Unit
- Definition: Attestation services involve an independent practitioner issuing a written conclusion about the reliability of a subject matter or assertion. This includes audits, reviews, and agreed-upon procedures.
- Purpose: These services enhance the degree of confidence that intended users can place in financial or non-financial information. They reduce information risk for decision-makers.
- Types of engagements: Examination engagements provide reasonable assurance, review engagements provide limited assurance, and agreed-upon procedures engagements report factual findings without an opinion.
- Professional standards: In the United States, attestation engagements follow Statements on Standards for Attestation Engagements (SSAE) issued by the AICPA. Internationally, the International Standards on Assurance Engagements (ISAE) apply.
- Subject matter: Attestation can cover historical financial statements, prospective financial information, internal controls, compliance with regulations, or sustainability metrics.
- Practitioner independence: Independence in both fact and appearance is fundamental. Practitioners must avoid conflicts of interest and maintain objectivity throughout the engagement.
- Engagement acceptance: Before accepting an engagement, the practitioner evaluates whether the subject matter is appropriate, criteria are suitable, and the engagement team has the required competence.
- User benefits: Reliable attestation reports help investors, lenders, regulators, and other stakeholders make informed decisions. They also improve organizational credibility and access to capital.
- Evidence and procedures: Attestation procedures involve obtaining sufficient appropriate evidence. This includes inspection, observation, inquiry, confirmation, and recalculations. The nature, timing, and extent of procedures vary based on the level of assurance provided and the assessed risks of material misstatement.
- Materiality: The practitioner considers materiality in the context of the engagement. Misstatements or omissions are considered material if they could influence the decisions of intended users. Materiality levels influence the scope of procedures and the evaluation of findings.
- Written representations: Practitioners typically obtain written representations from management confirming the appropriateness of the subject matter, the completeness of information provided, and management's responsibility for establishing and maintaining effective controls over the subject matter.
- Reporting: The form and content of the attestation report depend on the type of engagement. Examination reports express a direct conclusion, review reports provide a negative assurance conclusion, and agreed-upon procedures reports describe specific findings without providing an overall opinion.
- Quality control: Firms performing attestation services must establish a system of quality control covering leadership, ethical requirements, acceptance and continuance, human resources, engagement performance, and monitoring. This ensures consistent adherence to professional standards.
- Ethical principles: Beyond independence, practitioners must adhere to principles of integrity, objectivity, professional competence, due care, confidentiality, and professional behavior. These principles form the foundation of trustworthy attestation services.
Risk Assessment
MEDIUM RISK
Engagement risk in attestation services is the risk that the practitioner will issue an inappropriate conclusion. This risk is inherent in all attestation engagements and must be managed through careful planning, competent staff, and adherence to professional standards.
Quick Revision
- Attestation services provide independent conclusions on subject matter or assertions, enhancing user confidence.
- Engagements vary from reasonable assurance (examinations) to limited assurance (reviews) and factual findings (agreed-upon procedures).
- Practitioners must follow applicable professional standards, such as SSAE in the US or ISAE internationally.
- Independence and competence are critical for engagement acceptance and performance.