At 9308
At 9308
Manila
PSA 240
THE AUDITOR’S RESPONSIBILITIES RELATING TO FRAUD IN AN AUDIT OF
FINANCIAL STATEMENTS
FRAUD refers to an intentional act by one or more individuals among management, those
charged with governance, employees or third parties, involving the use of deception to obtain an
unjust or illegal advantage.
Fraud involves:
• incentive or pressure to commit fraud;
• a perceived opportunity to do so; and
• some rationalization of the act.
Management fraud – fraud involving one or more members of management or those charged
with governance.
Employee fraud – fraud involving only employees of the entity.
(In either case, there may be collusion within the entity or with third parties outside of the entity.)
TWO TYPES OF FRAUD that are relevant to the auditor – misstatements resulting from:
2. Misappropriation of assets
• Involves the theft of an entity’s assets and is often perpetrated by employees in relatively
small and immaterial amounts.
• Can also involve management who are usually more able to disguise or conceal
misappropriations in ways that are difficult to detect.
• Often accompanied by false or misleading records or documents in order to conceal the
fact that the assets are missing or have been pledged without proper authorization.
Page 1 of 11 Pages
CPAR - MANILA AT-9308
1. The primary responsibility for the prevention and detection of fraud rests with both those
charged with governance of the entity and with management.
2. It is important that management, with the oversight of those charged with governance, place
a strong emphasis on fraud prevention, which may reduce opportunities for fraud to take
place, and fraud deterrence, which could persuade individuals not to commit fraud because
of the likelihood of detection and punishment. This involves a commitment to creating a
culture of honesty and ethical behavior which can be reinforced by an active oversight by
those charged with governance.
3. In exercising oversight responsibility, those charged with governance consider the potential
for override of controls or other inappropriate influence over the financial reporting process,
such as efforts by management to manage earnings in order to influence the perceptions of
analysts as to the entity’s performance and profitability.
1. An auditor conducting an audit in accordance with PSAs obtains reasonable assurance that
the financial statements taken as a whole are free from material misstatement, whether
caused by fraud or error.
2. Owing to the inherent limitations of an audit, there is an unavoidable risk that some material
misstatements of the financial statements will not be detected, even though the audit is
properly planned and performed in accordance with PSAs.
3. The risk of not detecting a material misstatement resulting from fraud is higher than the risk
of not detecting a material misstatement resulting from error because fraud may involve
sophisticated and carefully organized schemes designed to conceal it, such as:
• Forgery;
• Deliberate failure to record transactions; or
• Intentional misrepresentations being made to the auditor.
4. The risk of the auditor not detecting a material misstatement resulting from management
fraud is greater than for employee fraud, because management is frequently in a position to
directly or indirectly manipulate accounting records and present fraudulent financial
information or override control procedures designed to prevent similar frauds by other
employees.
5. When obtaining reasonable assurance, the auditor is responsible for maintaining an attitude
of professional skepticism throughout the audit, considering the potential for management
override of controls and recognizing the fact that audit procedures that are effective for
detecting error may not be effective in detecting fraud.
6. PSA 315 requires discussion among the engagement team members and a determination by
the engagement partner of which matters are to be communicated to those team members
not involved in the discussion. This discussion shall place particular emphasis on how and
where the entity’s financial statements may be susceptible to material misstatement due to
fraud, including how fraud might occur.
Page 2 of 11 Pages
CPAR - MANILA AT-9308
2. The auditor shall make inquiries of management, and others within the entity as appropriate,
to determine whether they have knowledge of any actual, suspected or alleged fraud affecting
the entity.
3. The auditor shall obtain an understanding of how those charged with governance exercise
oversight of management’s process for identifying and responding to the risks of fraud in the
entity and the internal control that management has established to mitigate these risks.
4. The auditor shall evaluate whether the information obtained from the other risk assessment
procedures and related activities performed indicates that one or more fraud risk factors are
present.
1. The auditor shall determine overall responses to address the assessed risks of material
misstatement due to fraud at the financial statement level and shall design and perform
further audit procedures whose nature, timing and extent are responsive to the assessed risks
at the assertion level.
