ISA 540 (Revised): Update. May 2018 ASB meeting Dan Montgomery May 17, 2018

Similar documents
ISA 800/805. Proposed changes to ISA 800/ 805 were limited in nature

Re: Exposure Draft Proposed ISAE 3402 on Assurance Reports on Controls at a Third Party Service Organization

Within our recommendations for editorial changes, additions are noted in bold underline and deletions in strike-through.

Issue for Consideration: Appropriateness of the Drafting of Paragraph A17

International Auditing and Assurance Standards Board (IAASB) International Federation of Accountants 545 Fifth Avenue, 14 th Floor New York, NY 10017

Standard CIP 007 4a Cyber Security Systems Security Management

ISACA Cincinnati Chapter March Meeting

Period from October 1, 2013 to September 30, 2014

Audit Considerations Relating to an Entity Using a Service Organization

Exposure Draft The Auditor s Responsibility to Consider Fraud in an Audit of Financial Statements

Standard CIP 005 4a Cyber Security Electronic Security Perimeter(s)

Standard CIP 007 3a Cyber Security Systems Security Management

International Standard on Auditing (Ireland) 505 External Confirmations

SOC Reports The 2017 Update: What s new, What s not, and What you should be doing with the SOC Reports you receive! Presented by Jeff Pershing

NOTICE OF AMENDMENT TO THE 2014 NACHA OPERATING RULES SUPPLEMENT #1-2014

Hong Kong Institute of Certified Public Accountants Practising Certificate ("PC") Business Assurance

Action Plan Developed by The Iranian Institute of Certified Accountants (IICA) BACKGROUND NOTE ON ACTION PLANS

18 April Re.: Exposure Draft, Improving the Structure of the Code of Ethics for Professional Accountants - Phase 1. Dear Mr.

Standard COM-002-2a Communications and Coordination

C22: SAS 70 Practices and Developments Todd Bishop, PricewaterhouseCoopers

BACKGROUND NOTE ON ACTION PLANS

ADVANCED AUDIT AND ASSURANCE

Evaluating SOC Reports and NEW Reporting Requirements

Audit Report. English Speaking Board (ESB)

RISK ASSESSMENTS AND INTERNAL CONTROL CIS CHARACTERISTICS AND CONSIDERATIONS CONTENTS

Standard CIP 005 2a Cyber Security Electronic Security Perimeter(s)

SAS 70 revised. ISAE 3402 will focus on financial reporting control procedures. Compact_ IT Advisory 41. Introduction

NY DFS Cybersecurity Regulations August 8, 2017

INTERNATIONAL STANDARD ON AUDITING 505 EXTERNAL CONFIRMATIONS CONTENTS

Independent Accountant s Report

Cyber Security Standards Drafting Team Update

Contents. Process flow diagrams and other documentation

Guide To Internal Auditing Iatf Store

Standard CIP Cyber Security Electronic Security Perimeter(s)

Date 1. Each CB shall be fully transitioned for ISO 9001:2015 per IAF ID 9 and ANAB Accreditation Rule 20.

primary Control Center, for the exchange of Real-time data with its Balancing

SAS 70 SOC 1 SOC 2 SOC 3. Type 1 Type 2

Adopting SSAE 18 for SOC 1 reports

Comment on Exposure Draft, IFRS Practice Statement: Application of Materiality to Financial Statements

MODULE SPECIFICATIONS

BSCP128 Production, Submission, Audit and Approval of Line Loss Factors Version 3.0. Balancing and Settlement Code. BSC Procedure DRAFT

BSCP128 Production, Submission, Audit and Approval of Line Loss Factors Version 3.0. Balancing and Settlement Code. BSC Procedure DRAFT

Article I - Administrative Bylaws Section IV - Coordinator Assignments

Stakeholder Rules: Rue Montoyer, 10 B-1000 Brussels, Belgium Telephone: Fax:

Learning Objectives. External confirmations procedures as per SA330 and SA 500 requirements

CIP Cyber Security Security Management Controls. Standard Development Timeline

Reviewed by ADM(RS) in accordance with the Access to Information Act. Information UNCLASSIFIED.

