Client Acceptance and Continuance and Preliminary Engagement

Chapter 5
Client Acceptance and Continuance and
Preliminary Engagement Procedures
Learning Objectives
1. Understand the purpose and role of client
acceptance and continuance activities.
2. Recognize the professional standards relating to
client acceptance and continuance.
3. Analyze various considerations in an auditor’s client
acceptance and continuance decisions.
4. Learn the important components of the
understanding between the audit firm and client
regarding terms of the engagement that are
documented in the engagement letter.
Client Acceptance and Continuance Decisions
 Auditors should
 only perform audits that they can
complete with professional competence.
 consider the reputation risk that comes
with selecting and accepting clients.
 recognize that a variety of risks are
associated with clients.
Overview of Client Acceptance
 Do we want this client?
 Can we effectively perform this audit?
 Research the client
 Do we still want the audit?
 Present proposal
 Did we win the engagement?
 Complete preliminary engagement procedures
Steps Before the Audit Begins
 Auditor proposal and client acceptance, OR client
continuance
THEN
 Confirm and communicate auditor
independence
 In writing and before the engagement starts if it is the first
year of auditing a public company
 Establish understanding of terms of the
engagement
Guidance in Professional Literature
 First GAAS states that the audit is to be
performed only by those having technical
proficiency as an auditor
 Auditor’s “Quality Control Standards provide
guidance.
 COSO Treadway Commission Internal Control
Framework provides guidance.
 Independence standards apply
Opportunity for a New Client
The audit firm receives a Request for Proposal (RFP)
 Do we want this client?



General reputation
Willingness to be associated with the company
Management integrity
 Can we effectively perform this audit?






Client needs
Sufficient knowledge
Personnel with appropriate experience and skills
Ability to provide appropriate supervision and review
Firm independence
…the firm has to have ability to do the audit by the time the
engagement begins…not at the time of proposing
Investigating the Potential Client
 Influences the Auditor Considers:
Published financial information
Financial statement restatements
Performance information
Information releases
Accounting practices and disclosures
Organizational structure
Management and BOD integrity
Financial difficulty, going concern
Company leadership
Multiple business locations
Audit committee and BOD
Client accounting function
Potential client business activities
Management’s use of information
Published Financial Information




Annual reports
Financial Statements
SEC filings
Information from these documents
 Size of the company’s assets, revenue and market
capitalization
 Publicly traded? Plans for an IPO?
 …these are indicators that help the firm assess the
size of the audit job and expertise required
Performance Information
 Profit performance
 Quality and potential of the business
 Risk
 Going concern




Cash flow
Industry characteristics
Financial performance
Business performance
Sources of Performance Information
 10K
 Sensitivity to changing economic conditions
 Likelihood of being affected by industry conditions
 Regulations affecting financial performance
 Potential lawsuits
 Vulnerability to global conditions
 Domestic and global competition
 Company’s earnings calls
 Trading activity of the company’s stock
Business Performance Information from the 10K
Additional information from the 10K that may be useful
to the auditor in client acceptance decisions:







