ASA 260 |
Auditing Standard ASA 260
Communication With Those Charged With Governance
Issued by the Auditing and Assurance Standards Board
This Auditing Standard is available on the Auditing and Assurance Standards Board (AUASB) website: www.auasb.gov.au
Auditing and Assurance Standards Board Podium Level Level 14, 530 Collins Street Melbourne Victoria AUSTRALIA 3000 | Phone: (03) 8080 7400 E-mail: enquiries@auasb.gov.au Postal Address: PO Box 204, Collins Street West Melbourne Victoria AUSTRALIA 8007 |
© 2015 Commonwealth of Australia. The text, graphics and layout of this Auditing Standard are protected by Australian copyright law and the comparable law of other countries. Reproduction within Australia in unaltered form (retaining this notice) is permitted for personal and non‑commercial use subject to the inclusion of an acknowledgment of the source as being the Australian Auditing and Assurance Standards Board (AUASB).
Requests and enquiries concerning reproduction and rights for commercial purposes within Australia should be addressed to the Executive Director, Auditing and Assurance Standards Board, PO Box 204, Collins Street West, Melbourne, Victoria 8007 or sent to enquiries@auasb.gov.au. Otherwise, no part of this Auditing Standard may be reproduced, stored or transmitted in any form or by any means without the prior written permission of the AUASB except as permitted by law.
This Auditing Standard reproduces substantial parts of the corresponding International Standard on Auditing issued by the International Auditing and Assurance Standards Board (IAASB) and published by the International Federation of Accountants (IFAC), in the manner described in the statement on Conformity with International Standards on Auditing. The AUASB acknowledges that IFAC is the owner of copyright in the International Standard on Auditing incorporated in this Auditing Standard throughout the world.
All existing rights in this material are reserved outside Australia. Reproduction outside Australia in unaltered form (retaining this notice) is permitted for personal and non-commercial use only.
Further information and requests for authorisation to reproduce this Auditing Standard for commercial purposes outside Australia should be addressed to the Executive Director, Auditing and Assurance Standards Board, PO Box 204, Collins Street West, Melbourne, Victoria 8007 or sent to enquiries@auasb.gov.au. Any decision to approve a request may also require the agreement of IFAC.
ISSN 1833-4393
PREFACE
AUTHORITY STATEMENT
CONFORMITY WITH INTERNATIONAL STANDARDS ON AUDITING
Paragraphs
Application...............................................................Aus 0.1-Aus 0.2
Operative Date.............................................................Aus 0.3
Introduction
Scope of this Auditing Standard.................................................1-3
The Role of Communication...................................................4-7
Effective Date...............................................................8
Objectives..................................................................9
Definitions.................................................................10
Requirements
Those Charged with Governance..............................................11-13
Matters to Be Communicated................................................14-Aus 17.1
The Communication Process.................................................18-22
Documentation..............................................................23
Application and Other Explanatory Material
Those Charged with Governance..............................................A1-A8
Matters to Be Communicated...............................................A9-A36
The Communication Process...............................................A37-A53
Documentation............................................................A54
Appendix 1: Specific Requirements in ASQC 1 and Other Australian Auditing Standards that Refer to Communications with Those Charged with Governance
Appendix 2: Qualitative Aspects of Accounting Practice
The AUASB issues Auditing Standard ASA 260 Communication With Those Charged With Governance pursuant to the requirements of the legislative provisions and the Strategic Direction explained below.
The AUASB is an independent statutory committee of the Australian Government established under section 227A of the Australian Securities and Investments Commission Act 2001, as amended (ASIC Act). Under section 336 of the Corporations Act 2001, the AUASB may make Auditing Standards for the purposes of the corporations legislation. These Auditing Standards are legislative instruments under the Legislative Instruments Act 2003.
Under the Strategic Direction given to the AUASB by the Financial Reporting Council (FRC), the AUASB is required, inter alia, to develop auditing standards that have a clear public interest focus and are of the highest quality.
This Auditing Standard represents the Australian equivalent of revised ISA 260 Communication With Those Charged With Governance (January 2015) and replaces the current ASA 260 issued by the AUASB in October 2009 (as amended).
This Auditing Standard contains differences from the revised ISA 260, which have been made to accord with the Australian legislative environment and to maintain audit quality where the AUASB has considered there are compelling reasons to do so.