Standard CIP Cyber Security Systems Security Management

November 9, Revisions to the Violation Risk Factors for Reliability Standards IRO and TOP

TOP-010-1(i) Real-time Reliability Monitoring and Analysis Capabilities

Frequently Asked Questions Auditor

International Standard on Auditing (UK) 505

Audit Report. Scottish Bakers. 30 March 2015

NERC Relay Loadability Standard Reliability Standards Webinar November 23, 2010

Structure of the Code Table of Concordance

Action Plan developed by Ordre des Comptables Professionnels Agréés d Haïti (OCPAH) BACKGROUND NOTE ON ACTION PLANS

FAQ on the Switchover Scheme for Executive Programme 2012 (Old) Syllabus to Executive Programme2017(New) Syllabus

Standard CIP Cyber Security Incident Reporting and Response Planning

SAS70 Type II Reports Use and Interpretation for SOX

EXTERNAL CONFIRMATIONS SRI LANKA AUDITING STANDARD 505 EXTERNAL CONFIRMATIONS

GDPR AMC SAAS AND HOSTED MODULES. UK version. AMC Consult A/S June 26, 2018 Version 1.10

CIP Cyber Security Recovery Plans for BES Cyber Systems

Policy for Translating and Reproducing Standards Issued by the International Federation of Accountants

Probe MMX Compilation

Data Warehouse Risk Assessment (GDPR)

Audit Report. Association of Chartered Certified Accountants (ACCA)

WHO Secretariat Dr Oleg Chestnov Assistant Director-General Noncommunicable Diseases and Mental Health

Standard CIP Cyber Security Critical Cyber Asset Identification

Quality Assurance Procedure Use of Accreditation Body & FP Certification FZE Marks, Logos and Symbols

The University of Texas at El Paso. Information Security Office Minimum Security Standards for Systems

Standard Development Timeline

June 30, Phyllis Schneider, AAP, Director, Network Rules ᅳ Rules Development & Technical Support

Standard CIP Cyber Security Critical Cyber Asset Identification

Code of Practice for the TL 9000 Certification Process. Release 8.0

Standard Development Timeline

Resolution adopted by the General Assembly. [on the report of the Fifth Committee (A/61/592/Add.4)]

The HIPAA Security & Privacy Rule How Municipalities Can Prepare for Compliance

Corporate Registry: Access Code Guide. Corporate Registry

Action Plan Developed by. Institute of Certified Public Accountants of Uganda BACKGROUND NOTE ON ACTION PLANS

This draft standard is being posted for an initial comment and ballot. The draft includes modifications to meet the directives of FERC Order No. 791.

BACKGROUND NOTE ON ACTION PLANS

CIP Cyber Security Incident Reporting and Response Planning

NPCC Compliance Monitoring Team Classroom Session

Unofficial Comment Form Project Operating Personnel Communications Protocols COM Operating Personnel Communications Protocols

Public Safety Canada. Audit of the Business Continuity Planning Program

Standards Authorization Request Form

ADMIN 3.4. V e r s i o n 4. Paul Daly CEO RISSB

MET CS 674 C1/EL Spring 2017: DATABASE SECURITY SYLLABUS

NERC CIP VERSION 6 BACKGROUND COMPLIANCE HIGHLIGHTS

Audit Report. The Chartered Institute of Personnel and Development (CIPD)

AUDIT PROGRAM. Revision 6 Dated September 29, Management Systems Analysis, Inc. P.O. Box 136, Royersford, PA

Post-accreditation monitoring report: British Gymnastics (BG) April 2007 QCA/07/3121

Standard CIP-006-4c Cyber Security Physical Security

Additional 45-Day Comment Period September Final Ballot is Conducted October/November Board of Trustees (Board) Adoption November 2014

Audit System New Zealand Process Map

Cyber Security Reliability Standards CIP V5 Transition Guidance:

FedRAMP General Document Acceptance Criteria. Version 1.0

Audit confirmation is hereafter referred to as "confirmation."