2. In determining overall responses to address the risks of material misstatement due to fraud
at the financial statement level the auditor shall:
• Assign and supervise personnel taking account of the knowledge, skill and ability of the
individuals to be given significant engagement responsibilities and the auditor’s assessment of
the risks of material misstatement due to fraud for the engagement;
• Evaluate whether the selection and application of accounting policies by the entity, particularly
those related to subjective measurements and complex transactions, may be indicative of
fraudulent financial reporting resulting from management’s effort to manage earnings; and
• Incorporate an element of unpredictability in the selection of the nature, timing and extent of
audit procedures.
3. The auditor’s responses may include changing the nature, timing, and extent of audit
procedures in the following ways:
a) The nature of audit procedures to be performed may need to be changed to obtain
audit evidence that is more reliable and relevant to obtain additional corroborative
information.
b) The timing of substantive procedures may need to be modified. The auditor may
conclude that performing substantive testing at or near the period end better
addresses an assessed risk of material misstatement due to fraud.
c) The extent of the procedures applied reflects the assessment of the risks of material
misstatement due to fraud. For example, increasing sample sizes or performing
analytical procedures at a more detailed level may be appropriate.
Page 3 of 11 Pages
CPAR - MANILA AT-9308
4. To respond to the risk of management override of controls, the auditor shall design and
perform audit procedures to:
a) Test the appropriateness of journal entries recorded in the general ledger and other
adjustments made in the preparation of financial statements;
b) Review accounting estimates for biases that could result in material misstatement due to
fraud; and
c) Obtain an understanding of the business rationale of significant transactions that the
auditor becomes aware of that are outside of the normal course of business for the entity,
or that otherwise appear to be unusual given the auditor’s understanding of the entity
and its environment.
1. The auditor shall evaluate whether analytical procedures that are performed when forming
an overall conclusion as to whether the financial statements as a whole are consistent with
the auditor’s understanding of the entity and its environment indicate a previously
unrecognized risk of material misstatement due to fraud.
2. When the auditor identifies a misstatement, the auditor shall evaluate whether such a
misstatement is indicative of fraud. If there is such an indication, the auditor shall evaluate
the implications of the misstatement in relation to other aspects of the audit, particularly the
reliability of management’s representations, recognizing that an instance of fraud is unlikely
to be an isolated occurrence.
3. If the auditor identifies a misstatement, whether material or not, and the auditor has reason
to believe that it is or may be the result of fraud and that management (in particular, senior
management) is involved, the auditor shall reevaluate the assessment of the risks of material
misstatement due to fraud and its resulting impact on the nature, timing and extent of audit
procedures to respond to the assessed risks.
4. When the auditor confirms that, or is unable to conclude whether, the financial statements
are materially misstated as a result of fraud, the auditor shall evaluate the implications for
the audit.
Management Representations
1. If the auditor has identified a fraud or has obtained information that indicates that a fraud
may exist, the auditor shall communicate these matters on a timely basis to the appropriate
level of management in order to inform those with primary responsibility for the prevention
and detection of fraud of matters relevant to their responsibilities.
Page 4 of 11 Pages
CPAR - MANILA AT-9308
2. If the auditor has identified or suspects fraud involving management, employees who have
significant roles in internal control, or others where the fraud results in a material
misstatement in the financial statements, the auditor shall communicate these matters to
those charged with governance on a timely basis.
3. If the auditor has identified or suspects a fraud, the auditor shall determine whether there is
a responsibility to report the occurrence or suspicion to a party outside the entity. Although
the auditor’s professional duty to maintain the confidentiality of client information may
preclude such reporting, the auditor’s legal responsibilities may override the duty of
confidentiality in some circumstances.
1. If, as a result of a misstatement resulting from fraud or suspected fraud, the auditor
encounters exceptional circumstances that bring into question the auditor’s ability to continue
performing the audit, the auditor shall:
a) Determine the professional and legal responsibilities applicable in the circumstances,
including whether there is a requirement for the auditor to report to the person or persons
who made the audit appointment or, in some cases, to regulatory authorities;
b) Consider whether it is appropriate to withdraw from the audit engagement, where
withdrawal from the engagement is legally permitted; and
c) If the auditor withdraws:
i. Discuss with the appropriate level of management and those charged with governance
the auditor’s withdrawal from the engagement and the reasons for the withdrawal;
and
ii. Determine whether there is a professional or legal requirement to report to the person
or persons who made the audit appointment or, in some cases, to regulatory
authorities, the auditor’s withdrawal from the engagement and the reasons for the
withdrawal.
