Deloitte Audit Quality Inspection Jul 2020 PDF
Deloitte Audit Quality Inspection Jul 2020 PDF
DELOITTE LLP
AUDIT QUALITY
INSPECTION
JULY 2020
We monitor the
Our purpose is to serve the public interest by quality of UK Public
setting high standards of corporate governance, Interest Entity audits.
reporting and audit and by holding to account those
responsible for delivering them.
We promote
continuous
improvement
in audit quality.
We have responsibility
for the public oversight
of statutory auditors.
9
quality audit and corporate
8
reporting.
4 5 67
1 2 3
29
Deloitte has 392 audits within the
scope of AQR inspection, including
17
24 FTSE 100 and 51 FTSE 250 audits.
E
M
S D
IT
Deloitte LLP
Appendix 1:
Firm’s internal quality monitoring and ICAEW results 32
We consider whether action under This report sets out the principal findings arising from the 2019/20 inspection
the FRC’s enforcement procedures of Deloitte LLP (“Deloitte” or “the firm”) carried out by the Audit Quality Review
team (“AQR”) of the Financial Reporting Council (“the FRC”). We conducted
is appropriate for all reviews as- this inspection in the period from April 2019 to March 2020 (“the time of our
sessed as requiring improvements or inspection”). We inspect Deloitte, and report publicly on our findings, annually.
significant improvements. In practice,
Our report focuses on the key areas requiring action by the firm to safeguard and
audits assessed as requiring significant enhance audit quality. It does not seek to provide a balanced scorecard of the
improvement, and some of those quality of the firm’s audit work. Our findings cover matters arising from our reviews
assessed as requiring improvement, of both individual audits and the firm’s policies and procedures which support and
promote audit quality.
will be referred to the FRC’s Case
Examiner for consideration of further High quality audit is essential to maintain investor confidence by providing an
regulatory action. The Case Examiner independent, impartial view of a company’s financial statements. Poor auditing
will consider the most appropriate may fail to alert management, shareholders and other stakeholders to material
misstatements (including those arising from fraud) or financial control weaknesses,
action, including Constructive in those cases where management have not identified or appropriately amended
Engagement with the audit firm them. The combination of management not meeting their responsibilities in this
or referral to the FRC’s Conduct respect and poor auditing could potentially put businesses and jobs at risk. High
quality audit matters and we will drive audit firms to implement the necessary
Committee for consideration of changes to reach the required standards.
whether to launch a full investigation.
This may result in a sanction being Our priority sectors for inspection in 2019/20 were Financial Services, General
Retailers, Business Support Services, Construction and Materials, and Retail
imposed and enforced against a
Property. Of the 108 audits that we reviewed in the year across all firms (excluding
statutory auditor and/or the audit firm Local Audit inspections), the number in priority sectors was: Financial Services – 18,
in accordance with the FRC Audit General Retailers – 16, Business Support Services – 6, Construction and
Enforcement Procedure. Materials – 3, and Retail Property – 8. We also paid particular attention to the
following areas of focus: going concern and the viability statement, the other
information in the annual report, long-term contracts, the impairment of assets
and fraud risk assessment.
Significant
100%
Our assessment of the quality of audits reviewed
Improveme
2017/18 2016/17 2015/16 2013/15
80%All reviews – for the seven firms inspected annually
100%100%
Good or lim
Significant
Good or limited
Significant
improvements
60% 90% required
91 82 84
80% Improveme
2017/18
80%
70%
59 2016/17 81
2015/16 2013/15
Improveme
Improvements
required
40% Good or lim
Good or lim
60%
Significant
100% Significant
60% 50% improvements
required
20% 40%
80% 30% 22
25 23 Improveme
40% 20% 21
16
0% 10%
2017/18
7 7
2016/17 4
2015/16
8
2013/15 2
Good or lim
60%
0%
20% 2019/20 2018/19 2017/18 2016/17 2015/16
40%
An audit is assessed as good or limited improvements required where we identified either no or only limited concerns
0%
to report. Improvements required indicate that more substantive improvements were needed in relation to one or more
2017/18 2016/17 2015/16 2013/15
issues. Significant improvements required indicate we had significant concerns, typically in relation to the sufficiency or
Significant
100%
quality of audit evidence or the appropriateness of key audit judgements.
