AUD · Ethics and Professional Responsibilities and General Principles · 6 practice questions
AU-C 210 Audit Acceptance: Preconditions and Scope Limits
Management keeps responsibility for the financial statements and internal control; the auditor determines the necessary audit procedures. Follow the decision tree to check management's acknowledgments, access commitments, and proposed engagement terms before accepting or continuing an audit.
Try one first
Hint
Recall the AU-C 210 preconditions for acceptance, who must acknowledge responsibility for internal control?
Answer D. AU-C 210 states the preconditions for an audit include management's acknowledgment of responsibility for preparing the financial statements and for the design, implementation, and maintenance of internal control relevant to their preparation and fair presentation. If management refuses to accept responsibility for internal control, the auditor ordinarily should not accept the engagement unless law or regulation requires it. Therefore the auditor must decline unless management makes the required acknowledgment (AU-C 210).
Why not A: Tempting because preparing the financial statements and providing access are required preconditions, but insufficient, AU-C 210 also requires management to acknowledge responsibility for internal control relevant to those financial statements. Without that acknowledgment the auditor should not accept the engagement.
Why not B: Tempting because a substantive-only approach reduces reliance on controls, but the acceptance precondition concerns management's acknowledgment of responsibility for internal control regardless of the auditor's planned procedures. Planning substantive procedures does not remove the need for management's acknowledgment.
Why not C: Tempting because engagement letters often describe responsibilities and auditors evaluate controls. However, responsibility for designing, implementing, and maintaining internal control rests with management and cannot be transferred or properly 'shared' with the auditor; an engagement letter cannot substitute for management's required acknowledgment.
Decide it in order
T1West Co. seeks a GAAP audit that no law or regulation requires. Does management acknowledge responsibility for preparing and fairly presenting the financial statements?
YesGo to T2NoDecline unless management provides the acknowledgment. Auditor assistance with adjustments does not remove management's responsibility.T2Does management acknowledge responsibility for designing, implementing, and maintaining internal control relevant to those financial statements?
YesGo to T3NoDecline unless management acknowledges its internal control responsibility. Access to records and additional substantive testing cannot replace that acknowledgment.T3Does management agree to provide all relevant information, requested additional information, and unrestricted access to people the auditor determines necessary?
YesGo to T4NoDecline unless management agrees to the required information and access. Do not postpone this agreement until fieldwork.T4Do the proposed terms describe reasonable assurance without guaranteeing fraud detection or assigning management's duties to the auditor?
YesGo to T5NoRequire revised terms. Decline if management insists on a fraud-detection guarantee or transferring its duties to the auditor.T5Do the terms leave the auditor free to perform procedures needed to obtain sufficient appropriate audit evidence?
YesThe terms pass these checks. Complete the remaining acceptance or continuance procedures; the same preconditions apply to an existing client.NoDo not accept on those terms. Require removal of the restriction; a management-imposed limitation expected to require a disclaimer calls for declining.
Key points
- Remember: Full access does not cure management's refusal to accept responsibility for internal control.
- Outsourcing bookkeeping does not transfer management's internal control responsibility to the service organization.
- Auditor-proposed adjustments do not transfer responsibility for the financial statements to the auditor.
- A year-end representation letter cannot replace the acknowledgment required before acceptance.
How the exam traps you
- Accept without management's internal control acknowledgment because the audit will use primarily substantive procedures. Management must acknowledge its responsibility for relevant internal control regardless of the planned audit approach.
- Accept a known, pervasive scope limitation because the lender will accept a disclaimer. Decline unless the restriction is removed or law or regulation requires acceptance.
- Let management exclude fraud or related-party procedures to reduce fees. Reject terms that prohibit required procedures. Extra testing elsewhere does not cure the exclusion.
Question 2
Hint
Which event triggers the Code's required assessment: the client's request, the routine continuance review, or actually starting to perform the work?
Answer D. The AICPA Code requires a prospective assessment when a client requests a new or changed service. Because Bay's request could place the firm in a management role (making override decisions), North & Cole must evaluate whether performing the work would be consistent with its professional responsibilities and decline or impose safeguards before accepting the engagement.
Why not A: Tempting because firms do periodic continuance reviews that consider acceptability and independence; however, a specific request to change the nature or scope of services triggers a required prospective evaluation at the time of the request, so waiting until year-end would be too late.
Why not B: Tempting because documented management oversight can mitigate role concerns, yet wrong because such documentation cannot retroactively justify accepting a role; the firm must determine acceptability before agreeing to perform the expanded services.
Why not C: Tempting because the most visible consequences occur when the firm actually performs the work, but incorrect because the Code requires the firm to assess the acceptability of the proposed services when the client requests them, delaying risks inadvertently assuming management responsibilities.
Question 3
Hint
Separate ordinary audit limitations (sampling, reasonable assurance) from any contractual term that would bar procedures to detect undisclosed related‑party relationships or transactions.
Answer D. Terms (1), (2), and (4) describe acceptable aspects of a GAAS audit (sampling, considering internal control for planning without issuing a separate internal-control opinion, and seeking reasonable, rather than absolute, assurance). Term (3) would contractually prohibit the auditor from designing or performing procedures specifically directed at identifying or investigating undisclosed related-party relationships or transactions. That prohibition would limit the auditor's ability to obtain sufficient appropriate audit evidence; therefore, the auditor should decline the engagement unless the term is removed or revised.
Why not A: This is tempting because three terms reflect ordinary audit concepts and management has primary responsibility for identifying related parties. It is incorrect because the related-party term would eliminate the auditor's ability to perform procedures specifically directed at undisclosed related-party matters, a scope restriction inconsistent with the auditor's responsibility to obtain sufficient appropriate audit evidence.
