Quality Management and Practice Management
What you must understand
Modern standards require a firm-level quality management system built on components: governance and leadership, relevant ethical requirements, acceptance and continuance of engagements, human resources, engagement performance, information and communication, and monitoring and remediation. Understand engagement quality reviews (EQR) for listed and higher-risk engagements, engagement documentation and assembly, and root cause analysis in monitoring.
Practice management concepts include: client acceptance/continuance procedures (integrity of client, competence and resources, independence), engagement letters, staff planning and supervision, time and fee management, IT and data security, and complaints and whistleblowing arrangements.
Traps in questions
- Treating quality management as an individual auditor issue rather than a firm-wide system with assigned responsibility.
- Confusing EQR (objective evaluation before the report is issued) with routine partner review (supervision during the engagement).
- Forgetting that monitoring must lead to remediation, not merely inspection.
- Ignoring acceptance and continuance as a quality issue - it is a core component.
- Missing the requirement for a culture of quality and tone at the top.
Rule of thumb
For any quality scenario, ask: Which component of the quality management system has failed? Naming the component (e.g. acceptance and continuance, monitoring and remediation) earns marks faster than general commentary.
Worked example
A firm accepts a client with an unresolved prior-year dispute and no verification of management integrity. The failure is in acceptance and continuance: the firm did not obtain sufficient information about the client's integrity, and did not assess whether it had the competence and resources. The remedy is a documented acceptance decision, not extra audit testing.