20%
80%
0%
FTSE 350 reviews – for the seven firms inspected annually Improveme
2017/18 2016/17 2015/16 2013/15
100%100%
Good or limI
Significant
Good or limited
Significant
improvements
60% 90% 49 required
54
80% 48 Improveme
Improveme
32 48 Improvements
80% 70% required
40% 60% Good or lim
100% Good or lim
Significant
Significant
60% 50% improvements
required
20% 40%
80% 30% 11 12 14 12
Improveme
40% 20% 10
0% 10%
2017/18
2
5
2016/17
3
2015/16
4
2013/15 1 Good or lim
60%
0%
20% 2019/20 2018/19 2017/18 2016/17 2015/16
40%
0%Due to resourcing constraints, we reviewed fewer audits overall than in recent years. Across all firms, we completed
130 audit2017/18
inspections compared2016/17
to 160 in 2018/19. We did broaden the scope
2015/16 of our reviews to include more
2013/15
aspects of the audit, including the auditor’s response to fraud risk. Changes to the proportion of audits falling within
20%each grading category reflect a wide range of factors, including the size, complexity and risk of the audits selected
for review and the scope of individual reviews. Our inspections are also informed by the priority sectors and areas of
focus referred to above. We are also cognisant, when making our selections, of the Competition and Market Authority’s
0%recommendation that FTSE 350 entity audits should be subject to inspection approximately every five years. For these
reasons, 2017/18
and given the sample sizes involved, our inspection
2016/17 2015/16findings may not be representative of audit quality across
2013/15
a firm’s entire audit portfolio; nor do small year-on-year changes in results necessarily indicate any overall change in
audit quality at the firm. Nonetheless, any inspection cycle with audits requiring more than limited improvements is a
cause for concern and indicates the need for a firm to take action to achieve the necessary improvements.
Firms have made some improvements and we have observed good practices (for
example, better group audit oversight and effective integration of specialists into the audit
team at some firms). We acknowledge the steps taken by firms seeking to address the
key findings in our 2019 public reports.
However, firms are still not consistently achieving the necessary level of audit quality.
They need to make further progress. For example, we continue to find improvements
needed in the same three audit areas: impairment of goodwill and intangibles; revenue
and contracts; and provisions, including loan loss provisions. Over the past three
years, 76 of the 166 (46%) of the findings driving reviews requiring more than limited
improvements have been in these areas. These findings often relate to insufficient
challenge of, and standing up to, management in areas of complexity and forward-
looking judgement. Other audit areas in which we had findings for more than one firm
this year include: audit of inventory, group oversight, going concern and investment
property valuations.
We take robust action for all reviews assessed as requiring improvements or significant
improvements. To date, for the past three inspection cycles, we have referred 28 audits,
across all firms inspected, for consideration of possible enforcement action.
We focused this year on key firm-wide procedures to improve audit quality, including
firms’ audit improvement plans and their processes to analyse the root causes of audit
failings. We have raised findings in these areas to help firms build more effective quality
improvement processes going forward. We will continue to focus on ensuring that the
firms develop their vital root cause analysis processes to identify areas for improvement
and implement change on a timely basis.
We have seen some instances of good practice where audit teams have concerns with
the most significant audit judgements. Firms’ senior management need to be clear that
taking difficult decisions is an appropriate response to improving audit quality, even if it
might sometimes mean delaying or modifying opinions, and ultimately losing some audit
engagements. The tone from the top needs to support a culture of challenge and back
auditors making tough decisions.
• Increasing our focus on proactive supervision of the large audit firms. We will identify
priority areas to improve audit quality, request the firms to implement suitable actions
to achieve them and hold the firms accountable for delivery.
• Asking the Big 4 firms, beginning from 2021, to implement operational separation
of audit practices from the rest of the firm, so that the audit practices are focused
above all else on achieving high audit quality.
• Strengthening the AQR team to increase the number of inspections in our 2020/21
cycle. We inspected a limited number of private companies and significant overseas
components of groups during 2019/20, in line with the recommendations of the
Kingman Review, and we will build on this as part of our overall target of 145-165
inspections for 2020/21.
We wrote to the major audit firms in December 20191 setting out elements that we
observe consistently on high quality audits, especially on high risk engagements. The
hallmarks of such audits include:
We recognise the challenges posed currently by the Covid-19 pandemic, both in relation
to the level of uncertainty surrounding forward estimates and projections, and inability to
carry out physical procedures (for example, stocktakes). We will consider such matters
carefully during our 2020/21 inspection cycle.
