Statutory Audit Workflow Base

Statutory Audit Workflow Base v0.1

General reference only. This skill is general tax/accounting reference material for AI-assisted workflows. It has not been reviewed for any specific person's facts, documents, elections, deadlines, residency, filing status, or local procedures. Do not rely on it to file, pay, amend, or take a tax position without review by a qualified professional in the relevant jurisdiction.

What this file is

This is the Tier 1 workflow base for statutory audit content skills. It does not contain country-specific audit rules. It contains:

• The audit lifecycle runbook aligned to ISA (IAASB)
• The country audit threshold matrix (when an audit is required)
• The engagement acceptance and continuance protocol
• The ISA risk assessment and significance-determination framework
• The reviewer-oriented audit file structure
• The opinion formulation decision tree
• The 21 self-checks
• The global refusal catalogue
• The slot contract for country statutory audit skills

Every statutory audit skill MUST be loaded alongside this base.

Section 1 — Audit lifecycle (ISA-aligned)

Phase 1 — Engagement acceptance / continuance (ISA 220, 220R, 210)

[T1] Before accepting or continuing:

Phase 2 — Risk assessment (ISA 315 (Revised 2019))

[T1] Required activities:

• Understand the entity, its environment, and its system of internal control
• Identify and assess Risks of Material Misstatement (RMM) at financial statement and assertion levels
• Determine significant risks
• Identify controls relevant to the audit

[T1] Significant risks receive enhanced procedures and cannot be addressed with substantive analytical procedures alone.

Phase 3 — Audit plan and materiality (ISA 320, 330)

[T1] Materiality:

• Overall materiality — judgment based on benchmark and percentage (commonly 5% of PBT, 0.5-1% of revenue, 1-2% of equity, 1-2% of total assets, depending on user emphasis)
• Performance materiality — typically 50-75% of overall materiality
• Specific materiality — for particular classes of transactions / accounts / disclosures requiring lower threshold (e.g., related parties, executive compensation)
• Clearly trivial threshold — typically 5% of performance materiality

Phase 4 — Fieldwork / procedures (ISA 330, 500, 501-540)

[T1] Audit evidence must be sufficient (quantity) and appropriate (relevance + reliability). Per assertion (existence, completeness, valuation, rights/obligations, classification, presentation/disclosure, accuracy, cut-off), select procedures from:

[T1] Specific ISA-required procedures:

• ISA 240 — fraud: testing journal entries, related party transactions, management override
• ISA 250 — laws and regulations: inquiries, document inspection, legal letters
• ISA 501 — inventory observation, litigation legal letters, segment information
• ISA 540 (Revised) — accounting estimates (including ECL, pensions, goodwill, fair value)
• ISA 550 — related party transactions
• ISA 560 — subsequent events review through report date
• ISA 570 — going concern (12 months from balance sheet date in most jurisdictions; 12 from report sign-off in some)
• ISA 600 — group audits and component auditor reliance

Phase 5 — Completion (ISA 700-720)

[T1] Completion checklist:

• Going concern assessment (ISA 570)
• Subsequent events review (ISA 560)
• Written representations from management (ISA 580)
• Quality control review (ISA 220, 220R)
• Engagement Quality Review (EQR) for PIE / listed audits (ISA 220R, ISQM 1)
• Key Audit Matters (KAM) selection (ISA 701 — listed entities) / equivalent for unlisted in some jurisdictions
• Audit opinion formulation (ISA 700, 705, 706)
• Annual report or other information reading (ISA 720)

Phase 6 — Reporting (ISA 700/705/706/701/710)

[T1] Opinion options:

• Unmodified — financial statements give a true and fair view
• Qualified — material but not pervasive misstatement OR scope limitation
• Adverse — material and pervasive misstatement
• Disclaimer — material and pervasive scope limitation
• Emphasis of matter — adds emphasis without modifying opinion (e.g., subsequent event after issuance)
• Other matter — additional matters not addressed in financial statements
• Key Audit Matters — significant matters in current period audit (listed and certain unlisted)
• Going concern paragraph — material uncertainty paragraph or going concern KAM

Phase 7 — Post-issuance (ISA 220R, ISQM 1)

[T1]

• Engagement quality reviews
• Firm monitoring and remediation
• Inspections by regulators (PCAOB, FRC, AOB, etc.)
• Subsequent discovery of facts (ISA 560 ¶14-17)

Section 2 — When is a statutory audit required?

Each country sets size thresholds (typically two-of-three test on balance sheet total, revenue, employees) above which an audit is mandatory.

[T1] Illustrative thresholds (2025):

[T1] PIEs (Public Interest Entities — listed, banks, insurers): always audited, with additional partner rotation, audit firm rotation, and enhanced reporting (KAMs).