The revision of ASA 260 reflects:
(a) Recent enhancements to auditor reporting developed by the International Auditing and Assurance Standards Board; and
(b) Revisions to guidance that seek to focus the auditor’s attention more explicitly on financial statement disclosures throughout the audit process.
The Auditing and Assurance Standards Board (AUASB) makes this Auditing Standard ASA 260 Communication With Those Charged With Governance pursuant to section 227B of the Australian Securities and Investments Commission Act 2001 and section 336 of the Corporations Act 2001.
This Auditing Standard is to be read in conjunction with ASA 101 Preamble to Australian Auditing Standards, which sets out the intentions of the AUASB on how the Australian Auditing Standards, operative for financial reporting periods commencing on or after 1 January 2010, are to be understood, interpreted and applied. This Auditing Standard is to be read also in conjunction with ASA 200 Overall Objectives of the Independent Auditor and the Conduct of an Audit in Accordance with Australian Auditing Standards.
Dated: 1 December 2015 M H Kelsall
Chairman - AUASB
This Auditing Standard conforms with International Standard on Auditing ISA 260 Communication With Those Charged With Governance issued by the International Auditing and Assurance Standards Board (IAASB), an independent standard‑setting board of the International Federation of Accountants (IFAC).
Paragraphs that have been added to this Auditing Standard (and do not appear in the text of the equivalent) are identified with the prefix “Aus”.
The following requirement is additional to ISA 260:
The following application and other explanatory material is additional to ISA 260:
This Auditing Standard incorporates terminology and definitions used in Australia.
The equivalent requirements and related application and other explanatory material included in ISA 260 in respect of “relevant ethical requirements”, have been included in Auditing Standard, ASA 102 Compliance with Ethical Requirements when Performing Audits, Reviews and Other Assurance Engagements. There is no international equivalent to ASA 102.
Compliance with this Auditing Standard enables compliance with ISA 260.
Aus 0.1 This Auditing Standard applies to:
(a) an audit of a financial report for a financial year, or an audit of a financial report for a half‑year, in accordance with the Corporations Act 2001; and
(b) an audit of a financial report, or a complete set of financial statements, for any other purpose.
Aus 0.2 This Auditing Standard also applies, as appropriate, to an audit of other historical financial information.
Aus 0.3 This Auditing Standard is operative for financial reporting periods ending on or after 15 December 2016.
2. This Auditing Standard is written in the context of an audit of the financial report, but may also be applicable, as necessary in the circumstances, to audits of other historical financial information when those charged with governance have a responsibility to oversee the preparation of the other historical financial information.
3. Recognising the importance of effective two‑way communication in an audit of a financial report, this Auditing Standard provides an overarching framework for the auditor’s communication with those charged with governance, and identifies some specific matters to be communicated with them. Additional matters to be communicated, which complement the requirements of this Auditing Standard, are identified in other Australian Auditing Standards (see Appendix 1 of this Auditing Standard). In addition, ASA 265[1] establishes specific requirements regarding the communication of significant deficiencies in internal control the auditor has identified during the audit to those charged with governance. Further matters, not required by this or other Australian Auditing Standards, may be required to be communicated by law or regulation, by agreement with the entity, or by additional requirements applicable to the engagement. Nothing in this Auditing Standard precludes the auditor from communicating any other matters to those charged with governance. (Ref: Para. A33–A36)
4. This Auditing Standard focuses primarily on communications from the auditor to those charged with governance. Nevertheless, effective two‑way communication is important in assisting:
(a) The auditor and those charged with governance in understanding matters related to the audit in context, and in developing a constructive working relationship. This relationship is developed while maintaining the auditor’s independence and objectivity;
(b) The auditor in obtaining from those charged with governance information relevant to the audit. For example, those charged with governance may assist the auditor in understanding the entity and its environment, in identifying appropriate sources of audit evidence, and in providing information about specific transactions or events; and
(c) Those charged with governance in fulfilling their responsibility to oversee the financial reporting process, thereby reducing the risks of material misstatement of the financial report.
5. Although the auditor is responsible for communicating matters required by this Auditing Standard, management also has a responsibility to communicate matters of governance interest to those charged with governance. Communication by the auditor does not relieve management of this responsibility. Similarly, communication by management with those charged with governance of matters that the auditor is required to communicate does not relieve the auditor of the responsibility to also communicate them. Communication of these matters by management may, however, affect the form or timing of the auditor’s communication with those charged with governance.
