Auditing Profession Act, 2005 (Act No. 26 of 2005)

Board Notices

Independent Regulatory Board for Auditors

New Rules Regarding Improper Conduct and Code of Professional Conduct for Registered Auditors

Code of Professional Conduct for Registered Auditors

Part B : Registered Auditors in Public Practice

Section 291 : Independence - Other Assurance Engagements

Provision of Non-assurance Services to Assurance Clients

Purchase

291.140

Firms have traditionally provided to their assurance clients a range of non-assurance services that are consistent with their skills and expertise. Providing non-assurance services may, however, create threats to the independence of the firm or members of the assurance team. The threats created are most often self-review, self-interest and advocacy threats.

291.141

When specific guidance on a particular non-assurance service is not included in this section, the conceptual framework shall be applied when evaluating the particular circumstances.

291.142

Before the firm accepts an engagement to provide a non- assurance service to an assurance client, a determination shall be made as to whether providing such a service would create a threat to independence. In evaluating the significance of any threat created by a particular non-assurance service, consideration shall be given to any threat that the assurance team has reason to believe is created by providing other related non-assurance services. If a threat is created that cannot be reduced to an acceptable level by the application of safeguards the non-assurance service shall not be provided.

Management Responsibilities

291.143

Management of an entity performs many activities in managing the entity in the best interests of stakeholders of the entity. It is not possible to specify every activity that is a management responsibility. However, management responsibilities involve leading and directing an entity, including making significant decisions regarding the acquisition, deployment and control of human, financial, physical and intangible resources.

291.144

Whether an activity is a management responsibility depends on the circumstances and requires the exercise of judgment. Examples of activities that would generally be considered a management responsibility include:

•	Setting policies and strategic direction;

•	Directing and taking responsibility for the actions of the entity's employees;

•	Authorising transactions;

•	Deciding which recommendations of the firm or other third parties to implement; and

•	Taking responsibility for designing, implementing and maintaining internal control.

291.145

Activities that are routine and administrative, or involve matters that are insignificant, generally re deemed not to be a management responsibility. For example, executing an insignificant transaction that has been authorised by management or monitoring the dates for filing statutory returns and advising an assurance client of those dates is deemed not to be a management responsibility. Further, providing advice and recommendations to assist management in discharging its responsibilities is not assuming a management responsibility.

291.146

Assuming a management responsibility for an assurance client may create threats to independence. If a firm were to assume a management responsibility as part of the assurance service, the threats created would be so significant that no safeguards could reduce the threats to an acceptable level. Accordingly, in providing assurance services to an assurance client, a firm shall not assume a management responsibility as part of the assurance service. If the firm assumes a management responsibility as part of any other services provided to the assurance client, it shall ensure that the responsibility is not related to the subject matter and subject matter information of an assurance engagement provided by the firm.

291.147

To avoid the risk of assuming a management responsibility related to the subject matter or subject matter or subject matter information of the assurance engagement, the firm shall be satisfied that a member of management is responsible for making the significant judgments and decisions that are the proper responsibility of management, evaluating the results of the service and accepting responsibility for the actions to be taken arising from the results of the service. This reduces the risk of the firm inadvertently making any significant judgments or decisions on behalf of management. This risk is further reduced when the firm gives the client the opportunity to make judgments and decisions based on an objective and transparent analysis and presentation of the issues.

Other Considerations

291.148

Threats to independence may be created when a firm provides a non-assurance service related to the subject matter information of an assurance engagement. In such cases, an evaluation of the significance of the firm's involvement with the subject matter information of the engagement shall be made, and a determination shall be made of whether any self-review threats that are not at an acceptable level can be reduced to an acceptable level by the application of safeguards.

291.149

A self-review threat may be created if the firm is involved in the preparation of subject matter information which is subsequently the subject matter information of an assurance engagement. For example, a self-review threat would be created if the firm developed and prepared prospective financial information and subsequently provided assurance on this information. Consequently, the firm shall evaluate the significance of any self-review threat created by the provision of such services and apply safeguards when necessary to eliminate the threat or reduce it to an acceptable level.

291.150

When a firm performs a valuation that forms part of the subject matter information of an assurance engagement, the firm shall evaluate the significance of any self-review threat and apply safeguards when necessary to eliminate the threat or reduce it to an acceptable level.