Business activities
Cash flows and sales needed to satisfy fixed commitments
Economies of scale available and achieved
Ability to limit production if needed
Historical instances of needing to reduce inventory
Recognition of the companies product
Reputation for quality
…guidance from the auditing standards…
 Caution Indicator: Recurring negative cash flows from operations
and an inability to generate cash flows from operations while
reporting earnings and earnings growth.
 Caution Indicator: Significant declines in customer demand and
increasing business failures in either the industry or overall.
 Caution Indicator: High degree of market saturation,
accompanied by declining margins.
 Caution Indicator: New accounting, statutory or regulatory
requirements. [AU 316.85 A.2 (Incentives/Pressures) a]
Accounting Practices and Disclosures
Auditor may be able to infer information about
management’s philosophy and operating style.
 Does management prefer aggressive or
conservative accounting treatment?
 Does top management excessively intrude in
selecting accounting principles ? Does it appear that
top management attempts to “manage earnings”?
 Does the company engage in related party
transactions?
…guidance from the auditing standards…
 Caution Indicator: Recurring attempts by management to justify
marginal or inappropriate accounting on the basis of materiality.
[AU 316.85 A.2 (Attitudes/Rationalizations)]
 Caution Indicator: Nonfinancial management’s excessive
participation in or preoccupation with the selection of accounting
principles or the determination of significant estimates. [AU
316.85 A.2 (Attitudes/Rationalizations)]
 Caution Indicator: Significant related party transactions not in the
ordinary course of business or with related entities not audited or
audited by another firm. [AU 316.85 A.2 (Opportunities)a]
Management and BOD Integrity
 Affects auditor’s decision on whether to accept or continue a
client
 One of the most important considerations
 Addressed in multiple sources of auditor guidance
 Any type of management fraud is considered a strong
indication of a material weakness in ICFR
 Sources of information
 Investigations or actions by law enforcement or regulatory agencies
 Media searches and background checks
 Adverse publicity
 Company code of ethics
…guidance from the auditing standards…
 Caution Indicator: Known history of violations of securities or
other laws or other laws and regulations, or claim against the
entity, its senior management, or board members alleging fraud
or violations of laws and regulations.
 Caution Indicator: Ineffective communication, implementation,
support, or enforcement of the entity’s values or ethical standards
by management or the communication of inappropriate values or
ethical standards. [AU 316.85 A.2 (Attitudes/Rationalizations)]
Company Leadership
 COSO Enterprise Risk Management Framework
 Competent and skilled management and BOD
 Able to set objectives, identify risks, respond to risk
 Commitment to competence throughout the company
 Personnel appropriately assigned and delegated responsibility
 Management philosophy and operating style
 Power and authority concentrated in one or a few people?
 Structure, size and composition of management team?
 Potential for management fraud?
 Turnover rate of the company’s executives
 Particularly accounting and finance: If it is high, why is that occurring?
Company Leadership continued
 Auditor assess whether the individuals in
management and director positions have the
necessary attributes to make the company a
desirable client.
 Composition of top management team
 Each individuals’ time with the company
 Industry experience
 Organizational structure
 Management compensation structure
…guidance from the auditing standards…
 Caution Indicator: Domination of management by a
single person or small group (in a nonowner-managed
business), without compensating controls.
 Caution Indicator: High turnover of senior management,
counsel, or board members. [AU 316.85
(Opportunities) b-c]
Audit Committee and Board of Directors
 If the BOD and Audit Committee are not
actively involved in the company’s governance
there may be a greater risk in accepting the
company as an audit client
 Lack of sufficient involvement in the financial
reporting function by the Board of Directors
and Audit Committee may suggest a material
weakness in ICFR
Auditor Questions about the Board of Directors
 What percentage of the BOD is somehow connected to the
company through financial investments or transactions, or a
management position?
 What employment and educational backgrounds do the
directors have?
 Do the directors have the knowledge and experience needed
to oversee the company’s management?
 How much work is involved in being on the BOD?
 Is the compensation structure for directors appropriate given
the qualifications and what is expected of them?
Audit Committee
 SOX definition: A committee (or equivalent body) established
by and amongst the board of directors of an issuer for the
purpose of overseeing the accounting and financial reporting
processes of the issuer and audits of the financial statements of
the issuer.
 NYSE requires a company to have an audit
committee to be listed.
 If a public company’s audit committee does not
have at least one financial expert this fact must be
disclosed.
Qualifying Characteristics of a Financial Expert
SEC rules define an audit committee financial expert as a person with the
following attributes:

An understanding of generally accepted accounting principles and financial statements;

The ability to assess the …application of such principles in…accounting for estimates, accruals and reserves;

Experience preparing, auditing, analyzing or evaluating financial statements…comparable to the breadth
and complexity of issues…expected to be raised by the registrant’s financial statements, or experience
actively supervising one or more persons engaged in such activities;

An understanding of internal controls and procedures for financial reporting;

An understanding of the audit committee functions.
These attributes may have been acquired through:

Education and experience as a principal financial officer, principal accounting officer, controller, public
accountant or auditor or experience…that involve(s) the performance of similar functions;

Experience actively supervising a principal financial officer, principal accounting officer, controller, public
accountant, auditor or person performing similar functions;

Experience overseeing or assessing the performance of companies or public accountants with respect to the
preparation, auditing or evaluation of financial statements;

