Welcome to the World of Engagement Documentation!
Hello future CPAs! Today, we are diving into a topic that might seem a bit "administrative" at first glance, but it is actually the backbone of a successful audit. We’re talking about Engagement Documentation (also known as working papers or "workpapers").
Think of documentation as the "receipts" for your audit work. If you didn’t document it, the regulators and the law assume you didn't do it! Don't worry if this seems like a lot of rules to memorize—once you understand the why behind them, the what becomes much easier to remember. Let's get started!
1. What is Engagement Documentation and Why Do We Need It?
Engagement documentation is the written record of the procedures you performed, the evidence you obtained, and the conclusions you reached. It serves two primary purposes:
1. Support the Report: It provides the evidence that your audit opinion is based on facts, not just a "hunch."
2. Proof of Standards: It proves that you followed GAAS (Generally Accepted Auditing Standards) and other professional requirements.
Analogy Time!
Imagine you are a detective. You can't just walk into court and say, "I think he did it." You need to show your notes, the photos of the crime scene, and the witness statements. In auditing, your workpapers are your "detective file" that proves you did a thorough investigation.
Key Term: The "Experienced Auditor" Rule
This is the most important rule in documentation! Your workpapers must be clear enough so that an experienced auditor, who has had no previous connection to the audit, can understand:
- The Nature, Timing, and Extent (NET) of the work performed.
- The results and evidence obtained.
- The significant findings and conclusions reached.
- Who performed the work and who reviewed it.
Quick Tip: If a stranger (but a smart, auditor-type stranger) can't look at your work and figure out exactly what you did, you haven't documented enough!
2. Ownership and Confidentiality
One common "trick" question on the CPA exam involves who actually owns the workpapers. Let's clear that up right now.
Who owns them? The CPA Firm owns the workpapers, not the client! Even though the client paid for the audit, the working papers are the firm's private property.
Confidentiality: Even though the firm owns them, they are confidential. You cannot show them to anyone without the client's permission except in specific cases like:
- A subpoena (legal order).
- A peer review by the AICPA or state society.
- An investigation by the Board of Accountancy or the PCAOB.
Key Takeaway: The auditor owns the paper; the client owns the secrets. You must protect those secrets!
3. Retention and Assembly (The "Magic Numbers")
The CPA exam loves testing the specific timelines for how long you must keep your workpapers and how quickly you must finish "cleaning them up."
Retention (How long to keep them)
How long must you keep these files in a storage room or on a secure server?
- Non-issuers (Private companies - SAS rules): At least 5 years from the report release date.
- Issuers (Public companies - PCAOB rules): At least 7 years from the report release date.
Assembly (The "Wrap-up" Period)
After you issue the audit report, you are allowed a short period to "finalize" the file (indexing, signing off, etc.). This is called the documentation completion date.
- Non-issuers (Private - SAS): Within 60 days after the report release date.
- Issuers (Public - PCAOB): Within 45 days after the report release date.
Memory Aid: "Private is 60, Public is 45"
Think of it this way: Public companies are under more pressure and scrutiny, so you have less time (45 days) to finish your paperwork and have to keep it longer (7 years).
Quick Review Box:
Non-issuer: 60 days to assemble / 5 years to keep.
Issuer: 45 days to assemble / 7 years to keep.
4. Changing Documentation After the Fact
What happens if you find a mistake or need to add something after the assembly period has passed? Can you just hit delete? No!
1. Never Delete: You must never delete or discard documentation after the assembly period ends.
2. Additions are Okay: You can add information, but you must document:
- When you added it.
- Who added it.
- Why you added it (the specific reason).
Did you know? Even if you are just correcting a typo after the deadline, you have to explain why you are making the change. Auditors take "original records" very seriously!
5. What Specifically Goes Into the Files?
While every audit is different, the "permanent file" and the "current file" are two terms you should know.
The Permanent (Perm) File
This contains data that stays the same year after year. Examples include:
- Articles of Incorporation.
- Long-term contracts or leases.
- Debt agreements (Bonds/Notes).
- Internal control flowcharts.
The Current File
This contains everything related only to this year's audit. Examples include:
- The Audit Plan (Programs).
- The Working Trial Balance.
- Confirmations and Representation Letters.
- Summaries of significant findings.
Key Takeaway: Permanent = Multiple years. Current = This year only.
Summary: Top 3 Things to Remember
1. The Experienced Auditor Standard: Documentation must be clear enough for a new auditor to understand what you did and why.
2. The Timelines: Remember 45 days/7 years for public companies and 60 days/5 years for private companies.
3. Ownership: The CPA firm owns the workpapers, but must maintain strict confidentiality.
Great job! Documentation might feel tedious, but it is the "shield" that protects auditors. Master these timelines and the "experienced auditor" rule, and you'll be well on your way to passing the AUD section!