Chapter 1: Quality Control (SQC 1 & SA 220)
Exhaustive, 100% complete revision notes covering every single sentence, principle, diagram, and solved question of ICAI Study Material for CA Final Advanced Auditing, Assurance & Professional Ethics. Formatted in a signature high-yield structure with bold technical keywords in vibrant color.
CA Jagriti is working in a firm of Chartered Accountants in the capacity of a paid employee. The firm consists of 7 partners and handles varied types of professional work including audits. Due to rapid business expansion over the past 2–3 years, many new clients were added without proper background verification.
Furthermore, the firm accepted audits of companies engaged in technical and highly complex operations despite possessing zero past experience. The partners were stingy in hiring capable, experienced staff to handle such work. In Jagriti’s mind, she brooded: "Are commercial considerations deciding and overriding factors?"
This lack of qualified staff led to horrific lapses:
- Lapse 1: In the audit of a listed company, the published audit report under the Companies Act, 2013 referred to “profit” in the financial statements, whereas the audited accounts reflected a “loss”!
- Lapse 2: In another audit, the issued audit report referred to a “cash flow statement”, whereas the company was a “small company” under Section 2(85) of the Companies Act, 2013 and did not even prepare a cash flow statement!
Exam Takeaway: This opening case vividly demonstrates the catastrophic risks of ignoring SQC 1. When commercial greed overrides quality control, the firm invites severe regulatory penalties from NFRA, QRB, and ICAI Disciplinary Directorate.
1. Concept & Core Importance of Audit Quality
High audit quality is central to the auditing profession. It creates trust in the users of financial information. Stakeholders relying upon an auditor's assurance include:
- Industry, Trade & Business Owners: Rely on financial statements for capital allocation, credit extension, and peer benchmarking.
- Government & Tax Authorities (CBDT, CBIC): Depend on audited accounts for assessment of direct and indirect taxes.
- Public at Large, Retail Investors & Financial Institutions: Depend on audited statements to invest savings, grant term loans, and monitor corporate governance.
Audit Quality involves the application of a rigorous audit process by auditors and the implementation of quality control procedures that comply with:
- Standards on Auditing (SAs) and Standards on Quality Control (SQC 1) issued by ICAI.
- Code of Ethics issued by the Council of ICAI.
- Provisions of the Companies Act, 2013 (e.g., Section 143, Section 139, Section 141) and other applicable statutes.
ICAI evaluates candidates strictly on their understanding of the distinct roles of the two foundational standards:
- SQC 1: Deals with quality control at the LEVEL OF THE ENTIRE FIRM. It is the mother standard applicable to all engagements (Audits, Reviews, Other Assurance, and Related Services).
- SA 220: Deals with audit quality at the INDIVIDUAL ENGAGEMENT LEVEL. It outlines the personal responsibilities of the Engagement Partner (EP) for an audit of financial statements.
2. SQC 1: Quality Control for Firms Performing Engagements
SQC 1 requires that every firm shall establish a system of quality control designed to provide it with reasonable assurance that:
The firm and its personnel comply with professional standards and applicable regulatory and legal requirements.
Reports issued by the firm or its engagement partners are appropriate in the circumstances.
Universal Applicability: SQC 1 applies to all firms irrespective of their constitution (Sole proprietorship, Partnership, LLP).
Documentation & Communication: Quality control policies and procedures must be formally documented and communicated to the firm's personnel. By communicating, the firm encourages staff to communicate their views and concerns on quality control matters without fear.
3. The 6 Mandatory Elements of SQC 1 (HEAL ME Mnemonic)
To secure full step-marks in ICAI exams, memorize the 6 mandatory elements of SQC 1 using HEAL ME:
- H — Human Resources
- E — Ethical Requirements
- A — Acceptance and Continuance of client relationships and specific engagements
- L — Leadership Responsibilities for quality within the firm ("Tone at the Top")
- M — Monitoring
- E — Engagement Performance
The firm must establish policies and procedures designed to promote an internal culture based on the recognition that quality is essential in performing engagements:
- Ultimate Responsibility: The firm’s Chief Executive Officer (CEO) or the Managing Partners must assume ultimate responsibility for the firm’s system of quality control.
