Common Audit File Weaknesses

Common Audit File Weaknesses

Our firm carries out many cold file reviews of audit files and comes across many varieties of audit file weaknesses with varying degrees of seriousness.

In the following series of blogs, we are going to highlight the more typical audit file weaknesses that we encounter.

We will also indicate some key tips that will:

  • save time and effort in producing more effective audit files; and
  • ensure that your firm is better prepared for its next regulatory inspection.

Audit Planning (ISA 300)

What a logical place to start?

Planning the audit properly is the key to an efficient and effective audit assignment.  This is one of the areas which is often poorly documented.  In most audit teams knowledge of the client, their business and associated risks among the team is good, yet the documentation of this is often too brief (e.g. missing an organisation chart) and does not fully embrace the requirements of the recently revised risk and fraud ISAs (ISA 315 and ISA 240).

Tips for a better audit file

The planning memorandum should summarise:

    1. The key matters to be addressed in the audit;
    2. The detailed tests that will be performed in these areas;
    3. Materiality levels set – don’t follow the previous year materiality levels blindly, especially if the results are showing losses or a break-even, instead of profits;
    4. Stocks – Include a map of the warehouse location, photographs of the more expensive stock items (with an explanatory index);
    5. The names of the 5 largest suppliers/customers
    6. Names of key management personnel and years of service;
    7. Related parties – especially dormant ones i.e. those that qualify as related but have no transactions/balances with the audited entity yet.

More weaknesses and tips next week.

For more on engagement and representation letter templates and a variety of CPD webinars on money laundering and other accounting/audit related topics, please go to our website for:

ISQM TOOLKIT, or if you prefer to chat through the different audit risks and potential appropriate responses presented by this new standard. We typically tailor ISQM training and brainstorming sessions to suit your firm’s unique requirements.  Please contact John McCarthy FCA by email at john@jmcc.ie.