The Financial Reporting Framework (Ref: Para. 6(a))
A condition for acceptance of an assurance engagement is that the criteria referred to in the definition of an assurance engagement are suitable and available to intended users.[9] Criteria are the benchmarks used to evaluate or measure the subject matter including, where relevant, benchmarks for presentation and disclosure. Suitable criteria enable reasonably consistent evaluation or measurement of a subject matter within the context of professional judgement. For purposes of the Australian Auditing Standards, the applicable financial reporting framework provides the criteria the auditor uses to audit the financial report, including where relevant its fair presentation.
Without an acceptable financial reporting framework, management does not have an appropriate basis for the preparation of the financial report and the auditor does not have suitable criteria for auditing the financial report. In many cases, the auditor may presume that the applicable financial reporting framework is acceptable, as described in paragraphs A8‑A9.
Determining the Acceptability of the Financial Reporting Framework
Factors that are relevant to the auditor’s determination of the acceptability of the financial reporting framework to be applied in the preparation of the financial report include:
The nature of the entity (for example, whether it is a business enterprise, a public sector entity or a not‑for‑profit organisation);
The purpose of the financial report (for example, whether it is prepared to meet the common financial information needs of a wide range of users or the financial information needs of specific users);
The nature of the financial statements (for example, whether the financial statements are a complete set of financial statements or a single financial statement); and
Whether law or regulation prescribes the applicable financial reporting framework.
Many users of financial reports are not in a position to demand financial reports tailored to meet their specific information needs. While all the information needs of specific users cannot be met, there are financial information needs that are common to a wide range of users. Financial reports prepared in accordance with a financial reporting framework designed to meet the common financial information needs of a wide range of users are referred to as general purpose financial reports.
In some cases, the financial report will be prepared in accordance with a financial reporting framework designed to meet the financial information needs of specific users. Such financial reports are referred to as special purpose financial reports. The financial information needs of the intended users will determine the applicable financial reporting framework in these circumstances. ASA 800 discusses the acceptability of financial reporting frameworks designed to meet the financial information needs of specific users.
Deficiencies in the applicable financial reporting framework that indicate that the framework is not acceptable may be encountered after the audit engagement has been accepted. When use of that framework is prescribed by law or regulation, the requirements of paragraphs 19‑20 apply. When use of that framework is not prescribed by law or regulation, management may decide to adopt another framework that is acceptable. When management does so, as required by paragraph 16, new terms of the audit engagement are agreed to reflect the change in the framework as the previously agreed terms will no longer be accurate.
General purpose frameworks
At present, there is no objective and authoritative basis that has been generally recognised globally for judging the acceptability of general purpose frameworks. In the absence of such a basis, financial reporting standards established by organisations that are authorised or recognised to promulgate standards to be used by certain types of entities are presumed to be acceptable for general purpose financial reports prepared by such entities, provided the organisations follow an established and transparent process involving deliberation and consideration of the views of a wide range of stakeholders. Examples of such financial reporting standards include:
IFRS Accounting Standards promulgated by the International Accounting Standards Board;
International Public Sector Accounting Standards (IPSASs) promulgated by the International Public Sector Accounting Standards Board; and
Accounting principles promulgated by an authorised or recognised standards setting organisation in a particular jurisdiction, provided the organisation follows an established and transparent process involving deliberation and consideration of the views of a wide range of stakeholders.
These financial reporting standards are often identified as the applicable financial reporting framework in law or regulation governing the preparation of general purpose financial reports.
Financial reporting frameworks prescribed by law or regulation
In accordance with paragraph 6(a), the auditor is required to determine whether the financial reporting framework, to be applied in the preparation of the financial report, is acceptable. In some jurisdictions, law or regulation may prescribe the financial reporting framework to be used in the preparation of a general purpose financial report for certain types of entities. In the absence of indications to the contrary, such a financial reporting framework is presumed to be acceptable for a general purpose financial report prepared by such entities. In the event that the framework is not considered to be acceptable, paragraphs 19‑20 apply.
Jurisdictions that do not have standards setting organisations or prescribed financial reporting frameworks
When an entity is registered or operating in a jurisdiction that does not have an authorised or recognised standards setting organisation, or where use of the financial reporting framework is not prescribed by law or regulation, management identifies a financial reporting framework to be applied in the preparation of the financial report. Appendix 2 contains guidance on determining the acceptability of financial reporting frameworks in such circumstances.
Agreement of the Responsibilities of Management (Ref: Para. 6(b))
An audit in accordance with Australian Auditing Standards is conducted on the premise that management has acknowledged and understands that it has the responsibilities set out in paragraph 6(b).[11] In certain jurisdictions, such responsibilities may be specified in law or regulation. In others, there may be little or no legal or regulatory definition of such responsibilities. Australian Auditing Standards do not override law or regulation in such matters. However, the concept of an independent audit requires that the auditor’s role does not involve taking responsibility for the preparation of the financial report or for the entity’s related internal control, and that the auditor has a reasonable expectation of obtaining the information necessary for the audit (including information obtained from outside of the general and subsidiary ledgers) in so far as management is able to provide or procure it. Accordingly, the premise is fundamental to the conduct of an independent audit. To avoid misunderstanding, agreement is reached with management that it acknowledges and understands that it has such responsibilities as part of agreeing and recording the terms of the audit engagement in paragraphs 9‑12.
