Audit purposes, risk, ethics and engagement planning
Begin with the engagement
Auditing examines a defined subject against suitable criteria and communicates a supported conclusion. Financial-statement assurance, compliance work, internal audit and public performance audit have different purposes and authority. A financial audit opinion is not a guarantee that a business will succeed or that no fraud exists. The relevant engagement framework determines objectives, responsibilities and reporting requirements; it cannot be inferred from the word audit alone.
Responsibilities and independence
Management’s responsibility for records and reporting is distinct from the auditor’s responsibility for the work and conclusion. Independence and objectivity support credible judgment but require attention to actual relationships and threats. The IESBA framework identifies integrity, objectivity, professional competence and due care, confidentiality and professional behavior. Quoting the principles does not establish how a specific jurisdiction adopts or supplements them. Confidentiality is not unlimited secrecy, and disclosure decisions require the applicable framework and law.
Understand before testing
Planning relates the entity, its activities, reporting process, systems and environment to the risks relevant to the engagement. A generic checklist cannot replace understanding why a material error could arise. Inquiry, observation, inspection and analytical work can reveal different features. Internal control can reduce risk without removing it, because design, implementation, operation and possible override are separate questions.
Materiality and risk
A small amount can matter because of its nature or context; materiality is not always one universal percentage. Risk assessment helps determine the nature, timing and extent of procedures. A high assessed risk does not automatically require abandoning an engagement, and a low assessment does not justify obtaining no evidence. Judgments should be updated when new facts contradict the original understanding.
A planning scenario
Suppose a fictional entity introduces a new sales system close to year end. The team should investigate migration, access, interface controls, cut-off and how exceptions are resolved. A successful demonstration by one user does not establish that every transaction was processed correctly. Link the planned procedure to the particular assertion or criterion and document why it addresses the identified risk.
Scope
ISA-based financial-statement concepts are identified as comparative foundations. They do not define the current statutory powers of a Chinese government auditor, a French practitioner or another local professional. National legal and professional requirements remain a distinct verification task rather than being filled with a foreign rule.