Key Audit Guidance Related to Audit Confirmations
AuditConfirmations is designed for compliance with all related GAAS audit guidance. Additional audit guidance may apply, however the key sections noted below not only illustrate how AuditConfirmations complies with authoritative guidance, but actually improves compliance with applicable guidance related to confirmation audit procedures and evidential matter in the audit.
Name: AU Section 330
Description: The Confirmation Process
Guidance: AICPA/PCAOB
“During the performance of confirmation procedures, the auditor should maintain control over the confirmation requests and responses. Maintaining control means establishing direct communication between the intended recipient and the auditor to minimize the possibility that the results will be biased because of interception and alteration of the confirmation requests or responses.”
Complete AU Section 330 Official Guidance
Name: AU Section 9330
Description: The Confirmation Process: Auditing Interpretations of AU Section 330
Guidance: AICPA/PCAOB
“Various means might be used to validate the source of the electronic information and the respondent’s knowledge about the requested information. For example, the use of encryption, electronic digital signatures, and procedures to verify Web site authenticity may improve the security of the electronic confirmation process.”
Complete AU Section 9330 Official Guidance
Name: AU Section 326
Description: Evidential Matter
Guidance: AICPA/PCAOB
“Confirmation, which is a specific type of inquiry, is the process of obtaining a representation of information or of an existing condition directly from a third party.”
“The auditor should consider the reliability of the information to be used as audit evidence, for example, photocopies; facsimiles; or filmed, digitized, or other electronic documents, including consideration of controls over their preparation and maintenance where relevant.”
Complete AU Section 326 Official Guidance
Name: PR 03-1
Description: Practice Alert 03-1: Audit Confirmations
Guidance: AICPA
“An electronic confirmation process that creates a secure confirmation environment may mitigate the risks of human intervention and misdirection. The key lies in the process or mechanism used by the auditor and the respondent to minimize the possibility that the results will be compromised because of interception, alteration, or fraud with respect to the confirmation.”