6. Clear communication of specific matters required to be communicated by Australian Auditing Standards is an integral part of every audit. Australian Auditing Standards do not, however, require the auditor to perform procedures specifically to identify any other matters to communicate with those charged with governance.
7. Law or regulation may restrict the auditor’s communication of certain matters with those charged with governance. For example, laws or regulations may specifically prohibit a communication, or other action, that might prejudice an investigation by an appropriate authority into an actual, or suspected, illegal act. In some circumstances, potential conflicts between the auditor’s obligations of confidentiality and obligations to communicate may be complex. In such cases, the auditor may consider obtaining legal advice.
8. [Deleted by the AUASB. Refer Aus 0.3]
9. The objectives of the auditor are:
(a) To communicate clearly with those charged with governance the responsibilities of the auditor in relation to the financial report audit, and an overview of the planned scope and timing of the audit;
(b) To obtain from those charged with governance information relevant to the audit;
(c) To provide those charged with governance with timely observations arising from the audit that are significant and relevant to their responsibility to oversee the financial reporting process; and
(d) To promote effective two‑way communication between the auditor and those charged with governance.
10. For the purposes of this Auditing Standard, the following terms have the meanings attributed below:
(a) Those charged with governance – The person(s) or organisation(s) (e.g., a corporate trustee) with responsibility for overseeing the strategic direction of the entity and obligations related to the accountability of the entity. This includes overseeing the financial reporting process. For some entities in some jurisdictions, those charged with governance may include management personnel, for example, executive members of a governance board of a private or public sector entity, or an owner‑manager. For discussion of the diversity of governance structures, see paragraphs A1–A8 of this Auditing Standard.
(b) Management – The person(s) with executive responsibility for the conduct of the entity’s operations. For some entities in some jurisdictions, management includes some or all of those charged with governance, for example, executive members of a governance board, or an owner‑manager.
11. The auditor shall determine the appropriate person(s) within the entity’s governance structure with whom to communicate. (Ref: Para. A1–A4)
12. If the auditor communicates with a subgroup of those charged with governance, for example, an audit committee, or an individual, the auditor shall determine whether the auditor also needs to communicate with the governing body. (Ref: Para. A5–A7)
13. In some cases, all of those charged with governance are involved in managing the entity, for example, a small business where a single owner manages the entity and no one else has a governance role. In these cases, if matters required by this Auditing Standard are communicated with person(s) with management responsibilities, and those person(s) also have governance responsibilities, the matters need not be communicated again with those same person(s) in their governance role. These matters are noted in paragraph 16(c) of this Auditing Standard. The auditor shall nonetheless be satisfied that communication with person(s) with management responsibilities adequately informs all of those with whom the auditor would otherwise communicate in their governance capacity. (Ref: Para. A8)
14. The auditor shall communicate with those charged with governance the responsibilities of the auditor in relation to the financial report audit, including that:
(a) The auditor is responsible for forming and expressing an opinion on the financial report that has been prepared by management with the oversight of those charged with governance; and
(b) The audit of the financial report does not relieve management or those charged with governance of their responsibilities. (Ref: Para. A9–A10)
15. The auditor shall communicate with those charged with governance an overview of the planned scope and timing of the audit, which includes communicating about the significant risks identified by the auditor. (Ref: Para. A11–A16)
16. The auditor shall communicate with those charged with governance: (Ref: Para. A17–A18)
(a) The auditor’s views about significant qualitative aspects of the entity’s accounting practices, including accounting policies, accounting estimates and financial reporting disclosures. When applicable, the auditor shall explain to those charged with governance why the auditor considers a significant accounting practice, that is acceptable under the applicable financial reporting framework, not to be most appropriate to the particular circumstances of the entity; (Ref: Para. A19–A20)
(b) Significant difficulties, if any, encountered during the audit; (Ref: Para. A21)
(c) Unless all of those charged with governance are involved in managing the entity:
(i) Significant matters arising during the audit that were discussed, or subject to correspondence, with management; and (Ref: Para. A22)
(ii) Written representations the auditor is requesting;
(d) Circumstances that affect the form and content of the auditor’s report, if any; and (Ref: Para. A23–A25)
(e) Any other significant matters arising during the audit that, in the auditor’s professional judgement, are relevant to the oversight of the financial reporting process. (Ref: Para. A26–A28)
17. In the case of listed entities, the auditor shall communicate with those charged with governance:
(a) A statement that the engagement team and others in the firm as appropriate, the firm and, when applicable, network firms have complied with relevant ethical requirements regarding independence; and
(i) All relationships and other matters between the firm, network firms, and the entity that, in the auditor’s professional judgement, may reasonably be thought to bear on independence. This shall include total fees charged during the period covered by the financial report for audit and non‑audit services provided by the firm and network firms to the entity and components controlled by the entity. These fees shall be allocated to categories that are appropriate to assist those charged with governance in assessing the effect of services on the independence of the auditor; and
(ii) The related safeguards that have been applied to eliminate identified threats to independence or reduce them to an acceptable level. (Ref: Para. A29–A32)
Aus 17.1 In the case of entities audited in accordance with the Corporations Act 2001, the auditor shall communicate with those charged with governance through a statement that the engagement team and others in the firm as appropriate, the firm, and, when applicable network firms, have complied with the independence requirements of section 307C of the Corporations Act 2001.
