Professional skepticism is an integral component of auditing and audit quality, as evidenced by standards such as SAS 1 and SAS 109. Regulators often refer to professional skepticism as something that was missing when audit failures occur. Thus, understanding what factors influence auditors’ levels of professional skepticism is important. The author contends that this study facilitates an understanding of how audit firms can influence professional skepticism in practice via changes in such practices as hiring, training, performance appraisal, review, decision aids, incentives, and changes in tasks and institutions.
Nelson, M. W. 2009. A Model and Literature Review of Professional Skepticism in Auditing. Auditing: A Journal of Practice & Theory 28 (2): 1-34.
The purpose of this study is to review research that examines professional skepticism in auditing. Consistent with other research and recent regulatory concerns, the author defines professional skepticism as “indicated by auditor judgments and decisions that reflect a heightened assessment of the risk that an assertion is incorrect, conditional on the information available to the auditor.” Unlike the professional standards, this definition reflects more of a “presumptive doubt” view rather than a “neutral” view of professional skepticism, implying that auditors who exhibit higher levels of professional skepticism are auditors who need relatively more persuasive evidence (in terms of quality and/or quantity) to be convinced that an assertion is correct. In other words, such auditors are more likely to doubt evidence that an assertion is true than they are to doubt evidence than an assertion is false.
Drawing from prior studies, the author describes how audit evidence combines auditor knowledge, traits, and incentives to affect the level of professional skepticism exercised in auditor judgments. Further, the author describes how, given a judgment with some level of professional skepticism, the judgment combines with auditor knowledge, traits, and incentives to affect auditor actions that reflect relatively more or less degrees of professional skepticism.
The study reviews research that examines professional skepticism in auditing. The author discusses the various definitions of professional skepticism both in professional standards and academic research. The author draws on prior relevant research to explain how auditor knowledge, traits, and incentives combine to affect the level of professional skepticism in auditor judgments and auditor actions.
The quality of the firm performing the audit is important but must be viewed through the perspective of a specific engagement team and a specific set of circumstances. Information supplied by the PCAOB is one component of the evaluation of the likelihood that an engagement team will perform a quality audit and of specific areas of audit practice where deficiencies have been identified. In the end, however, issues of independence, auditor rotation, industry competence, attention to the work, and all the other important aspects of audit quality must be monitored by the audit committee at the engagement level in the context of the specific engagement.
Wedemeyer, P. D. 2014. A Perspective on the PCAOB—Past and Future. Accounting Horizons 28 (4): 937-947.
The passage of Sarbanes-Oxley (SOX), the creation of the Public Company Accounting Oversight (PCAOB), and subsequent developments have substantially increased the political visibility of auditors and audits of financial statements. These same events have substantially decreased the role of the auditing profession in establishing audit standards and standards of audit performance; auditing is now an industry regulated primarily by persons who are not professional auditors. The perceived interest of each of the parties involved in the political process is often in conflict with those of any, or all, of the other parties.
The author’s primary concern is the quality of the audit performed on a specific engagement.
This paper summarizes and synthesizes information on the PCAOB and its effect on the business model of an audit firm.
SOX requirements for PCAOB inspections of audit firms substantially increased the possibility that an audit will be subsequently evaluated despite the absence of identified errors in audited financial statements. The SOX requirement for an auditor's opinion on internal controls over financial reporting (ICFR) immediately increased audit costs. The net effect of these changes has been to increase the cost of audits, particularly as a result of increased review, other quality control activities, and the performance of audits of ICFR, where required. In return, the quality of audits in terms of compliance with audit standards has improved significantly. However, the business models of audit firms and the processes for education and certification of accountants have remained substantially unchanged and are major influences on the quality of audits.
