©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Other Assurance Services Chapter 24

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 1 Distinguish AICPA attestation standards from auditing standards and know the type of engagements to which they apply.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Attestation Standards Types of Attestation Engagements Levels of Service Attestation Engagements

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Types of Engagements and Related Reports Type of Engagement Examination Review Agreed-upon procedures Amount of Evidence Extensive Significant Varying Level of Assurance High Moderate Varying Form of Conclusion Positive Negative Findings Distribution General Limited

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 2 Understand the nature of WebTrust assurance services.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley In a WebTrust assurance services engagement, a client engages a CPA to provide reasonable assurance that a company’s Web site complies with certain WebTrust principles and criteria for one or more aspects of e-commerce activities. WebTrust Services

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Seven WebTrust Principles SecuritySecurity practices to ensure that e-commerce systems and data are restricted only to authorized individuals. PrincipleThe entity discloses and maintains compliance with its: PrivacyPrivacy practices to protect a customer’s personally identifiable information.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Seven WebTrust Principles AvailabilityAvailability practices to ensure that its electronic commerce systems and data are available. BusinessBusiness practices to ensure that practices/e-commerce transactions are processed Transactioncompletely, accurately, and in conformity integritywith those disclosed practices. PrincipleThe entity discloses and maintains compliance with its:

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Seven WebTrust Principles ConfidentialityConfidentiality practices to ensure that information obtained through commerce activities that is designated as confidential is restricted to authorized individuals or entities. PrincipleThe entity discloses and maintains compliance with its:

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Seven WebTrust Principles PrincipleThe entity discloses and maintains compliance with its: NonrepudiationNonrepudiation practices to establish which parties to e-commerce transactions are liable. CustomizedSpecified disclosures, which must comply with applicable professional standards and be relevant to e-commerce activities.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 3 Understand the nature of SysTrust assurance services.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley In a SysTrust engagement, the SysTrust licensed accountant evaluates a company’s computer system using SysTrust principles and criteria. SysTrust Services

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Four SysTrust Principles 1. Availability 2. Security 3. Integrity 4. Maintainability The system is available for operation and use at times set forth in service- level statements or agreements. The system is protected against unauthorized physical and logistical access. System processing is complete, accurate, timely, and authorized. The system can be updated when required in a manner that continues to provide for system reliability, security, and integrity.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 4 Describe special engagements to attest to prospective financial statements.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley  Forecasts and projections  Use of prospective financial statements  Types of engagements  Examination of prospective financial statements Prospective Financial Statements

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 5 Understand special engagements to attest to internal control, including controls over electronic commerce.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley  Comparison to requirements for audits  Requirements for an examination of the effectiveness of internal control  Internal control for service organizations Reporting on Internal Control

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 6 Describe agreed-upon procedures engagements.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The SASs deal with financial statement items, whereas the SSAEs deal with nonfinancial statement subject matter. 2. Management must provide a written assertion for an SSAE engagement but not for an SAS engagement. Agreed-Upon Procedures Engagements

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 7 Understand the level of assurance and evidence requirements for review and compilation services.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The standards for compilations and reviews of financial statements are called: Review and Compilation Services

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Relationship between Evidence Accumulation and Assurance Attained Level of Assurance Attained None (Compilation) Moderate (Review) High (Audit) Minimal (Compilation) Significant (Review) Extensive (Audit) Amount of Evidence Accumulated

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley A review service (SSARS review) engagement is designed to allow the accountant to express limited assurance that the financial statements are in accordance with GAAP. Review Services

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Obtain knowledge of the accounting principles of the client’s industry. Obtain knowledge of the client. Make inquiries of management. Perform analytical procedures. Obtain letter of representation. Procedures Suggested for Reviews

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Inquire as to the company’s procedures for recording, classifying, and summarizing transactions and disclosing information in the statements. 2. Inquire into actions taken at meetings of stockholders and the board of directors. 3. Inquire of persons having responsibility for financial and accounting matters. Make Inquires of Management

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The first paragraph is similar to an audit report except for its reference to a review service rather than an audit. 2. The second paragraph notes that a review consists primarily of inquiries and analytical procedures. Form of Report

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The third paragraph expresses limited assurance in the form of a negative assurance that “we are not aware of any material modifications that should be made to the financial statements.” Form of Report

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley If a client has failed to follow GAAP in a review engagement, a modification of the report is needed. Failure to Follow GAAP

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Possess knowledge about the accounting principles and practices of the client’s industry. Know the client; the nature of the client’s business transactions; and the basis, form, and content of the financial statements. Requirements for Compilation Establish an understanding with the client about the nature and limitations of the services to be performed and a description of the report.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Make inquiries to determine whether the client’s information is satisfactory. Read the compiled financial statements and be alert for any obvious omissions or errors in arithmetic and GAAP. Requirements for Compilation

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Compilation with full disclosure It requires disclosures in accordance with GAAP. Compilation that omits substantially all disclosures This type of statement is usually expected to be used primarily for management purposes only. Compilation Form of Report Compilation without independence A CPA firm can issue a compilation report even if it is not independent with respect to the client, as defined by the Code of Professional Conduct.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 8 Describe special engagements to receive interim information for public companies.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The requirements for reviews of interim information for public companies (SAS 71 reviews) are set forth by SAS 71 (AU 722). A SAS 71 review does not provide a basis for expressing a positive-form opinion. Interim Financial Information for Public Companies

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley There are ordinarily no tests of the accounting records, independent confirmations, or physical examinations. Interim Financial Information for Public Companies

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Learning Objective 9 Describe other audit and limited assurance engagements related to historical financial statements.

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley  Introductory paragraph  Scope paragraph  Middle paragraph stating the accounting basis  Opinion paragraph Other Comprehensive Bases of Accounting

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The specified elements, accounts, or items must be identified. The basis on which the specified elements, accounts, or items are presented and the agreements specifying the basis must be described. Specified Elements, Accounts, or Items

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Source of significant interpretations made by the client about the provisions of a relevant agreement must be indicated and described. Specified Elements, Accounts, or Items

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley If the specified element, account, or item is presented on a basis that is not in conformity with GAAP, a paragraph that restricts the distribution of the report to those within the entity and the parties to the contract or agreement must be added. Specified Elements, Accounts, or Items

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The engagement and report should be limited to compliance matters the auditor is qualified to evaluate. The auditor should provide a debt compliance letter only for a client for whom the auditor has done an audit of the overall financial statements. Debt Compliance Letter and Similar Reports

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley The auditor’s opinion is in the form of a negative assurance, stating that nothing came to the auditor’s attention that would lead the auditor to believe there was noncompliance. Debt Compliance Letter and Similar Reports

©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley End of Chapter 24