18. The auditor shall communicate with those charged with those charged with governance the form, timing and expected general content of communications. (Ref: Para. A37–A45)
19. The auditor shall communicate in writing with those charged with governance regarding significant findings from the audit if, in the auditor’s professional judgement, oral communication would not be adequate. Written communications need not include all matters that arose during the course of the audit. (Ref: Para. A46–A48)
20. The auditor shall communicate in writing with those charged with governance regarding auditor independence when required by paragraph 17 of this Auditing Standard.
21. The auditor shall communicate with those charged with governance on a timely basis. (Ref: Para. A49–A50)
22. The auditor shall evaluate whether the two‑way communication between the auditor and those charged with governance has been adequate for the purpose of the audit. If it has not, the auditor shall evaluate the effect, if any, on the auditor’s assessment of the risks of material misstatement and ability to obtain sufficient appropriate audit evidence, and shall take appropriate action. (Ref: Para. A51–A53)
23. Where matters required by this Auditing Standard to be communicated are communicated orally, the auditor shall include them in the audit documentation, and when and to whom they were communicated. Where matters have been communicated in writing, the auditor shall retain a copy of the communication as part of the audit documentation.[2] (Ref: Para. A54)
* * *
A1. Governance structures vary by jurisdiction and by entity, reflecting influences such as different cultural and legal backgrounds, and size and ownership characteristics. For example:
A2. In most entities, governance is the collective responsibility of a governing body, such as a board of directors, a supervisory board, partners, proprietors, a committee of management, a council of governors, trustees, or equivalent persons. In some smaller entities, however, one person may be charged with governance, for example, the owner‑manager where there are no other owners, or a sole trustee. When governance is a collective responsibility, a subgroup such as an audit committee or even an individual, may be charged with specific tasks to assist the governing body in meeting its responsibilities. Alternatively, a subgroup or individual may have specific, legally identified responsibilities that differ from those of the governing body.
A3. Such diversity means that it is not possible for this Auditing Standard to specify for all audits the person(s) with whom the auditor is to communicate particular matters. Also, in some cases, the appropriate person(s) with whom to communicate may not be clearly identifiable from the applicable legal framework or other engagement circumstances, for example, entities where the governance structure is not formally defined, such as some owner‑managed entities, some not‑for‑profit organisations, and some public sector entities. In such cases, the auditor may need to discuss and agree with the engaging party the relevant person(s) with whom to communicate. In deciding with whom to communicate, the auditor’s understanding of an entity’s governance structure and processes obtained in accordance with ASA 315[4] is relevant. The appropriate person(s) with whom to communicate may vary depending on the matter to be communicated.
A4. ASA 600 includes specific matters to be communicated by group auditors with those charged with governance.[5] When the entity is a component of a group, the appropriate person(s) with whom the component auditor communicates depends on the engagement circumstances and the matter to be communicated. In some cases, a number of components may be conducting the same businesses within the same system of internal control and using the same accounting practices. Where those charged with governance of those components are the same (e.g., common board of directors), duplication may be avoided by dealing with these components concurrently for the purpose of communication.
A5. When considering communicating with a subgroup of those charged with governance, the auditor may take into account such matters as:
A6. When deciding whether there is also a need to communicate information, in full or in summary form, with the governing body, the auditor may be influenced by the auditor’s assessment of how effectively and appropriately the subgroup communicates relevant information with the governing body. The auditor may make explicit in agreeing the terms of engagement that, unless prohibited by law or regulation, the auditor retains the right to communicate directly with the governing body.
