Audit Documentation, Completion and Review — Practice

Question 1

State the test SA 230 uses to judge the adequacy of audit documentation, and explain why documentation written only for the preparer's own future reference, rather than for this test, is likely to be deficient.

Accepted Answer

SA 230 requires documentation to be sufficient to enable an experienced auditor, having no previous connection with the audit, to understand the nature, timing and extent of the audit procedures performed to comply with the Standards on Auditing and applicable legal and regulatory requirements, the results of those procedures and the audit evidence obtained, and significant matters arising during the audit, the conclusions reached on them, and the significant professional judgements made in reaching those conclusions. Documentation written only for the preparer's own future reference is likely to be deficient against this test because a person's own notes to themselves naturally rely on context, shorthand and assumed background knowledge that only make sense to the person who wrote them, having lived through the engagement and already knowing what they meant by an abbreviated note or an unexplained cross-reference; an experienced auditor with no previous connection to the audit has none of that lived context, and documentation that assumes it will fail the test even if it would be perfectly comprehensible to the original preparer reviewing it themselves a year later. The purpose of the experienced-auditor standard is precisely to force a level of explicitness and completeness that survives the departure of the original preparer, whether through staff turnover, illness, or simply the passage of time eroding memory of exactly what was meant, ensuring that a quality reviewer, an inspector, a successor auditor, or in a dispute a court, can genuinely reconstruct what was done and why from the file alone, without needing the original preparer available to explain it.

Question 2

State who owns audit documentation, the assembly deadline, and the minimum retention period, and explain the practical significance of ownership resting with the auditor rather than the client.

Accepted Answer

Audit documentation is the property of the auditor, and the entity being audited has no automatic right to it, though the auditor may, at their own discretion, make portions of it or extracts from it available to the client where appropriate. The auditor must assemble the final audit file on a timely basis, ordinarily not more than 60 days after the date of the auditor's report. The documentation must then be retained for a period ordinarily not shorter than 7 years from the date of the auditor's report, or if later the date of the group auditor's report in a group audit context. The practical significance of ownership resting with the auditor rather than the client is that it protects the independence and integrity of the audit process: if the client had a right to demand or control the working papers, there would be a real risk of pressure to alter, withhold, or selectively disclose the auditor's own analysis and conclusions in ways favourable to the client, undermining the very independence the audit depends on. Because the file belongs to the auditor, the auditor retains full control over what is documented and how, free from client interference, while the client's legitimate interests are separately protected through other means, such as the auditor's professional and contractual obligations regarding confidentiality and the specific communications the Standards do require the auditor to make to the client and to those charged with governance.

Question 3

After the final audit file has been assembled, the auditor discovers a cross-referencing error in a working paper and wishes to correct it. State what SA 230 requires, and explain why even a purely administrative correction cannot simply be made silently.

Accepted Answer

SA 230 requires that after the assembly of the final audit file has been completed, the auditor shall not delete or discard audit documentation of any nature before the end of its specified retention period, and where it is necessary to modify existing audit documentation or add new documentation after the assembly of the final file has been completed, the auditor shall, regardless of the nature of the modifications or additions, document the specific reasons for making them, and when and by whom they were made and reviewed. Applying this to a cross-referencing correction, the auditor may make the correction, but must document that it was made, the specific reason for it, being the cross-referencing error identified, and the date and identity of the person who made the change and the person who reviewed it. Even a purely administrative correction cannot simply be made silently because the integrity and reliability of the audit file as a historical record depends on there being no possibility of undisclosed, undocumented alteration after the file has been finalised; if minor changes could be made silently on the reasoning that they are administrative and inconsequential, there would be no principled boundary preventing more substantive, less innocent changes from also being made silently under the same characterisation, and the whole evidential value of a finalised, dated audit file, as something an inspector or a court could rely on as representing what was genuinely known and concluded at the time, would be compromised. Requiring every post-assembly change, however small, to be documented with its reason, timing and author preserves the file's integrity as a complete and traceable record, regardless of how trivial any individual change might seem.

Question 4

Explain the auditor's obligation in each of the three windows of subsequent events this chapter identifies, and state the key difference between the first window and the other two.

