Professionalism, Ethics and Regulatory Compliance
This domain tests applied ethics rather than recitation. Candidates must identify threats, evaluate safeguards, and decide whether a course of action is consistent with professional codes, independence rules, and regulatory obligations. The exam favours short scenarios with competing pressures: a fee dependency, a gift, a reporting conflict, or a request to keep a client error confidential.
Core rules
- Integrity, objectivity, professional competence and due care, confidentiality, and professional behaviour are the baseline.
- Threats are self-interest, self-review, advocacy, familiarity, and intimidation. Name the threat before proposing a safeguard.
- Safeguards reduce risk but do not cure prohibited relationships. Remove the individual or decline the engagement when the threat is too significant.
- Independence has two tests: independence of mind and independence in appearance.
- Confidentiality yields to legal or regulatory disclosure duties, or client consent. It is not a shield for wrongdoing.
- Regulatory compliance includes AML and KYC, licensing, market-abuse rules, and whistleblowing channels. Document escalation.
Worked example
A partner learns that one client contributes 17% of firm revenue and that the client's CFO is the partner's sibling. The partner is asked to sign the audit report. Self-interest and familiarity threats are both high. A sibling in a key financial role creates a close family relationship. Safeguards such as a second-partner review are insufficient because the relationship is prohibited. The correct response is to remove the partner from the engagement and have an independent partner decide whether the firm can continue, considering fee dependency and any regulatory ban. The reasoning must separate threat identification, significance, and safeguard effectiveness.
Traps that cost marks
Moral outrage is not analysis. Name the threat and evaluate it. Do not treat disclosure as a universal safeguard. Do not assume a gift is acceptable because it is small; frequency, intent, and appearance matter. Do not confuse confidentiality with concealment of fraud. Independence can be breached by appearance even when the auditor feels unbiased.