A7. Audit committees (or similar subgroups with different names) exist in many jurisdictions. Although their specific authority and functions may differ, communication with the audit committee, where one exists, has become a key element in the auditor’s communication with those charged with governance. Good governance principles suggest that:
A8. In some cases, all of those charged with governance are involved in managing the entity, and the application of communication requirements is modified to recognise this position. In such cases, communication with person(s) with management responsibilities may not adequately inform all of those with whom the auditor would otherwise communicate in their governance capacity. For example, in a company where all directors are involved in managing the entity, some of those directors (e.g., one responsible for marketing) may be unaware of significant matters discussed with another director (e.g., one responsible for the preparation of the financial report).
A9. The auditor’s responsibilities in relation to the financial report audit are often included in the engagement letter or other suitable form of written agreement that records the agreed terms of the engagement.[6] Law, regulation or the governance structure of the entity may require those charged with governance to agree the terms of the engagement with the auditor. When this is not the case, providing those charged with governance with a copy of that engagement letter or other suitable form of written agreement may be an appropriate way to communicate with them regarding such matters as:
A10. Law or regulation, an agreement with the entity or additional requirements applicable to the engagement may provide for broader communication with those charged with governance. For example, (a) an agreement with the entity may provide for particular matters to be communicated when they arise from services provided by a firm or network firm other than the financial report audit; or (b) the mandate of a public sector auditor may provide for matters to be communicated that come to the auditor’s attention as a result of other work, such as performance audits.
A11. Communication regarding the planned scope and timing of the audit may:
(a) Assist those charged with governance to understand better the consequences of the auditor’s work, to discuss issues of risk and the concept of materiality with the auditor, and to identify any areas in which they may request the auditor to undertake additional procedures; and
(b) Assist the auditor to understand better the entity and its environment.
A12. Communicating significant risks identified by the auditor helps those charged with governance understand those matters and why they require special audit consideration. The communication about significant risks may assist those charged with governance in fulfilling their responsibility to oversee the financial reporting process.
A13. Matters communicated may include:
A14. Other planning matters that it may be appropriate to discuss with those charged with governance include:
Aus A14.1 Where the entity has an internal audit function, how the external auditor and internal auditors can work together in a constructive and complementary manner, including any planned use of the work of the internal audit function.[10]
A15. While communication with those charged with governance may assist the auditor to plan the scope and timing of the audit, it does not change the auditor’s sole responsibility to establish the overall audit strategy and the audit plan, including the nature, timing and extent of procedures necessary to obtain sufficient appropriate audit evidence.
A16. Care is necessary when communicating with those charged with governance about the planned scope and timing of the audit so as not to compromise the effectiveness of the audit, particularly where some or all of those charged with governance are involved in managing the entity. For example, communicating the nature and timing of detailed audit procedures may reduce the effectiveness of those procedures by making them too predictable.
A17. The communication of findings from the audit may include requesting further information from those charged with governance in order to complete the audit evidence obtained. For example, the auditor may confirm that those charged with governance have the same understanding of the facts and circumstances relevant to specific transactions or events.
A18. When ASA 701 applies, the communications with those charged with governance required by paragraph 16, as well as the communication about the significant risks identified by the auditor required by paragraph 15, are particularly relevant to the auditor’s determination of matters that required significant auditor attention and which therefore may be key audit matters.[11]
A19. Financial reporting frameworks ordinarily allow for the entity to make accounting estimates, and judgements about accounting policies and financial report disclosures, for example, in relation to the use of key assumptions in the development of accounting estimates for which there is significant measurement uncertainty. In addition, law, regulation or financial reporting frameworks may require disclosure of a summary of significant accounting policies or make reference to “critical accounting estimates” or “critical accounting policies and practices” to identify and provide additional information to users about the most difficult, subjective or complex judgements made by management in preparing the financial report.
A20. As a result, the auditor’s views on the subjective aspects of the financial report may be particularly relevant to those charged with governance in discharging their responsibilities for oversight of the financial reporting process. For example, in relation to the matters described in paragraph A19, those charged with governance may be interested in the auditor’s evaluation of the adequacy of disclosures of the estimation uncertainty relating to accounting estimates that give rise to significant risks. Open and constructive communication about significant qualitative aspects of the entity’s accounting practices also may include comment on the acceptability of significant accounting practices and the quality of the disclosures. Appendix 2 identifies matters that may be included in this communication.
