Recent from talks
Nothing was collected or created yet.
Financial audit
View on WikipediaThis article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these messages)
|
| Part of a series on |
| Accounting |
|---|
A financial audit is conducted to provide an opinion whether "financial statements" (the information is verified to the extent of reasonable assurance granted) are stated in accordance with specified criteria. Normally, the criteria are international accounting standards, although auditors may conduct audits of financial statements prepared using the cash basis or some other basis of accounting appropriate for the organization. In providing an opinion whether financial statements are fairly stated in accordance with accounting standards, the auditor gathers evidence to determine whether the statements contain material errors or other misstatements.[1]
Overview
[edit]The audit opinion is intended to provide reasonable assurance, but not absolute assurance, that the financial statements are presented fairly, in all material respects, and/or give a true and fair view in accordance with the financial reporting framework. The purpose of an audit is to provide an objective independent examination of the financial statements, which increases the value and credibility of the financial statements produced by management, thus increasing user confidence in the financial statement, reducing investor risk and consequently reducing the cost of capital of the preparer of the financial statements.[2]
In accordance with the US Generally Accepted Accounting Principles (US GAAP), auditors must release an opinion of the overall financial statements in the auditor's report. The unqualified auditor's opinion is the opinion that the financial statements are presented fairly. Auditors can release three types of statements other than an unqualified/unmodified opinion:
- A qualified opinion means that the financial statements are presented fairly in all material respects in accordance with US GAAP, except for a material misstatement that does not however pervasively affect the user's ability to rely on the financial statements.
- A qualified opinion with a scope limitation of limited significance may also be issued. Further the auditor can instead issue a disclaimer, because there is insufficient and appropriate evidence to form an opinion or because of lack of independence. In a disclaimer the auditor explains the reasons for withholding an opinion and explicitly indicates that no opinion is expressed.
- Finally, an adverse audit opinion is issued when the financial statements do not present fairly due to departure from US GAAP and the departure materially affects the financial statements overall. In an adverse auditor's report, the auditor must explain the nature and size of the misstatement and must state the opinion that the financial statements do not present fairly in accordance with US GAAP.[3]
Financial audits are typically performed by firms of practicing accountants who are experts in financial reporting. The financial audit is one of many assurance functions provided by accounting firms. Many organizations separately employ or hire internal auditors, who do not attest to financial reports but focus mainly on the internal controls of the organization. External auditors may choose to place limited reliance on the work of internal auditors. Auditing promotes transparency and accuracy in the financial disclosures made by an organization, therefore would likely reduce such corporations concealment of unscrupulous dealings.[4]
Internationally, the International Standards on Auditing (ISA) issued by the International Auditing and Assurance Standards Board (IAASB) is considered as the benchmark for audit process. Almost all jurisdictions require auditors to follow the ISA or a local variation of the ISA.
Financial audits exist to add credibility to the implied assertion by an organization's management that its financial statements fairly represent the organization's position and performance to the firm's stakeholders. The principal stakeholders of a company are typically its shareholders, but other parties such as tax authorities, banks, regulators, suppliers, customers and employees may also have an interest in knowing that the financial statements are presented fairly, in all material aspects. An audit is not designed to provide absolute assurance, being based on sampling and not the testing of all transactions and balances; rather it is designed to reduce the risk of a material financial statement misstatement whether caused by fraud or error. A misstatement is defined in ISA 450 as an error, omitted disclosure or inappropriate accounting policy. "Material" is an error or omission that would affect the users decision. Audits exist because they add value through easing the cost of information asymmetry and reducing information risk, not because they are required by law (note: audits are obligatory in many EU-member states and in many jurisdictions are obligatory for companies listed on public stock exchanges). For collection and accumulation of audit evidence, certain methods and means generally adopted by auditors are:[5]
- Posting checking
- Testing the existence and effectiveness of management controls that prevent financial statement misstatement
- Casting checking
- Physical examination and count
- Confirmation
- Inquiry
- Observation
- Inspection
- Year-end scrutiny
- Re-computation
- Tracing in subsequent period
- Bank reconciliation
- Vouching
- Verification of existence, ownership, title and value of assets and determination of the extent and nature of liabilities
The Big Four
[edit]Greenwood et al. (1990)[6] defined the audit firm as, "a professional partnership that has a decentralized organization relationship between the national head office and local offices". Local offices can make most of the managerial decisions except for the drawing up of professional standards and maintaining them.
The Big Four are the four largest international professional services networks, offering audit, assurance, tax, consulting, advisory, actuarial, corporate finance, and legal services. They handle the vast majority of audits for publicly traded companies as well as many private companies, creating an oligopoly in auditing large companies. It is reported that the Big Four audit 99% of the companies in the FTSE 100, and 96% of the companies in the FTSE 250 Index, an index of the leading mid-cap listing companies.[7] The Big Four firms are shown below, with their latest publicly available data. None of the Big Four firms is a single firm; rather, they are professional services networks. Each is a network of firms, owned and managed independently, which have entered into agreements with other member firms in the network to share a common name, brand and quality standards. Each network has established an entity to co-ordinate the activities of the network. In one case (KPMG), the co-ordinating entity is Swiss, and in three cases (Deloitte Touché Tohmatsu, PricewaterhouseCoopers and Ernst & Young) the co-ordinating entity is a UK limited company. Those entities do not themselves perform external professional services, and do not own or control the member firms. They are similar to law firm networks found in the legal profession. In many cases each member firm practices in a single country, and is structured to comply with the regulatory environment in that country. In 2007 KPMG announced a merger of four member firms (in the United Kingdom, Germany, Switzerland and Liechtenstein) to form a single firm. Ernst & Young also includes separate legal entities which manage three of its four areas: Americas, EMEIA (Europe, The Middle East, India and Africa), and Asia-Pacific. (The Japan area does not have a separate area management entity). These firms coordinate services performed by local firms within their respective areas but do not perform services or hold ownership in the local entities.[8] This group was once known as the "Big Eight", and was reduced to the "Big Six" and then "Big Five" by a series of mergers. The Big Five became the Big Four after the demise of Arthur Andersen in 2002, following its involvement in the Enron scandal.
