financial reporting may be accomplished by the following:


(i) Manipulation, falsification (including forgery), or alteration of accounting records or
supporting documentation from which the financial statements are prepared.
(ii) Misrepresentation in or intentional omission from, the financial statements of events,
transactions or other significant information.
(iii) Intentional misapplication of accounting principles relating to amounts, classification,
manner of presentation, or disclosure.
Fraudulent financial reporting often involves management override of controls that otherwise may appear
to be operating effectively. Fraud can be committed by management overriding controls using such
techniques as:
i. Recording fictitious journal entries, particularly close to the end of an accounting period, to
manipulate operating results or achieve other objectives.
ii. Inappropriately adjusting assumptions and changing judgments used to estimate account
balances.
iii. Omitting, advancing or delaying recognition in the financial statements of events and
transactions that have occurred during the reporting period.
iv. Concealing, or not disclosing, facts that could affect the amounts recorded in the financial
Chapter SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements
2.1-4

statements.
v. Engaging in complex transactions that are structured to misrepresenting the financial
position or financial performance of the entity.
vi. Altering records and terms related to significant and unusual transactions.

Question 5
M/s Prakash & Co., Chartered Accountants were appointed as statutory auditors of JIN Limited for
the financial year 2021-22. During the course of audit, one of the partners CA Prakash observed that
there is misappropriation of assets in the form of theft of entity's inventory and is perpetrated by
employees in relatively small and immaterial amounts. CA Prakash is concerned with the existence
of certain circumstances for increasing the susceptibility of assets to misappropriation. Guide CA
Prakash with respect to risk factors related to misstatements arising from misappropriation of assets
with reference to relevant Standard on Auditing. (MTP 5 Marks March ’23, PYP 5 Marks Dec’21)
Answer 5
Guidance to CA. Prakash with respect to risk factors that relate to misstatements arising from
misappropriation of assets as per SA 240 is:
As per SA 240, “The Auditor’s Responsibilities Relating to Fraud in an audit of Financial Statements”,
misappropriation of assets involves the theft of entity’s assets and is often perpetrated by employees
in relatively small and immaterial amounts. However, it can also involve management who are usually
more able to disguise or conceal misappropriations in ways that are difficult to detect.
Misappropriation of assets can be accomplished in a variety of ways including stealing physical assets or
intellectual property (for example, stealing inventory for personal use or for sale, stealing scrap for
resale, colluding with a competitor by disclosing technological data in return for payment).
Risk factors that relate to misstatements arising from misappropriation of assets are also classified
according to the three conditions generally present when fraud exists: incentives/pressures,
opportunities, and attitudes/rationalization.
Incentives/Pressures
Personal financial obligations may create pressure on management or employees with access to cash or
other assets susceptible to theft to misappropriate those assets.
Adverse relationships between the entity and employees with access to cash or other assets susceptible
to theft may motivate those employees to misappropriate those assets. For example, adverse
relationships may be created by the following:
(i) Known or anticipated future employee layoffs.
(ii) Recent or anticipated changes to employee compensation or benefit plans.
(iii) Promotions, compensation, or other rewards inconsistent with expectations.
Opportunities
Certain characteristics or circumstances may increase the susceptibility of assets to misappropriation.
For example, opportunities to misappropriate assets increase when there are the following:
(i) Large amounts of cash on hand or processed.
(ii) Inventory items that are small in size, of high value, or in high demand.
(iii) Easily convertible assets, such as bearer bonds, diamonds, or computer chips.
(iv) Fixed assets which are small in size, marketable, or lacking observable identification of
ownership.
Inadequate internal control over assets may increase the susceptibility of misappropriation of those
assets. For example, misappropriation of assets may occur because there is the following:
(i) Inadequate segregation of duties or independent checks.
(ii) Inadequate oversight of senior management expenditures, such as travel and other
Chapter SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements
2.1-5