Accepted Answer

In the first window, between the date of the financial statements and the date of the auditor's report, the auditor has an active duty to perform procedures specifically designed to identify events that may require adjustment of, or disclosure in, the financial statements, including reading the minutes of meetings of shareholders, management and those charged with governance held after the date of the financial statements, making inquiries of management about whether any subsequent events have occurred that might affect the financial statements, and reading the entity's latest available interim financial information if any. In the second window, after the date of the auditor's report but before the financial statements are issued, the auditor has no obligation to perform any procedures, or to make any inquiry, regarding the financial statements, since the audit itself has concluded and the report has already been signed; however, if a fact becomes known to the auditor during this period that, had it been known at the date of the report, might have caused the auditor to amend the report, the auditor is required to discuss the matter with management and determine whether the financial statements need amendment, and if so to take appropriate action, which may include issuing a new or amended auditor's report. In the third window, after the financial statements have been issued, the auditor again has no obligation to make any inquiry regarding the financial statements, but if a fact becomes known that would have caused the auditor to amend the report had it been known at that earlier date, the auditor considers whether the financial statements need revision, discusses the matter with management, and where management does revise the financial statements, undertakes the procedures necessary in the circumstances and issues a new report on the revised financial statements. The key difference between the first window and the other two is that only the first window imposes an active, proactive duty to search for subsequent events through specific procedures; in the second and third windows, the auditor's duty is reactive rather than proactive, engaged only if a relevant fact happens to come to the auditor's attention through some other means, not through any ongoing obligation to keep investigating after the report has been issued.

Question 5

In the period between the balance sheet date and the date of the auditor's report, two events occur: (a) a major customer, already known to be in financial difficulty at the balance sheet date, is formally declared insolvent, confirming a debt was uncollectible; (b) a fire, entirely unconnected to any condition existing at the balance sheet date, destroys a warehouse. Classify each, and state the treatment.

Accepted Answer

Item (a) is an adjusting event, since it provides additional evidence of conditions that existed at the balance sheet date: the customer's financial difficulty was already known and existed at that date, and the subsequent formal insolvency simply confirms what was already, in substance, a probable outcome as at the balance sheet date, namely that this debt was unlikely to be fully recovered. The financial statements themselves should be adjusted to reflect this, typically by increasing the provision for doubtful debts, or writing off the specific balance, to the extent the insolvency confirms the debt is now known to be uncollectible, since the condition giving rise to the loss existed at the year end even though its final confirmation came later. Item (b) is a non-adjusting event, since the fire arose from conditions that arose after the balance sheet date, having no connection to any condition existing at that date; the warehouse and its contents were, so far as the facts state, in good order at the year end, and the fire is a fresh, subsequent occurrence rather than evidence of anything that already existed. The financial statements themselves are not adjusted for a non-adjusting event, but disclosure is required where the event is of such significance that non-disclosure would affect the ability of users of the financial statements to make proper evaluations and decisions, and a fire destroying a warehouse would very likely meet that significance threshold, requiring disclosure of the nature of the event and, where possible, an estimate of its financial effect, even though the figures in the financial statements themselves remain unchanged.

Question 6

Distinguish management's responsibility from the auditor's responsibility regarding going concern, and explain why the auditor's role is described as evaluative rather than as an independent assessment made from scratch.

Accepted Answer

Management's responsibility is to make an assessment of the entity's ability to continue as a going concern when preparing the financial statements, since going concern is a fundamental underlying assumption of financial reporting, and it is management, with its direct, first-hand knowledge of the entity's operations, financing arrangements, plans and prospects, that is best placed to make this assessment in the first instance and to prepare the financial statements on the basis, going concern or otherwise, that assessment supports. The auditor's responsibility is to obtain sufficient appropriate audit evidence about the appropriateness of management's use of the going concern basis of accounting in preparing the financial statements, and to conclude, based on the audit evidence obtained, whether a material uncertainty exists related to events or conditions that may cast significant doubt on the entity's ability to continue as a going concern. The auditor's role is described as evaluative rather than as an independent assessment made from scratch because the auditor is not preparing an original, standalone opinion about the entity's future viability built entirely from the auditor's own research and projections; rather, the auditor examines and challenges management's own assessment and the evidence and plans management has put forward supporting it, considering whether that assessment has been properly performed, whether it covers an appropriate period, whether the underlying assumptions are reasonable, and whether the evidence available supports or contradicts management's conclusion, forming an independent view on the appropriateness of management's assessment rather than substituting an entirely separate assessment of the auditor's own devising. This mirrors the general pattern running throughout this whole paper, that management prepares and the auditor examines and opines on that preparation, applied here specifically to the going concern basis rather than to the financial statements as a whole.

Question 7

Classify the following as financial, operating or other indicators of going concern doubt: (a) an entity is unable to pay creditors on their due dates; (b) an entity's key research director, central to its main product pipeline, resigns; (c) an entity is in breach of a statutory minimum capital requirement. Explain why classifying indicators this way is useful to the auditor.