Audit selections
In recent years we have selected for inspection an increasing number of ‘higher-risk’
audits. Reliable reporting and high-quality audit matter most for these companies. This
year 42 of the 108 inspections (39%), excluding public sector reviews, were higher
risk compared to 32% in the previous year. We define audits as higher risk where the
group or entity: is in a high-risk sector or geography; is experiencing financial difficulties;
has balances with high estimation uncertainty; or where the auditor has identified
governance or internal control weaknesses. Higher-risk engagements frequently require
audit teams to assess and conclude on complex judgemental issues, for example:
Perhaps because higher-risk audits are more challenging, we find that their audit quality
tends to be lower. Of the audits that required more than limited improvement this year,
we had identified almost half as higher risk. This year 40% (47% last year) of the audits
that we identified as higher risk were assessed as requiring improvement, compared
with 27% (13% last year) of audits not identified as higher risk.
Other factors that may lead both audit quality and our inspection results to vary over
time include:
• The economic cycle: audit can be more difficult in an economic downturn when
corporate profitability is lower.
• Changes in accounting, auditing and ethical standards: new standards can require
more complex and forward-looking estimates which are more difficult to prepare and
audit. Examples in recent years include forward-looking provisioning under IFRS 9
and assessing progressive revenue recognition under IFRS 15.
We have increasingly focused on higher-risk audits because they are where reliable
reporting and high-quality audit matter most. Firms must perform audits to the same
high standards regardless of the risks associated with the audited entity and the
difficulty of the audit work.
We accept that our increased focus on higher-risk audits means that the grade profile
of our inspection findings may be less representative of audit quality across the whole
portfolio of an audit firm. The change in our approach to audit selection over time also
means that historical comparisons of results need to be treated with care.
The firm has taken steps to address the key findings in our 2019 public report, with
actions that included focused training and standardising the firm’s audit work programs.
We have identified improvements, for example in the audit of potential prior year
adjustments and related disclosures, a key finding last year. We also identified good
practice in a number of areas of the audits we reviewed (including effective group
oversight and robust risk assessment) and in the firm-wide procedures (including the
firm’s milestone program, with expected dates for the phasing of the audit monitored
by the firm).
The recurring finding that most contributed to this year’s inspection results on individual
audits related to the extent of challenge over cash flow forecasts for the impairment of
goodwill and other assets. In one instance, this contributed to our assessment of the
audit requiring significant improvement.
The firm needs to take specific action to address the root causes of our findings,
particularly in relation to non-FTSE 350 audits.
Significant
100%
Our
80%
2017/18 assessment of the quality of 2015/16
2016/17 audits reviewed 2013/15 Improveme
100%
Deloitte LLP – All inspections Good or lim
Significant
Good or limited
improvements
60% required
Improveme
100% Improvements
80% requiredSignificant
90% 21 18
40% 13 19 18
Improveme
100%
80%
Good or lim
Significant
Significant
60% 70% improvements
requiredGood or lim
20% 60%
80% 50% Improveme
40%
40%
0%
30%
2017/18 2016/17
6
2015/16 2013/15
Good or lim
60% 3 4
20% 20% 3 3 2
1
Significant
100% 10% 1
0 0
40% 0%
2019/20 2018/19 2017/18 2016/17 2015/16
0%
80% 2017/18 2016/17 2015/16 2013/15 Improveme
20%
100%
FTSE 350 Good or lim
Significant
Good or limited
improvements
60% required
0%100%
80%
90%
9
2017/18 2016/17 2015/16 2013/15
Improveme
Improvements
requiredSignificant I
15 14 13
40% 12
100%
80%
Good or lim
Improveme
Significant
Significant
60% 70% improvements
required Good or lim
20% 60%
80% 50% Improveme
40%
40%
0%
30% 2017/18 2016/17 4 2015/16 2013/15 3
Good or lim
60% 3
20% 20% 1 2
1 1
10%
0 0 0
40% 0%
0% 2019/20 2018/19 2017/18 2016/17 2015/16
2017/18 2016/17 2015/16 2013/15
20%
• Enhance the effectiveness of substantive analytical review and other testing for
revenue.
Further details of our findings on our review of individual audits are set out in section 2,
together with the firm’s actions to address them, as well as details of the good practices
identified in those audits.