reimbursements.
(iii) Inadequate management oversight of employees responsible for assets, for example,
inadequate supervision or monitoring of remote locations.
(iv) Inadequate job applicant screening of employees with access to assets.
(v) Inadequate record keeping with respect to assets.
(vi) inadequate system of authorization and approval of transactions (for example, in
purchasing).
(vii) Inadequate physical safeguards over cash, investments, inventory, or fixed assets.
(viii) Lack of complete and timely reconciliations of assets.
(ix) Lack of timely and appropriate documentation of transactions, for example, credits
for merchandise returns.
(x) Lack of mandatory vacations for employees performing key control functions.
(xi) Inadequate management understanding of information technology, which enables
information technology employees to perpetrate a misappropriation.
(xii) Inadequate access controls over automated records, including controls over and
review of computer systems event logs.
Attitudes/Rationalizations
(i) Disregard for the need for monitoring or reducing risks related to misappropriations of
assets.
(ii) Disregard for internal control over misappropriation of assets by overriding existing
controls or by failing to take appropriate remedial action on known deficiencies in
internal control.
(iii) Behavior indicating displeasure or dissatisfaction with the entity or its treatment of the
employee.
(iv) Changes in behavior or lifestyle that may indicate assets have been misappropriated.
(v) Tolerance of petty theft.

EXAMINERS’ COMMENTS ON THE PERFORMANCE OF EXAMINEES:

SA 240 - Risk factors related to misstatements arising from misappropriation of assets: Examinees
correctly referred to SA 240 and listed down the risk factors correctly. However, the concept /
examples of misappropriation of assets and proper explanation of risk factors were not given by
examinees.

Question 6 (Includes concepts of 143(12) Duties of Auditor & CARO)


M/s Innocent Limited has entered into a transaction on 25th February, 2018, near year-end, whereby
it has agreed to pay Rs. 5 lakhs per month to Mr. Yuvraj as annual retainer-ship fee for "engineering
consultation". No amount was actually paid, but Rs. 60 lakhs are provided in books of account as on
March 31, 2018.
Your inquiry elicits a response that need-based consultation was obtained round the year, but there is
no documentary or other evidence of receipt of the service. As the auditor of M/s Innocent Limited,
what would be your approach? (RTP Nov 18)
Answer 6
As per SA 240 on “The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements”,
fraud can be committed by management overriding controls using such techniques as Recording
fictitious journal entries, particularly close to the end of an accounting period, to manipulate operating
results or achieve other objectives.
Keeping in view the above, it is clear that Company has passed fictitious journal entries near year end
to manipulate the operating results. Also, Auditor’s enquiry elicited a response that need-based

Chapter SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements
2.1-6

consultation was obtained round the year, but there is no documentary or other evidence of receipt of
the service, is not acceptable.
Accordingly, the auditor would adopt the following approach-
If, as a result of a misstatement resulting from fraud or suspected fraud, the auditor encounters
exceptional circumstances that bring into question the auditor’s ability to continue performing the
audit, the auditor shall:
(i) Determine the professional and legal responsibilities applicable in the circumstances, including
whether there is a requirement for the auditor to report to the person or persons who made the
audit appointment or, in some cases, to regulatory authorities;
(ii) Consider whether it is appropriate to withdraw from the engagement, where withdrawal from
the engagement is legally permitted; and
(iii) If the auditor withdraws:
(1) Discuss with the appropriate level of management and those charged with governance, the
auditor’s withdrawal from the engagement and the reasons for the withdrawal; and
(2) Determine whether there is a professional or legal requirement to report to the person or
persons who made the audit appointment or, in some cases, to regulatory authorities, the
auditor’s withdrawal from the engagement and the reasons for the withdrawal.
Further, as per section 143(12) of the Companies Act, 2013, if an auditor of a company, in the course of
the performance of his duties as auditor, has reason to believe that an offence involving fraud is being
or has been committed against the company by officers or employees of the company, he shall
immediately report the matter to the Central Government (in case amount of fraud is Rs. 1 crore or
above) or Audit Committee or Board in other cases (in case the amount of fraud involved is less than
Rs. 1 crore) within such time and in such manner as may be prescribed.
The auditor is also required to report as per Clause (x) of Paragraph 3 of CARO, 2016, Whether any fraud
by the company or any fraud on the company by its officers or employees has been noticed or reported
during the year; If yes, the nature and the amount involved is to be indicated.