LIST OF SUBSTANTIVE CHANGES AND ADDITIONS. PPC's Guide to Audits of Local Governments. Thirty first Edition (February 2016)

Standard CIP 004 3a Cyber Security Personnel and Training

Transcription:

ISA 540 (Revised): Update May 2018 ASB meeting Dan Montgomery May 17, 2018

Overview Update on March 2018 IAASB meeting and April 2018 board teleconference Significant revisions post-march Next steps Page 2

Update on March 2018 IAASB Meeting Good discussion and progress on draft of standard Significant areas of comments and discussion included: Introductory paragraphs (nature of accounting estimates, key concepts) (paragraphs 1-6) Obtaining an understanding of the entity and its environment and system of internal control (paragraph 10) Requirement for the auditor to obtain audit evidence in an unbiased manner (i.e., not directed toward audit evidence that is only corroborative and that excludes evidence that may be contradictory) (last sentence of paragraph 15) References to significant data (paragraph 17D and elsewhere) Auditor s range (paragraph 18C) Evaluation of disclosures (interplay of paragraphs 17E(b), 18C(b), 21 and 23) Documentation (paragraph 27) Page 3

Update on March 2018 IAASB Meeting (cont d) Overall impression that application material was much improved (structure, clarity and readability), with some areas still needing a bit more work Appendices Decision to delete Appendix 1 (Measurement Bases of Accounting Estimates) Appendix 2 (Inherent Risk Factors) retained but not discussed in detail and still to be updated Proposed Appendix 4 scalability examples board decided not to include in standard but directed the Task Force to continue to develop such examples as implementation support materials Effective date Concerns raised by some board members about the proposed calendar 2019 effective date Strong desire by banking and insurance regulators for more robust standard to be applied ASAP Many written comments received from board members during and after the meeting Page 4

Update on IAASB Teleconference Board teleconference on April 24 to discuss selected paragraphs and certain related application material Many of the paragraphs were the subject of comments and discussion in March General support for many changes but mixed reactions on others Consistent with previous plenary session and written comments Differing views and wording suggestions Task Force has continued to make revisions in response to the comments Page 5

Significant Revisions Introduction new paragraph added to further highlight points related to the separate assessment of control risk Paragraph 10 revisions to clarify certain aspects of the auditor s understanding and improve consistency with extant ISA 315 Paragraph 15 revised last sentence as follows: The auditor shall design and perform further audit procedures to obtain sufficient appropriate audit evidence in a manner that is neither biased toward obtaining audit evidence that may be corroborative nor toward excluding audit evidence that may be contradictory. Paragraphs 17B, C and D revised introductory wording to remove the reference to sufficient appropriate audit evidence and replace it with the auditor s further audit procedures shall address Paragraph 17D and elsewhere removed references to significant data or data that is significant Page 6

Significant Revisions (cont d) Paragraph 27 several revisions to documentation requirements Simplified the structure Removed the umbrella reference to significant professional judgments preceding 27(b) Changed the focus of 27(b)(i) to documenting the linkage of the further audit procedures with the assessed risks of material misstatement at the assertion level, taking into account the reasons (whether related to inherent risk or control risk) given to the assessment of those risks Consistent with existing requirement in paragraph 28(b) of ISA 330 Revisions to a number of application material paragraphs to improve clarity, consistency with the requirements, and to address other board comments Page 7

Next Steps Task Force to finalize the revisions to address board member comments on the April 24 teleconference and written comments received Revised draft expected to be posted on May 30 for the June board meeting Plan for final approval in June Vote to approve Separate vote on re-exposure Staff is preparing a comprehensive analysis of the changes made to the Exposure Draft to support the IAASB discussion on re-exposure Basis for Conclusions to be prepared following the June meeting PIOB approval of due process Page 8

www.iaasb.org For copyright, trademark, and permissions information, please go to permissions or contact permissions@ifac.org.