A21. Significant difficulties encountered during the audit may include such matters as:
In some circumstances, such difficulties may constitute a scope limitation that leads to a modification of the auditor’s opinion.[12]
A22. Significant matters discussed, or subject to correspondence with management may include such matters as:
A23. ASA 210 requires the auditor to agree the terms of the audit engagement with management or those charged with governance, as appropriate.[13] The agreed terms of the audit engagement are required to be recorded in an audit engagement letter or other suitable form of written agreement and include, among other things, reference to the expected form and content of the auditor’s report.[14] As explained in paragraph A9, if the terms of engagement are not agreed with those charged with governance, the auditor may provide those charged with governance with a copy of the engagement letter to communicate about matters relevant to the audit. The communication required by paragraph 16(d) is intended to inform those charged with governance about circumstances in which the auditor’s report may differ from its expected form and content or may include additional information about the audit that was performed.
A24. Circumstances in which the auditor is required or may otherwise consider it necessary to include additional information in the auditor’s report in accordance with the Australian Auditing Standards, and for which communication with those charged with governance is required, include when:
In such circumstances, the auditor may consider it useful to provide those charged with governance with a draft of the auditor’s report to facilitate a discussion of how such matters will be addressed in the auditor’s report.
A25. In the rare circumstances that the auditor intends not to include the name of the engagement partner in the auditor’s report in accordance with ASA 700, the auditor is required to discuss this intention with those charged with governance to inform the auditor’s assessment of the likelihood and severity of a significant personal security threat.[20] The auditor also may communicate with those charged with governance in circumstances when the auditor elects not to include the description of the auditor’s responsibilities in the body of the auditor’s report as permitted by ASA 700.[21]
A26. ASA 300[22] notes that, as a result of unexpected events, changes in conditions, or the audit evidence obtained from the results of audit procedures, the auditor may need to modify the overall audit strategy and audit plan and thereby the resulting planned nature, timing and extent of further audit procedures, based on the revised consideration of assessed risks. The auditor may communicate with those charged with governance about such matters, for example, as an update to initial discussions about the planned scope and timing of the audit.
A27. Other significant matters arising during the audit that are directly relevant to those charged with governance in overseeing the financial reporting process may include such matters as material misstatements the other information that have been corrected.
A28. To the extent not already addressed by the requirements in paragraphs 16(a)–(d) and related application material, the auditor may consider communicating about other matters discussed with, or considered by, the engagement quality control reviewer, if one has been appointed, in accordance with ASA 220.[23]
A29. The auditor is required to comply with relevant ethical requirements, including those pertaining to independence, relating to financial report audit engagements.[24]
A30. The relationships and other matters, and safeguards to be communicated, vary with the circumstances of the engagement, but generally address:
(a) Threats to independence, which may be categorised as: self‑interest threats, self‑review threats, advocacy threats, familiarity threats, and intimidation threats; and
(b) Safeguards created by the profession, legislation or regulation, safeguards within the entity, and safeguards within the firm’s own systems and procedures.
A31. [Deleted by the AUASB. Refer Aus A31.1][25]
Aus A31.1 Relevant ethical requirements or law or regulation may also specify particular communications to those charged with governance in circumstances where breaches of independence requirements have been identified.[*]
A32. The communication requirements relating to auditor independence that apply in the case of listed entities may also be appropriate in the case of some other entities, including those that may be of significant public interest, for example because they have a large number and wide range of stakeholders and considering the nature and size of the business. Examples of such entities may include financial institutions (such as banks, insurance companies, and superannuation funds), and other entities such as charities. On the other hand, there may be situations where communications regarding independence may not be relevant, for example, where all of those charged with governance have been informed of relevant facts through their management activities. This is particularly likely where the entity is owner‑managed, and the auditor’s firm and network firms have little involvement with the entity beyond a financial report audit.
A33. The oversight of management by those charged with governance includes ensuring that the entity designs, implements and maintains appropriate internal control with regard to reliability of financial reporting, effectiveness and efficiency of operations and compliance with applicable laws and regulations.