Documentation
1. The documentation of the auditor’s understanding of the entity and its environment and the
assessment of the risks of material misstatement required by PSA 315 shall include:
a) The significant decisions reached during the discussion among the engagement team
regarding the susceptibility of the entity’s financial statements to material misstatement
due to fraud; and
b) The identified and assessed risks of material misstatement due to fraud at the financial
statement level and at the assertion level.
2. The auditor’s documentation of the responses to the assessed risks of material misstatement
required by PSA 330 shall include:
a) The overall responses to the assessed risks of material misstatement due to fraud at the
financial statement level and the nature, timing and extent of audit procedures, and the
linkage of those procedures with the assessed risks of material misstatement due to fraud
at the assertion level; and
b) The results of the audit procedures, including those designed to address the risk of
management override of controls.
3. The auditor shall document the communications about fraud made to management, those
charged with governance, regulators and others.
4. When the auditor has concluded that the presumption that there is a risk of material
misstatement due to fraud related to revenue recognition is not applicable in the
circumstances of the engagement, the auditor shall document the reasons for that conclusion.
Page 5 of 11 Pages
CPAR - MANILA AT-9308
PSA 250
CONSIDERATION OF LAWS AND REGULATIONS IN AN AUDIT OF
FINANCIAL STATEMENTS
2. Noncompliance does not include personal misconduct (unrelated to the business activities of
the entity) by those charged with governance, management or employees of the entity.
3. As part of obtaining an understanding of the entity and its environment in accordance with
PSA 315 (Redrafted), the auditor shall obtain a general understanding of:
a) The legal and regulatory framework applicable to the entity and the industry or sector in
which the entity operates; and
b) How the entity is complying with that framework.
4. The auditor shall obtain sufficient appropriate audit evidence regarding compliance with the
provisions of those laws and regulations generally recognized to have a direct effect on the
determination of material amounts and disclosures in the financial statements.
5. The auditor shall perform the following audit procedures to help identify instances of
noncompliance with other laws and regulations that may have a material effect on the
financial statements:
a. Inquiring of management and, where appropriate, those charged with governance, as to
whether the entity is in compliance with such laws and regulations; and
b. Inspecting correspondence, if any, with the relevant licensing or regulatory authorities.
6. During the audit, the auditor shall remain alert to the possibility that other audit procedures
applied may bring instances of noncompliance or suspected noncompliance with laws and
regulations to the auditor’s attention.
7. The auditor shall request management and, where appropriate, those charged with
governance to provide written representations that all known instances of noncompliance
or suspected noncompliance with laws and regulations whose effects should be considered
when preparing financial statements have been disclosed to the auditor.
2. The responsibility for the prevention and detection of noncompliance rests with management.
3. The following policies and procedures, among others, may assist management in discharging
its responsibilities for the prevention and detection of noncompliance:
• Monitoring legal requirements and ensuring that operating procedures are designed
to meet these requirements.
• Instituting and operating appropriate systems of internal control.
• Developing, publicizing and following a Code of Conduct.
• Ensuring employees are properly trained and understand the Code of Conduct.
• Monitoring compliance with the Code of Conduct and acting appropriately to discipline
employees who fail to comply with it.
• Engaging legal advisors to assist in monitoring legal requirements.
• Maintaining a register of significant laws with which the entity has to comply within its
particular industry and a record of complaints.
Page 6 of 11 Pages
CPAR - MANILA AT-9308
2. If the auditor suspects there may be noncompliance, the auditor shall discuss the matter with
management and, where appropriate, those charged with governance.
3. If sufficient information about suspected noncompliance cannot be obtained, the auditor shall
evaluate the effect of the lack of sufficient appropriate audit evidence on the auditor’s report.
4. The auditor shall evaluate the implications of noncompliance in relation to other aspects of
the audit, including the auditor’s risk assessment and the reliability of written representations,
and take appropriate action.
