Welcome to Audit Planning!
Hello there! Welcome to one of the most important parts of the Audit and Assurance (AA) syllabus. Before an auditor starts counting cash or checking invoices, they need to play detective. Imagine trying to fix a complex car engine without knowing if it's petrol, electric, or steam-powered! You'd be lost, right?
In this chapter, we explore how auditors get to know their clients. This process is called "Understanding the Entity." It is the foundation of a risk-based audit. If we understand how a business works, we can predict where mistakes are likely to happen. Don't worry if this seems like a lot of theory at first—we will break it down into simple, logical steps.
1. Why do we need to understand the entity?
According to ISA 315 (Revised 2019), the auditor must obtain an understanding of the entity and its environment.
The Goal: To identify and assess the Risks of Material Misstatement (RoMM).
Analogy: Think of this like a doctor's appointment. Before the doctor prescribes medicine, they ask about your lifestyle, your diet, and your family history. They are "understanding the patient" to identify where the health risks are. In audit, the "patient" is the company, and the "health risks" are the chances that the financial statements are wrong.
Key Benefits:
• It helps us decide how much work to do (Materiality).
• It helps us identify areas where there is a high risk of fraud or error.
• It allows us to design better audit tests (Responses).
2. What exactly are we looking for?
To get a full picture, auditors look at several different areas. You can remember these using the categories below:
A. External Factors
These are things happening outside the company that the management cannot control, but which affect the business.
• Industry Conditions: Is the market competitive? Is the industry declining? (e.g., a high-street travel agency facing competition from online booking sites).
• Regulatory Environment: What laws must they follow? Are there new tax laws or environmental regulations? (e.g., a bank must follow strict capital rules).
• The Economy: Is there high inflation or a recession? Are interest rates rising?
B. Nature of the Entity
This is about what the company is and what it does.
• Operations: What do they sell? Who are their customers and suppliers? Do they have many locations?
• Ownership and Governance: Is it a family-run business or a massive public company? Who makes the big decisions?
• Investments: Are they buying other companies or selling off parts of the business?
• Financing: Where does their money come from? Do they have huge bank loans? (If they do, they might be tempted to "cook the books" to look more profitable to the bank!).
C. The Applicable Financial Reporting Framework
This is a fancy way of saying: "What are the rules of the game?"
The auditor must understand which accounting standards the company uses (e.g., IFRS or local GAAP). If the company uses the wrong rules, the financial statements will be wrong by default!
D. Business Risks
These are risks that result from significant conditions or events that could stop the company from achieving its objectives.
Important Tip: Not every business risk is an audit risk. But, most business risks eventually turn into audit risks.
Example: A business risk is that a competitor launches a better product. The audit risk is that the company’s inventory becomes obsolete and needs to be written down (valuation risk).
3. How do we get this information? (Risk Assessment Procedures)
We don't just guess! Auditors use specific methods to gather information. You can remember these with the mnemonic "O-I-I-A":
1. Observation: Watching the company in action. (e.g., Visiting the warehouse to see how they handle stock).
2. Inquiry: Asking questions. Don't just talk to the accountants! Talk to the production manager or the internal sales team.
3. Inspection: Looking at documents. (e.g., Reading the business plan, board meeting minutes, or legal contracts).
4. Analytical Procedures: Looking at the numbers to find trends or weird patterns. (e.g., Comparing this year's profit margin to last year's).
Quick Review: The Auditor’s Toolkit
Did you know? Inquiry alone is never enough. People can tell you whatever they want! You must always back up inquiry with Observation or Inspection.
4. Understanding Inherent Risk Factors
When we look at the entity, we look for Inherent Risk. This is the susceptibility of an assertion to a misstatement before considering any controls.
The new ISA 315 (Revised) highlights several factors that increase risk:
• Complexity: Are the transactions very complicated? (e.g., complex derivatives).
• Subjectivity: Does the value depend on a manager’s "best guess"? (e.g., estimating the value of a legal claim).
• Change: Has the company changed its accounting software recently?
• Uncertainty: Is it hard to predict the future of a specific project?
• Management Bias: Is management under pressure to meet a profit target? (This increases the risk of fraud).
5. Common Pitfalls to Avoid
• Mistake 1: Thinking this only happens at the start. Understanding the entity is a continuous process. If a major event happens mid-audit (like a fire in the warehouse), you must update your understanding!
• Mistake 2: Only looking at the finance department. A company is more than its ledger. If the factory is falling apart, that affects the financial statements (impairment of assets).
• Mistake 3: Forgetting the "Why." On the exam, don't just list facts about the company. Explain why that fact creates a risk for the auditor.
Summary and Key Takeaways
Key Takeaway 1: You cannot audit what you do not understand. Understanding the entity is the first step in the Audit Risk Model:
\( Audit Risk = Inherent Risk \times Control Risk \times Detection Risk \)
Key Takeaway 2: We look at External factors (the world), Internal factors (the company), and the Reporting Framework (the rules).
Key Takeaway 3: Use Inquiry, Observation, Inspection, and Analytical Procedures to gather your evidence.
Final Encouragement: Audit planning might feel like a lot of "talking and reading" compared to the "math" of Financial Reporting, but it's where the most marks are won in the AA exam. Master the art of understanding the business, and the rest of the audit will fall into place!