Quality Control (SQC 1 & SA 220)
1. The 6 Elements of Quality Control (Mnemonic: HEAL ME)
Under SQC 1 (Firm-level) and SA 220 (Engagement-level), every audit firm must establish a robust system of quality control across six foundational pillars:
| Element (HEAL ME) | Core Requirement & Mechanism | Key Exam Focus |
|---|---|---|
| H - Human Resources | Capabilities, competence, recruitment, professional development, performance evaluation, and workload allocation. | Adequacy of team training and technical competencies for complex sectors. |
| E - Ethical Requirements | Integrity, Objectivity, Professional Competence, Confidentiality, and Independence (Code of Ethics). | Annual written confirmation of independence from all firm personnel. |
| A - Acceptance & Continuance | Evaluation of client integrity, firm competence, ability to comply with ethical requirements, and conflicts of interest. | Withdrawal procedures when integrity of management is compromised. |
| L - Leadership Responsibilities | CEO / Managing Partner assumes ultimate responsibility for firm quality culture over commercial considerations. | Quality must not be compromised for commercial profitability. |
| M - Monitoring | Ongoing evaluation of firm QC policies, periodic inspection of completed files (at least 1 file per partner annually). | Independence of the monitoring team from inspected engagements. |
| E - Engagement Performance | Direction, supervision, review of work, consultation on difficult matters, and dispute resolution mechanisms. | Differences of opinion must be resolved before report issuance. |
2. Leadership Responsibility vs. Engagement Partner (EP) Duties
SQC 1: Applies to the firm as a whole across all assurance services. The Chief Executive / Managing Board bears ultimate responsibility.
SA 220: Applies specifically to individual audit engagements. The Engagement Partner (EP) takes explicit responsibility for overall audit quality, team competence, direction, supervision, and issuing an appropriate report.
- EP Responsibilities on Audit Engagements:
- Confirming the team has adhered to independence and ethical norms.
- Ensuring consultations are documented and agreed conclusions implemented.
- Conducting reviews of audit documentation and critical risk areas *prior* to report signing.
3. Engagement Quality Control Review (EQCR) Criteria
| Parameter | Statutory Rule & Quality Control Mandate |
|---|---|
| Mandatory Applicability | Compulsory for audits of financial statements of all listed entities. For unlisted entities, firm establishes criteria based on public interest, size, risk. |
| Timing of Review | Must be completed on or before the date of the auditor's report. Report cannot be dated or signed until EQCR is finalized. |
| Eligibility of Reviewer | Must be an independent partner, external consultant, or firm personnel with required technical competence; cannot be selected by the Engagement Partner. |
| Objectivity Safeguards | Reviewer must NOT participate in performance of engagement, make decisions for team, or have conflicting interests. |
4. File Assembly (60 Days) & Retention (10 Years) Rules
1. Assembly of Final Audit File: Under SQC 1 and SA 230, the administrative process of assembling the final audit file must be completed within ordinarily not more than 60 days after the date of the auditor's report.
2. Retention Period: Under SQC 1, the firm must retain engagement documentation for a period of not less than 10 years from the date of the auditor's report (or group auditor's report).
Note: Companies Act, 2013 Section 128 requires maintenance of books for 8 years; SQC 1's 10-year rule is stricter and prevails for audit firms!
- Changes During Assembly: Only administrative changes (discarding superseded drafts, sorting cross-references, signing checklists) are permitted. No new audit procedures or modifications to conclusions!
- Changes After Assembly: If exceptional circumstances arise necessitating new procedures after assembly, document: (a) circumstances, (b) new procedures, (c) who made changes and when reviewed.
5. High-Frequency Exam Traps
- Trap 1 (Consultation vs EQCR): If an EQCR reviewer is consulted on a significant, complex technical issue during the audit, their objectivity is impaired! Another qualified reviewer must be appointed for EQCR.
- Trap 2 (Report Date): The auditor's report CANNOT be dated prior to the completion of the EQCR review. Dating the report earlier constitutes severe professional negligence.
- Trap 3 (Ownership of Audit Documentation): Under SQC 1, audit working papers are the exclusive property of the auditor/firm. The client has no legal right to inspect working papers, except at the auditor's discretion provided it does not prejudice the audit.