- Operational Oversight: Persons assigned operational responsibility for the quality control system by the CEO/managing partners must possess sufficient and appropriate experience, ability, and the necessary authority to assume that responsibility.
- Commercial Considerations Must NOT Override Quality: The firm’s business strategy is subject to the overriding requirement to achieve quality in all engagements. Audit quality is paramount and non-negotiable.
- HR Compensation Alignment: Policies addressing performance evaluation, compensation, and promotion (including incentive systems) must be designed to demonstrate the firm’s overriding commitment to quality rather than commercial fee generation.
- Resource Devotion: The firm must devote sufficient financial, technological, and intellectual resources for developing and supporting quality control policies.
The firm must establish policies and procedures providing reasonable assurance that the firm and its personnel comply with the Code of Ethics issued by ICAI.
5 Fundamental Principles of Professional Ethics
- 1. Integrity: Being straightforward, honest, and truthful in all professional and business relationships.
- 2. Objectivity: Not allowing bias, conflict of interest, or undue influence of others to override professional judgments.
- 3. Professional Competence and Due Care: Maintaining professional knowledge and skill at the level required to ensure competent professional service based on up-to-date legislation.
- 4. Confidentiality: Respecting the confidentiality of information acquired as a result of professional relationships, and not disclosing such information to third parties without proper authority or legal duty.
- 5. Professional Behaviour: Complying with relevant laws and regulations and avoiding any conduct that discredits the profession.
Independence Policies & Safeguards
Observance of Independence in all assurance engagements is the founding requirement. The firm’s policies must enable it to:
- Communicate independence requirements to its personnel and network firm personnel.
- Identify and evaluate circumstances and relationships that create threats to independence.
- Take appropriate action to eliminate threats or reduce them to an acceptable level by applying safeguards, or withdrawing from the engagement.
- Establish a mechanism where engagement partners promptly provide the firm with client information, and personnel promptly notify the firm of independence threats and breaches.
Using the same senior personnel on assurance engagements over a prolonged period creates a serious Familiarity Threat.
- Annual Written Confirmations: At least annually, the firm must obtain written confirmation of compliance with independence policies from all firm personnel required to be independent.
- 7-Year Rotation for Listed Entities: For financial statement audits of listed entities, the Engagement Partner must be rotated after a pre-defined period, normally not more than 7 years.
- Sole Practitioner Exception: Where audit of a listed entity is conducted by a sole practitioner, partner rotation is physically impossible. Therefore, quality control is maintained through mandatory Peer Review of such firms.
Before accepting a new client or deciding whether to continue an existing engagement, the firm must acquire vital information across three critical dimensions:
Assessing the integrity of promoters, principal owners, and key managerial personnel.
Ensuring the firm has the capabilities, competence, time, and resources to perform the work.
Ensuring compliance with relevant ethical requirements and independence rules.
7 Specific Matters Evaluated for Client Integrity
- 1. Identity & Business Reputation: Reputation of client’s principal owners, key management, related parties, and TCWG.
- 2. Business Operations: Nature of client’s operations, business model, and commercial practices.
- 3. Accounting Attitude: Attitude of owners and management towards aggressive interpretation of accounting standards and internal controls.
- 4. Fee Pressure: Whether the client is aggressively concerned with maintaining the firm's fees as low as possible.
- 5. Scope Limitations: Indications of inappropriate limitations placed on the scope of audit work.
- 6. Crime / Money Laundering: Indications that the client might be involved in money laundering, tax fraud, or other criminal activities.
- 7. Predecessor Auditor: Reasons for proposed appointment and why the previous auditor was not reappointed.
6 Specific Matters Evaluated for Firm Competence & Resources
- 1. Industry Knowledge: Firm personnel possess knowledge of relevant industries and subject matters.
- 2. Regulatory Experience: Personnel have experience with relevant regulatory or reporting requirements.
- 3. Sufficient Staff: The firm has enough personnel with necessary capabilities and competence.
- 4. Experts Available: External technical experts are available if needed (SA 620).
- 5. Qualified EQCR Available: Qualified individuals meeting eligibility requirements to perform EQCR are available.
