New ethical and auditing standards take effect

Daniel O’Donovan and Siobhan Orsi summarise the main changes in the Ethical Standard (Ireland) for Auditors, the International Standards on Auditing (Ireland), and the International Standard on Quality Control (Ireland) 1.

In November 2020, the Irish Auditing and Accounting Supervisory Authority (IAASA) issued revised ethical and auditing standards in a bid to support the delivery of high-quality audit and strengthen confidence in audit in Ireland. The revisions build on changes made to the standards in 2017, which implemented the requirements of the EU Audit Regulation and Directive. These new amendments, which were the subject of a formal consultation earlier in 2020, are effective for audits of financial statements for periods beginning on or after 15 July 2021, with early adoption permitted.

This article summarises the main changes in the Ethical Standard (Ireland) for Auditors, the International Standards on Auditing (Ireland), and the International Standard on Quality Control (Ireland) 1.

Revisions to the ethical standard

IAASA’s aim in amending the ethical standard was to simplify and restructure the standard to ensure a better understanding of the ethical requirements. It also introduces more prohibitive requirements, including removing the exemption for SME-listed entities that were not subject to many of the prohibitions applied to listed entities. These concessions, offered in the 2017 IAASA Ethical Standard to entities of this nature, have been removed.

Other key changes to the ethical standards include, but are not limited to, the following:

• Third-party test: the new standard sets out a clearer and stronger definition of the “objective reasonable and informed third-party test”, which is a core element of the ethical standard. It requires audit firms to consider whether a proposed action would affect their independence from the perspective of public interest stakeholders rather than another auditor. Additional guidance has been inserted to assist in application.
• Internal audit services: firms will no longer be able to provide internal audit services to audited entities or their significant affiliates. IAASA’s view was that the provision of internal audit services to audit clients created a risk, both real and perceived, to independence that needed to be addressed.
• Recruitment and remuneration services: the standard incorporates amendments that now prohibit auditors from providing recruitment and remuneration services or playing any part in management decision-making.
• Gifts and hospitality: the requirement to establish policies on the nature and value of gifts, favours, and hospitality that may be accepted from and offered to other entities has been extended to apply to those entities that are likely to subsequently become audit clients.
• Enhancements to the ethics partner’s authority: new provisions incorporated into Section 1 of the ethical standard highlight the increased importance placed on the ethics partner. Enhancements include a requirement for reporting to those charged with governance where an audit firm does not follow the ethics partner’s advice.
• Partner rotation: the cooling-off period for engagement partners on public interest entity audits has been relaxed and amended from five years to three years, as was the requirement in the EU Audit Regulation in 2014. The change has also been applied to listed entities. Clarification has been added that when the engagement partners rotate off an audit, they cannot have significant or frequent interaction with senior management or those charged with governance during the cooling-off period.
• A new requirement has been introduced so that, where audits and those providing audits move from one firm to another, any rotation “on periods” for partners and staff include any time before they and the audit changed
  audit firms.

Reporting breaches of the ethical standard

The extant Ethical Standard for Auditors (Ireland) 2017 requires auditors to respond to all possible or actual breaches of the standard and keep records of any contraventions. A requirement has been introduced in the new ethical standard for auditors to report breaches of the ethical standard on an annual basis to IAASA, the relevant recognised accountancy body for auditors of public interest entities, and the relevant recognised accountancy body for non-public interest entity auditors. Such reports are to be submitted at least annually. IAASA indicated in its feedback paper on the consultation that it will issue guidance to auditors regarding the format of reports to be submitted. It also stated that any action taken by IAASA or the relevant recognised accountancy body in response to such reports will vary on a case-by-case basis depending on factors such as the nature of the breach, the appropriateness of the firm’s response, and the firm’s regulatory history.

The new ethical standard permits firms to complete non-audit service engagements that were previously permissible provided they were entered into before 15 July 2021 and for which the firm has commenced work, while applying appropriate safeguards.
IAASA did not introduce prohibitions on contingent fees for non-audit services, loan staff assignments, and tax advocacy services – all of which were proposed in the consultation paper.

In addition, IAASA made changes to specific auditing standards: ISQC (Ireland) 1 and ISAs (Ireland) 210, 220, 250, 260, 600, 620, 700, 701 and 720. Hereafter, we will briefly discuss the most significant changes auditors and entities should be aware of for audits of financial statements with periods beginning on or after 15 July 2021.

Revisions to ISAs

IAASA has revised ISA (Ireland) 700, Forming an Opinion and Reporting on Financial Statements to extend the requirement for auditors of public interest entities to explain the extent to which the audit is capable of detecting irregularities and fraud to audits of listed entities also. There has been a significant expansion of the application guidance to the standard in relation to this requirement, which guides auditors to provide more detailed and granular explanations tailored to the entity being audited. IAASA acknowledged in the feedback statement that, in some situations, legislation (e.g. ‘tipping-off legislation’) would prohibit auditors from disclosing certain information in the audit report.

ISA (Ireland) 600, Special Considerations – Audits of Group Financial Statements (Including the Work of Component Auditors) has been revised to clarify that the work of component auditors used for the purpose of a group audit must be evaluated and reviewed by the group engagement team. Application guidance has been added to the standard to assist group engagement teams in determining whether the nature and extent of such evaluations and reviews of component auditor work are appropriate in their professional judgement.

ISA (Ireland) 220, Quality Control for an Audit of Financial Statements now requires the engagement quality control reviewer (EQCR) for audits of group financial statements of public interest entities to perform their quality control review over each component for which work has been performed for the purpose of the group audit, and to discuss the results of the review with the relevant key audit partner. This is a significant enhancement of the quality control review required for such entities.

ISA (Ireland) 701, Communicating Key Audit Matters in the Independent Auditor’s Report has been revised to require that the auditor’s report specify the threshold for performance materiality and explain the judgements made in determining performance materiality tailored to the circumstances of the audit. 

This package of revisions to the standards is designed to enhance audit quality and public confidence in audit in Ireland. However, for group audits of public interest entities in particular, there is likely to be significant incremental associated effort and cost in complying with the new requirements.

Chartered Accountants should familiarise themselves with all changes to the standards, which are available on IAASA’s website.

Daniel O’Donovan is Principal in the Department of Professional Practice at KPMG Ireland and Chair of the Institute’s Audit & Assurance Committee.

Siobhan Orsi is Associate Partner at EY Ireland and a member of the Institute’s Audit & Assurance Committee.