Question 7
Arihant Limited was engaged in the business of owning and managing hotels and resorts, selling
tourism packages and performing airline bookings for corporate and individuals. It appointed
Upadhyay & Co. as its statutory auditor for the financial year 2021-22. While planning the audit, the
audit team decided that the risk of improper revenue recognition from hotel business should not be
treated as a fraud risk. This conclusion was based on the assessment of earlier years, wherein no fraud
was identified in revenue recorded from such business. While testing the internal financial controls
over the process of revenue recognition, it was identified that the controls are not properly designed
to mitigate the risk of fraud and risk of improper revenue recognition. As a result, the audit team
decided to perform additional substantive testing. However, the audit team still were to the
conclusion that there is no risk of fraud in revenue recognition. During the course of substantive
testing, it was identified that the management did not account for revenue received from corporate
hotel bookings amounting to ` 35 crore. These amounts were partially received in the company’s bank
accounts and partially received in the CFO’s personal account. The amounts received in the bank
account of the company were disclosed as advances received against the future bookings.
In the light of above scenario, kindly guide the statutory auditors with respect to their responsibility
relating to fraud in an audit of a financial statement. (RTP Nov’22)
Answer 7
As per SA 240, “The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements” and
SA 315, “Identifying and Assessing the Risks of Material Misstatement Through Understanding the Entity
and Its Environment”, the auditor shall identify and assess the risks of material misstatement due to
fraud at the financial statement level, and at the assertion level for classes of transactions, account
balances and disclosures. When identifying and assessing the risks of material misstatement due to
fraud, the auditor shall, based on a presumption that there are risks of fraud in revenue recognition,
Chapter SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements
2.1-7

evaluate which types of revenue, revenue transactions or assertions give rise to such risks.
In accordance with SA 240, “The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial
Statements” and 330,” The Auditor’s Responses to Assessed Risks” the auditor shall determine overall
responses to address the assessed risks of material misstatement due to fraud at the financial statement
level and assertion level.
The presumption that there are risks of fraud in revenue recognition may be rebutted. For example, the
auditor may conclude that there is no risk of material misstatement due to fraud relating to revenue
recognition in the case where there is a single type of simple revenue transaction, for example,
leasehold revenue from a single unit rental property. However, when there is a complex revenue
structure or when there is lack of controls on revenue recognition, then there is a high probability of
fraud risk in revenue recognition.
Obtaining an understanding of the entity and its environment, including the entity’s internal control
(referred to hereafter as an “understanding of the entity”), is a continuous, dynamic process of
gathering, updating and analyzing information throughout the audit.
In the current scenario, the company was earning revenue from multiple streams. Also, it was identified
that the controls are not properly designed to mitigate the risk of fraud and risk of improper revenue
recognition. During the year it was identified that the management did not account for revenue from
corporate hotel bookings amounting to ` 35 crore. These amounts were partially received in the
company’s bank accounts and partially received in the CFO’s personal account. The amounts received
in the bank account of the company were disclosed as advances received against future bookings.
Therefore, the auditor while performing the risk assessment procedures should consider the complexity
and nature of the revenue for determining the fraud risks in revenue recognition. Also, there were no
adequate controls addressing the risk of improper revenue recognition or fraud risk, the audit team
rebutted the fraud risk. Moreover, the audit team should have recognized fraud risk by identifying the
deficiencies of internal control over the revenue recognition process and should have treated the risk
of improper revenue recognition as a significant risk. Also, as per Section 143(12), the auditor is required
to report all the frauds identified during the course of the audit involving amounts above ` 1 crore within
the prescribed time frame to the Central Government.