Costs
[edit]Costs of audit services can vary greatly dependent upon the nature of the entity, its transactions, industry, the condition of the financial records and financial statements, and the fee rates of the CPA firm.[9][10] A commercial decision such as the setting of audit fees is handled by companies and their auditors. Directors are responsible for setting the overall fee as well as the audit committee. The fees are set at a level that could not lead to audit quality being compromised.[11] The scarcity of staffs and the lower audit fee lead to very low billing realization rates.[12] As a result, accounting firms, such as KPMG, PricewaterhouseCoopers and Deloitte who used to have very low technical inefficiency, have started to use AI tools.[13]
History
[edit]Audit of government expenditure
[edit]The earliest surviving mention of a public official charged with auditing government expenditure is a reference to the Auditor of the Exchequer in England in 1314. The Auditors of the Impresa were established under Queen Elizabeth I in 1559 with formal responsibility for auditing Exchequer payments. This system gradually lapsed and in 1780, Commissioners for Auditing the Public Accounts were appointed by statute. From 1834, the Commissioners worked in tandem with the Comptroller of the Exchequer, who was charged with controlling the issuance of funds to the government.
As Chancellor of the Exchequer, William Ewart Gladstone initiated major reforms of public finance and Parliamentary accountability. His 1866 Exchequer and Audit Departments Act required all departments, for the first time, to produce annual accounts, known as appropriation accounts. The Act also established the position of Comptroller and Auditor General (C&AG) and an Exchequer and Audit Department (E&AD) to provide supporting staff from within the civil service. The C&AG was given two main functions – to authorize the issue of public money to government from the Bank of England, having satisfied himself that this was within the limits Parliament had voted – and to audit the accounts of all Government departments and report to Parliament accordingly.
Auditing of UK government expenditure is now carried out by the National Audit Office. The Australian National Audit Office conducts all financial statement audits for entities controlled by the Australian Government.[14]
Origins of Financial Audit
[edit]The origins of financial audit begin in the 1800s in England, where the need for accountability first arose. As people began to recognize the benefits of financial audits, the need for standardization became more apparent and the use of financial audits spread into the United States. In the early 1900s financial audits began to take on a form more resembling what is see in the twenty-first century.[15][16]
The first laws surrounding audit formed in England in the beginning of the nineteenth century and helped the financial sector in England prosper. To fully gain the trust of the public, the auditor profession would need to grow and standardize itself and establish organizations, becoming equally accountable across the country and the world.[17]
In 1845 England, accompanied by new law, the first corporation was formed. The law required auditors who owned a share of the company but who did not directly manage the company's operations. Audit financial documents had been presented to shareholders, but at this point anyone could be an auditor. In these early days there was little accountability or standardization.[18]
Financial auditing, and various other English accounting practices, first came to the United States in the late nineteenth century. These practices came by way of British and Scottish investors who wanted to stay more informed on their American investments. Around this same time, an American accounting system was taking root.[19]
Within the next 10 years (1896), professionals had the opportunity to become accredited by obtaining a license to become a Certified Public Accountant. Copious amounts of the auditing work done at the end of the 19th century were by chartered accountants from England and Scotland. This included the work of Arthur Young, Edwin Guthrie, and James T. Anyon.[20]
In the 1910s financial audits came under scrutiny for their unstandardized practices of accounting for various items, including tangible and intangible assets. Notably was the article "The Abuse of the Audit in Selling Securities" written by Alexander Smith in 1912, the article detailed the flaws of the auditing system. While others in the industry agreed with Smith's comments, many believed standardization was impossible.[21]
As the reputation of accounting firms grew, federal agencies began to seek out their advice. The Federal Trade Commission (FTC) and the Federal Reserve Board inquired about auditing procedures by requesting a technical memorandum in 1917. The Institute provided this guidance, which was to be published by the Federal Reserve Board as a bulletin. The Board and FTC each had their own agenda by requesting this memorandum. The former wanted to inform bankers on how important it was to obtain audited financial statements from borrowers, whilst the latter was to encourage uniform accounting. This bulletin included information about recommended auditing procedures in addition to the format for the profit and loss statement and the balance sheet. The memorandum was revised and published making it the first authoritative guidance published in the United States in regard to auditing procedures.[20]
It was not until 1932, when the New York Stock Exchange began requiring financial audits, that the practice started to standardize.[22] It did not become a requirement for newly listed companies until 1933 when the Securities Act of 1933 and the Securities Exchange Act of 1934 were enacted by President Franklin D. Roosevelt. The latter created the Securities and Exchange Commission, which required all current and new registrants to have audited financial statements. In doing so, the services that CPAs could provide became more valued and requested.[20]
In the United States, the accounting and auditing profession reached its peak from the 1940s to the 1960s. The SEC was reliant on the Institute for the auditing procedures used by accounting firms during engagements. Additionally, in 1947 a committee from the Institute advocated for "generally accepted auditing standards", which were approved in the following year. These standards governed the terms of the auditor's performance relating to professional conduct and the execution of the auditor's judgment during engagements.[20]
Governance and oversight
[edit]
In the United States, the SEC has generally deferred to the accounting industry (acting through various organizations throughout the years) as to the accounting standards for financial reporting, and the U.S. Congress has deferred to the SEC.
This is also typically the case in other developed economies. In the UK, auditing guidelines are set by the institutes (including ACCA, ICAEW, ICAS and ICAI) of which auditing firms and individual auditors are members. While in Australia, the rules and professional code of ethics are set by The Institute of Chartered Accountants Australia (ICAA), CPA Australia (CPA) and The National Institute of Accountants (NIA).[24]
Accordingly, financial auditing standards and methods have tended to change significantly only after auditing failures. The most recent and familiar case is that of Enron. The company succeeded in hiding some important facts, such as off-book liabilities, from banks and shareholders.[25] Eventually, Enron filed for bankruptcy, and (as of 2006[update]) is in the process of being dissolved. One result of this scandal was that Arthur Andersen, then one of the five largest accountancy firms worldwide, lost their ability to audit public companies, essentially killing off the firm.
