ACCA AAA INT Syllabus D. Audit of Historical Financial Information - Auditing an outsourced function - Notes 8 / 8
The auditor has no direct contractual relationship with the service organisation
Planning
Potential problems with access and confidentiality
Although the service organisation should co-operate with us as it is in their interests
Obtain an understanding of the nature and significance of the services provided by the service organisation
Service limited to recording and processing?
Client does all the authorising
Client uses own control policies and procedures
Service provider is accountable
Client relies on their control policies
Audit risk is now higher - new procedures required
Things to Consider
Nature of services provided and relationship between client and service organisation
Regulations involved?
Contractual terms
Oral or legal contract?
Material financial statements assertions affected ?
Extent to which client's accounting and internal control systems interact with service organisations
Client's internal controls (to ensure completeness, accuracy, validity). Are they the same as if processing were done "in house"?
Service organisation's capability and financial standing. Consider the effect of business failure on the client entity
Information available in user and technical manuals
Existence of third party reports about the operation and effectiveness of the service organisation's accounting and control systems.
Evidence when client can't get sufficient evidence
Use the service organisations auditor's reports - on their controls
Contact or visit the service organisation (via the user entity) to obtain specific information
Engage the services of another auditor