Section 3 — Engagement structure

3.1 Roles

[T1]

3.2 Independence (IESBA Code Part 4A)

[T1] Self-interest, self-review, advocacy, familiarity, intimidation threats must be evaluated. Specific prohibitions for PIEs:

• Bookkeeping / accounting services
• Internal audit outsourcing
• Valuations relevant to the financial statements
• Tax services involving advocacy
• Certain corporate finance / advisory engagements
• Rotation of engagement partner (typically 5 years on / 5 off; PIE rotation rules vary)
• Audit firm rotation (EU mandatory rotation cap typically 10-24 years for PIEs)

Section 4 — Reviewer brief (audit working paper file)

Every audit produces a file containing:

1. Engagement acceptance / continuance file
   - Independence declarations
   - Risk acceptance
   - Engagement letter
   - Predecessor communications

2. Risk assessment file
   - Entity understanding documentation
   - Industry / regulatory environment
   - Internal control walkthroughs and testing
   - Risk identification and significance matrix
   - Significant risks and response plan

3. Planning file
   - Materiality determination (overall, performance, specific, trivial)
   - Audit plan with timing and resources
   - Component auditor instructions (group audits)
   - Internal control reliance plan

4. Fieldwork file
   - By assertion: procedures performed and conclusions
   - Confirmations sent and received
   - Inventory observation working papers
   - Going concern assessment
   - Estimates testing (ECL, pensions, goodwill, fair value)
   - Related party identification and testing
   - Litigation legal letters and management responses
   - Subsequent events review

5. Completion file
   - Final analytical procedures
   - Management representation letter
   - Going concern conclusion
   - Subsequent events through report sign-off
   - Engagement quality review (EQR) for PIE / listed

6. Reporting file
   - Final financial statements signed by management
   - Audit opinion (with KAMs for listed)
   - Letter to those charged with governance / management letter
   - Audit committee communications (ISA 260, 265)

Section 5 — Opinion formulation decision tree

[T1]

Misstatement detected?
  No → Material uncertainty / scope limitation?
    No → Unmodified opinion
    Yes → Pervasive?
      No → Qualified opinion (scope limitation)
      Yes → Disclaimer of opinion
  Yes → Corrected by management?
    Yes → Unmodified opinion
    No → Material?
      No → Unmodified (track for clearly trivial threshold)
      Yes → Pervasive?
        No → Qualified opinion (disagreement)
        Yes → Adverse opinion

Going concern material uncertainty?
  Yes + Adequate disclosure → Unmodified + going concern paragraph
  Yes + Inadequate disclosure → Qualified or adverse depending on materiality/pervasiveness

Section 6 — 21 self-checks

Before signing the opinion, verify:

1. Engagement acceptance / continuance documented and approved
2. Engagement letter signed before fieldwork
3. Independence — firm and engagement team — declared and threats assessed
4. Risk assessment per ISA 315 (Revised) — entity understanding, RMM, significant risks
5. Materiality — overall, performance, specific, trivial — determined and documented
6. Audit plan responsive to identified risks
7. Significant risks addressed with substantive procedures (analytical not alone sufficient)
8. Going concern assessment for at least 12 months from report date
9. Subsequent events review through report sign-off
10. Written representation letter from management received before report sign-off
11. Fraud risk assessment per ISA 240 with required journal entry testing
12. Estimates tested per ISA 540 (Revised)
13. Related parties identified and tested per ISA 550
14. Litigation legal letters obtained per ISA 501
15. Group audit — component auditor reliance documented per ISA 600
16. EQR review completed and reviewer concur for PIEs / required engagements
17. Annual report read and other information consistent with audited financial statements (ISA 720)
18. Communications to TCWG / management letter prepared
19. Opinion type confirmed via decision tree (Section 5)
20. KAMs identified and documented for listed entities (ISA 701)
21. Audit file assembled and archived per ISQM 1 and country regulations (typically 5+ years)

Section 7 — Global refusal catalogue

Refuse to act / escalate to firm leadership if:

Section 8 — Slot contract for country audit content skills

Every country statutory audit content skill must populate:

[REGULATOR]
- National audit regulator (FRC, PCAOB, AOB, H3C, etc.)
- Auditor qualification body (ICAEW, AICPA, etc.)
- Auditor licensing process

[STANDARDS]
- Auditing standards in force (ISA-IAASB, ISA(UK), GAAS-PCAOB, NEP, IDW PS, etc.)
- Reporting standards in force (IFRS-IASB, IFRS-EU, FRS 102, US GAAP, local)
- Required audit reporting language and structure

[THRESHOLDS]
- Statutory audit trigger thresholds (assets, revenue, employees)
- PIE definition and additional requirements
- Audit committee requirements
- Audit firm rotation requirements (PIEs)
- Engagement partner rotation requirements

[FILING]
- Filing deadline (annual return, financial statements, audit report)
- Public access to financial statements (Companies House, BR, RCS, BOE, etc.)
- Late filing penalties
- Format requirements (XBRL, Inline XBRL, ESEF for listed)

[OPINION]
- Required language and structure
- Local KAM / equivalents
- Director's responsibilities statement requirements
- Subsequent event treatment specifics

[ANCILLARY]
- Country-specific procedures (US §404 ICFR opinion; UK FRC ISA(UK) 240/700/701 specific paragraphs; France lettre d'affirmation specifics; etc.)
- Tax / payroll / VAT / pension auditor responsibilities (where audit-related)
- Related-party disclosure local rules

[CROSS-REFERENCES]
- IFRS / local GAAP reconciliation (this skill if dual reporting)
- Pillar Two — auditor responsibility for tax provision and disclosure

Section 9 — Disclaimer

This workflow base produces working papers for audit engagement, not direct accounting or financial advice. Every audit opinion must be signed by a qualified statutory auditor in compliance with the local regulator's requirements.

The most up-to-date, verified version of this workflow base is maintained at openaccountants.com.

Source: OpenAccountants — open tax Guides for AI, reviewed by named CPAs/CAs/EAs. Quality: source-cited draft. For always-current figures and named-accountant backing, connect the OpenAccountants MCP server (openaccountants-mcp).