Why not B: This distractor is plausible since written representations about related parties are common and required. It is incorrect because representations do not substitute for the auditor's obligation to obtain sufficient appropriate audit evidence and cannot cure an engagement term that contractually bars procedures to identify or investigate undisclosed related-party matters.
Why not C: This appeals to those who think additional work elsewhere can compensate. It is incorrect because the term would prevent procedures specifically targeted at identifying or investigating undisclosed related-party matters, a direct scope restriction that cannot be offset simply by unrelated additional testing.
Question 4
Hint
Focus on who determines the audit procedures and how a client-imposed limitation affects acceptance when the affected area is material and likely pervasive.
Answer A. The auditor, not management, determines the procedures necessary to obtain sufficient appropriate audit evidence. A pre-acceptance scope limitation imposed by management that is expected to lead to a disclaimer of opinion generally means the auditor should not accept the engagement unless required by law or regulation. Because inventory is a major balance (about 55% of assets) and affects cost of sales, the inability to test it would likely be pervasive and prevent obtaining sufficient appropriate evidence.
Why not B: Modifying the opinion is appropriate when a limitation arises during the engagement and the auditor accepts the risk; however, a limitation imposed before acceptance that is severe enough to likely result in a disclaimer ordinarily leads the auditor to decline the engagement rather than accept it and address the problem later.
Why not C: This is tempting because engagement letters document agreed terms, but management cannot impose a restriction that prevents the auditor from performing necessary procedures and still expect a standard audit engagement to proceed. Documentation in an engagement letter does not cure an unacceptable, material scope limitation.
Why not D: Written representations are required but they are not a substitute for substantive evidence on a material and pervasive balance. A representation alone would not provide sufficient appropriate evidence about the existence and quantities of inventory.
Question 5
Hint
Distinguish what level of assurance an audit actually provides (reasonable, not absolute) from who determines the nature, timing, and extent of audit procedures (auditor judgment, not management).
Answer D. GAAS provides reasonable assurance, not a guarantee that all material fraud will be detected; promising detection of all material fraud is an overstatement. Management may not unilaterally impose restrictions that prevent the auditor from performing procedures necessary to obtain sufficient appropriate audit evidence; internal legal summaries and written representations do not substitute for required procedures such as inquiry of outside counsel or testing at a component that may be qualitatively significant. If such restrictions persist, the auditor may need to decline or withdraw from the engagement or modify the opinion (for example, issue a disclaimer or qualified opinion), depending on the circumstances.
Why not A: Tempting because audits provide strong (but not absolute) assurance and management often seeks practical limits; it is wrong because GAAS provides reasonable, not absolute, assurance and management cannot impose unilateral scope limits that prevent the auditor from obtaining sufficient appropriate evidence.
Why not B: Attractive because written representations are required and relate to these matters, but incorrect because representations are corroborative audit evidence and do not replace procedures the auditor determines are necessary to obtain sufficient appropriate evidence; they do not cure management-imposed restrictions.
Why not C: Plausible since candidates may focus on quantitative materiality and disclosure, but incorrect because disclosure alone does not eliminate the auditor's responsibility to obtain evidence about litigation, and a component small by assets can be qualitatively significant (e.g., if it executed most related‑party sales); such restrictions can still preclude sufficient appropriate evidence.
Question 6
Hint
Focus on AU-C 210 acceptance preconditions: has management agreed up front to provide all information and access to persons the auditor needs? Also ask whether any law or regulation compels the audit.
Answer A. AU-C 210 requires the auditor to determine that preconditions for an audit are present before acceptance, including management's agreement to provide the auditor with all information and access to persons. Management's refusal to agree to unrestricted access at the acceptance stage means that a precondition is not met. Because no law or regulation requires the audit, the narrow exception for accepting an engagement despite missing preconditions does not apply; therefore the auditor should not accept.
Why not B: Tempting because assertions of privilege are a recognized legal limitation and privilege logs/alternative procedures can help the auditor assess impact; however, the scenario states management refuses to agree to unrestricted access at acceptance. An engagement letter that preserves a unilateral right to withhold material without the agreed access AU-C 210 requires does not satisfy the preconditions for acceptance.
Why not C: Tempting because access issues sometimes evolve into scope limitations discovered during fieldwork, but AU-C 210 requires management's agreement to provide access before acceptance; deferring resolution is inappropriate when management refuses access at the acceptance stage.
Why not D: Tempting because auditors sometimes perform alternative procedures or disclaim when scope limitations arise during fieldwork, but planning to rely on future workarounds does not cure the absence of required preconditions at acceptance; acceptance is inappropriate unless preconditions are present or a law/regulation compels the audit.
Common questions
What are the audit preconditions under AU-C 210?
The financial reporting framework must be acceptable. Management must acknowledge responsibility for preparing the financial statements and relevant internal control, and agree to provide relevant information, requested additional information, and unrestricted access to necessary personnel.
Can an auditor accept an audit with a management-imposed scope limitation?
If a limitation imposed before acceptance is expected to require a disclaimer of opinion, decline unless law or regulation requires acceptance. A lender's willingness to accept a disclaimer does not change that rule.
Can an audit engagement letter guarantee detection of all fraud?
No. An audit provides reasonable assurance that the financial statements are free of material misstatement, whether caused by fraud or error. Reject wording that guarantees detection of all fraud or all fraud above a stated amount.
Practice AUD like the real exam
The free ChatCPA simulator: real exam layout, timed testlets, starting with a question on this topic. No account needed to start.
Open the free simulator →More on Nature and Scope
Questions from the ChatCPA bank of 17,658 CPA exam questions, each with a written reason for every wrong answer. ChatCPA is built by Nicholas Miller, CPA (Oregon #14907). How these pages are made. Spot an error? Tell us.