Accepted Answer

Item (a), inability to pay creditors on their due dates, is a financial indicator, since it directly concerns the entity's liquidity and cash position, one of a family of financial indicators alongside a net liability position, negative operating cash flows, and adverse key financial ratios. Item (b), the loss of a key research director central to the main product pipeline, is an operating indicator, since it concerns the loss of key management or a critical operational capability rather than the entity's financial position directly, alongside indicators such as loss of a major market, a key customer or franchise, or significant labour difficulties. Item (c), breach of a statutory minimum capital requirement, is an other indicator, a category capturing matters such as pending legal proceedings that may result in claims the entity cannot satisfy and non-compliance with capital or other statutory requirements, which do not fit neatly within either the purely financial or purely operating categories but nonetheless bear directly on the entity's ability to continue in operation, here potentially threatening its very legal standing to continue trading if the breach is not remedied. Classifying indicators this way is useful to the auditor because it provides a structured checklist ensuring the auditor's consideration of going concern risk is comprehensive rather than confined to the most obvious financial distress signals alone; an auditor focused only on financial ratios might overlook an operating indicator like the loss of critical key personnel, or an other indicator like a statutory breach, either of which could independently and materially threaten the entity's going concern status even where the financial ratios themselves do not yet look alarming, and the three-category structure prompts the auditor to actively consider all three dimensions rather than relying on whichever category happens to be most salient in a given engagement.

Question 8

An entity shows several going concern indicators, including negative operating cash flows and breach of a loan covenant, but management has a credible, well-evidenced refinancing plan already substantially agreed with a new lender. Explain how the auditor should weigh the indicators against the mitigating plan, and what conclusion follows if the auditor is satisfied the plan is credible versus if the auditor is not.

Accepted Answer

The auditor does not simply conclude a material uncertainty exists merely because indicators of going concern doubt are present; the presence of indicators triggers the need for further audit work and professional judgement, but the ultimate conclusion depends on weighing those indicators against management's plans for dealing with them and the evidence supporting the feasibility of those plans. Here the negative operating cash flows and loan covenant breach are genuine, serious indicators that would, on their own, cast doubt on the entity's ability to continue as a going concern, but management has put forward a specific mitigating plan, a refinancing already substantially agreed with a new lender, and the auditor must evaluate the credibility and evidential support for that plan just as rigorously as the auditor evaluated the indicators themselves: examining correspondence or draft agreements with the new lender, assessing whether the terms described are genuinely close to being finalised or merely aspirational and preliminary, considering the new lender's own apparent capacity and willingness to proceed, and considering whether the refinancing, even if it proceeds, would genuinely resolve the underlying cash flow and covenant issues or merely defer them. If the auditor is satisfied, based on sufficient appropriate evidence, that the refinancing plan is genuinely credible and sufficiently advanced to be relied upon, the auditor may conclude that no material uncertainty exists, or, depending on the residual level of risk and the auditor's professional judgement about how settled the matter genuinely is even with the plan, that a material uncertainty exists but is adequately disclosed, requiring specific disclosure in the financial statements and a corresponding section in the auditor's report drawing attention to it, without this constituting a modification of the opinion itself provided the disclosure is adequate. If the auditor is not satisfied the plan is credible, for instance if the refinancing is still highly preliminary, contingent on conditions unlikely to be met, or otherwise insufficiently evidenced, the auditor would conclude that a material uncertainty does exist and has not been adequately mitigated, and depending further on whether management has adequately disclosed this uncertainty in the financial statements, the auditor's report would either include the required emphasis on the material uncertainty if disclosure is adequate, or be modified, potentially to an adverse or qualified opinion, if management has failed to disclose the uncertainty adequately despite it genuinely existing.

Question 9

List the main components of the auditor's overall review at completion, and explain why evaluating uncorrected misstatements in aggregate, rather than only individually, is a necessary part of this review.