The way in which the responsibilities for financial reporting are divided between management and those charged with governance will vary according to the resources and structure of the entity and any relevant law or regulation, and the respective roles of management and those charged with governance within the entity. In most cases, management is responsible for execution while those charged with governance have oversight of management. In some cases, those charged with governance will have, or will assume, responsibility for approving the financial report or monitoring the entity’s internal control related to financial reporting. In larger or publicly‑listed entities, a subgroup of those charged with governance, such as an audit committee, may be charged with certain oversight responsibilities.
ASA 580 requires the auditor to request management to provide written representations that it has fulfilled certain of its responsibilities.[12] It may therefore be appropriate to make management aware that receipt of such written representations will be expected, together with written representations required by other Australian Auditing Standards and, where necessary, written representations to support other audit evidence relevant to the financial report or one or more specific assertions in the financial report.
Where management will not acknowledge its responsibilities, or agree to provide the written representations, the auditor will be unable to obtain sufficient appropriate audit evidence.[13] In such circumstances, it would not be appropriate for the auditor to accept the audit engagement, unless law or regulation requires the auditor to do so. In cases where the auditor is required to accept the audit engagement, the auditor may need to explain to management the importance of these matters, and the implications for the auditor’s report.
Preparation of the Financial Report (Ref: Para. 6(b)(i))
Most financial reporting frameworks include requirements relating to the presentation of the financial report; for such frameworks, preparation of the financial report in accordance with the financial reporting framework includes presentation. In the case of a fair presentation framework, the importance of the reporting objective of fair presentation is such that the premise agreed with management includes specific reference to fair presentation, or to the responsibility to ensure that the financial report will “give a true and fair view” in accordance with the financial reporting framework.
Internal Control (Ref: Para. 6(b)(ii))
Management maintains such internal control as it determines is necessary to enable the preparation of the financial report that is free from material misstatement, whether due to fraud or error. Internal control, no matter how effective, can provide an entity with only reasonable assurance about achieving the entity’s financial reporting objectives due to the inherent limitations of internal control.[14]
An independent audit conducted in accordance with the Australian Auditing Standards does not act as a substitute for the maintenance of internal control necessary for the preparation of the financial report by management. Accordingly, the auditor is required to obtain the agreement of management that it acknowledges and understands its responsibility for internal control. However, the agreement required by paragraph 6(b)(ii) does not imply that the auditor will find that internal control maintained by management has achieved its purpose or will be free of deficiencies.
It is for management to determine what internal control is necessary to enable the preparation of the financial report. The term “internal control” encompasses a wide range of activities within components of the system of internal control that may be described as the control environment; the entity’s risk assessment process; the entity’s process to monitor the system of internal control, the information system and communication; and control activities. This division, however, does not necessarily reflect how a particular entity may design, implement and maintain its internal control, or how it may classify any particular component.[15] An entity’s internal control (in particular, its accounting books and records, or accounting systems) will reflect the needs of management, the complexity of the business, the nature of the risks to which the entity is subject, and relevant laws or regulation.
In some jurisdictions, law or regulation may refer to the responsibility of management for the adequacy of accounting books and records, or accounting systems. In some cases, general practice may assume a distinction between accounting books and records or accounting systems on the one hand, and internal control or controls on the other. As accounting books and records, or accounting systems, are an integral part of internal control as referred to in paragraph A18, no specific reference is made to them in paragraph 6(b)(ii) for the description of the responsibility of management. To avoid misunderstanding, it may be appropriate for the auditor to explain to management the scope of this responsibility.
Additional Information (Ref: Para 6(b)(iii)b)
Additional information that the auditor may request from management for the purpose of the audit may include when applicable, matters related to other information in accordance with ASA 720. When the auditor expects to obtain other information after the date of the auditor’s report, the terms of the audit engagement may also acknowledge the auditor’s responsibilities relating to such other information including, if applicable, the actions that may be appropriate or necessary if the auditor concludes that a material misstatement of the other information exists in other information obtained after the date of the auditor’s report.
Considerations Relevant to Smaller Entities (Ref: Para. 6(b))
One of the purposes of agreeing the terms of the audit engagement is to avoid misunderstanding about the respective responsibilities of management and the auditor. For example, when a third party has assisted with the preparation of the financial report, it may be useful to remind management that the preparation of the financial report in accordance with the applicable financial reporting framework remains its responsibility.
Management‑Imposed Limitation of Scope (Ref: Para. 6(b))
Aus A21.1 Section 312 of the Corporations Act 2001 (the Act) requires an officer of the entity to allow the auditor access to the books of the entity and give any information, explanation or assistance required under section 310 of the Act. A management‑imposed restriction of scope may breach section 312 and trigger the need for a section 311 notice to be provided by the auditor to the Australian Securities and Investments Commission (ASIC).