Chapter SA 240 – The Auditor’s Responsibilities Relating to Fraud in an Audit of Financial Statements
2.2-1

Chapter 2.2
SA 250 – Consideration of Laws and Regulations in an Audit of Financial
Statements
Question 1 (Includes concepts of CARO)
During the course of audit of CT Ltd. for the financial year 2017-18, it is noticed that Rs. 3.00 lakhs of
employee contribution and Rs. 7.50 lakhs of employer contribution towards employee state insurance
contribution have been accounted in the books of accounts in respective heads. Whereas, it was found
that Rs. 5.00 lakhs only has been deposited with ESIC department during the year ended 31st March,
2018. The Finance Manager informed the auditor that due to financial crunch they have not deposited
the amount due, but will deposit the amount overdue along with interest as and when financial position
improves. Comment as a statutory auditor. (MTP 5 Marks, Aug 18 & April 18)
Answer 1
Non-Compliance of Laws and Regulations & Reporting Requirements: As per SA 250 “Consideration of
Laws and Regulations in an Audit of Financial Statement”, it is the responsibility of management, with
the oversight of those charged with governance, to ensure that the entity’s operations are conducted
in accordance with the provisions of laws and regulations, including compliance with the provisions of
laws and regulations that determine the reported amounts and disclosures in an entity’s financial
statements. The auditor is responsible for obtaining reasonable assurance that the financial statements,
taken as a whole, are free from material misstatement, whether caused by fraud or error. In conducting
an audit of financial statements, the auditor takes into account the applicable legal and regulatory
framework. If the auditor concludes that the non- compliance has a material effect on the financial
statements, and has not been adequately reflected in the financial statements, the auditor shall express a
qualified or adverse opinion on the financial statements.
Further, the auditor is required to report under clause (vii)(a) of Para 3 of CARO, 2020 whether the
company is regular in depositing undisputed statutory dues including employees’ state insurance with
the appropriate authorities and if not, the extent of the arrears of outstanding statutory dues as at the
last day of the financial year concerned for a period of more than six months from the date they became
payable, shall be indicated by the auditor.
In the instant case, even though accrual principles have been followed, disclosure of non-payment is
necessary. The auditor should disclose the fact of non-payment of rupees 7.50 lakhs in his report.

Question 2 (Includes concepts of SA 705- Modifications to the Opinion in the Independent Auditor’s Report)
While verifying the employee records in a company, it was found that a major portion of the labour
employed was child labour. On questioning the management, the auditor was told that it was outside
his scope of the financial audit to look into the compliance with other laws. Comment in accordance
with relevant Standards on Auditing. (MTP 4 Marks, May 20 & April 21 & March ’23, RTP May’18)
Answer 2
Compliance with Other Laws: As per SA 250, “Consideration of Laws and Regulations in an Audit of
Financial Statements”, the auditor shall obtain sufficient appropriate audit evidence regarding
compliance with the provisions of those laws and regulations generally recognised to have a direct effect
on the determination of material amounts and disclosures in the financial statements including tax and
labour laws.

Further, non-compliance with other laws and regulations may result in fines, litigation or other
consequences for the entity, the costs of which may need to be provided for in t he financial statements,
but are not considered to have a direct effect on the financial statements.
In the instant case, major portion of the labour employed in the company was child labour. While
questioning by auditor, reply of the management that it was outside his scope of financial audit to look
into the compliance with other laws is not acceptable as it may have a material effect on financial
statements.
Chapter 2.2 SA 250 – Consideration of Laws and Regulations in an Audit of Financial Statements
2.2-2

Thus, auditor should ensure the disclosure of above fact and provision for the cost of fines, litigation or
other consequences for the entity. In case if the auditor concludes that non- compliance has a material
effect on the financial statements and has not been adequately reflected in the financial statements,
the auditor shall express a qualified or adverse opinion on the financial statement as per SA 705
“Modifications to the Opinion in the Independent Auditor’s Report”.

