PracticeAUDFree practice exam

AUD · Ethics and Professional Responsibilities and General Principles · 6 practice questions

AU-C 210 Audit Acceptance: Preconditions and Scope Limits

Management keeps responsibility for the financial statements and internal control; the auditor determines the necessary audit procedures. Follow the decision tree to check management's acknowledgments, access commitments, and proposed engagement terms before accepting or continuing an audit.

The ruleManagement must acknowledge its financial statement and internal control responsibilities and provide required information and access. Unless law or regulation requires acceptance, reject terms that shift those responsibilities, promise absolute assurance, or prohibit necessary audit procedures.

Try one first

A CPA is negotiating a first-year audit engagement for a nonissuer that prepares financial statements under U.S. GAAP. Management agrees that the engagement letter may state that management is responsible for preparing and fairly presenting the financial statements and for providing the auditor access to information and personnel. Management refuses, however, to acknowledge responsibility for the design, implementation, and maintenance of internal control relevant to the preparation and fair presentation of the financial statements, stating, "the auditor evaluates controls, so responsibility belongs to the auditor." Assume no law or regulation overrides the usual audit preconditions. What is the auditor required to do?
Hint

Recall the AU-C 210 preconditions for acceptance, who must acknowledge responsibility for internal control?

Decide it in order

  1. T1West Co. seeks a GAAP audit that no law or regulation requires. Does management acknowledge responsibility for preparing and fairly presenting the financial statements?

    NoDecline unless management provides the acknowledgment. Auditor assistance with adjustments does not remove management's responsibility.
  2. T2Does management acknowledge responsibility for designing, implementing, and maintaining internal control relevant to those financial statements?

    NoDecline unless management acknowledges its internal control responsibility. Access to records and additional substantive testing cannot replace that acknowledgment.
  3. T3Does management agree to provide all relevant information, requested additional information, and unrestricted access to people the auditor determines necessary?

    NoDecline unless management agrees to the required information and access. Do not postpone this agreement until fieldwork.
  4. T4Do the proposed terms describe reasonable assurance without guaranteeing fraud detection or assigning management's duties to the auditor?

    NoRequire revised terms. Decline if management insists on a fraud-detection guarantee or transferring its duties to the auditor.
  5. T5Do the terms leave the auditor free to perform procedures needed to obtain sufficient appropriate audit evidence?

    YesThe terms pass these checks. Complete the remaining acceptance or continuance procedures; the same preconditions apply to an existing client.
    NoDo not accept on those terms. Require removal of the restriction; a management-imposed limitation expected to require a disclaimer calls for declining.

Key points

  • Remember: Full access does not cure management's refusal to accept responsibility for internal control.
  • Outsourcing bookkeeping does not transfer management's internal control responsibility to the service organization.
  • Auditor-proposed adjustments do not transfer responsibility for the financial statements to the auditor.
  • A year-end representation letter cannot replace the acknowledgment required before acceptance.

How the exam traps you

  • Accept without management's internal control acknowledgment because the audit will use primarily substantive procedures. Management must acknowledge its responsibility for relevant internal control regardless of the planned audit approach.
  • Accept a known, pervasive scope limitation because the lender will accept a disclaimer. Decline unless the restriction is removed or law or regulation requires acceptance.
  • Let management exclude fraud or related-party procedures to reduce fees. Reject terms that prohibit required procedures. Extra testing elsewhere does not cure the exclusion.

5 more, each from a different angle

0 of 5 answered · 0 correct

Question 2

North & Cole, CPAs, audits Bay Manufacturing. Midway through the Year 2 audit, Bay asks the firm to recommend control features for a new purchasing system and, after implementation, decide when exceptions to the system's approval rules should be overridden for specific vendors. North & Cole has not agreed to perform the added work. Under the AICPA Code's nature and scope of services principle, when must North & Cole assess whether accepting the expanded services would be consistent with its professional responsibilities?
Hint

Which event triggers the Code's required assessment: the client's request, the routine continuance review, or actually starting to perform the work?