Accepted Answer

The main components of the overall review at completion include evaluating whether sufficient appropriate audit evidence has been obtained overall, which is SA 200's own foundational standard applied here as a final checkpoint at the end of the engagement rather than only at each individual step along the way; evaluating the effect of uncorrected misstatements, both individually and in the aggregate, against the materiality level established for the audit; performing final analytical procedures on the financial statements as a whole, to assess whether the statements are consistent with the auditor's overall understanding of the entity built up throughout the engagement; and obtaining written representations from management on matters the auditor cannot otherwise corroborate through other audit evidence. Evaluating uncorrected misstatements in aggregate, rather than only individually, is necessary because a set of misstatements might each, taken alone, fall below the individual materiality threshold and appear immaterial in isolation, yet their combined effect, once summed across the financial statements, could exceed overall materiality and genuinely have the potential to influence the economic decisions of users; this is precisely the same aggregation concern that motivated setting performance materiality lower than overall materiality earlier in the audit, discussed in the planning chapter, and the final aggregate evaluation is the completion-stage check that confirms whether that earlier safeguard has, in the event, actually worked, or whether the accumulated total of small, individually tolerated misstatements has in fact grown large enough, in combination, to require correction or to affect the auditor's opinion despite no single misstatement on its own crossing the threshold.

Question 10

Beyond serving as evidence of the basis for the auditor's conclusion, list three further purposes audit documentation serves under SA 230.

Accepted Answer

Beyond serving as evidence of the auditor's basis for concluding on the achievement of the overall objectives of the audit, and evidence the audit was planned and performed in accordance with the Standards, SA 230 identifies several further purposes documentation serves. It assists the engagement team to plan and perform the audit, providing a documented record the team can refer back to as the engagement progresses rather than relying purely on memory or informal communication. It assists members of the team responsible for supervision to direct and supervise the audit work, and to discharge their review responsibilities, since a supervisor cannot meaningfully review work that has not been documented. It enables the engagement team to be accountable for its work, since documented work can be traced to the specific individual who performed it. It retains a record of matters of continuing significance to future audits of the same entity, so that a future year's engagement team, which may include different individuals, can readily understand matters relevant from prior years without starting entirely from scratch. And it enables the conduct of quality control reviews and inspections in accordance with applicable requirements, and the conduct of external inspections by a regulatory or oversight body, both of which depend entirely on there being an adequate documented record available to examine.

Question 11

Explain the significance of the 60-day final file assembly deadline, and what kind of changes to the file are and are not permitted after that deadline has passed.

Accepted Answer

The 60-day deadline, running from the date of the auditor's report, marks the point by which the auditor must have completed the administrative process of assembling the final audit file, essentially finalising, organising and closing out the working paper file for the engagement into its permanent, retained form. Its significance is that it draws a clear line between the period during which the audit is genuinely still being finalised, when routine administrative tidying, filing and completion of the working papers is expected and unremarkable, and the period after which the file is considered closed and any further changes become subject to the stricter documentation requirements governing post-assembly modifications. After the deadline, purely administrative changes such as sorting, collating, cross-referencing, and deleting or discarding superseded drafts of working papers are still permitted, provided they do not involve any substantive change to the conclusions reached or the audit evidence itself, but such administrative tidying should ordinarily have been substantially completed by the 60-day point in any event. Any change that is not purely administrative in this sense, whether an addition of new documentation or a modification of existing documentation reflecting a substantive matter, is permitted only if the specific reasons for it are documented together with when and by whom the change was made and reviewed, exactly as this chapter's discussion of post-assembly changes describes, and existing documentation of any nature must never simply be deleted or discarded once the retention period begins running from the assembly deadline.

Question 12

Explain why reading the minutes of board and shareholder meetings held after the balance sheet date is specifically named as a subsequent events procedure, and what kind of information it is particularly well suited to surfacing.

Accepted Answer

Reading the minutes of board and shareholder meetings held after the balance sheet date but before the date of the auditor's report is specifically named as a subsequent events procedure because board and shareholder meetings are precisely where an entity's most significant decisions, developments and disclosures of concern to its own governing bodies are formally recorded, making minutes an efficient, structured, and reasonably comprehensive source for surfacing matters that could constitute adjusting or non-adjusting subsequent events. It is particularly well suited to surfacing matters management might not otherwise have specifically mentioned to the auditor in response to a general inquiry, since a director may discuss a significant new contract, a major litigation development, a decision to close a division, or a financing difficulty in a board meeting as a matter of ordinary governance business, generating a documented record of it, without necessarily thinking to separately volunteer that same information to the auditor unless specifically asked. Reading the minutes therefore provides the auditor with an independent, documented cross-check against management's own responses to direct inquiry, and it is a comparatively efficient procedure, since a single set of board minutes can reveal several distinct matters relevant to the subsequent events review at once, rather than requiring the auditor to separately elicit each one through individual, targeted questions; this is exactly why it sits alongside inquiry of management as one of the specifically named procedures for the active search duty applicable in the first subsequent events window.

Question 13

Explain why reviewing an entity's latest available interim financial information, where it exists, is a useful subsequent events procedure, and what limitation applies where no such interim information is prepared.