Question 3 (Includes concepts of CARO)


XYZ Pvt. Ltd. has submitted the financial statements for the year ended 31-3-18 for audit. The audit
assistant observes and brings to your notice that the company's records show following dues:
Income Tax relating to Assessment Year 2014-15 Rs. 125 lacs - Appeal is pending before Hon'ble ITAT
since 30-9-16.
Customs duty Rs. 85 lakhs - Demand notice received on 15-9-17 but no action has been taken to pay or
appeal. Comment.
As an auditor, how would you bring this fact to the members? (MTP 5 Marks, Oct 18)
Answer 3
Non-Compliance of Laws and Regulations: As per SA 250 “Consideration of Laws and Regulations in an
Audit of Financial Statement”, it is the responsibility of management, with the oversight of those
charged with governance, to ensure that the entity’s operations are conducted in accordance with the
provisions of laws and regulations, including compliance with the provisions of laws and regulations that
determine the reported amounts and disclosures in an entity’s financial statements.
The auditor is responsible for obtaining reasonable assurance that the financial statements, taken as a
whole, are free from material misstatement, whether caused by fraud or error. In conducting an audit
of financial statements, the auditor takes into account the applicable legal and regulatory framework.
Owing to the inherent limitations of an audit, there is an unavoidable risk that some material
misstatements in the financial statements may not be detected, even though the audit is properly
planned and performed in accordance with the SAs.
If the auditor concludes that the non-compliance has a material effect on the financial statements, and
has not been adequately reflected in the financial statements, the auditor shall express a qualified or
adverse opinion on the financial statements.
Further, the auditor is required to report on certain matters specified in Para 3 of CARO, 201 6 under
section 143 of the Companies Act, 2013.
One of such matter is non-payment of dues to Government, on account of any dispute. As per clause
(vii)(b) of Para 3 of CARO, 2020, in case dues of income tax or sales tax or service tax or duty of customs
or duty of excise or value added tax have not been deposited on account of any dispute, then the
amounts involved and the forum where dispute is pending shall be mentioned.
In the present case, there is Income Tax demand of Rs. 125 Lacs and the company has gone for an
appeal, it needs considerations as to whether the entire demand is disputed, because it is difficult to
presume that the demand by Income Tax authority is without any basis. Therefore, as per AS 29
“Provisions, Contingent Liabilities and Contingent Assets”, partly to the extent the company considers
that the demand is based on some logical basis, that amount may be provided for and the remaining
may be disclosed as the contingent liability. Further, it should be brought to notice of the members by
reporting.
Additionally, the demand notice has been received for Customs duty of Rs. 85 lakhs and is outstanding
on the closure of financial year, for which no action has been taken by the management. Therefore, it
should also be brought to notice of the members by reporting.

Question 4
As an Auditor of TRP Ltd., you are suspicious that there might be non-compliance with laws and
regulations to which the Company is subject to. Indicate the possible areas or aspects where you may
have to look out for forming an opinion as to whether your suspicion has some basis to further inquire.
(MTP 4 Marks Oct 21, PYP 4 Marks, May ’18)
Chapter 2.2 SA 250 – Consideration of Laws and Regulations in an Audit of Financial Statements
2.2-3

OR
You are appointed as an auditor of Moksh Ltd., a company engaged in export of agricultural equipment.
During the course of audit, your audit team informed you regarding non-deduction of TDS on huge
payments made to legal counsel of Moksh Ltd. You want to alert your team on the possibility of non-
compliance with Laws and Regulations by Moksh Ltd. Help your audit team in identifying any other
indications of non-compliance with Laws and Regulations particularly related to payments made by the
company. (MTP 4 Marks April ’23)
OR
R & M Co. wants to be alert on the possibility of non-compliance with Laws and Regulations during the
course of audit of SRS Ltd. R & M Co. seeks your guidance for identifying the indications of non-
compliance with Laws and Regulations. (Old SM)
Answer 4
Indications of Non-Compliance with Laws and Regulations: When the auditor becomes aware of the
existence of, or information about, the following matters, it may be an indication of non-compliance
with laws and regulations, possible areas or aspects to look out for forming an opinion are:
 Investigations by regulatory organisations and government departments or payment of fines or
penalties.
 Payments for unspecified services or loans to consultants, related parties, employees or
government employees.
 Sales commissions or agent’s fees that appear excessive in relation to those ordinarily paid by the
entity or in its industry or to the services actually received.
 Purchasing at prices significantly above or below market price.
 Unusual payments in cash, purchases in the form of cashiers’ cheques payable to bearer or
transfers to numbered bank accounts.
 Unusual payments towards legal and retainership fees.
 Unusual transactions with companies registered in tax havens.
 Payments for goods or services made other than to the country from which the goods or services
originated.
 Payments without proper exchange control documentation.
 Existence of an information system which fails, whether by design or by accident, to provide an
adequate audit trail or sufficient evidence.
 Unauthorised transactions or improperly recorded transactions.
 Adverse media comment.
EXAMINERS’ COMMENTS ON THE PERFORMANCE OF EXAMINEES:

Indications of Non-compliance with Laws and Regulations: Instead of emphasizing the indications of
Non Compliance with Laws and Regulations some examinees gave general answers on SA 250.