A recent trend in audits (spurred on by such accounting scandals as Enron and Worldcom) has been an increased focus on internal control procedures, which aim to ensure the completeness, accuracy and validity of items in the accounts, and restricted access to financial systems. This emphasis on the internal control environment is now a mandatory part of the audit of SEC-listed companies, under the auditing standards of the Public Company Accounting Oversight Board (PCAOB) set up by the Sarbanes–Oxley Act.
Many countries have government sponsored or mandated organizations who develop and maintain auditing standards, commonly referred to generally accepted auditing standards or GAAS. These standards prescribe different aspects of auditing such as the opinion, stages of an audit, and controls over work product (i.e., working papers).
Some oversight organizations require auditors and audit firms to undergo a third-party quality review periodically to ensure the applicable GAAS is followed.
Stages of an audit
[edit]The following are the stages of a typical audit:[1]
Phase I: planning of audit and design an audit approach
[edit]- Accept Client and Perform Initial Planning.
- Understand the Client's Business and Industry.
- What should auditors understand?[26]
- The relevant industry, regulatory, and other external factors including the applicable financial reporting framework
- The nature of the entity
- The entity's selection and application of accounting policies
- The entity's objectives and strategies, and the related business risks that may result in material misstatement of the financial statements
- The measurement and review of the entity's financial performance
- Internal control relevant to the audit
- What should auditors understand?[26]
- Assess Client's Business Risk
- Set Materiality and Assess Accepted Audit Risk (AAR) and Inherent Risk (IR).
- Understand Internal Control and Assess Control Risk (CR).
- Develop Overall Audit Plan and Audit Program
Phase II: perform test of controls and substantive test of transactions
[edit]- Test of Control: if the auditor plans to reduce the determined control risk, then the auditor should perform the test of control, to assess the operating effectiveness of internal controls (e.g. authorization of transactions, account reconciliations, segregation of duties) including IT General Controls. If internal controls are assessed as effective, this will reduce (but not eliminate) the amount of 'substantive' work the auditor needs to do (see below).
- Substantive test of transactions: evaluate the client's recording of transactions by verifying the monetary amounts of transactions, a process called substantive tests of transactions. For example, the auditor might use computer software to compare the unit selling price on duplicate sales invoices with an electronic file of approved prices as a test of the accuracy objective for sales transactions. Like the test of control in the preceding paragraph, this test satisfies the accuracy transaction-related audit objective for sales. For the sake of efficiency, auditors often perform tests of controls and substantive tests of transactions at the same time.
- Assess Likelihood of Misstatement in Financial Statement.
Notes:
- At this stage, if the auditor accept the CR that has been set at the phase I and does not want to reduce the controls risk, then the auditor may not perform test of control. If so, then the auditor perform substantive test of transactions.
- This test determines the amount of work to be performed i.e. substantive testing or test of details.[27]
Phase III: perform analytical procedures and tests of details of balances
[edit]- where internal controls are strong, auditors typically rely more on Substantive Analytical Procedures (the comparison of sets of financial information, and financial with non-financial information, to see if the numbers 'make sense' and that unexpected movements can be explained)
- where internal controls are weak, auditors typically rely more on Substantive Tests of Detail of Balance (selecting a sample of items from the major account balances, and finding hard evidence (e.g. invoices, bank statements) for those items)
Notes:
- Some audits involve a 'hard close' or 'fast close' whereby certain substantive procedures can be performed before year-end. For example, if the year-end is 31 December, the hard close may provide the auditors with figures as at 30 November. The auditors would audit income/expense movements between 1 January and 30 November, so that after year end, it is only necessary for them to audit the December income/expense movements and 31 December balance sheet. In some countries and accountancy firms these are known as 'rollforward' procedures.
Phase IV: complete the audit and issue an audit report
[edit]After the auditor has completed all procedures for each audit objective and for each financial statement account and related disclosures, it is necessary to combine the information obtained to reach an overall conclusion as to whether the financial statements are fairly presented. This highly subjective process relies heavily on the auditor's professional judgment. When the audit is completed, the CPA must issue an audit report to accompany the client's published financial statements.
Responsibilities of an auditor
[edit]Corporations Act 2001 requires the auditor to:
- Give a true and fair view about whether the financial report complies with the accounting standards
- Conduct their audit in accordance with auditing standards
- Give the directors and auditor's independence declaration and meet independence requirements
- Report certain suspected contraventions to ASIC[11]
Commercial relationships versus objectivity
[edit]One of the major issues faced by private auditing firms is the need to provide independent auditing services while maintaining a business relationship with the audited company.
The auditing firm's responsibility to check and confirm the reliability of financial statements may be limited by pressure from the audited company, who pays the auditing firm for the service. The auditing firm's need to maintain a viable business through auditing revenue may be weighed against its duty to examine and verify the accuracy, relevancy, and completeness of the company's financial statements. This is done by auditor.
Numerous proposals are made to revise the current system to provide better economic incentives to auditors to perform the auditing function without having their commercial interests compromised by client relationships. Examples are more direct incentive compensation awards and financial statement insurance approaches. See, respectively, Incentive Systems to Promote Capital Market Gatekeeper Effectiveness[28] and Financial Statement Insurance.[29]
Related qualifications
[edit]- There are several related professional qualifications in the field of financial audit including Certified Internal Auditor, Certified General Accountant, Chartered Certified Accountant, Chartered Accountant and Certified Public Accountant.