- 6. Deadlines: The firm would be able to complete the engagement within the statutory reporting deadline.
Withdrawal Procedures (When Negative Information is Obtained Later)
Where information is obtained that would have caused the firm to decline the engagement had it been known earlier:
- Discuss with Management & TCWG: Discuss with appropriate management and TCWG regarding remedial action based on relevant facts.
- Discuss Withdrawal: If withdrawal is deemed appropriate, discuss withdrawal and the reasons for withdrawal with management and TCWG.
- Examine Legal/Regulatory Duty: Consider whether there is a professional, regulatory, or legal requirement to remain in place or report withdrawal and reasons to regulators (e.g. Form ADT-3 under Section 140(2) of Companies Act, 2013).
- Document: Document significant issues, consultations, conclusions, and the basis for conclusions.
The firm must establish policies providing reasonable assurance that it has sufficient personnel with the capabilities, competence, and commitment to ethical principles necessary to perform engagements in accordance with professional standards.
- Comprehensive HR Policies: Must address recruitment, performance evaluation, capabilities, competence, career development, promotion, compensation, and estimation of personnel needs.
- Continuing Professional Development (CPD): Continuous professional education (CPE hours) to keep audit staff updated on accounting standards and statutes.
- Assignment of Engagement Partner (EP):
- The identity and role of the EP must be formally communicated to client management and TCWG.
- The EP must possess the appropriate capabilities, competence, authority, and time to perform the role.
- The responsibilities of the EP must be clearly defined and communicated to that partner.
- Assignment of Engagement Teams: The firm must ensure that team members collectively possess the required technical skills and experience for the specific audit.
Consistency in the quality of engagement performance is achieved through:
- Briefing engagement teams of their objectives and client background.
- Processes for complying with applicable engagement standards.
- Processes of engagement supervision, staff training, and coaching.
- Standardized methods of reviewing performance of work and audit documentation.
1. Consultation in Difficult or Contentious Matters
- Definition: Consultation involves discussion at the appropriate professional level with individuals inside or outside the firm who possess specialized expertise.
- Promotion of Quality: Improves application of professional judgment. Appropriate documentation of the issue and the resulting conclusions must be maintained and implemented.
- External Consultation: Firms lacking internal specialists may consult advisory services of other firms, ICAI expert panels, or regulatory bodies.
2. Differences of Opinion
- Differences may arise within the engagement team, with those consulted, or between the EP and the EQCR.
- The engagement team must follow firm policies for resolving differences.
- Strict Prohibition: The audit report shall NOT be issued until all differences of opinion are formally resolved!
3. Engagement Quality Control Review (EQCR)
- Mandatory for Listed Entities: An EQCR is statutorily mandatory for all audits of financial statements of listed entities.
- Other Engagements: Firm must establish objective criteria (e.g. public interest, high financial leverage, regulatory scrutiny) requiring an EQCR.
- Timing Rule: The report shall NOT be dated or signed until the completion of the EQCR!
- Who can be an EQCR: A partner, other qualified person in the firm (must be a member of ICAI), a suitably qualified external person, or a team of such individuals. For listed entities, the reviewer must have sufficient experience and authority to act as an audit EP on listed companies.
- Objectivity Safeguard: The EQCR must maintain absolute objectivity. The reviewer cannot make decisions for the team or participate in audit fieldwork. If consultations between EP and EQCR become so extensive that objectivity is impaired, the firm must appoint a replacement reviewer!
8 Matters Evaluated by EQCR for Listed Entities
- The engagement team’s evaluation of the firm’s independence in relation to the audit engagement.
- Significant risks identified during the engagement and the audit responses to those risks.
- Judgments made, particularly regarding materiality and significant risks.
- Whether appropriate consultation took place on difficult or contentious matters and conclusions reached.
- Significance and disposition of corrected and uncorrected misstatements.
- Matters to be communicated to management and TCWG and regulatory bodies.
- Whether working papers selected for review reflect the work performed and support conclusions.
- The appropriateness of the auditor's report to be issued.
4. Engagement Documentation: Assembly & Retention Rules
Final audit file assembly must be completed in not more than 60 days after the date of the auditor's report.