A34. The auditor may become aware of supplementary matters that do not necessarily relate to the oversight of the financial reporting process but which are, nevertheless, likely to be significant to the responsibilities of those charged with governance in overseeing the strategic direction of the entity or the entity’s obligations related to accountability. Such matters may include, for example, significant issues regarding governance structures or processes, and significant decisions or actions by senior management that lack appropriate authorisation.
A35. In determining whether to communicate supplementary matters with those charged with governance, the auditor may discuss matters of this kind of which the auditor has become aware with the appropriate level of management, unless it is inappropriate to do so in the circumstances.
A36. If a supplementary matter is communicated, it may be appropriate for the auditor to make those charged with governance aware that:
(a) Identification and communication of such matters is incidental to the purpose of the audit, which is to form an opinion on the financial report;
(b) No procedures were carried out with respect to the matter other than any that were necessary to form an opinion on the financial report; and
(c) No procedures were carried out to determine whether other such matters exist.
A37. Clear communication of the auditor’s responsibilities, the planned scope and timing of the audit, and the expected general content of communications helps establish the basis for effective two‑way communication.
A38. Matters that may also contribute to effective two‑way communication include discussion of:
A39. The communication process will vary with the circumstances, including the size and governance structure of the entity, how those charged with governance operate, and the auditor’s view of the significance of matters to be communicated. Difficulty in establishing effective two‑way communication may indicate that the communication between the auditor and those charged with governance is not adequate for the purpose of the audit (see paragraph A52).
A40. In the case of audits of smaller entities, the auditor may communicate in a less structured manner with those charged with governance than in the case of listed or larger entities.
A41. Many matters may be discussed with management in the ordinary course of an audit, including matters required by this Auditing Standard to be communicated with those charged with governance. Such discussions recognise management’s executive responsibility for the conduct of the entity’s operations and, in particular, management’s responsibility for the preparation of the financial report.
A42. Before communicating matters with those charged with governance, the auditor may discuss them with management, unless that is inappropriate. For example, it may not be appropriate to discuss questions of management’s competence or integrity with management. In addition to recognising management’s executive responsibility, these initial discussions may clarify facts and issues, and give management an opportunity to provide further information and explanations. Similarly, when the entity has an internal audit function, the auditor may discuss matters with the internal auditor before communicating with those charged with governance.
A43. Those charged with governance may be required by law or regulation, or may wish, to provide third parties, for example, bankers or certain regulatory authorities, with copies of a written communication from the auditor. In some cases, disclosure to third parties may be illegal or otherwise inappropriate. When a written communication prepared for those charged with governance is provided to third parties, it may be important in the circumstances that the third parties be informed that the communication was not prepared with them in mind, for example, by stating in written communications with those charged with governance:
(a) That the communication has been prepared for the sole use of those charged with governance and, where applicable, the group management and the group auditor, and should not be relied upon by third parties;
(b) That no responsibility is assumed by the auditor to third parties; and
(c) Any restrictions on disclosure or distribution to third parties.
A44. In some jurisdictions the auditor may be required by law or regulation to, for example:
Aus A44.1 An auditor is required under the Corporations Act 2001 to notify the Australian Securities and Investments Commission (ASIC) if the auditor is aware of certain circumstances.[*]
A45. Unless required by law or regulation to provide a third party with a copy of the auditor’s written communications with those charged with governance, the auditor may need the prior consent of those charged with governance before doing so.
A46. Effective communication may involve structured presentations and written reports as well as less structured communications, including discussions. The auditor may communicate matters other than those identified in paragraphs 19–20 either orally or in writing. Written communications may include an engagement letter that is provided to those charged with governance.
A47. In addition to the significance of a particular matter, the form of communication (e.g., whether to communicate orally or in writing, the extent of detail or summarisation in the communication, and whether to communicate in a structured or unstructured manner) may be affected by such factors as:
A48. When a significant matter is discussed with an individual member of those charged with governance, for example, the chair of an audit committee, it may be appropriate for the auditor to summarise the matter in later communications so that all of those charged with governance have full and balanced information.