Auditors and technology
[edit]Currently, many entities being audited are using information systems, which generate information electronically. For the audit evidences, auditors get dynamic information generated from the information systems in real time. There are less paper documents and pre-numbered audit evidences available, which leads to a revolution in audit methodology.[30]
Impact of information technology on the audit process
[edit]Over the past couple of years, technology is becoming a bigger emphasis for the audit profession, professional bodies, and regulators. From operational efficiency to financial inclusion and increased insights, technology has a lot to offer. The way businesses are performed and data is analyzed is changing as a result of technological advancements. Data management is becoming increasingly important. Artificial intelligence, blockchain, and data analytics are major changers in the accounting and auditing industries, altering auditors' roles. The introduction of cloud computing and cloud storage has opened up previously unimaginable possibilities for data collection and analysis. Auditors can now acquire and analyze broader industry data sets that were previously unreachable by going beyond the constraints of business data. As a result, auditors are better equipped to spot data anomalies, create business insights, and focus on business and financial reporting risk.[31]
Impacts of technology on the accounting profession
[edit]Artificial intelligence
[edit]This refers to machines that do tasks that need some kind of 'intelligence,' which can include learning, sensing, thinking, creating, attaining goals, and generating and interpreting language. Recent advances in AI have relied on approaches like machine learning and deep learning, in which algorithms learn how to do tasks like classify objects or predict values through statistical analysis of enormous amounts of data rather than explicit programming.[31]
Machine learning uses data analytics to simultaneously and continuously learn and identify data patterns allowing it to make predictions based on the data. Currently, Deloitte and PricewaterhouseCoopers (PWC) are both using machine learning tools within their companies to aid in financial auditing. Deloitte uses a software called Argus, which reads and scans documents to identify key contract terms and other outliers within the documents. PWC uses Halo, which is another machine learning technology that analyzes journal entries in the accounting books to identify areas of concern.[32]
Blockchain
[edit]Blockchain is a fundamental shift in the way records are created, maintained, and updated. Blockchain records are distributed among all users rather than having a single owner. The blockchain approach's success is based on the employment of a complicated system of agreement and verification to ensure that, despite the lack of a central owner and time gaps between all users, a single, agreed-upon version of the truth is propagated to all users as part of a permanent record. This results in a type of 'universal entry bookkeeping,' in which each participant receives an identical and permanent copy of a single entry.[31]
Blockchain technology has seen its growth within the financial auditing sector. Blockchain is a decentralized, distributed ledger, which makes it reliable and nearly impossible to be breached. Blockchain is also able to verify the authenticity of transactions in real time, giving it the ability to alert necessary parties for fraud. This helps improve the audit process and the accuracy of the audit. Before, auditors had to manually go through thousands of entries in a sample and now with blockchain technology, every single transaction is verified as soon as it is entered.[33]
Cyber security
[edit]Cyber security protects networks, systems, devices, and data from attack, unauthorized access, and harm. Cyber security best practices also include a broader range of operations such as monitoring IT infrastructures, detecting attacks or breaches, and responding to security failures. The spread of cyber risk across all organizational activities, the external nature of many of the risks, and the rate of change in the risk are just a few of the issues that organizations face in developing effective risk management around cyber security.[31]
Numerous banks and financial organizations are studying blockchain security solutions as a means of mitigating risk, cyber risks, and fraud. While these latter systems are less susceptible to cyberattacks that may bring the entire network down, security concerns remain, as a successful hack would allow access to not just the data saved at a particular point, but to all data in the digital ledger.[34]
See also
[edit]References
[edit]- ^ a b Arens, Elder, Beasley; Auditing and Assurance Services; 14th Edition; Prentice Hall; 2012
- ^ "Auditing Standard No. 5". pcaobus.org. Retrieved 7 April 2016.
- ^ "AU 508 Reports on Audited Financial Statements". pcaobus.org. Retrieved 7 April 2016.
- ^ CALCPA. (2010, November). Report: Auditing Missteps During the Economic Crisis. News & Trends, p. 4.
- ^ Auditing and Assurance Vol.1. The Institute of Chartered Accountants of India. 2011. p. 3.4. ISBN 978-81-8441-135-5. Archived from the original on 5 January 2010. Retrieved 27 August 2012.
- ^ Greenwood, Royston; Hinings, C. R.; Brown, John (1 December 1990). ""P2-Form" Strategic Management: Corporate Practices in Professional Partnerships". Academy of Management Journal. 33 (4): 725–755. doi:10.2307/256288. ISSN 0001-4273. JSTOR 256288.
- ^ Mario Christodoulou (30 March 2011). "U.K. Auditors Criticized on Bank Crisis". The Wall Street Journal.
- ^ Ernst & Young. "Legal statement". ey.com.
- ^ Denlinger, Craig. "Audit Costs". Retrieved 27 January 2014.
- ^ "Audit Costs". Retrieved 15 April 2015.
- ^ a b Commission, c=au;o=Australian Government;ou=Australian Government Australian Securities and Investments. "Audit quality – The role of directors and audit committees". asic.gov.au. Retrieved 17 May 2016.
{{cite web}}: CS1 maint: multiple names: authors list (link) - ^ Chang, Hsihui; Kao, Yi-Ching; Mashruwala, Raj; Sorensen, Susan M. (10 April 2017). "Technical Inefficiency, Allocative Inefficiency, and Audit Pricing". Journal of Accounting, Auditing & Finance. 33 (4): 580–600. doi:10.1177/0148558x17696760. S2CID 157787279.
- ^ Kokina, Julia; Davenport, Thomas H. (March 2017). "The Emergence of Artificial Intelligence: How Automation is Changing Auditing". Journal of Emerging Technologies in Accounting. 14 (1): 115–122. doi:10.2308/jeta-51730.
- ^ Office, Australian National Audit (12 May 2016). "Auditor-General and the Office". anao.gov.au. Retrieved 17 May 2016.
- ^ Carey, John (1969). Rise of the accounting profession, v. 1. From technician to professional, 1896-1936.;. American Institute of Certified Public Accountants.
- ^ Zeff, Stephen (September 2003). "How the U.S. Accounting Profession Got Where It Is Today: Part I" (PDF). Accounting Horizons. 17: 190–194.
- ^ Carey, John (1969). Rise of the accounting profession, v. 1. From technician to professional, 1896-1936.;. American Institute of Certified Public Accountants. pp. 5–6.
- ^ Carey, John (1969). Rise of the accounting profession, v. 1. From technician to professional, 1898-1936. American Institute of Certified Public Accountants. pp. 16–18.
- ^ Carey, John (1969). Rise of the accounting profession, v. 1. From technician to professional,1896-1936. American Institute of Certified Public Accountants. pp. 21–22.