This study provides insights that should be useful for CAEs and boards of directors (or audit committees) in discussions related to (1) internal audit philosophy regarding its potential contributions to an organization, (2) alternative staffing models, (3) resource allocation, and (4) embracement of audit technology. The study could also help guide external auditors’ evaluation of client internal audit functions. The authors find that the mission of internal audit functions differs from organization to organization. Additionally, the results suggest that internal audit functions used for leadership development purposes (i.e., a rotational staffing strategy) are larger, presumably because the staff have less experience and staff are rotating in and out of the department more frequently. Finally, these findings help illustrate the importance of internal audit proving that it is ‘‘value added’’ to the organization. Management and audit committees are often looking for more than financial statement compliance, and those internal audit functions that have responded to these greater needs are rewarded with more resources, likely because they are perceived to deliver more value.
For more information on this study, please contact Karla Johnstone.
Anderson, U. L., M. H. Christ, K. M. Johnstone, and L. E. Rittenberg. 2012. A Post-SOX Examination of Factors Associated with the Size of Internal Audit Functions. Accounting Horizons 26(2): 167-191
Internal auditing is a key element of an organization’s governance, risk management, and internal control structure. However, many organizations struggle to know if the investments they make in the internal audit function are appropriate and use size benchmarking data (e.g., firm assets, revenues, number of employees) to determine if internal audit is appropriately sized. However, benchmark data fails to incorporate other factors that influence internal audit size such as the effectiveness and efficiency of an internal audit function, the scope of the internal audit mission, or internal audit objectives and staffing strategies. Therefore, the objectives of the study include the following:
The authors collected data with which to test their model by first conducting field interviews with a variety of chief audit executives across a broad range of industries. The authors then distributed a survey to chief audit executives that are members of the Institute of Internal Auditors. The survey includes questions related to each of the four determinants of internal audit size (as mentioned above), as well as internal audit size based on number of internal audit personnel. The field interviews were conducted between August 2006 to November 2006 and the survey was conducted from August 2007 and October 2008.
The authors find that internal audit size is positively associated with:
Audit Committee Characteristics:
Internal Audit Characteristics and Mission:
Organization Characteristics:
Further, the authors find that internal audit size is inversely associated with:
Internal Audit Characteristics and Mission:
Internal Audit Activities Performed by Others:
The results of the study strongly suggest that initial-year audit discounts are quite common and substantial in the post-SOX period. Although the existence of lowballing seems to be a threat to independence, at least in appearance, the existing research on lowballing provides mixed results on its impact on audit quality. The findings will likely be of interest to the PCAOB as it searches for ways to bolster auditor independence and other regulators because many, including the GAO, believe that without non-audit service fees, auditors are less likely to offer ‘‘loss-leader’’ fees for audits.
For more information on this study, please contact Rosemond Desir.
Desir, R., J. R. Casterella, and J. Kokina. 2014. A Reexamination of Audit Fees for Initial Audit Engagements in the Post-SOX Period. Auditing: A Journal of Practice & Theory 33 (2): 59-78
On August 16, 2011, the Public Company Accounting Oversight Board (PCAOB) issued a concept release seeking comments on ways to enhance auditor independence. The Board notes that higher failure rates in new audit engagements might be linked to unrealistic pricing. The Board’s concern is that a new auditor might be more susceptible to management pressure if initial-year audit fees are set artificially low.
Prior to the passage of the Sarbanes-Oxley Act (SOX) of 2002, empirical evidence shows that auditors discounted their initial-year audit fees. This practice is known as lowballing and it occurs when auditors price initial-year audit fees lower for new clients with the expectation of increasing the fees substantially in later years in order to recoup their initial losses. Lowballing was expected to decrease significantly after the enactment of SOX.
Indeed, findings of a study on audit pricing in initial-year audits seem to confirm that Big 4 auditors charged a fee premium on new auditor-client relationships in 2006. However, it is not clear if more recent post-SOX initial-year audits are free of lowballing. In the current study, the authors investigate whether lowballing exists in new auditor-client relationships in an ‘‘extended’’ post-SOX environment for the years 2007 to 2010.
The authors analyze audit fee data for years 2006 through 2010 for publicly-traded companies that are Big 4 and non-Big 4 clients. The focus of the study is on initial audits following auditor dismissals as there are very few auditor resignations. The audit fee data were collected from Audit Analytics database and financial data – from Compustat.
