In an agreed-upon procedures engagement which of the following procedures is appropriate

SAS No. 34 Engagements to Perform Agree-Upon Procedures Regarding Financial Information

Status

Issued by Auditing Standards Committee in Taiwan on 24 August, 1999.

Summary

The objective of an agreed-upon procedures engagement is for the auditor to carry out procedures of an audit nature to which the auditor and the entity and any appropriate third parties have agreed and to report on factual findings. As the auditor simply provides a report of the factual findings of agreed-upon procedures, no assurance is expressed.

An engagement to perform agreed-upon procedures may involve the auditor in performing certain procedures concerning individual items of financial data (for example, accounts payable, accounts receivable, purchases from related parties and sales and profits of a segment of an entity), a financial statement (for example, a balance sheet) or even a complete set of financial statements.

Independence is not a requirement for agreed-upon procedures engagements; Where the auditor is not independent, a statement to that effect would be made in the report of factual findings.

The auditor should ensure with representatives of the entity and, ordinarily, other specified parties who will receive copies of the report of factual findings, that there is a clear understanding regarding the agreed procedures and the conditions of the engagement.

The auditor should document matters which are important in providing evidence to support the report of factual findings, and evidence that the engagement was carried out in accordance with this Statement and the terms of the engagement.

The auditor should plan the work so that an effective engagement will be performed.

The auditor should carry out the procedures agreed upon and use the evidence obtained as the basis for the report of factual findings. The procedures applied in an engagement to perform agreed-upon procedures may include the following:

• Inquiry and analysis.
• Re-computation, comparison and other clerical accuracy checks.
• Observation.
• Inspection.
• Obtaining confirmations.

The report on an agreed-upon procedures engagement needs to describe the purpose and the agreed-upon procedures of the engagement in sufficient detail to enable the reader to understand the nature and the extent of the work performed. The report of factual findings should contain:

• Title;
• Addressee (ordinarily the client who engaged the auditor to perform the agreed-upon procedures);
• Identification of specific financial or non-financial information to which the agreed-upon procedures have been applied;
• A statement that the procedures performed were those agreed upon with the recipient;
• A statement that the engagement was performed in accordance with the Statement;
• When relevant a statement that the auditor is not independent of the entity;
• Identification of the purpose for which the agreed-upon procedures were performed;
• A listing of the specific procedures performed;
• A description of the auditor’s factual findings including sufficient details of errors and exceptions found;
• Statement that the procedures performed do not constitute either an audit or a review and, as such, no assurance is expressed;
• A statement that had the auditor performed additional procedures, an audit or a review, other matters might have come to light that would have been reported;
• A statement that the report is restricted to those parties that have agreed to the procedures to be performed;
• A statement (when applicable) that the report relates only to the elements, accounts, items or financial and non-financial information specified and that it does not extend to the entity’s financial statements taken as a whole;
• Date of the report;
• Auditor’s address; and
• Auditor’s signature.

Effective date

This Statement is effective from 31 December, 1999.

During an agreed-upon procedures engagement a qualified accountant will discuss with you and agree a set of procedures to perform that are based on your requirements.

The procedures and tests should be sufficiently detailed so as to be clear and unambiguous, and discussed and agreed in advance with the engaging parties so that the factual findings are useful to them and, depending upon the engagement, others to whom the report is made available. The practitioner’s report does not express a conclusion, and therefore it is not an assurance engagement in the technical sense.

It does not provide recommendations based on the findings. The report is worded so as to restrict access and/or reliance on it to those parties that have agreed to the procedures to be performed since others, unaware of the reasons for the procedures, may misinterpret the findings. The specified parties review the procedures and findings in the practitioner’s report and use the information to draw their own conclusions

The value of AUP comes from the practitioner objectively carrying out procedures and tests with relevant expertise thus saving the engaging party carrying out the procedures and tests themselves. AUP are most effective where the engaging parties are knowledgeable enough to identify the area or matter to focus on, discuss and agree the procedures to be performed, and interpret the findings in their own decision making.

AUP can also be a powerful tool where a client initially seeks a practitioner’s support for assertions for which sufficient work cannot be performed or evidence obtained. For example, management or users of forecast information may ask the practitioner to issue a conclusion concerning the future performance of the client; the practitioner cannot support a conclusion on this subject by any amount of work.

Issuing such unsupportable conclusions may give rise to misunderstandings such that the practitioner may potentially become the equivalent to insurers or guarantors of the client’s obligation to third parties. Instead, the practitioner may effectively propose an AUP engagement on forecasts, testing relevant control procedures and agreeing committed future transactions to source documentation.

Although the practitioner will not be able to draw a conclusion on how such procedures may affect future performance, informed users may find the AUP engagement useful to form their own conclusion based on the findings reported by the practitioner. The practitioner’s involvement in supporting and challenging management’s determination of the procedures to be performed can enhance the robustness of the information by guiding management to consider the extent to which information ought to be internally consistent and/or derived from evidence.

