The purpose, scope and regulation of external audit and assurance engagements
Purpose of external audit
The external audit provides independent assurance to shareholders that the financial statements are free from material misstatement, whether due to fraud or error. It enhances credibility and reduces information risk. It is not a guarantee of absolute accuracy, nor a detection of all fraud.
Scope and regulation
Audit scope is determined by legislation (e.g., Companies Act) and auditing standards (ISAs). Regulation includes ethical requirements, quality control, and oversight by professional bodies (e.g., FRC, IAASB). The audit opinion is on the financial statements as a whole, not on individual transactions.
Assurance engagements
Assurance engagements include audits, reviews, and other assurance (e.g., ISAE 3000). They provide different levels of assurance: reasonable (audit) vs limited (review). Key elements: three-party relationship, subject matter, criteria, evidence, and conclusion.
Traps in questions
- Confusing audit with absolute guarantee.
- Assuming auditors prepare financial statements (management does).
- Mixing up reasonable vs limited assurance.
- Forgetting that audit is not designed to detect all fraud.
- Overlooking that regulation varies by jurisdiction.
Worked example / rule of thumb
Rule: External audit = reasonable assurance on financial statements; review = limited assurance. If a question asks about detecting fraud, remember auditors have a responsibility to consider fraud but not to guarantee detection. For example, if asked whether an auditor must detect all errors, answer: no, only material misstatements.
Key points
- Audit provides reasonable assurance, not absolute.
- Scope set by law and standards.
- Three-party relationship: auditor, responsible party, intended users.
- Regulation ensures quality and ethics.
- Different assurance levels: reasonable vs limited.