- ^ a b c d Zeff, Stephen (September 2003). "How the U.S. Accounting Profession Got Where It Is Today: Part I" (PDF). Accounting Horizons. 17: 190–194.
- ^ Carey, John (1969). Rise of the accounting profession, v. 1. From technician to professional,1896-1936. American Institute of Certified Public Accountants. pp. 77–80.
- ^ Cary, John (1969). Rise of the accounting profession, v. 1. From technician to professional,1896-1936. American Institute of Certified Public Accountants. p. 169.
- ^ "U.S. GAO – Our Seal". Gao.gov. 29 September 2008. Retrieved 2 September 2013.
- ^ "Part 2". archive.treasury.gov.au. Archived from the original on 30 March 2016. Retrieved 17 May 2016.
- ^ "A Look Back at the Enron Case". FBI. Retrieved 7 April 2016.
- ^ International Standard on Auditing 315 Understanding the Entity and its Environment and Assessing the Risks of Misstatement
- ^ Stef, Scott. "Tests of control & substantive tests". icas.com. Archived from the original on 8 May 2019. Retrieved 17 May 2016.
- ^ Cunningham, Lawrence A. (17 April 2007). Carrots for Vetogates: Incentive Systems to Promote Capital Market Gatekeeper Effectiveness by Lawrence A. Cunningham :: SSRN. SSRN 980949.
- ^ Cunningham, Lawrence A. (3 June 2004). Choosing Gatekeepers: The Financial Statement Insurance Alternative to Auditor Liability by Lawrence A. Cunningham :: SSRN. SSRN 554863.
- ^ Pathak, Jagdish; Lind, Mary R. (November 2003). "Audit Risk, Complex Technology, and Auditing Processes". EDPACS. 31 (5): 1–9. doi:10.1201/1079/43853.31.5.20031101/78844.1. S2CID 61767095.
- ^ a b c d "Understanding the impact of technology in audit and finance". Dubai Financial Services Authority. 13 December 2017.
- ^ "Machine Learning in Auditing". The CPA Journal. 19 June 2019. Retrieved 2 May 2022.
- ^ Joshi, Naveen. "Making Financial Auditing More Assured With Blockchain". Forbes. Retrieved 2 May 2022.
- ^ Demirkan, Sebahattin; Demirkan, Irem; McKee, Andrew (2 April 2020). "Blockchain technology in the future of business cyber security and accounting". Journal of Management Analytics. 7 (2): 189–208. doi:10.1080/23270012.2020.1731721. ISSN 2327-0012. S2CID 213567107.
Financial audit
View on GrokipediaDefinition and Objectives
Core Principles and Scope
The core principles of financial auditing revolve around achieving reasonable assurance that financial statements are free from material misstatement, whether arising from fraud or error, through the application of systematic procedures by an independent auditor. These principles, as outlined in International Standard on Auditing (ISA) 200, emphasize the auditor's responsibility to plan and perform the audit to obtain sufficient appropriate audit evidence, enabling an opinion on whether the statements are prepared in accordance with the applicable financial reporting framework, such as IFRS or GAAP.[9] In the United States, Generally Accepted Auditing Standards (GAAS), promulgated by the AICPA, similarly require auditors to adhere to general standards of technical proficiency, independence in mental attitude, and due professional care; standards of fieldwork including adequate planning, understanding of internal controls, and gathering of evidential matter; and reporting standards ensuring conformity with GAAP, consistency, adequate disclosure, and expression of an opinion.[10] For audits of public companies, the Public Company Accounting Oversight Board (PCAOB) standards align closely with GAAS but impose additional requirements for enhanced scrutiny, such as explicit consideration of fraud risks under AS 2401.[11] Independence and objectivity form the bedrock of these principles, mandating that auditors maintain impartiality free from relationships or biases that could impair judgment, as violations have historically led to audit failures, such as the Enron scandal in 2001 where Arthur Andersen's compromised independence contributed to undetected misstatements exceeding $1 billion.[12] Professional skepticism requires auditors to critically assess audit evidence without undue acceptance of management representations, while due professional care entails exercising caution and diligence commensurate with the engagement's complexity. These are not mere guidelines but enforceable requirements, with breaches subject to disciplinary action by bodies like the AICPA or PCAOB, which conducted over 200 inspections in 2023 identifying deficiencies in 40% of audited firms' processes.[13] The scope of a financial audit is inherently limited to the financial statements and related disclosures for a specific period, typically one fiscal year, focusing on assertions about existence, completeness, accuracy, valuation, and presentation rather than exhaustive verification of every transaction. Unlike operational or compliance audits, financial audits do not extend to non-financial performance metrics or future projections unless explicitly engaged, as the objective is to provide assurance on historical financial position, results, and cash flows, not to certify error-free operations—reasonable assurance acknowledges an unavoidable risk of undetected material misstatements due to inherent limitations like sampling and management overrides.[14] Scope is determined during planning, considering entity size, complexity, and risk factors; for instance, PCAOB standards require auditors to evaluate internal controls over financial reporting (ICFR) for integrated audits of public filers under Sarbanes-Oxley Act Section 404, covering material weaknesses that affected 5% of large accelerated filers in 2023 disclosures.[15] This delimited focus ensures efficiency but underscores that audits serve stakeholders like investors by enhancing credibility, not substituting for management's responsibility for the statements' preparation and fair presentation.[2]Purposes in Financial Reporting and Markets
Financial audits serve to provide reasonable assurance that an entity's financial statements are free from material misstatement, whether due to error or fraud, thereby enabling users to rely on them for decision-making.[1] This assurance is obtained through the auditor's evaluation of evidence supporting the amounts and disclosures in the statements, in accordance with standards such as those set by the Public Company Accounting Oversight Board (PCAOB).[16] The primary objective is the expression of an opinion on whether the financial statements present fairly, in all material respects, the financial position, results of operations, and cash flows of the entity.[17] In financial reporting, audits enhance the reliability and transparency of information provided to stakeholders, including management, boards, and regulators, by verifying compliance with frameworks like U.S. GAAP or IFRS.[12] They help detect and deter irregularities, such as errors or fraudulent activities, which could otherwise distort reported performance and position.[18] For public companies, audits fulfill mandatory requirements under laws like the Sarbanes-Oxley Act of 2002, which mandates independent audits to protect investors from misleading disclosures.[19] Within capital markets, financial audits reduce information asymmetry between issuers and investors, fostering market efficiency and liquidity.[20] By bolstering confidence in audited statements, they lower perceived risks, which in turn decreases the cost of debt and equity capital for audited entities.[21] Investors rely on these audits to inform allocation decisions, as evidenced by their role in maintaining trust post-scandals like Enron, where audit failures eroded market stability.[22] High-quality audits thus support broader economic functions, including the facilitation of capital formation and the prevention of systemic risks from unreliable reporting.[23]Historical Development