Critical considerations

When performing an agreed-upon procedures engagement on historical financial information, practitioners should, as a minimum, comply with ISRS 4400 Engagements to Perform Agreed-Upon Procedures Regarding Financial Information. ISRS 4400 also provides useful guidance for engagements regarding non-financial information.

Note that ISRS 4400 (Revised) Agreed-Upon Procedures Engagements will be effective for engagements for which the terms of engagement are agreed on or after 1 January 2022.

ISRS 4400 requires compliance with the applicable requirements of the Code of Ethics for Professional Accountants issued by the IESBA. The ethical principles that apply to agreed-upon procedures engagements are the professional responsibilities for integrity, objectivity, professional competence and due care, confidentiality, professional behaviour and technical standards.

Independence is however not a requirement for agreed-upon procedures engagements. The specific terms of an engagement may however require the practitioner to refer to the independence requirements of IESBA’s Code of Ethics for Professional Accountants. Equally, ISQC1 will apply to all services that the practitioner provides under ISRS 4400. Therefore, being able to assert compliance with the standard is a quality mark for a chartered accountant.

As a result of either a client’s request or the need to comply with legal and regulatory requirements, a practitioner may perform an agreed-upon procedures engagement in accordance with specific requirements or standards other than ISRS 4400. Where the practitioner is unable to follow ISRS 4400 in full, for example, because of a specific regulatory or other requirement, he should not refer to the engagement as having been conducted in compliance with the standard. For many such engagements, irrespective of whether the practitioner performs the agreed-upon procedures engagement in accordance with legal and regulatory requirements, the practitioner should make as much use of ISRS 4400 as is possible.

This is because ISRS 4400 provides a clear set of principles for carrying out agreed-upon procedures engagements.

ISRS 4400 requires clear agreement of the following with the engaging parties:

• The nature of the engagement including the fact that the procedures performed will not constitute an assurance engagement and that accordingly no assurance conclusion will be expressed.
• A stated purpose for the engagement.
• The identification of the information to which the agreed-upon procedures will be applied.
• The nature, timing and extent of the specific procedures to be applied.
• The anticipated form of the report of factual findings.
• The limitations on the use and distribution of the report of factual findings.

It is fundamental that users relying on the report take responsibility for the sufficiency and appropriateness of the procedures for their purposes.

AUPs for the preparer’s use (private reports)

For an entity which has no external requirement for an audit of formal assurance opinion in accordance with assurance standards, agreed-upon procedures over specific risks in financial or non-financial information can be a cost-effective way of obtaining comfort for the preparer. This can be supplemented with professional views, though not with a formal assurance opinion if the scope of work is AUPs.

Examples of AUPs for the preparer’s use only 

AUPs for third-party use

Agreed-upon procedures can also provide comfort to a third party of an entity’s compliance with regulatory or contractual requirements. Practitioners will need to consider the increased risk associated with the third party’s interest in the report and may, for example, prefer to agree a scope of work which fits clearly within ISRS 4400, rather than agreeing to provide subjective professional views. The practitioner should also consider what terms and conditions should be attached to the third party’s use of the report. 

Examples of AUPs for the use of a third party

*some grant terms require the provision of a formal assurance opinion. It is important to read the grant offer letter and discuss the requirements with management of the grant recipient.

• Download AAF 01/10

Third-party agreements may use the term "audit" to refer to assurance requirements, even when the intended or most appropriate scope of testing is AUPs. The practitioner’s priority will be to achieve clarity in discussions with management and in the engagement letter over whether the scope of work is assurance or AUPs, even if continued use of the term "audit" is the simplest approach.

Where a client is assessing a business with a view to buying it, providing grant or loan funding or transacting with it, AUPs over specific areas can provide additional comfort. For example, if the book value of the business of the potential target for purchase or funding lies in its working capital, AUPs over the existence of stock and age of debtors may be worthwhile. AUPs engagements in such circumstances are sometimes referred to as "due-diligence lite".

Our page on possible solutions notes that many engagements lie on a spectrum between AUPs and consultancy services such as due diligence. However a scope of work providing a relatively low level of comfort, such as AUPs may not be appropriate for a scenario bearing a relatively high level of risk such as an acquisition or investment decision.

The practitioner should consider whether the nature of the engagement is suitable to the circumstances. Such considerations should include:

• The intended use of the report – AUPs reports may be suitable for internal use, but are unlikely to meet the needs of providers of finance for a transaction, who may be expecting full acquisition due diligence.
• The level of sophistication of the user – before providing a limited scope of work such as AUPs in the context of a transaction, the practitioner should be satisfied that management have the skills and experience to use the findings in the context of their own due diligence, rather than placing an inappropriate degree of reliance on the report.
• The overall level of risk and related reward.

What are agreed upon procedures engagement?

Which of the following should a practitioner include in an agreed upon procedures report?

What are the contents of the report on an agreed upon procedures engagement?

What is provided in a report based on an agreed upon procedures engagement quizlet?