Audit documentation must be retained for no shorter than 7 years from the date of the auditor's report (or group report).
Special Documentation Nuances in SQC 1
- Multiple Reports: Where two or more different reports are issued on the same subject matter (e.g. component report for group consolidation and later statutory audit report), the 60-day assembly limit applies to each report as a separate engagement.
- 5 Core Document Controls: Policies must maintain the Confidentiality, Safe Custody, Integrity, Accessibility, and Retrievability of documentation.
- Scanning Paper Documents: When physical working papers are scanned into electronic files:
- Generate scanned copies reflecting the entire content (including manual signatures, annotations, and cross-references).
- Integrate scanned copies into files, including indexing and sign-offs.
- Ensure scanned copies can be retrieved and printed as necessary.
- Property of the Firm: Working papers are the sole property of the firm. The firm may, at its discretion, share extracts with clients provided it does not undermine validity of work or independence.
- EQCR Documentation: The reviewer must document that (i) EQCR procedures were performed, (ii) EQCR was completed on or before report date, and (iii) reviewer is not aware of any unresolved matters.
The firm must ensure its system of quality control is relevant, adequate, operating effectively, and complied with in practice:
- Ongoing Evaluation: Continuously assessing the design of the QC system in light of new professional standards and legal developments.
- Periodic Inspection of Completed Engagements: Requires cyclical inspection of at least one completed engagement for each engagement partner.
- Inspector Independence: Persons inspecting an engagement must NOT be involved in performing that engagement or its EQCR.
- Handling Complaints & Allegations: Policies to investigate complaints from clients, staff, or third parties regarding non-compliance with standards.
- Remedial Actions: Taking disciplinary and corrective actions against personnel who violate quality policies.
4. SA 220: Quality Control for an Audit of Financial Statements
SA 220 adapts the principles of SQC 1 to the individual audit engagement level. The objective of the auditor is to implement quality control procedures that provide reasonable assurance that:
- The audit complies with professional standards and regulatory and legal requirements.
- The auditor’s report issued is appropriate in the circumstances.
- 1. Leadership Responsibility: EP takes responsibility for overall quality on each audit. Sets the tone by emphasizing compliance with professional standards, issuance of an appropriate report, and encouraging team members to raise concerns without fear of reprisals.
- 2. Ethical Requirements: EP remains alert through observation and inquiries for non-compliance with ethical requirements by team members and takes appropriate remedial action.
- 3. Independence: EP forms a conclusion on compliance with independence requirements, identifying threats, evaluating breaches, and applying safeguards.
- 4. Acceptance & Continuance: EP ensures appropriate procedures were followed and evaluates information regarding client integrity and firm capabilities.
- 5. Assignment of Teams: EP ensures the engagement team and auditor's experts collectively have the competence and capabilities required.
- 6. Direction, Supervision & Review: EP directs fieldwork, supervises team members, and personally reviews:
- Critical areas of judgment (e.g. accounting estimates under SA 540).
- Significant risks identified (under SA 315).
- Sufficient appropriate audit evidence supporting the audit report.
- 7. Consultation & Differences of Opinion: EP ensures appropriate consultation on contentious issues and ensures differences of opinion are resolved before issuing the report.
- 8. Mandatory EQCR Protocols: For listed entities, EP determines EQCR appointment, discusses significant matters with EQCR, and DOES NOT date the report until EQCR completion.
Mandatory Documentation by Engagement Partner under SA 220 (Para 3.8)
- Issues identified regarding compliance with relevant ethical requirements and how they were resolved.
- Conclusions on compliance with independence requirements and relevant discussions with the firm.
- Conclusions reached regarding acceptance and continuance of client relationships.
- Nature and scope of, and conclusions resulting from, consultations undertaken during the audit.