Other relevant experience
Potential Client Business Activities
 Auditors need to know a potential client’s business
activities:
 Are the activities within the audit firm’s area of industry
and audit expertise?
 Are the company’s activities compatible with the firm’s
preferences for its client portfolio?
 Are the company’s activities too risky for the audit firm
to want to be associated with the company?
Financial Statement Restatement
 Occurs
 To correct an error in previously published financial statements
 When more information or evidence becomes available after the
financial statements were released
 Information about a restatement is in publicly available documents if the
company is publicly traded
 Auditor considers the reason why the financial statements need to be
restated
 Does it indicate anything negative about management integrity or
competence?
 Does it indicate problems with the company’s internal accounting
function?
 Restatement to correct a misstatement or error is a strong indicator that
there is a material weakness in ICFR
Public Information Releases by Management
 How does management present the company to
outsiders?
 “puffing” may be ok, but misleading outsiders by
presenting an unrealistically positive picture raises
questions about management integrity
 …guidance from the auditing standards…
 Caution Indicator: Profitability or trend level expectations of investment
analysts, institutional investors, significant creditors or other external
parties…including expectations created by management in, for example,
overly optimistic press releases or annual report messages. [AU 316.85
A.2 (Incentives/Pressure) b]
Organizational Structure
 Is the information easy to obtain and understand?
 If not, the auditor considers why. Is there a legitimate
business reason? Or, to obscure ownership and
organizational structure to hide something?
 No particular structure is better than an other.
 Structure should be appropriate for the company
 Should fit the business needs and management style
 ….guidance from the auditing standards…
 Caution Indicator: Difficulty in determining the organization or individuals that
have controlling interests in the entity.
 Caution Indicator: Overly complex organizational structure involving unusual legal
entities or managerial lines of authority. [AU 316.85 A.2 (Opportunities) c]
Financial Difficulty and Going Concern
 Evaluating whether a business has the resources to continue as
a viable entity for the next year is referred to as assessing
whether the business is a going concern.
 …guidance from the auditing standards…
 Caution Indicator: Operating losses making the threat of bankruptcy,
foreclosure, or hostile takeover imminent.
 Caution Indicator: Marginal ability to meet exchange listing requirements
or debt repayment or other debt covenant requirements.
 Caution Indicator: Perceived or real adverse effects of reporting poor
financial results on significant pending transactions, such as business
combinations or contract awards. [AU 316.85 A.2 (Incentives/Pressures)
a-b]
Multiple Business Locations
 Important to the auditor:
 Are there multiple locations and where are they?
Important is assessing audit resources (people) needed.
 Does the company have legitimate business reasons for
those locations?
 …guidance from the auditing standards…
 Caution Indicator: Significant operations located or conducted across
international borders in jurisdictions where differing business environments
and cultures exists.
 Caution Indicator: Significant bank accounts or subsidiary or branch
operations in tax haven jurisdictions for which there appears to be no clear
business justification. [AU 316.85 A.2 (Opportunities) a]
Client Accounting Function
 Does the company have:
 An accounting system with effective controls
 Sufficient accounting personnel to get the
work done
 A budgeting process
 An appropriate internal audit function
 How complex is the IT system?
…guidance from the auditing standards…
 Caution Indicator: Inadequate monitoring of controls, including
automated controls and controls over interim financial reporting
 Caution Indicator: High turnover rates or employment of
ineffective accounting, internal audit or information technology
staff.
 Caution Indicator: Ineffective accounting and information systems
 Caution Indicator: Inadequate internal control over assets that
may increase the susceptibility of misappropriation of those
assets. [AU 316.85 A.2-3 (Opportunities) b,d]
Sources of Publicly Available Information




Company’s web site
SEC filings
Annual report, letter to shareholders
Proxy statements
Other Sources
 Interviewing the potential client
 Communication with the predecessor auditor
 Successor auditor is required to communicate with predecessor auditor
 Predecessor auditor must obtain permission from the client before
disclosing confidential information
 Predecessor responds, even with “unable to respond” statement; must
say if the response is limited
 Business resources: lawyers, bankers
 Media and data searches
 Investigations by professional outsiders
Firm Resources and Expertise
If a potential client company is very large, or
has multiple geographic locations, the audit
firm may decide it does not have sufficient
personnel for the engagement.
Therefore, audit firms consider whether a
potential client is the most profitable way to
utilize the firm’s human resources.
Do we still want the audit?
 After completing the research, the auditor assesses
the information gathered.
 If the client is desirable, the auditor prepares a
proposal.
 If the auditor is selected the next steps are
 Agreeing on terms of the engagement and executing
an engagement letter
 Confirming independence

