Audit Framework and Regulation
The regulatory environment
Audit exists because owners are separated from managers. The agency problem means shareholders cannot verify management's assertions directly, so an independent, competent auditor lends credibility to the financial statements. Candidates must distinguish reasonable assurance (high but not absolute) from a guarantee: audit risk is never zero because of sampling, judgement, and the inherent limits of internal control.
Know the five elements of an assurance engagement (three-party relationship, subject matter, suitable criteria, evidence, written report) and the difference between reasonable assurance (audit) and limited assurance (review). Understand the IAASB framework and how ISAs apply, plus the role of ethics (IESBA code: integrity, objectivity, professional competence, confidentiality, professional behaviour) and independence in fact and appearance.
Governance and responsibility
Directors are responsible for preparing financial statements and for internal control; the auditor reports on those statements, not for them. Traps test this split constantly.
Worked rule of thumb
If a question asks who is responsible for detecting fraud, the answer is management (and those charged with governance), with the auditor responsible for obtaining reasonable assurance the statements are free from material misstatement, including considering fraud risk.
Common traps
- Confusing true and fair with absolute accuracy.
- Thinking the auditor guarantees going concern.
- Mixing up external audit (shareholders, statutory) with internal audit (management, adds value).