Ancient Precursors and Early Modern Practices
In ancient Mesopotamia, auditing practices originated around 3500 BCE with the Sumerians' use of clay tokens and cuneiform tablets to record and verify temple and palace inventories of grain, livestock, and labor outputs. Scribes performed rudimentary audits by conducting physical counts and reconciling them against written ledgers to identify theft or errors, ensuring accountability in centralized economic systems where temples functioned as proto-banks.[24][25] Similar verification processes appeared in ancient Egypt by 3000 BCE, where royal scribes audited pharaonic treasuries and granaries, cross-checking volumetric measures of commodities against documentary records to prevent discrepancies in state-controlled agriculture and tribute collection.[26] In classical Greece, particularly Athens from the 5th century BCE, public auditing evolved through the euthynai process, where outgoing magistrates submitted accounts for scrutiny by boards of logistai—specialized examiners who verified expenditures of public funds, imposed fines for irregularities, and upheld fiscal transparency in democratic institutions.[27] The Roman Republic and Empire extended these practices, employing quaestors as financial officers to audit provincial tax collections, military disbursements, and imperial accounts, often involving collegial reviews and legal penalties for malfeasance to maintain the integrity of vast administrative revenues.[28] Transitioning to early modern Europe, medieval precedents in ecclesiastical and royal courts—such as annual audits of monastic estates and crown exchequers involving committee cross-verifications—laid groundwork for Renaissance commercial practices.[29] In 15th-century Italian city-states like Venice and Florence, the proliferation of Mediterranean trade spurred the formalization of double-entry bookkeeping, systematically documented by Luca Pacioli in his 1494 treatise Summa de arithmetica, which balanced debits and credits to enable detection of imbalances indicative of fraud or error.[30] Merchants and banking houses increasingly commissioned independent syndics or notaries to audit ledgers, verifying transaction trails against supporting vouchers and physical assets to mitigate risks in partnership ventures and proto-joint-stock enterprises.[31] These practices emphasized evidentiary reconciliation over mere record-keeping, fostering trust in expanding credit networks amid the era's usury restrictions and commercial litigation.Industrial Era Formalization
The expansion of joint-stock companies during the Industrial Revolution in Britain, beginning in the late 18th century, created a separation between ownership and management that heightened the risk of financial misrepresentation, necessitating formalized independent verification of accounts to protect investors.[32] Large-scale enterprises such as railways and factories required capital from diffuse shareholders, who lacked direct oversight, prompting demands for systematic audits to confirm the accuracy of balance sheets and profit statements.[33] This shift marked a departure from informal, internal checks toward structured external scrutiny, driven by empirical evidence of fraud in early corporate ventures.[34] The Joint Stock Companies Act 1844 represented the first statutory formalization of financial audits in Britain, mandating that incorporated companies prepare an annual balance sheet certified by directors and audited by an independent person not involved in the company's operations.[32] The audited balance sheet, detailing assets, liabilities, and capital, had to be filed publicly with the Registrar of Joint Stock Companies, enabling shareholder access and promoting transparency in an era of rapid industrialization.[35] This requirement applied to companies with more than 25 members or £10,000 capital, reflecting a causal link between scale and accountability needs, though enforcement relied on basic verification rather than advanced testing procedures.[33] Professional auditing practices emerged concurrently, with William Welch Deloitte conducting the first known independent audit of the Great Western Railway in 1849, establishing precedents for external firms.[36] Deloitte's firm, founded in 1845, specialized in verifying railway accounts amid sector-specific risks like overcapitalization, using methods such as vouching transactions against vouchers and reconciling bank balances.[37] By the 1850s, similar engagements proliferated, as shareholders appointed auditors via company articles, fostering a nascent profession despite lacking formal qualifications.[38] The Joint Stock Companies Act 1856 repealed the 1844 audit mandate, shifting responsibility to company constitutions and making audits voluntary, yet market pressures from investors sustained their adoption.[32] This flexibility allowed audits to evolve through practice, with auditors increasingly employing analytical reviews and sampling, though amateur involvement persisted until the late 19th century.[39] Corporate failures, such as the Overend Gurney crisis of 1866, underscored the limitations of non-statutory audits, reinforcing calls for rigor without immediate legislative revival.[40] By 1900, professional auditors dominated, with over 90% of major British companies using them, laying groundwork for 20th-century standardization.[39]20th Century Standardization and Reforms
In the United States, the early 20th century's expansion of stock markets and the 1929 crash exposed deficiencies in financial reporting, leading to reforms that institutionalized independent financial audits. The Securities Act of 1933 mandated audited financial statements for companies issuing securities registered with the federal government, aiming to restore investor confidence through third-party verification of accuracy and completeness.[5] The subsequent Securities Exchange Act of 1934 created the Securities and Exchange Commission (SEC) and extended audit requirements to periodic filings by listed companies, establishing audits as a cornerstone of public market regulation.[5] These laws shifted auditing from ad hoc verification to a standardized process emphasizing auditor independence and liability for material misstatements. The American Institute of Certified Public Accountants (AICPA) advanced standardization through authoritative pronouncements. The 1939 McKesson & Robbins scandal, involving inventory fraud, prompted the AICPA's Committee on Auditing Procedure to issue Statement on Auditing Procedure (SAP) No. 1, the first formal guidance requiring audits to assess whether financial statements fairly presented results in accordance with generally accepted accounting principles (GAAP).[5] This laid the foundation for Generally Accepted Auditing Standards (GAAS), codified by the AICPA in the 1940s with 10 core principles covering general standards (e.g., training and independence), fieldwork standards (e.g., planning and evidence), and reporting standards (e.g., consistency and disclosure).