A49. Timely communication throughout the audit contributes to the achievement of robust two‑way dialogue between those charged with governance and the auditor. However, the appropriate timing for communications will vary with the circumstances of the engagement. Relevant circumstances include the significance and nature of the matter, and the action expected to be taken by those charged with governance. For example:
A50. Other factors that may be relevant to the timing of communications include:
A51. The auditor need not design specific procedures to support the evaluation of the two‑way communication between the auditor and those charged with governance; rather, that evaluation may be based on observations resulting from audit procedures performed for other purposes. Such observations may include:
A52. As noted in paragraph 4, effective two‑way communication assists both the auditor and those charged with governance. Further, ASA 315 identifies participation by those charged with governance, including their interaction with internal audit, if any, and external auditors, as an element of the entity’s control environment.[27] Inadequate two‑way communication may indicate an unsatisfactory control environment and influence the auditor’s assessment of the risks of material misstatements. There is also a risk that the auditor may not have obtained sufficient appropriate audit evidence to form an opinion on the financial report.
A53. If the two‑way communication between the auditor and those charged with governance is not adequate and the situation cannot be resolved, the auditor may take such actions as:
A54. Documentation of oral communication may include a copy of minutes prepared by the entity retained as part of the audit documentation where those minutes are an appropriate record of the communication.
(Ref: Para. 3)
This appendix identifies paragraphs in ASQC 1[28] and other Australian Auditing Standards that require communication of specific matters with those charged with governance. The list is not a substitute for considering the requirements and related application and other explanatory material in Australian Auditing Standards.
Appendix 2
(Ref: Para. 16(a), A19‑A20)
The communication required by paragraph 16(a), and discussed in paragraphs A19–A20, may include such matters as:
[1] See ASA 265 Communicating Deficiencies in Internal Control to Those Charged with Governance and Management.
[2] See ASA 230 Audit Documentation, paragraphs 8–11, and A6.
[3] As described in paragraph A63 of ASA 700 Forming an Opinion and Reporting on a Financial Report, having responsibility for approving in this context means having the authority to conclude that all the statements that comprise the financial report, including the related notes, have been prepared.
[4] See ASA 315 Identifying and Assessing the Risks of Material Misstatement through Understanding the Entity and Its Environment.
[5] See ASA 600 Special Considerations—Audits of a Group Financial Report (Including the Work of Component Auditors), paragraph 49.
[6] See ASA 210 Agreeing the Terms of Audit Engagements, paragraph 10.
[7] See ASA 701 Communicating Key Audit Matters in the Independent Auditor’s Report.
[8] See ASA 320 Materiality in Planning and Performing an Audit.
[9] See ASA 620 Using the Work of an Auditor’s Expert.
[10] See ASA 610 Using the Work of Internal Auditors, paragraph 20.
[11] See ASA 701, paragraphs 9–10.
[12] See ASA 705 Modifications to the Opinion in the Independent Auditor’s Report.
[13] See ASA 210, paragraph 9.
[14] See ASA 210, paragraph 10.
[15] See ASA 705, paragraph 30.
[16] See ASA 570 Going Concern, paragraph 25(d).
[17] See ASA 701, paragraph 17.
[18] See ASA 706 Emphasis of Matter Paragraphs and Other Matter Paragraphs in the Independent Auditor’s Report, paragraph 12.
[19] See ASA 720, The Auditor’s Responsibilities Relating to Other Information, paragraph 18(a).
[20] See ASA 700, paragraphs 45 and A58.
[21] See ASA 700, paragraph 40.
[22] See ASA 300, Planning an Audit of a Financial Report, paragraph A13.
[23] See paragraphs 19–22 and A23–A32 of ASA 220, Quality Control for an Audit of a Financial Report.
[24] See ASA 200 Overall Objectives of the Independent Auditor and the Conduct of an Audit in Accordance with Australian Auditing Standards paragraph 14.
[25] [Deleted by the AUASB. Refer Footnote *]
[*] See ASA 102 Compliance with Ethical Requirements when Performing Audits, Reviews and Other Assurance Engagements.
[*] See ASIC Regulatory Guide 34 Auditor’s obligations: Reporting to ASIC (May 2013), which provides guidance to help auditors comply with their obligations under sections 311, 601HG and 990K of the Corporations Act 2001 to report contraventions and suspected contraventions to ASIC.
[26] See ASA 265, paragraphs 9 and A14.
[27] See ASA 315, paragraph A77.
[28] See ASQC 1 Quality Control for Firms that Perform Audits and Reviews of Financial Reports and other Financial Information, and Other Assurance and Related Services Engagements.
[29] See ASA 540, Auditing Accounting Estimates, Including Fair Value Accounting Estimates, and Related Disclosures.