ISA 315 (Revised)
The objectives of the project are to:
(a) Propose revisions to ISA 315 (Revised), establishing more robust requirements and appropriately detailed guidance to drive auditors to perform appropriate risk assessment procedures in a manner commensurate with the size and nature of he entity. It is anticipated that these revisions will focus on enhancing the auditor’s approach to understanding the entity, its environment (including its internal control) and risk assessment activities in light of the changing environment.
(b) Determine whether and how ISA 315 (Revised), in its organization and structure, can be modified to promote a more effective risk assessment.
(c) Propose consequential amendments to other standards that may be necessary as a result of revisions to ISA 315 (Revised) (such as ISA 220, ISA 240, ISA 330 ISA 540 and ISA 600).
(d) Determine what non-authoritative guidance and support tools should be developed by the IAASB, or others, to supplement revisions to ISA 315 (Revised) thereby aiding its effective implementation. Non-authoritative guidance and support tools may include International Auditing Practice Notes (IAPNs), Staff publications, project updates, or illustrations / examples to provide assistance on how ISA 315 (Revised) could be applied, in particular to address concerns by auditors of SMEs.
In early 2016 the IAASB established a working group (WG) to explore issues with respect to ISA 315 (Revised). The WG commenced its work in early March 2016, which included consideration of the results of the IAASB's Post-Implementation Review of the Clarified ISAs and outreach activities to identify issues involving ISA 315 (Revised) to further inform its preliminary thinking. These outreach activities included leadership of the WG and staff discussions with representatives of the International Federation of Accountants (IFAC) Small and Medium Practices (SMP) Committee, the International Forum of Independent Audit Regulators’ (IFIAR) Standards Coordination Working Group (SCWG) and the Institute of Chartered Accountants of England and Wales (ICAEW). The consideration of the results of the IAASB's Post-Implementation Review of the Clarified ISA, the results of outreach activities, the input received at the March 2016 and June 2016 IAASB meetings and the March 2016 IAASB Consultative Advisory Group (CAG) meeting, and the WG’s discussions to date, have informed the WG’s thinking through the information gathering stage of the project.
The IAASB approved a project proposal to revise ISA 315 (Revised). Consistent with the Board’s discussions at its September 2016 meeting, the IAASB believes a revision of ISA 315 (Revised) is necessary to revise and enhance specific requirements and revise and develop application material, and develop other non-authoritative guidance, to respond to the issues and concerns raised. Such revisions and enhancements will address matters such as the need for ISA 315 (Revised) to:
(a) Not only reflect the current business and audit environment, but also be sufficiently adaptable to deal with the rapidly changing business and audit environment (in particular the increased use of technology);
(b) Be more effectively applied by auditors in the private and public sectors applying the standard in audits of entities of various sizes;
(c) Set an enhanced foundation for other standards that have more specific risk assessment requirements (such as ISA 540 and ISA 600); and
(d) Enhance the application of professional skepticism by auditors in framing their judgments when performing risk assessment procedures.
While revisions to ISA 315 (Revised) are clearly necessary, feedback has also indicated that more support (such as the development of non-authoritative guidance) would be helpful to achieve the intended objectives of this project. The IAASB will firstly seek to revise and enhance the requirements so that they are robust, yet sufficiently flexible, to drive appropriate risk assessments. The IAASB will also revise and develop appropriate application and other explanatory material to be included in the revised standard. The IAASB recognizes that more specific guidance in particular circumstances (that would not be appropriate to include in a standard intended to apply to audits of all sizes) may be necessary (to be developed by the IAASB or by others (such as national auditing standard setters)). This could include, for example, guidance on using data analytics in performing risk assessments and illustrative examples of how the risk-based approach to the ISAs could be applied to audits of smaller entities. The development of additional guidance is expected to help with the implementation of the standard and will therefore help drive audit quality, which is in the public interest.
MEETING HIGHLIGHTS - DECEMBER 2017
The Board discussed a first read of proposed changes to the requirements and application material of ISA 315 (Revised). The Board broadly supported the proposals, but asked for further consideration by the Task Force on various matters, including aspects of the definitions of ‘controls’ and ‘relevant assertions,’ and regarding the introduction of the term ‘business model’ and its interactions with current requirements of the standard. The Board also questioned the use of ‘sufficient and appropriate’ as it relates to potential confusion with “sufficient appropriate audit evidence” and whether a change may have unintended consequences if this concept were to be introduced as proposed. The Board encouraged further consideration about how fraud can be included as a qualitative inherent risk factor, taking into account how this would link to the fraud risk factors in ISA 240. The Board continued to be supportive of the introduction of “spectrum of risk” but thought the spectrum of risk could be better emphasized and explained earlier in the standard.
The Board recognized the need for further consideration about scalability, but agreed that scalability should be presented through the requirements and application material in context of the auditor’s consideration of risk thereby eliminating the need for “considerations for smaller entities.”
The Task Force will continue to progress the proposed changes to the standard for a second read of an exposure draft in March 2018.