5. Master Comparison: SQC 1 vs SA 220
| Distinguishing Parameter | SQC 1 (Quality Control for Firms) | SA 220 (Quality Control for Audits) |
|---|---|---|
| Jurisdictional Level | Firm Level (Applies across the entire organization). | Engagement Level (Applies to a specific audit). |
| Scope of Services | All audits, reviews, assurance, and related services (compilations, AUP). | Restricted strictly to Audits of Financial Statements. |
| Ultimate Responsibility | CEO / Managing Partners of the firm. | Engagement Partner (EP) of the audit team. |
| Interrelationship | Overarching umbrella / Mother Standard. | Daughter Standard operating under premise of firm SQC 1. |
| Monitoring Mechanism | Cyclical inspection of at least 1 file per partner. | EP considers how firm monitoring findings affect the audit. |
| Assembly of Files | Establishes firm policy: Assembly ≤ 60 days, Retention ≥ 7 years. | EP implements file completion in accordance with SQC 1. |
| Listed Entity Rotation | Mandates EP rotation normally after not more than 7 years. | EP ensures independence compliance during the engagement. |
6. External Review & Quality Oversight Mechanisms
Constituted by the Council of ICAI. Evaluates whether a Practice Unit (PU) has established adequate SQC 1 quality control systems and whether they are being implemented in assurance engagements.
Outcome: Unqualified report results in issuance of a Peer Review Certificate (mandatory for listed company audits). Qualified report leads to refusal with reasons and a scheduled follow-on review.
Established under Section 28A of the Chartered Accountants Act, 1949. Comprises members nominated by Central Govt and ICAI Council.
Functions: (a) Recommends standards to Council, (b) Reviews quality of services including audits via technical reviewers empanelled on risk-based criteria, (c) Guides members to improve quality. Reviews non-NFRA entities.
Constituted under Section 132(1) of Companies Act, 2013. Oversees compliance of accounting and auditing standards for Public Interest Entities (PIEs) under Rule 3 of NFRA Rules, 2018 (all listed entities, large unlisted public companies, banks, insurance).
Powers: Can investigate auditors under Section 132(4), debar CAs, and impose massive monetary penalties.
Overseeing the audit quality of listed companies and large public interest entities falls exclusively under NFRA. QRB can only review audit quality in respect of entities other than those covered under Rule 3 of NFRA Rules, 2018 or those specifically referred to QRB by NFRA!
7. Solved Practical Scenarios: Test Your Understanding (TYU 1–5)
SQC 1 requires that the firm establish a system of quality control designed to provide reasonable assurance that the firm and its personnel comply with professional standards and regulatory requirements. It requires that the firm's business strategy is subject to the overriding requirement to achieve quality in all engagements. Commercial considerations must not override the quality of work performed.
Managing Partner Mr. A is a close friend of the promoter, which raises a direct threat to independence. The resignation of the previous auditor, regulatory inquiries, and an offered fee hike of 25% are major red flags regarding client integrity. Recommending acceptance solely for higher fees and friendship reflects a complete breakdown of the tone at the top.
- Assign management responsibilities so that commercial considerations never override quality.
- Ensure performance evaluation and compensation demonstrate commitment to quality over billing.
- Devote sufficient resources to evaluate client integrity before accepting casual vacancy appointments.
Sudhanshu's approach is completely improper and gross professional misconduct. It directly violates the fundamental principles of integrity, objectivity, and professional behaviour under the ICAI Code of Ethics. Promising a clean stock audit report in exchange for commercial audit work compromises independence and objectivity.
This reflects poorly on the firm's quality control system under SQC 1. SQC 1 requires that quality policies and procedures be documented and communicated to all personnel. It demonstrates that the firm's staff are not properly sensitized or trained regarding ethical compliance, and that monitoring mechanisms over paid employees are ineffective.
Before accepting a new engagement, the firm must assess the integrity of the client, specifically considering:
- Identity and business reputation of the principal owners and management.
- Indications of involvement in money laundering, tax evasion, or criminal activities.
- Attitude towards aggressive accounting interpretations and internal controls.
- Reasons for replacing the previous auditor (often replacing auditors who refuse to endorse illegal practices).
The search by ED with massive cash recovery and bogus penny stock searches are decisive evidence of lack of integrity and criminal exposure. CA M must decline the engagement offer.
Disagree completely. Engagement Quality Control Review in audits of financial statements of listed entities is a mandatory statutory requirement under both SQC 1 and SA 220.