[10] By 1972, the AICPA issued the first Statements on Auditing Standards (SAS), expanding GAAS with detailed procedures for risk assessment and internal control evaluation, while 1988's SAS No. 58 addressed the "expectation gap" by clarifying auditor responsibilities in reports.[5][10] European reforms paralleled U.S. efforts, focusing on statutory mandates amid industrialization and wartime recovery. The UK's Companies Act 1948 required auditors to express an opinion on whether accounts provided a "true and fair view," restricted practice to qualified professionals, and standardized reporting on balance sheets and profit/loss statements.[32] The European Economic Community's Fourth Directive on Company Law in 1978 harmonized audit and disclosure requirements across member states, mandating uniform formats for annual accounts and emphasizing substantive verification over mere compliance checks.[32] Internationally, late-20th-century initiatives addressed cross-border inconsistencies. The International Federation of Accountants (IFAC), formed in 1977, created the International Auditing Practices Committee (IAPC, predecessor to the International Auditing and Assurance Standards Board) in 1978 to issue auditing guidelines, precursors to International Standards on Auditing (ISAs), promoting uniformity in procedures like sampling and fraud detection.[41] These efforts, driven by multinational trade growth, encouraged adoption of principles such as reasonable assurance and materiality, though implementation varied by jurisdiction due to differing legal traditions.[42]Audit Process
Planning and Risk Assessment
The planning phase of a financial audit requires the auditor to develop an overall audit strategy and a detailed audit plan tailored to the entity's circumstances, with the objective of designing procedures that address risks of material misstatement efficiently. This process, mandated by standards such as PCAOB Auditing Standard (AS) 2101, involves evaluating the engagement's scope, timing, and resource allocation, including the involvement of specialists if complex matters like valuations or regulatory compliance arise. Preliminary activities encompass client acceptance or continuance decisions, assessing independence and competence, and establishing terms via an engagement letter. Effective planning remains iterative, allowing adjustments as new information emerges during fieldwork. Central to planning is risk assessment, where auditors identify and evaluate risks of material misstatement in financial statements at both the overall and assertion levels, due to error or fraud, as outlined in AS 2110 and ISA 315 (Revised 2019).[43][44] This entails obtaining an understanding of the entity and its environment, including its internal control systems, industry conditions, regulatory framework, and economic factors that could influence financial reporting.[43] Auditors perform procedures such as inquiries with management, analytical reviews of prior-period data, and inspections of documents to pinpoint significant risks—those demanding special audit consideration due to magnitude or likelihood.[44] Control risk is assessed by evaluating the design and implementation of controls over relevant assertions, while inherent risk considers susceptibility to misstatement before controls.[43] The resulting risk profile informs the audit plan's nature, timing, and extent of further procedures. Materiality is determined early in planning to guide resource allocation and misstatement evaluation, with auditors establishing overall materiality as the largest amount of misstatement that could influence users' economic decisions, often benchmarked against metrics like 5-10% of pre-tax income or 0.5-1% of total assets for profit-oriented entities. Performance materiality—a lower threshold—is set to reduce aggregation risk, typically at 50-75% of overall materiality, and revised if actual results differ significantly from expectations. Fraud risk assessment integrates into this framework under AS 2401, requiring auditors to presume risks in revenue recognition and management override of controls, alongside inquiries of management, internal audit, and others about fraud awareness and incidents. Responses may include unpredictable testing or heightened skepticism, though standards emphasize that audits provide reasonable, not absolute, assurance against material fraud. Documentation of these assessments supports the plan's defensibility and supervisory review.[45]Evidence Collection and Testing
Audit evidence consists of all information, whether obtained from the company's records or other sources, that is used by the auditor to arrive at conclusions on which the audit opinion is based.[46] This evidence must be sufficient in quantity and appropriate in quality, with sufficiency determined by the individual persuasive force of items considered collectively and appropriateness assessed by relevance to the assertion and reliability of the source or nature of the evidence.[46] Relevance addresses whether the evidence relates to the specific assertion being tested, such as existence or valuation, while reliability is influenced by factors including the independence of the provider, effectiveness of internal controls over preparation, and whether the evidence is original or copied.[46] To obtain audit evidence, auditors perform procedures tailored to assessed risks, including further audit procedures comprising tests of controls—where reliance on controls is planned—and substantive procedures to detect material misstatements at the assertion level.[46] Tests of controls evaluate the operating effectiveness of controls designed to prevent or detect misstatements, such as reperforming reconciliations or inspecting approval documentation for a sample of transactions.[46] Substantive procedures, mandatory regardless of control reliance, include tests of details examining individual transactions or balances—via vouching from records to source documents or external confirmations—and substantive analytical procedures comparing recorded amounts to expectations derived from financial and nonfinancial data.[46] For instance, external confirmations, sent directly to third parties like banks or customers, provide highly reliable evidence for receivables or cash balances due to their independent source.[46] Specific audit procedures encompass inspection of records or tangible assets, observation of processes like inventory counts, external or internal inquiry of knowledgeable parties, recalculation of mathematical accuracy, reperformance of client procedures, and analytical reviews of relationships such as expense trends against industry benchmarks.[46] Auditors apply professional skepticism throughout, designing procedures to corroborate or challenge management's assertions on financial statement elements, including completeness, accuracy, occurrence, cutoff, valuation, allocation, rights and obligations, and presentation.[46] Sampling techniques, such as statistical or nonstatistical methods, are often employed to select items for testing when examining all population elements is impractical, with sample size influenced by tolerable misstatement and expected error rates.[46] The evaluation of evidence reliability considers the circumstances of its generation; for example, auditor-generated evidence through reperformance is generally more reliable than internal evidence from a biased source, and electronic evidence requires assessment of controls over its digital integrity, as addressed in PCAOB amendments to AS 1105 effective for fiscal years beginning on or after December 15, 2025.[46] Inadequate evidence prompts additional procedures or modification of the audit opinion, ensuring the cumulative effect supports reasonable assurance that financial statements are free of material misstatement.[46] Documentation of evidence obtained, procedures performed, and conclusions reached is required to demonstrate compliance with standards and facilitate review.[46]Completion, Reporting, and Follow-Up