The results suggest that both Big 4 and non-Big 4 accounting firms discounted their initial-year audit fees during the sample period (2007–2010), with fee discounts ranging from 16 to 34 percent. In addition, the authors find no evidence of initial-year audit fee discounts (or premiums) in 2006.
These findings suggest that auditors with lower moral reasoning scores (i.e., who tend to cooperate with close allies, but tend to be less cooperative with other parties) might in some cases better adhere to the profession’s duties. Auditors with higher moral reasoning scores (i.e., who tend to view norms and rules as flexible and interpret them depending on a situation) are more likely to depart from auditing conventions and cooperate with others to their mutual benefit. There have been similar findings, i.e. contrary to what we might expect in relation to moral reasoning, in other research settings.
Schatzberg, J. W., G. R. Sevcik, B. P. Shapiro, L. Thorne, and R. S. O. Wallace. 2005. A reexamination of behavior in experimental audit markets: The effects of moral reasoning and economic incentives on auditor reporting and fees. Contemporary Accounting Research 22 (1): 229-264.
In this study, the authors examine how “moral reasoning” (as measured by a commonly-used test) affects auditor reporting under different economic incentives, in an experimental setting. In the audit of the financial statements process, cooperation between auditors and managers is important so that sufficient evidential matter can be obtained. The authors examine whether auditors are more or less likely to cooperate with management, based on the level of moral reasoning, and penalties for mis-reporting.
The authors assign participants to either a “higher” or “lower” moral reasoning group based on each participant’s “higher” or “lower” score on a commonly-used moral reasoning test. A lower score on the moral reasoning test indicates that the participant is focused on what is good for him or her whereas a higher score indicates the individual considers what is best for society. Although not specifically stated in the study, the data appears to have been collected prior to 2005. The participants used in this study were recruited from MBA classes. Participants had to consider whether they would truthfully report a “low” outcome, or report “high” even though the outcome was low (i.e. cooperate with management), which would harm investors but economically benefit the participants. The authors varied the level of penalty for misreporting to observe how this changes behavior.
The results of the studies documented in this review suggest that there is a great deal of variability in the approaches taken by firms for establishing materiality. Such differences in materiality methods can affect both the effectiveness and efficiency of audits. For example, if firms differ in how they allocate materiality to financial statement accounts, then the scope of the work could differ across audits with similar characteristics. Auditors also appear to differ in terms of the factors they consider for determining the materiality of internal control weaknesses, suggesting that auditors may need more structured criteria to make materiality judgments about internal control weaknesses. Materiality judgments are influenced by authoritative guidance, suggesting that standard setters and audit firms have the ability to influence auditors’ materiality judgments by providing auditors with specific guidance.
Messier, Jr., W.F., N. Martinov-Bennie, and A. Eilifsen. 2005. A review and integration of empirical research on materiality: Two decades later. Auditing: A Journal of Practice and Theory 24 (2): 153-187.
Materiality has been and continues to be a topic of importance for auditors. There has recently been renewed interest in the concept of materiality, motivated by concerns at the Securities and Exchange Commission, and the Auditing Standards Board and as evidenced by the Sarbanes-Oxley Act and the issuance of proposed standards on materiality by the International Auditing and Assurance Standards Board. Additionally, new guidance has been issued recently in response to some of the materiality concerns, including Staff Accounting Bulletin (SAB) No. 99, Statements on Auditing Standards (SAS) No. 89, and SAS No. 90. Due to the continued importance of understanding the concept of materiality, this paper reviews and integrates the empirical research on materiality since 1982. Based on the review of the literature, the authors suggest some implications of this research for audit practice and research.
This paper reviews the literature related to materiality that has been published since 1982. The authors divide their discussion of the research into archival studies and experimental studies. Archival studies use audit firm manuals, data from auditor working papers, or published financial statement data and auditor reports to examine materiality decisions. Experimental studies examine materiality judgments and decision-making of financial statement users, auditors and others (e.g., judges/lawyers).
Archival Studies: The primary findings from archival studies are categorized based on whether they were obtained from auditor-related sources (e.g., auditor working papers) or public sources (e.g., financial statements).