Note that at this stage it is a verification; the auditor would
not have gone this far without investigating independence
Engagement Letter
 “Engagement letter” is the label used for the
contract between the auditor and client
 Provides:
 Objective of an audit
 Management’s responsibilities
 Auditor’s responsibilities
 Includes fees and financial arrangements
 Requirement for an engagement letter and list of
required contents are included in both PCAOB and
AICPA auditing standards
Appendix A: Industry Descriptions
 What are the risks of companies in
different industries?
 Why do auditors need industry
knowledge?
Manufacturing
 Physical controls over inventory to prevent shrinkage
from employee theft
 Documentary controls as items move through the
manufacturing process
 Accounting system to capture inputs like direct labor
and overhead
 Possibly, integration of human resources and inventory
 Cost accounting system
 Controls for cutoff – matching sales and cost of sales
Retail
 Control over purchasing
 Keeping up with what sells and does not sell to prevent lost
sales because of stock outages and inventory obsolescence
 Control over cash
 Control over credit processes
 Following procedures for credit sales to limit nonpayment
risk or shift it to an outsider
 Theft prevention and detection, from employees and outsiders
 Managing inventory obsolescence
 E-commerce; sales over the Internet
 Credit approval, inventory availability, shipping
Health Care
 Complete and accurate capture and recording of services
provided
 Link to HR system and supplies inventory when appropriate
 IT impacts
 Accurate billing process
 Affects receivables and cash flows
 Insurance verification is parallel to credit verification




Allowances for contractual discounts; difficult account to audit
Quality control issues
Regulation
Sales contracts with 3rd party payers (capitation contracts)
Banking
 Regulation
 Documentation
 Cash reserves
 Collateral quality
 Multiple regulators
 Loans and collateral
 Collectibility
 Valuation
Service
 Revenue recognition: Payment may occur in advance. When is revenue
earned?
 Unearned service account
 A liability account, so concern for completeness assertion; relates to
proper revenue recognition
 Payroll expenses
 Large dollar amount; probably material
 Year end accruals: payroll, vacation, sick leave, other benefits
 Engagement management systems: Interface between payroll and
engagement management system for accumulating job costs and billing
functions; possibly sophisticated IT
 Unbilled service revenue: Accrued correctly at year end?
 Valuation of AR
Real Estate Development and Construction
 Land and construction as inventory
 Construction in process: proper capture of inputs,
proper valuation (FMV), allocation of common costs
 Percentage of completion
 Estimates are long term; matching relies on
estimates because costs AND revenues are
estimated
 Estimates are used for
 Percentage of completion
 Fair market value
 Allocation of common costs
Hospitality
 As used here, a hybrid. Includes lodging,
restaurants, entertainment venues
 Hotels, important issues
 Debt on the property
 Are reported sales correct? Can audit using analytical
procedures based on capacity, room rate and rate of
occupancy.
 Expenses
 Biggest risks: Can the debt on the property be paid on
time? How sensitive is the entity to changes in the price
it can collect for room sales or occupancy rate?
Hospitality continued
 Restaurants, important issues
 Risk to the owner is shrinkage: food, cash, alcohol
 Highly perishable inventory
Commonalities with manufacturing
Need to control inventory purchasing and use


 Cash and credit card sales
Commonalities with retail
Need to control cash received
Need to control credit approval process



Hospitality continued
 Entertainment venues, important issues
 Sells food like a restaurant
 Sells services (tickets for events)
Right of return
Cancellation
Revenue recognition issues



 May sell lodging
 Sells products like retail
Appendix B: Audit Committees and Corporate
Governance
 SOX defines audit committees
 SOX states that if the company does not have an
audit committee the entire BOD serves that function
 SOX Section 301 sets out specific audit committee
responsibilities
 NYSE has requirements for existence, composition
and responsibilities of the audit committee
 Blue Ribbon Committee on Improving the Effectiveness
of Corporate Audit Committees published its
recommendations in September 1998
Audit Committees
 Provide a counterbalance to the powers held by
management
 Are specifically charged with understanding and
oversight of the financial workings of the company
 Receive certain communications from the auditor
 Have specific responsibilities, for example
 NYSE: meet regularly, handle complaints
 SOX: appoint, set compensation for and oversee work
of the independent auditor; have procedures for
receiving and handling complaints
Copyright
“Copyright © 2011 John Wiley & Sons, Inc. All rights reserved.
Reproduction or translation of this work beyond that permitted
in Section 117 of the 1976 United States Copyright Act without
the express written permission of the copyright owner is
unlawful. Request for further information should be addressed
to the Permissions Department, John Wiley & Sons, Inc. The
purchaser may make back-up copies for his/her own use only and
not for distribution or resale. The Publisher assumes no
responsibility for errors, omissions, or damages, caused by the
use of these programs or from the use of the information
contained herein.”