The expert opinion of ICAI pertains strictly to a specific accounting interpretation. In contrast, the EQCR reviewer performs an objective evaluation of the entire audit engagement: assessing firm independence, audit responses to significant risks, materiality judgments, uncorrected misstatements, and the overall appropriateness of the audit report. The appointment of an EQCR remains fully mandatory and non-negotiable.
Under SA 220, the auditor's objective is to implement quality control procedures providing reasonable assurance that the audit complies with professional standards and regulatory and legal requirements.
Reporting that a company is "generally regular" is vague, casual, and subjective. CARO 2020 Clause vii(a) specifically requires the auditor to state whether the company is regular in depositing undisputed statutory dues, and if not, to indicate the exact amounts outstanding for more than 6 months from the date they became payable. Such casual reporting is NOT qualitative and fails to comply with SA 220.
8. Solved Question Bank: Test Your Knowledge (TYK 1–19)
Yes, subject to strict objectivity safeguards. As per SQC 1 and SA 220, the Engagement Partner may consult the EQCR during the engagement. However, the reviewer's objectivity must not be compromised. The EQCR must NOT make decisions for the engagement team or participate in audit execution. Where consultations become extensive, another reviewer must be appointed.
Yes. Under SQC 1, the standard applies to all firms for audits, reviews, other assurance, and related services engagements. A compilation engagement under SRS 4410 is a related service, and the firm must comply with its firm-level system of quality control.
Ramanujan's view is NOT in order. Under SQC 1 and SA 230, the assembly of the final engagement file is an administrative process completed on a timely basis after the report has been finalized. SQC 1 establishes that assembly should be completed in not more than 60 days after the date of the auditor's report.
Under SQC 1 and SA 220, the firm must follow its established policies for resolving differences of opinion (e.g. consulting another practitioner, a technical partner panel, or a professional body like ICAI). Strict Mandate: The audit report shall NOT be issued until the difference of opinion is formally resolved to the reviewer's satisfaction!
As per SQC 1 (Para 2.1.3), matters to consider regarding client integrity include:
- Identity and business reputation of principal owners, key management, related parties, and TCWG.
- Nature of the client’s operations and business practices.
- Information concerning the attitude of owners/management towards aggressive interpretation of accounting standards and internal controls.
- Whether the client is aggressively concerned with maintaining the firm's fees as low as possible.
- Indications of an inappropriate limitation in the scope of audit work.
- Indications that the client might be involved in money laundering or criminal activities.
- The reasons for the proposed appointment and non-reappointment of the predecessor firm.
Under SQC 1, policies on withdrawal require addressing:
- Discussion with Management/TCWG: Discuss with appropriate management and TCWG the facts and appropriate remedial action the firm might take.
- Discussing Withdrawal: If withdrawal is determined appropriate, discuss withdrawal and the specific reasons with management and TCWG.
- Legal & Regulatory Duties: Consider whether there is a professional, regulatory, or legal requirement to remain in place or report withdrawal and reasons to regulatory authorities (e.g. Form ADT-3 under Companies Act, 2013).
- Documentation: Thoroughly document significant issues, consultations, conclusions, and the basis for conclusions.
Under SQC 1 and SA 220, PQR Associates must evaluate:
- Tax Search & Seizure: Evaluate risks of material misstatement, unrecorded tax liabilities, and reassess client integrity.
- Political Exposure: Enquire whether company funds are involved in political funding in violation of Companies Act limits.
- Independence Threat: The senior manager providing accounting services to an associate company creates self-review and familiarity threats. Evaluate impact on firm independence.
- Team Competence: Promptly recruit or allocate an experienced automotive audit manager before starting fieldwork.
Aspects evaluated by EQCR under SA 220:
- Engagement team’s evaluation of the firm’s independence.
- Whether appropriate consultation took place on difficult or contentious matters and conclusions reached.
- Whether audit documentation selected for review reflects work performed in relation to significant judgments and supports conclusions.
Resolution of Disagreement: Under SQC 1, the report must NOT be issued until the difference is resolved using firm protocols (consulting another senior partner or ICAI expert panel).
CA Kushal is NOT right in signing without reviewing the work performed.