Auditor Related Sources (i.e., firm manuals and working papers)
Public Sources (i.e., financial statements, disclosures, and auditors’ reports)
Experimental Studies:
The primary implication of the model based on the literature is that simply because auditors may assess fraud risk at a higher level due to the presence of risk factors, it does not necessarily mean that planned audit procedures designed to address these risks will be effective. Although being aware of fraud risk is necessary to respond appropriately, being aware of only general risk factors makes it difficult for auditors to formulate possible fraud schemes that a client may perpetrate. As a result, audit plans designed to respond to general fraud risks tend to increase the extent of testing, but do not alter the nature of the testing in a way that would be more likely to catch fraud. If auditors identify specific situational cues and are able to generate a plausible fraud scheme as a result, more effective tests that alter the nature of the procedures can be identified and carried out. Therefore, knowledge of fraud risks via experience or training, particularly for risks specific to a client or industry, will help to allow generation of plausible fraud schemes and the design of effective tests.
For more information on this study, please contact Jacqueline Hammersley.
Hammersley, J. S. 2011. A Review and Model of Auditor Judgments in Fraud-Related Planning Tasks. Auditing: A Journal of Practice & Theory 30 (4), 101-128.
The PCAOB has expressed concern regarding auditors’ frequent failure to properly adapt their audit plans for fraud risk factors and fraud cues. Fraud is unique in the audit process in that auditors must plan their audits to address fraud risk, but most auditors have not been on engagements where fraud was discovered, reducing the likelihood that they will assess the risk of fraud effectively from experience. Much research has been conducted to examine the various aspects of how auditors assess fraud risk and how they react to it. This paper integrates this research into a qualitative model that shows the relationships between the identified activities of the fraud assessment process and how the related judgments are formed.
This paper also summarizes auditing research that tests the links in the model, discussing the implications of their findings on these links. The findings are then related to aspects of the client and situations where certain fraud risk factors may be present and how practitioners should consider these aspects, whether in the process of planning an audit or in training auditors.
The paper reviews and discusses a large number of research findings in the fraud assessment literature dating back to the early 1990s, synthesizing the results and discussing potential implications of their findings.
The model can be summarized as follows:
The auditor needs a different model for audits of internal control. The auditor needs to apply two different models in an integrated audit, the original model for the opinion on the financial statements and a different model for the opinion on internal controls.
The author believes standard setters should sponsor research on an appropriate risk model for audits of internal control. Even before the research is completed, the standards could be enhanced in the following ways:
• indicate that the original audit risk model is intended for use only in financial statement audits, not internal control audits;
• write standards that consistently use risk terminology and are clear as to which risk they are discussing; and
• provide guidance on the use of models in integrated audits.
Akresh, A. D. 2010. A Risk Model to Opine on Internal Control. Accounting Horizons 24 (1): 65-78.
The audit risk model has provided a conceptual framework for audits of financial statements for more than 40 years. Despite practical difficulties in implementation and criticisms of its theoretical foundation, the model has been fairly effective in helping auditors analyze risks and use that analysis to determine the nature, timing, and extent of audit procedures in audits of financial statements. In recent years, some auditors have tried to apply the audit risk model to audits of internal control, usually performed as parts of integrated audits. An integrated audit is an engagement where the auditor provides an opinion on the financial statements and an opinion on the effectiveness of internal control over financial reporting. It is integrated in the sense that the auditor tries to use some of the same procedures to meet both objectives.
While the audit risk model was designed for audits of financial statements, it was not designed for audits of internal control. Audits of internal control are audits of processes rather than audits of outputs (financial statements). In addition, opinions on internal control do not rely on analytical procedures or on substantive tests of details. Because of this conceptual difference, the author asserts that audit risk model, as originally formulated, does not work as a coherent conceptual framework for audits of internal control. The need for a different risk model for internal control audits is not currently recognized in the auditing standards or in the auditing literature.
This article is a commentary.
