Statement on Auditing Standards Consideration of Laws and Regulations in an Audit of Financial Statements

SAS Consideration of Laws and Regulations in an Audit of Financial Statements supersedes SAS No. 54, Illegal Acts by Clients (AICPA, Professional Standards, vol. 1, AU sec. 317).

Effective for audits of financial statements for periods ending on or after December 15, 2012.

1. Scope

a) Addresses the auditor’s responsibility to consider laws and regulations in an audit of financial statements.

b) Does not apply to other assurance engagements in which the auditor is specifically engaged to test and report separately on compliance with specific laws or regulations.

2. Effect of Laws and Regulations

a) The impact of laws and regulations on financial statements varies considerably.

b) The applicable laws and regulations constitute the legal and regulatory framework of the entity.

c) Some laws or regulations have provisions with a direct effect on the financial statements because they determine the reported amounts and disclosures required in an entity’s financial statements.

d) Other laws or regulations are to be complied with by management, or set the provisions under which the entity is allowed to conduct its business, but do not have a direct effect on an entity’s financial statements.

e) Some entities operate in heavily regulated industries (such as banks and chemical companies) while others are subject only to the many laws and regulations that relate generally to the operating aspects of the business (such as those related to occupational safety and health and equal employment opportunity).

f) Noncompliance with laws and regulations may result in fines, litigation, or other consequences for the entity that may have a material effect on the financial statements.

3. Responsibility for Compliance with Laws and Regulations

a) Responsibility of Management– Management’s responsibility, with the oversight of those charged with governance, is

(1) to ensure that the entity’s operations are conducted in accordance with the provisions of laws and regulations, including compliance with the provisions of laws and regulations that determine the reported amounts and disclosures in an entity’s financial statements.

b) Responsibility of the Auditor

(1) The requirements in this SAS are designed to assist the auditor in identifying material misstatement of the financial statements due to noncompliance with laws and regulations.

(2) The auditor is not responsible for preventing noncompliance and cannot be expected to detect noncompliance with all laws and regulations.

(3) The auditor is responsible for obtaining reasonable assurance that the financial statements as a whole are free from material misstatement, whether caused by fraud or error.

(4) The auditor is responsible for taking into account the applicable legal and regulatory framework during the planning and execution of the audit procedures.

(5) In the context of laws and regulations, the potential effects of inherent limitations on the auditor’s ability to detect material misstatements are greater for the following reasons:

(a) Many laws and regulations (relating principally to the operating aspects of an entity) typically do not affect the financial statements and are not captured by the entity’s information systems relevant to financial reporting.

(b) Noncompliance may involve acts designed to conceal it, such as collusion, forgery, deliberate failure to record transactions, management override of controls, or intentional misrepresentations made to the auditor.

(c) Whether an act constitutes noncompliance is ultimately a matter for legal determination, such as by a court of law.

(6) This SAS distinguishes the auditor’s responsibilities in relation to compliance with the following two categories of laws and regulations that may have a material effect on the financial statements of the company:

(a) The provisions of those laws and regulations generally recognized to have a direct effect on the determination of material amounts and disclosures in the financial statements, such as tax and pension laws and regulations.

(b) The provisions of other laws and regulations that do not have a direct effect on the determination of the amounts and disclosures in the financial statements but compliance with which may be:

(i) fundamental to the operating aspects of the business,

(ii) fundamental to an entity’s ability to continue its business, or necessary for the entity to avoid material penalties (for example, compliance with the terms of an operating license, regulatory solvency requirements, or environmental regulations).

c) Differing requirements are specified for each of the previously mentioned categories of laws and regulations.

(1) Auditor’s responsibility for the category referred to in (6) (a) is to obtain sufficient appropriate audit evidence regarding material amounts and disclosures in the financial statements that are determined by the provisions of those laws and regulations.

(2) Auditor’s responsibility for the category referred to in (6) (b) is limited to performing specified audit procedures that may identify noncompliance with those laws and regulations that may have a material effect on the financial statements.

d) The auditor is required to remain alert to the possibility that other audit procedures applied for the purpose of forming an opinion on financial statements may bring instances of identified or suspected noncompliance with laws and regulations to the auditor’s attention.