Accepted Answer

Reviewing the entity's latest available interim financial information, where the entity prepares monthly or quarterly management accounts or other interim reporting, is a useful subsequent events procedure because it provides the auditor with an independent, contemporaneous, financial view of how the entity has actually performed and what has actually happened in the period since the balance sheet date, up to the most recent point for which such information exists; comparing this interim information against the year-end financial statements and against what management has represented in response to inquiry can reveal trends, unexpected results, or specific events, such as a sudden and unexplained deterioration in a key financial metric, that might prompt the auditor to investigate further whether a subsequent event requiring adjustment or disclosure has occurred, even where management's own verbal responses to inquiry have not specifically flagged anything. Where no such interim information is prepared by the entity, this specific procedure is simply unavailable, and the auditor is correspondingly more reliant on the other named procedures, particularly inquiry of management and reading of board minutes, to identify subsequent events, which is one reason an entity with less developed internal financial reporting infrastructure can present a somewhat higher inherent difficulty for the auditor in performing a thorough subsequent events review, since one of the standard, independently corroborating sources of information is simply not available to draw on.

Question 14

An auditor obtains a written representation from management confirming that all known instances of non-compliance with laws and regulations have been disclosed to the auditor. Explain why this representation is necessary evidence, and why the auditor should not treat it as the end of the inquiry into this matter.

Accepted Answer

This representation is necessary evidence because certain matters, particularly matters that are fundamentally within management's own knowledge and intention, such as whether management is aware of instances of non-compliance that have not otherwise come to light through the auditor's own procedures, cannot practically be corroborated through any other source; the auditor has no independent means of confirming the completeness of management's own awareness of matters that, by their nature, might not leave an external, independently verifiable trail, and a formal, written representation, obtained specifically and directly from those responsible, creates an explicit, documented acknowledgement of management's responsibility and their confirmation on the specific matter, which is itself valuable audit evidence and also serves an important purpose in reinforcing management's own responsibility for disclosure. The auditor should not treat it as the end of the inquiry into this matter, however, because SA 580 is explicit that written representations do not, on their own, provide sufficient appropriate audit evidence about any of the matters they address; the representation is a necessary but not on its own sufficient piece of evidence, and the auditor must still perform other procedures reasonably available in the circumstances to corroborate management's representation so far as possible, such as reviewing correspondence with regulators, legal counsel, or relevant authorities, considering the results of the auditor's own procedures performed elsewhere in the audit that might have revealed indications of non-compliance, and applying professional scepticism throughout rather than accepting the written representation as a substitute for genuinely independent corroborating evidence on a matter this significant.

Question 15

Explain the purpose of final analytical procedures performed on the financial statements as a whole at the completion stage, and how this differs from the analytical procedures performed earlier, at the risk assessment stage.

Accepted Answer

Final analytical procedures, performed near the end of the audit on the financial statements as a whole, are designed to assist the auditor in forming an overall conclusion as to whether the financial statements are consistent with the auditor's understanding of the entity, built up and refined throughout the entire course of the engagement; they act as a final, holistic sanity check, standing back from the detailed, item-by-item substantive work already performed and asking whether the resulting financial statements, taken together, make sense given everything the auditor now knows about the entity, its business, and the results of the specific procedures already carried out. This differs from the analytical procedures performed earlier, at the risk assessment stage under SA 315, in both purpose and timing: risk assessment analytical procedures are performed at the start of the engagement, with comparatively limited detailed knowledge of the entity's actual current-year results, and their purpose is diagnostic, helping the auditor identify areas of unusual fluctuation or unexpected relationships that may indicate elevated risk and therefore warrant more detailed substantive testing later in the audit. Final analytical procedures, by contrast, are performed at the very end, once all the detailed substantive testing has already been completed, and with the full benefit of everything learned during that testing, and their purpose is confirmatory and evaluative rather than diagnostic, checking that the now-completed financial statements are consistent with that accumulated understanding rather than flagging new areas for further testing; if the final analytical procedures do reveal something unexpected, that itself is important evidence at this late stage, since it suggests either that the detailed testing already performed missed something, or that the completed figures do not yet properly reflect the entity's true position, either of which would require further investigation before the audit can be concluded and the opinion finalised.

Practice — Audit Documentation, Completion and Review

Sign in to save attempts to your dashboard and track your accuracy over time

Find a verified tutor

Join a live course

Browse coaching centres

About

Categories

Support

Documentation

Get Study Tips & Updates

Download Our App

Download for iOS

Download for Android

Popular Cities