Question 5

CA Abhinanadan is an auditor of KM Private Limited. During the course of audit, CA Abhinanadan


becomes aware of information concerning an instance of non- compliance or suspected non-compliance
with laws and regulations. Being a senior partner of CA. Abhinanadan, guide him regarding audit
procedures to be followed when non-compliance is identified or suspected. (RTP May 22)
Answer 5

As per SA 250, “Consideration of Laws and Regulations in an Audit of Financial Statements”, if the auditor
becomes aware of information concerning an instance of non-compliance or suspected non-compliance
with laws and regulations, the auditor shall obtain:
Chapter 2.2 SA 250 – Consideration of Laws and Regulations in an Audit of Financial Statements
2.2-4

(i) An understanding of the nature of the act and the circumstances in which it has occurred;
and
(ii) Further information to evaluate the possible effect on the financial statements.
If the auditor suspects there may be non-compliance, the auditor shall discuss the matter with
management and, where appropriate, those charged with governance. If management or, as
appropriate, those charged with governance do not provide sufficient information that supports that the
entity is in compliance with laws and regulations and, in the auditor’s judgment, the effect of the
suspected non-compliance may be material to the financial statements, the auditor shall consider the
need to obtain legal advice.
If sufficient information about suspected non-compliance cannot be obtained, the auditor shall evaluate
the effect of the lack of sufficient appropriate audit evidence on the auditor’s opinion.
The auditor shall evaluate the implications of non-compliance in relation to other aspects of the audit,
including the auditor’s risk assessment and the reli ability of written representations, and take
appropriate action.

Question 6 (Includes concepts of section 143 & SA 705 Modification of Opinion)

Abhinandan Limited a chemical manufacturing company, having its factory located at Nanded Village,
for the year 2021-22 appointed Subahu & Co. as their statutory auditors. During the course of the audit,
Subahu & Co. identified that Abhinandan Limited received a show cause notice from National Green
Tribunal based on the investigation performed by the regional forest department for violating
environmental laws. Upon gathering a further understanding of the said matter, it was identified that
Abhinandan Limited was dumping toxic solid waste, without treating it, on the nearby grounds, and
because of this, the nearby water bodies were getting polluted. Based on the preliminary investigation
performed by the regional forest department under the directions of the National Green Tribunal, it
was identified that these practices were carried out since 2009 and a lot of damage has been done to
the environment by Abhinandan Limited. A show cause notice was already issued to Abhinandan
Limited by the National Green Tribunal for levying the penalty of an amount of ` 500 crore. The
unaudited profit for the financial year 2021 -22 of Abhinandan Limited was ` 35 crore and the unaudited
turnover was ` 100 crore. Upon inquiry it was identified that Abhinandan Limited has disclosed this
matter in the financial statements by way of footnote, the extract of which is provided below:
“The company has received a show cause notice from the National Green Tribunal for some potential
violation of environmental laws and the company’s legal department has assessed and found that the
judgment would be in favour of the company. Accordingly, no provision has been created for such
notices.”
In the light of the above scenario kindly provide what should be the appropriate opti on for the statutory
auditor of the company to report this matter. (RTP Nov’22)
Answer 6
As per SA 250, “Consideration of Laws and Regulations in an Audit of Financial Statements”, the auditor
is required to obtain an understanding and need to evaluate the impact of other laws and regulations
that do not have a direct effect on the determination of the amounts and disclosures in the financial
statements, but compliance with which may be fundamental to the operating aspects of the business,
to an entity’s ability to continue its business, or to avoid material penalties (for example, compliance
with the terms of an operating license, compliance with regulatory solvency requirements, or
compliance with environmental regulations); non-compliance with such laws and regulations may
therefore have a material effect on the financial statements.
The auditor shall perform the following audit procedures to help identify instances of non - compliance
with other laws and regulations that may have a material effect on the financial statements:
(a) Inquiring of management and, where appropriate, those charged with governance, as to whether
the entity is in compliance with such laws and regulations; and
(b) Inspecting correspondence, if any, with the relevant licensing or regulatory authorities As per
Chapter 2.2 SA 250 – Consideration of Laws and Regulations in an Audit of Financial Statements
2.2-5

