Welcome to the Team! Let’s Talk About "Terms of Engagement"
Hi there! Welcome to your study session on the Terms of Engagement. If you’re just starting your AUD journey, don’t worry—this chapter isn't about complex math or scary spreadsheets. Instead, think of it as "Setting the Rules of the Game." Before an auditor starts digging into the numbers, everyone needs to agree on who is doing what. If we don’t get this right at the start, things can get very messy later on!
In this chapter, we are going to learn how an auditor decides whether to take on a client and how to put that agreement in writing. Let's dive in!
1. The Preconditions for an Audit
Before an auditor can say "Yes" to a project, two main things must be in place. We call these the Preconditions for an Audit. If these aren't met, the auditor should generally decline the engagement.
A. The Financial Reporting Framework
The auditor must determine if the "rules" the company used to build their financial statements are acceptable. In the US, this is usually GAAP (Generally Accepted Accounting Principles). Imagine trying to referee a soccer game where one team thinks they are playing rugby—it wouldn't work! Both the auditor and the client must agree on the rules (the framework).
Audit preconditions include an acceptable reporting framework and management acknowledgment of responsibility for preparing and fairly presenting the statements, necessary internal control, and access to relevant information, additional requested information and necessary personnel. The DIM mnemonic describes internal control only and does not replace the other responsibilities.
Audit preconditions include an acceptable reporting framework and management acknowledgment of responsibility for preparing and fairly presenting the statements, necessary internal control, and access to relevant information, additional requested information and necessary personnel. The DIM mnemonic describes internal control only and does not replace the other responsibilities.
Additionally, management must provide the auditor with access to all information (records, documentation) and unrestricted access to persons within the entity. If management says, "You can look at everything except our secret bank account," that’s a huge red flag!
Quick Review: If management imposes a "Scope Limitation" (meaning they won't let you do your job) before you even start, and you think it will result in a Disclaimer of Opinion, you should not accept the engagement.
2. The Engagement Letter (The Contract)
Once we agree to work together, we put it in writing. This is called the Engagement Letter. It’s a formal contract that reduces the risk of "he said, she said" later on.
What must be in the letter?
• The Objective and Scope of the audit.
• The Responsibilities of the Auditor (to express an opinion).
• The Responsibilities of Management (Financial statements, internal controls, compliance).
• Identification of the Financial Reporting Framework (e.g., GAAP).
• A statement that because of Inherent Limitations, some errors might not be found (audits provide reasonable, not absolute, assurance).
• Reference to the expected form and content of the Audit Report.
Analogy: Hiring an auditor is like hiring a professional house inspector. The inspector promises to look for major issues (the audit), but they can’t promise the house will never have a leak in 20 years (inherent limitations). You both sign a contract so you know exactly what is being inspected.
Document agreed audit terms in an engagement letter or other suitable written agreement. On recurring audits, assess whether circumstances require revised terms; a management or ownership change is a factor, not an automatic requirement for a new letter. If terms remain suitable, remind management and document that reminder.
3. Recurring Audits: Do We Need a New Letter?
If you audit the same client year after year, you don't always need a brand-new signed letter, but you must remind the client of the terms. However, you must revise the terms or send a new letter if:
Document agreed audit terms in an engagement letter or other suitable written agreement. On recurring audits, assess whether circumstances require revised terms; a management or ownership change is a factor, not an automatic requirement for a new letter. If terms remain suitable, remind management and document that reminder.
Did you know? Even if nothing changes, most CPA firms send a new letter every year anyway just to be safe. It’s considered "best practice."
4. Changing the Terms Mid-Stream
Sometimes, halfway through an audit, a client might ask you to change the engagement to a "Lower Level of Service" (like a Review or a Compilation).
Why would they do this?
• A change in circumstances (they no longer need a full audit for their bank loan).
• A misunderstanding of what an audit actually is.
• A Scope Limitation (they are trying to hide something!).
Accept a change to a lower-assurance service only with reasonable justification. The new report generally does not refer to the original audit or procedures, except that an agreed-upon procedures engagement normally describes the procedures actually performed. A change to avoid an adverse audit result or unsupported scope limitation is not justified.
5. Initial Audits: Talking to the "Ex" (Predecessor Auditor)
In the world of auditing, we always talk to the auditor who came before us. This is called the Predecessor Auditor. This is a mandatory step for the successor (new) auditor.
Obtain client authorization before communicating with the predecessor. Under AU-C 210 as amended by SAS 147, inquire about identified or suspected fraud and noncompliance with laws or regulations. Other relevant inquiries include management integrity, disagreements, significant deficiencies/material weaknesses, reasons for the change, and related parties or unusual transactions. Assess any refusal or limited response. Payment history cannot replace these substantive inquiries; RID-P is incomplete.
Memory Aid: Think of this like dating. If you're about to get serious with someone, you might want to ask their "ex" why they broke up. If the ex says, "They lied about everything," you might want to reconsider the relationship!
Key Takeaway: Communication with the predecessor is required. If the client says "No," the auditor usually says "Goodbye."
Summary Checklist for Success
Audit preconditions include an acceptable reporting framework and management acknowledgment of responsibility for preparing and fairly presenting the statements, necessary internal control, and access to relevant information, additional requested information and necessary personnel. The DIM mnemonic describes internal control only and does not replace the other responsibilities.
Don't worry if this seems like a lot of rules! Just remember that the "Terms of Engagement" section is all about Professional Skepticism—making sure we know who we are dealing with before we sign our name to a report. You've got this!