Ethics, Professional Responsibilities, and Governance
The foundation
The ethics domain rewards a conceptual understanding of the threat-and-safeguard framework. Independence has two dimensions - independence in fact (the actual state of mind) and independence in appearance (how a reasonable informed third party would perceive it). The classic threats are self-interest, self-review, advocacy, familiarity, and intimidation. Safeguards include rotation, independent review, and removal of the conflicting interest; if no safeguard reduces the threat to an acceptable level, the engagement must be declined or the relationship terminated.
Core principles: integrity, objectivity, professional competence and due care, confidentiality, and professional behavior. Professional skepticism - a questioning mind and critical assessment of evidence - is an attitude, not a procedure.
Governance and responsibility
Boards owe duties of care and loyalty; the audit committee, composed of independent directors, oversees the external auditor and financial reporting. Management designs and operates internal control; the auditor reports on it. Candidates should also know rules on contingent fees, commissions, and referral fees (generally prohibited for attest clients) and the confidentiality exceptions (legal requirement, regulatory inquiry, quality review).
Traps that recur
- Assuming independence is preserved because the auditor was personally unbiased, ignoring appearance.
- Performing bookkeeping or management functions for an attest client.
- Believing confidentiality survives a court subpoena or a peer review.
- Treating a contingent fee as acceptable whenever the client agrees to it.
Worked example
An audit partner's spouse owns a diversified mutual fund that holds shares of the client. A direct financial interest in the client by an immediate family member impairs independence; the partner must divest or the firm must remove the partner from the engagement.