Section 143(3)(j) read with Rule 11(a), the auditor is required to report whether the company has
disclosed the impact, if any, of pending litigations on its financial position in its financial
statement.

As per SA 570, “Going Concern”, if the auditor concludes that management’s use of the going concern
basis of accounting is appropriate in the circumstances but a material uncertainty exists, the auditor
shall determine whether the financial statements:
(i) Adequately disclose the principal events or conditions that may cast significant doubt on the
entity’s ability to continue as a going concern and management’s plans to deal with these events
or conditions; and
(ii) Disclose clearly that there is material uncertainty related to events or conditions that may cast
significant doubt on the entity’s ability to continue as a going concern and, therefore, that it may
be unable to realize its assets and discharge its liabilities in the normal course of business.
If adequate disclosure about the material uncertainty is not made in the financial statements, the
auditor shall (a) Express a qualified opinion or adverse opinion, as appropriate, in accordance with SA
705; and (b) In the Basis for Qualified (Adverse) Opinion section of the auditor’s report, state that a
material uncertainty exists that may cast significant doubt on the entity’s ability to continue as a going
concern and that the financial statements do not adequately disclose this matter.
In the current scenario, Abhinandan Limited has received a show cause notice from the National Green
Tribunal of an amount which is more than the net profit and the turnover of the company for the year.
In the event of an unfavorable order for Abhinandan Limited, there will be an impact on Abhinandan
Limited’s ability to continue as a going concern.
As a result, appropriate disclosure should be provided by management for such events which cast
significant doubt on the entity’s ability to continue as a going concern. As no appropriate disclosure has
been provided by Abhinandan Limited for such show cause notice, Subahu & Co. should report this
matter in their audit report under “Going Concern Para” as per SA 570 and under clause (j) of Section
143(3) of the Companies Act, 2013. Also, the auditor is required to issue an adverse opinion as per SA
705, “Modifications to the Opinion in the Independent Auditor’s Report”.

Question 7
CA Paras has been appointed as the Chief Financial Officer (CFO) of Prashanth Limited. In this role, CA
Paras is tasked with the responsibility of ensuring that the company's entity’s operations are conducted
in accordance with relevant laws and regulations. As part of his duties, CA Paras is emphasising the
importance of adhering to all applicable laws and regulations that could impact the entity's specific
disclosures in its financial statements. Additionally, he is focusing on compliance with laws and
regulations that dictate the appropriate financial reporting framework for the company. CA Paras is
also highlighting the significance of avoiding any non-compliance, as certain laws and regulations may
impose penalties in the event of violations. Now CA Paras wants to implement policies and procedures
in an entity that can assist in the prevention and detection of non-compliance with the laws and
regulations. Help CA Paras by citing examples of such policies and procedures. (RTP Nov ’23)
Answer 7
Management Responsibility for Compliance with Laws and Regulations:
SA 250, “Consideration of Laws and Regulations in an Audit of Financial Statements”, states that it is the
responsibility of management, with the oversight of those charged with governance to ensure that the entity’s
operations are conducted in accordance with the provisions of laws and regulations. For this purpose,
management may apply the following procedures:

 Monitoring legal requirements and ensuring that operating procedures are designed to
meet these requirements.
 Instituting and operating appropriate systems of internal control.
 Developing, publicizing and following a code of conduct.

Chapter 2.2 SA 250 – Consideration of Laws and Regulations in an Audit of Financial Statements

You might also like