1. The auditor shall communicate with those charged with governance matters involving
noncompliance with laws and regulations that come to the auditor’s attention during the
course of the audit, other than when the matters are clearly inconsequential.
2. If in the auditor’s judgment the noncompliance is believed to be intentional and material, the
auditor shall communicate the matter to those charged with governance as soon as
practicable.
3. If the auditor suspects that management or those charged with governance are involved in
noncompliance, the auditor shall communicate the matter to the next higher level of authority
at the entity, if it exists, such as an audit committee or supervisory board.
4. If the auditor concludes that the noncompliance has a material effect on the financial
statement, and has not been properly reflected in the financial statements, the auditor shall
express a qualified or an adverse opinion on the financial statements.
5. If the auditor is precluded by management or those charged with governance from obtaining
sufficient appropriate audit evidence to evaluate whether noncompliance that may be material
to the financial statements, has, is likely to have, occurred, the auditor shall express a qualified
opinion or disclaim an opinion on the financial statements on the basis of a limitation on the
scope of the audit.
Documentation
The auditor shall document identified or suspected noncompliance with laws and regulations and
the results of discussion with management and, where applicable, those charged with governance
and other parties outside the entity.
PSA 260
COMMUNICATION WITH THOSE CHARGED WITH GOVERNANCE
Page 7 of 11 Pages
CPAR - MANILA AT-9308
2. Management pertains to person(s) with executive responsibility for the conduct of the
entity’s operations. For some entities in some jurisdictions, management includes some or all
of those charged with governance, for example, executive members of a governance board,
or an owner-manager. Management is responsible for the preparation of the financial
statements, overseen by those charged with governance, and in some cases, management is
also responsible for approving the entity’s financial statements (in other cases those charged
with governance have this responsibility).
Matters to be communicated
1. The auditor shall communicate with those charged with governance the form, timing and
expected general content of communications.
2. Forms of communication. The auditor shall communicate in writing with those charged
with governance regarding significant findings from the audit when, in the auditor’s
professional judgment, oral communication would not be adequate. Written communications
need not include all matters that arose during the course of the audit.
3. Timing of communication. The auditor shall communicate with those charged with
governance on a timely basis.
4. Adequacy of the Communication Process. The auditor shall evaluate whether the two-
way communication between the auditor and those charged with governance has been
adequate for the purpose of the audit. If it has not, the auditor shall evaluate the effect, if
any, on the auditor’s assessment of the risks of material misstatement and ability to obtain
sufficient appropriate audit evidence, and shall take appropriate action.
Documentation
1. Where matters required by this PSA to be communicated are communicated orally, the auditor
shall document them, and when and to whom they were communicated. Where matters have
been communicated in writing, the auditor shall retain a copy of the communication as part
of the audit documentation.
Page 8 of 11 Pages
CPAR - MANILA AT-9308
1. Which of the following best defines fraud in a financial statement auditing context?
A. Fraud is an unintentional misstatement of the financial statements.
B. Fraud is an intentional misstatement of the financial statements.
C. Fraud is either an intentional or unintentional misstatement of the financial statements,
depending on materiality.
D. Fraud is either an intentional or unintentional misstatement of the financial statements,
depending on consistency.
2. Fraud involving one or more members of management or those charged with governance
is referred to as
A. Management fraud. C. Fraudulent financial reporting.
B. Employee fraud. D. Misappropriation of assets.
4. Which of the following conditions are generally present when misstatements due to fraud
occur?
I. Incentive or pressure.
II. Perceived opportunity.
III. Rationalization.
A. I and II only. C. I and III only.
B. II and III only. D. I, II, and III.
6. The following are examples of fraud risk factors relating to misstatements arising from
misappropriation of assets, except
A. Recurring negative cash flows from operating activities while reporting earnings and
earnings growth.
B. Inadequate physical safeguards over cash, investments, inventory, or fixed assets.
C. Inadequate segregation of duties or independent checks.
D. Adverse relationship between the entity and employees with access to cash or other
assets susceptible to theft created by recent changes made to employee compensation
or benefit plans.
