Related Regulatory and Professional Framework
The regulatory layer
Candidates must map the framework around the audit: legislation establishing the auditor's duties and access rights, oversight by a competent authority, and the professional body's ethical and quality standards. Understand the role of auditing standards (risk-based, principles-driven) versus law (mandatory, jurisdiction-specific). Know that independence in appearance matters as much as independence of mind, and that threats (self-interest, self-review, advocacy, familiarity, intimidation) must be identified and safeguards applied or the engagement declined.
Ethics and quality management
Expect questions on integrity, objectivity, confidentiality, professional competence and due care, and professional behaviour. Confidentiality has recognised exceptions, such as legal or regulatory disclosure. Quality management at firm level covers leadership, ethical requirements, acceptance and continuance, engagement performance, resources and monitoring; engagement quality reviews apply to listed entities and higher-risk engagements.
Traps to watch
Common traps: assuming a professional body can override statute; confusing the auditor's duty to report to regulators with a general duty to disclose client matters to third parties; treating a fee dependency as automatically unethical rather than a threat requiring safeguards; and ignoring the distinction between the code's conceptual framework and mechanical rules.
Worked rule of thumb
When a question presents a conflict, apply a three-step sequence: identify the threat, evaluate its significance, then apply safeguards or decline. If the safeguard cannot reduce the threat to an acceptable level, the engagement must be refused or resigned.