Under SA 220 and the Code of Ethics, when an auditor relies on work performed by another partner or assistant, he remains personally responsible for the opinion expressed. CA Kushal was entitled to rely on CA Jin's work only if he exercised adequate skill and due care by performing review procedures: verifying compliance with SAs, checking that significant matters were resolved, and ensuring sufficient appropriate evidence supports the report. Signing without review constitutes professional misconduct.
Under SQC 1 and SA 220, CA Rashi must:
- Inquire into the exact reasons for the previous auditor's withdrawal citing scope limitations (red flag for client integrity).
- Evaluate firm capabilities: Pharma R&D involves complex accounting and clinical trials. The firm must engage external technical experts (SA 620).
- Refuse to compromise audit quality for listing deadlines. Commercial speed cannot override professional standards.
- Ensure that a qualified EQCR reviewer is appointed and review is completed before issuing the report.
Under SQC 1, the firm must establish policies to maintain the confidentiality, safe custody, integrity, accessibility, and retrievability of engagement documentation.
- Scattered files prevent demonstrating completeness and compliance with the 60-day assembly deadline.
- Where physical papers exist, they must be scanned, cross-referenced, and indexed to form a unified audit file.
- Failure to document whether working papers are client-provided or auditor-prepared threatens evidence reliability (SA 500).
Gross Non-Compliance with SQC 1:
- Consultation: External technical consultations on contentious variation claims must be thoroughly documented. Lack of documentation violates SQC 1 engagement performance rules.
- Superficial EQCR: For a listed entity, EQCR requires in-depth evaluation of significant judgments (Ind AS 115 and impairment). A summary-level check is inadequate.
- Dating Violation: Signing the audit report before the completion of the EQCR review is a direct and severe breach of SQC 1 and SA 220.
Under SQC 1 (Para 2.1.6), monitoring policies must consider:
- Ongoing evaluation of the system of quality control in light of updated SAs and laws.
- Inspection of at least one completed engagement for each engagement partner per cycle.
- Evaluating the competence of personnel and compliance with professional independence.
- Assessing whether the firm's quality control manual, practice aids, and checklists are up to date.
- Addressing complaints and allegations concerning failure to comply with professional standards.
Under SQC 1, using the same senior personnel over a prolonged period creates a severe familiarity threat.
For audits of listed entities, SQC 1 mandates that the engagement partner be rotated after a pre-defined period, normally not more than 7 years. Client management's desire to retain the partner is irrelevant; professional independence must prevail. The firm must rotate CA X immediately to maintain quality control.
The Engagement Partner's view is erroneous. Under SA 220, for audits of financial statements of listed entities, the EQCR is statutorily required to review the engagement team's evaluation of the firm’s independence in relation to the audit engagement. The EQCR was entirely justified in refusing to sign off until the independence documentation was provided.
This reflects a severe deficiency in "Leadership Responsibilities for Quality within the Firm" (Tone at the Top) under SQC 1.
SQC 1 requires that the firm assign management responsibilities such that commercial considerations do not override quality. Compensation and promotions must demonstrate the firm's overriding commitment to quality, and those assigned operational oversight must possess demonstrated competence and authority.
Under SQC 1 and SA 220, a firm must establish documented policies to provide reasonable assurance of independence.
CA Sunil must immediately obtain written independence confirmations from all audit team members, identify any investments or business ties with Rajni Ltd., and report the lack of documented firm policies to managing partners. Documented policies are vital to provide an objective trail demonstrating compliance with the ICAI Code of Ethics.
The dating of the audit report is defective and violates professional standards.
Under SA 220, the engagement partner shall NOT date the auditor's report until the completion of the engagement quality control review. Furthermore, under SA 700, the report cannot be dated before the auditor has obtained sufficient appropriate audit evidence, which includes the completed EQCR review. Dating the report on 19th May when the EQCR was completed on 22nd May is a serious regulatory non-compliance.
Two critical elements of SQC 1 are violated:
- Acceptance and Continuance of Client Relationships: The firm fails to obtain vital intelligence regarding client integrity, management reputation, and competence prior to accepting referrals.
- Monitoring: The firm fails to conduct ongoing evaluations to update its quality control manuals for revised Standards on Auditing and statutory regulations.
Loyal & Co. must institute formal acceptance checklists and conduct annual monitoring reviews to maintain audit quality.