Page 9 of 11 Pages
CPAR - MANILA AT-9308
10. Which action regarding fraud is an activity related to performance of risk assessment
procedures?
A. Consider whether estimates prepared and recorded by management could indicate a
bias in reporting.
B. Consider the characteristics of journal entries, particularly those made near year end.
C. Document the results of procedures used to address the risk of fraud.
D. Discussions among the engagement team members regarding the risks of material
misstatement due to fraud.
11. When the auditor identifies a misstatement in the financial statements, the auditor should
consider whether such a misstatement may be indicative of fraud and if there is such an
indication, the auditor should
A. Consider the implications of the misstatement in relation to other aspects of the audit.
B. Withdraw from the engagement.
C. Communicate the information to regulatory and enforcement authorities.
D. Report the matter to the person or persons who made the audit appointment.
12. As used in PSA 250 (Consideration of Laws and Regulations in an Audit of Financial
Statements), this term refers to acts of omission or commission by the entity being audited,
either intentional or unintentional, which are contrary to prevailing laws or regulations.
A. Noncompliance
B. Illegal acts
C. Erotic acts
D. Unforgivable acts
13. In order to plan the audit, the auditor should obtain a general understanding of the legal
and regulatory framework applicable to the entity and the industry and how the entity is
complying with that framework. To obtain this understanding, the following procedures
would ordinarily be considered by the auditor, except
A. Use the existing understanding of the entity’s industry, regulatory, and other external
factors.
B. Inquire of management concerning the entity’s policies and procedures regarding
compliance with laws and regulations.
C. Inquire of management as to the laws and regulations that may be expected to have a
fundamental effect on the operations of the entity.
D. Inspect correspondence with relevant licensing or regulatory authorities.
14. If the auditor concludes that the noncompliance has a material effect on the financial
statements, and has not been properly reflected in the financial statements, the auditor
should express
A. A qualified or an adverse opinion.
B. A qualified opinion or a disclaimer of opinion.
C. A disclaimer of opinion.
D. A qualified opinion.
Page 10 of 11 Pages
CPAR - MANILA AT-9308
15. If the auditor is precluded by the entity from obtaining sufficient appropriate audit evidence
to evaluate whether noncompliance that may be material to the financial statements, has,
or is likely to have, occurred, the auditor should express
A. A qualified opinion or an adverse opinion.
B. A qualified opinion or a disclaimer of opinion.
C. An adverse opinion.
D. An adverse opinion or a disclaimer of opinion.
16. Under PSA 260, this term is used to describe the role of persons entrusted with the
supervision, control, and direction of an entity.
A. Oversight.
B. Governance.
C. Direction.
D. Control.
17. According to PSA 260, those matters that arise from the audit of financial statements and,
in the opinion of the auditor, are both important and relevant to those charged with
governance in overseeing the financial reporting and disclosure process are called
A. Audit matters of governance interest.
B. Significant audit matters.
C. Auditor’s findings.
D. Material misstatements in the financial statements.
18. Which of the following statements relating to communication of audit matters of governance
interest is incorrect?
A. Audit matters of governance interest include only those matters that have come to the
attention of the auditor as a result of the performance of the audit.
B. In an audit in accordance with PSAs, the auditor should design audit procedures for the
specific purpose of identifying matters of governance interest.
C. The auditor should identify relevant persons who are charged with governance and with
whom audit matters of governance interest are to be communicated.
D. The auditor’s communications with those charged with governance may be made orally
or in writing.
19. Audit matters of governance interest to be communicated to those charged with governance
ordinarily include
A. Audit adjustments, whether or not recorded by the entity that have, or could have, a
material effect on its financial statements.
B. Expected modifications to the auditor’s report.
C. Material uncertainties related to events and conditions that may cast significant doubt
on the entity’s ability to continue as a going concern.
D. All of the above.
20. PSA 260 requires the auditor to determine the relevant persons who are charged with
governance and with whom audit matters of governance interest are communicated. For
corporations covered by the SEC Code of Corporate Governance, which of the following is
primarily responsible for corporate governance?
A. President.
B. Controller.
C. Board of Directors.
D. Management.
---END---
Page 11 of 11 Pages