Question 3

Before accepting a nonissuer financial statement audit, an auditor is asked to sign an engagement letter containing all of the following terms: (1) the audit may be performed on a test basis using sampling rather than examination of every transaction; (2) the auditor will consider internal control in planning the audit but will not express a separate opinion on internal control effectiveness; (3) management is responsible for identifying all related parties, and, if management does not identify a related party, the auditor will perform no procedures specifically directed at identifying or investigating undisclosed related-party relationships or transactions; and (4) the auditor's objective is to obtain reasonable, not absolute, assurance that the financial statements are free of material misstatement. Assume a standard GAAS audit and that there is no legal requirement to accept the engagement. Which conclusion is best supported?
Hint

Separate ordinary audit limitations (sampling, reasonable assurance) from any contractual term that would bar procedures to detect undisclosed related‑party relationships or transactions.

Question 4

A CPA firm is considering accepting a Year 1 audit engagement for a prospective client. Before the engagement is accepted, management states that, for "security reasons," the auditor will not be permitted to observe the year-end physical inventory count or perform any alternative procedures to test inventory quantities. Inventory represents approximately 55% of total assets and directly affects cost of sales. The audit is not required by law or regulation. What is the auditor's most appropriate response?
Hint

Focus on who determines the audit procedures and how a client-imposed limitation affects acceptance when the affected area is material and likely pervasive.

Question 5

During acceptance discussions for a Year 2 audit of a nonissuer, management asks the auditor to include all of the following terms in the engagement letter: (1) the audit will detect all fraud material to the financial statements; (2) because a pending patent lawsuit is highly sensitive, management will provide an internal legal summary and will not permit the auditor to inquire of outside counsel; and (3) the auditor will perform no procedures at a foreign component that represents 4% of consolidated assets, even though that component executed most of the entity's year-end related‑party sales. Which response is most appropriate under GAAS?
Hint

Distinguish what level of assurance an audit actually provides (reasonable, not absolute) from who determines the nature, timing, and extent of audit procedures (auditor judgment, not management).

Question 6

A CPA firm is considering accepting a nonissuer audit engagement for Year 1. Management intends to present the financial statements using an acceptable special purpose framework and agrees it is responsible for preparing the financial statements and for internal control relevant to that preparation. However, management refuses to agree that the auditor will have unrestricted access to all information and to persons the auditor determines necessary, stating that discussions with in-house counsel and one sales executive will be provided only if management later concludes the matters are not legally sensitive. No law or regulation requires the audit. Under GAAS (AU-C 210 preconditions for an audit engagement), which conclusion is most appropriate?
Hint

Focus on AU-C 210 acceptance preconditions: has management agreed up front to provide all information and access to persons the auditor needs? Also ask whether any law or regulation compels the audit.

Drill all 88 Nature and Scope questionsMixed across every rule in the topic, so you have to spot which one applies. That is how the exam does it.

Common questions

What are the audit preconditions under AU-C 210?

The financial reporting framework must be acceptable. Management must acknowledge responsibility for preparing the financial statements and relevant internal control, and agree to provide relevant information, requested additional information, and unrestricted access to necessary personnel.

Can an auditor accept an audit with a management-imposed scope limitation?

If a limitation imposed before acceptance is expected to require a disclaimer of opinion, decline unless law or regulation requires acceptance. A lender's willingness to accept a disclaimer does not change that rule.

Can an audit engagement letter guarantee detection of all fraud?

No. An audit provides reasonable assurance that the financial statements are free of material misstatement, whether caused by fraud or error. Reject wording that guarantees detection of all fraud or all fraud above a stated amount.

Practice AUD like the real exam

The free ChatCPA simulator: real exam layout, timed testlets, starting with a question on this topic. No account needed to start.

Open the free simulator →

More on Nature and Scope

All Nature and Scope practice →

Questions from the ChatCPA bank of 17,658 CPA exam questions, each with a written reason for every wrong answer. ChatCPA is built by Nicholas Miller, CPA (Oregon #14907). How these pages are made. Spot an error? Tell us.