Review of firm-wide procedures
This year, our firm-wide work focused primarily on the following areas:
• Partner and staff matters relating to the FY18 performance year.
• Acceptance and Continuance (A&C) procedures.
• Audit quality initiatives.
• Root Cause Analysis (RCA) process.
The reason for the focus on RCA and audit quality initiatives is the importance of taking
effective actions to address recurring inspection findings.
Our key firm-wide findings in these areas related principally to the need to:
A&C procedures
• We had no significant findings to report.
RCA process
• Further improve the RCA process, in particular the methods of identifying RCA themes
and reporting of good practices.
• Partner and staff matters: the effective use of a wide range of audit quality
measures to assess the performance of partners and staff, incorporation of upward
feedback into partner appraisal and promotion processes and robust central
processes around the review and monitoring of partner portfolios.
• A&C procedures: the effective interaction of the firm’s finance and resourcing
systems with the client acceptance and continuance process to monitor
resourcing needs.
• RCA process: timing of reviews, use of dedicated RCA staff and interviewing the
whole team together (as well as individual members).
Further details of our findings in these firm-wide areas are given in section 3, together with
the firm’s actions to address them, as well as details of the good practices identified.
The results of the firm’s internal inspection results, together with those of the ICAEW’s
latest quality monitoring, are set out in Appendix 1.
In section 3 we have commented on the firm’s RCA processes, based on our review of
them earlier in the inspection cycle. The firm has since performed RCA in respect of our
current findings and considered the outcome in developing the actions included in this
report. We have reviewed the results (and related processes) of this and set out our key
observations below, including whether there have been improvements in the related RCA
processes since our review earlier in the year:
• The RCA themes are set out in a reasonable level of detail in the firm’s report, although
not as detailed as some other firms. One of the RCA themes focuses more on the
evidencing of challenge of management, rather than the extent of the challenge.
• The actions set out in the firm’s responses include some areas which will be
developed further by the firm, which we will review when these plans are completed.
We will continue to assess the firm’s RCA process and encourage all firms to develop their
RCA techniques and responsiveness of actions further.
Audit quality remains our number one priority and we have a relentless commitment to
it. We are pleased with our results for the inspections of FTSE 350 entities achieving
90% assessed as good or needing limited improvement, which included some of our
highest risk audits. We are disappointed that our overall inspection results did not
meet this quality bar. Our objective is for 100% of our audits to be assessed as good
or needing limited improvement and we know we still have work to do in order to meet
this standard. We thank the FRC for their insights and comments and continue to
strive for the highest audit quality across every engagement, in particular in the areas
where we have had findings.
We welcome the FRC’s increased focus on higher risk audits and their associated
complexities. Our quality programmes focus on these audits and we consider our
public interest role to be even greater here. We recognise and accept the FRC’s
findings on the individual inspections. We have performed independent root cause
analysis on every finding and have taken action for all findings at the individual audit
level as well as action across all our audits where we could experience similar findings.
There were four overall themes from our root cause analysis in the areas of FRC
findings on the audits inspected. These were:
3. The audit team’s prioritisation of higher risk work meaning lower risk work received
less focus.
4. The need to improve our on-the-job coaching so that senior members of the audit
team use their skills and knowledge to develop the rest of the audit team.
In order to address these root causes we have taken significant action over the
last year, building on the actions and programmes from prior years. We continue to
invest in all these programmes and we set this out in detail throughout this report. A
summary of our actions is included in this section.
• We are focussing more central oversight on higher risk audits, including expanding
our inflight programmes to enhance the quality of the audit before the audit
report is signed. Additional central oversight during the audit enables us to bring
even more challenge to management, boards and audit committees at these
companies.
• We continue to develop and invest in our risk sensing capabilities to gather a
range of data sources to identify companies and industries that display certain risk
characteristics. This provides data to engagement teams to consider in bringing
challenge and provides central insight to companies or industries where we may
need to focus additional oversight.
• We have introduced an audit quality award scheme which recognises and
rewards the behaviours we value, including bringing challenge to management.
We continue to develop ways in which we can embed the recognition of positive
behaviours within our annual performance evaluation processes, in particular in
relation to challenge.
• As part of our audit transformation strategy we are piloting new ways of reporting
on fraud, going concern and internal controls to give readers of audit reports more
transparency. These are subject to the limitations of the current audit regulation
framework. We will also be rolling out further enhanced audit tools in the form
of additional Deloitte Way Workflows on key areas over the coming year again
supporting consistency and focused challenge on the right areas.