For an integrated audit, the auditor would use the two models sequentially. The auditor would use the internal control risk model as a framework to determine the extent of control tests. Then the auditor would use the financial statement audit risk model as a framework to determine the extent of substantive testing.
Future research could determine a more specific model based on how auditors perform these audits. Some research questions include, for example:
The review of AAERs identified failure to authenticate responses, collusion between auditee management and customers, and concealed side agreements and special terms as specific problem areas. These findings have several implications for standard setters, practitioners, and academic researchers. First is a need to improve response rates, as well as authenticate responses. Technology, perhaps involving third-party intermediaries, can help address these issues. Second, depending on the circumstances and identified risks, auditors may need to confirm the existence of side agreements and special terms. Auditors may also need to consider the possibility of collusion in their testing strategies. In addition, confirmation requirements may need to be extended to other accounts, at least in some circumstances.
Caster, P., R. J. Elder, and D. J. Janvrin. 2008. A Summary of Research and Enforcement Release Evidence on Confirmation Use and Effectiveness. Auditing: A Journal of Practice & Theory 27 (2): 253-279.
Confirmations are extensively used and are often perceived by practitioners to be one of the most persuasive forms of audit evidence. Yet academic research has found limitations that restrict confirmation effectiveness for many management assertions. In addition, a number of problems with false and forged confirmations are identified in Accounting and Auditing Enforcement Releases (AAERs). The Public Company Accounting Oversight Board (PCAOB) and the International Auditing and Assurance Standards Board (IAASB) have put confirmation evidence on their respective agendas. Academic research indicates that receivable confirmations can be effective evidence for the existence assertion. Low response rates, as well as respondent errors and directional bias in detecting errors, are key barriers to confirmation effectiveness. This study provides a synthesis of academic and practitioner research on confirmation use and effectiveness.
The authors conducted a review of the academic literature on confirmations. They found few current papers examining confirmations. Most prior research addressed the effectiveness of confirmation of accounts receivable. To provide additional evidence relevant to questions in the SAG briefing paper involving confirmation of other accounts, they reviewed AAERs and practitioner literature. They identified 113 confirmation-related AAERs involving 51 auditees.
The authors’ primary findings are:
Regulators should draft regulations and oversee the profession in such a way that reflects an understanding of the complex environment in which practitioners are making reliance decisions. Standard setters, both domestic and international can learn from the cultural and jurisdictional nuances of different countries, which will facilitate appropriate internal audit reliance as corporations continue to have multi-national presences. Practitioners can benefit from the study by utilizing the review to improve upon their reliance decision frameworks.
For more information on this study, please contact Chad Stefaniak.
Bame-Aldred, C. W., D. M. Brandon, W. F. Messier, Jr., L. E. Rittenberg, and C. M. Stefaniak. 2013. A Summary of Research on External Auditor Reliance on the Internal Audit Function. Auditing: A Journal of Practice and Theory 32 (Supplement 1): 251-286
The Public Company Accounting Oversight Board (PCAOB) requested a synthesis of existing research on the external auditor’s reliance of the internal audit function. Auditing Standard No. 5 (AS5) allows external auditors to rely on the internal audit function under certain criteria. This paper synthesizes post Sarbanes-Oxley research (2004 – 2012) that examines external auditor reliance of the internal audit function. The research reviewed pertains to:
The research examined is limited and does not fully address the PCAOB’s inquiries, specifically jurisdictional limitations on internal audit reliance and overall threshold limitations on internal audit reliance. This paper identifies gaps in the research and proposes a series of research questions aimed at closing these gaps.
The review included current and proposed U.S. and international auditing standards, academic literature and selected practitioner research related to the nature of internal audit work, and the external auditor’s reliance on this work. Based on this review, the paper includes a proposed summation model and organizing framework to help capture the various factors in the reliance decision. This organizing framework is used to present the synthesis of the relevant research, identify gaps in the research and propose research questions aimed at closing these gaps. In addition, the relevant papers are summarized for ease of understanding. This summary includes the methodology, the objective of the research project, the sample (if applicable), the results of each study, and a cross-reference to the proposed research questions.