In the completion phase of a financial audit, auditors perform final procedures to ensure the financial statements are complete and free from material misstatement. This includes conducting overall analytical procedures to assess the financial statements as a whole, obtaining written representations from management confirming the completeness and accuracy of information provided, and evaluating the consistency of accounting policies. Auditors also review the entity's subsequent events, defined as those occurring between the balance sheet date and the auditor's report date, by inquiring of management, reading the latest interim financial statements, and inspecting relevant documents to identify adjusting or non-adjusting events that require recognition or disclosure. For instance, under PCAOB AS 2801, the auditor must perform procedures up to the report date to detect events necessitating adjustments, such as material settlements of contingencies existing at year-end. Failure to adequately address subsequent events has historically contributed to audit deficiencies, as noted in PCAOB inspection reports where incomplete reviews led to undetected misstatements.[47] The reporting stage involves forming an opinion on whether the financial statements present fairly, in all material respects, the financial position, results of operations, and cash flows in accordance with the applicable financial reporting framework, such as U.S. GAAP or IFRS. Auditors issue an independent auditor's report structured per standards like ISA 700 (revised 2015), which requires the opinion paragraph to appear first, followed by a basis for opinion section discussing the audit's scope, adherence to auditing standards, and any going concern issues. For public company audits under PCAOB standards, the report must disclose the tenure of the auditor-client relationship and, since 2017, critical audit matters (CAMs) highlighting matters that involved challenging, subjective, or complex judgments. Opinions are unmodified if no material issues exist; otherwise, qualified, adverse, or disclaimer opinions are issued for misstatements or limitations, with empirical evidence from regulatory inspections showing that unmodified opinions predominate but qualified reports signal higher risk of future restatements.[48][4] Follow-up activities in external financial audits primarily consist of communicating findings to management and those charged with governance via a management letter or report, outlining internal control deficiencies, non-material misstatements, and recommendations for remediation, though auditors have no ongoing responsibility to verify implementation. Unlike internal audits, external auditors do not routinely perform post-report follow-up testing on the audited entity; instead, any required monitoring falls to the entity's audit committee or regulators, with PCAOB oversight focusing on the auditor's process quality through inspections rather than entity actions. In cases of significant deficiencies, standards like PCAOB AS 2201 for integrated audits may prompt entity remediation plans, but empirical studies indicate variable compliance rates, with only about 60-70% of material weaknesses remediated within a year based on analyses of SEC filings. Regulatory enforcement, such as SEC comment letters on audit reports, can necessitate additional disclosures or re-audits, underscoring the causal link between incomplete follow-up communication and persistent reporting risks.[15]Key Participants
Major Audit Firms and Market Structure
The financial audit market for large public companies and multinational entities is overwhelmingly dominated by the Big Four firms—Deloitte, Ernst & Young (EY), PricewaterhouseCoopers (PwC), and KPMG—which together audit the vast majority of such clients globally due to their scale, expertise in complex financial reporting, and established networks spanning over 150 countries.[49] These firms emerged from a series of mergers in the mid- to late-20th century: Deloitte from the 1989 merger of Deloitte Haskins & Sells and Touche Ross; EY from the 1989 combination of Ernst & Whinney and Arthur Young; PwC from the 1998 union of Price Waterhouse and Coopers & Lybrand; and KPMG from the 1987 linkage of Peat Marwick and Klynveld Main Goerdeler.[50] By fiscal year 2024, their combined global revenues exceeded $212 billion, with audit and assurance services comprising a core segment generating about $66.5 billion in 2023, reflecting their pivotal role in verifying financial statements under standards like IFRS and GAAP.[51] [52] This dominance manifests in near-total coverage of top-tier clients: the Big Four audit 100% of Fortune 500 companies and approximately 90% of U.S. publicly held firms, underscoring barriers to entry for smaller competitors arising from regulatory requirements, client demand for global reach, and economies of scale in talent and technology.[53] [54] In the U.S. SEC-registered market, their collective share for large accelerated filers remains above 95%, though overall public company audit client share dipped slightly to around 50% in 2024 amid growth in non-accelerated filers served by mid-tier firms.[55] Mid-tier networks like BDO, RSM International, Grant Thornton, and Baker Tilly capture the remainder, primarily auditing smaller private or non-accelerated public entities, but hold less than 10% of the large-company market due to limited resources for handling intricate, cross-border engagements.[56] The market structure approximates an oligopoly, with a four-firm concentration ratio (CR4) exceeding 90% for audits of major corporations, fostering debates on competition dynamics.[57] Empirical analyses indicate that while high concentration correlates with elevated audit fees for complex clients—potentially 10-20% higher in concentrated markets—it does not uniformly yield supra-competitive profits, as Big Four margins remain pressured by intense rivalry, regulatory scrutiny, and client-switching costs.[58] [59] Regulators, including the U.S. PCAOB and EU authorities, have flagged risks of reduced innovation and independence threats from limited supplier options, prompting proposals like mandatory firm rotation or joint audits to dilute dominance; however, evidence from post-Enron reforms shows persistent concentration, with Big Four market share stable or rising in key jurisdictions since 2002.[60] [61] Smaller firms' mergers have marginally boosted efficiency in niche segments but failed to erode the oligopoly for flagship audits, where client preferences prioritize perceived quality over cost.[62]| Firm | Global Revenue (FY 2024, USD billions) | Employees (approx.) | Audit Clients (Key Metric) |
|---|---|---|---|
| Deloitte | 67.2 | 457,000 | Leads in Fortune 500 audits[51][53] |
| PwC | 55.4 | 364,000 | Strong in international listings[51] |
| EY | 51.2 | 365,000 | Dominant in tech and consumer sectors[51] |
| KPMG | 38.4 | 275,000 | Key player in financial services[51][63] |