• We have increased the involvement of specialists in our audits, for example,
including forensic specialists when certain fraud triggers are met. We have also
expanded our use of specialists in impairment, pension balances and our credit
centre of excellence. These all enhance the challenge in these complex areas.
In order to address the issue of improving project management, our actions include:
• As part of our audit transformation strategy, we have recently launched the
Audit Blueprint, an interactive project management tool that will enable audit
teams to more consistently raise timing issues with company management and
the audit committee.
• We continue to enhance our programme of audit milestones which require audit
teams to have performed certain tasks by certain dates in an audit cycle.
In order to address the issue of the prioritisation of higher risk work over lower risk
work (meaning the lower risk work does not receive adequate focus), we maintain
that we want our audit teams to focus on the highest risk areas of an audit but we
recognise that lower risk areas of work also need sufficient attention. In order to
address these issues we are taking the following action:
• We continue to roll out our enhanced audit tools, the Deloitte Way Workflows, to
additional areas of the audit. These support a consistent testing approach, based
on a guided risk assessment tool. When these workflows are fully implemented
they will ensure that all audit teams perform the same level of work on balances
classified at the same risk level and that the work is evidenced and reviewed in a
consistent way.
• We are further developing our response to the use of substantive analytical review
to audit lower risk areas of an audit (more details are set out on page 19).
• The Audit Blueprint will support teams to focus on actions required at each
stage in the cycle of an audit, ensuring that all areas of the audit receive
sufficient attention.
In order to address the need to improve our on-the-job coaching by senior members
of the audit team, we are taking the following actions:
• Within our business units we are creating small communities who can explore
auditing issues in smaller groups in a developmental way. These are led by our
business unit quality partners.
We have taken swift action to address issues during the inspection cycle, rather
than waiting until the end of the inspection cycle. We have continued to develop our
processes that allow us to quickly identify issues as they are emerging, brief individual
audit teams or groups who might be affected by the issue and develop guidance to
the practice. This allows us to impact the quality of ongoing audits as well as the next
reporting cycle. We also welcome the FRC annually to talk through their findings with
our audit practice in our compulsory online learning sessions. We will continue to
develop further actions to address the RCA findings.
Looking forward, the Covid-19 pandemic presents challenges that have a significant
impact on the entities we audit and consequently our audits. We are delivering a
comprehensive global response which has a significant focus on enhancing audit
quality. We have introduced further independent review and challenge into areas of
the audit process, across our full audit portfolio. We have made enhanced tools and
guidance available to all our auditors and the guidance issued by the FRC in particular
around going concern, APMs and the moratorium has been helpful and we have taken
account of these in our guidance. For public interest entities this includes an additional
independent partner review of the response to Covid-19 and the audit opinion and
increased senior audit partner involvement on all public interest entity audits. We are
subjecting our response to challenge by our own System of Quality Control experts
in order to continuously improve and respond to the external environment in which
we find ourselves. At each stage of our Covid-19 response we have updated the FRC
so that they are aware of the actions being taken by the firm, and to ensure we are
considering as many areas as possible and adapting our response where needed.
All our audit quality initiatives are captured in our audit quality plan. This encompasses
our key objectives and action plans for all aspects of audit quality from monitoring,
learning, people, transformation, methodology to business unit quality teams
and internal controls. Each of these streams has actions within them which are
underpinned by the theme of a culture of challenge. We capture key actions to
address root causes, but also emerging issues such as our Covid-19 response.
These include actions being taken in response to inspection findings from the FRC.
We are further enhancing our plan to have a higher level summary with clear tracking
status of key initiatives which will be used for regular reporting to our UK Oversight
Board together with our established Audit Quality Indicators. We also highlight that
the FRC meet to discuss this report with the INEs after publication, and, the INEs
reviewed the response to this report in detail and will continue to monitor progress on
the actions arising.
Our firm’s annual Transparency Report is the document in which we set out our
detailed approach to audit quality and the ways in which we act to protect the public
interest. This year’s Transparency Report will be issued in September 2020.
We will monitor closely the promptness and effectiveness of the firm’s actions. Should
these not address our concerns adequately, we will consider what further steps we need
to take to both safeguard and improve audit quality.
Key findings
Given the potential impact on the financial statements, we reviewed impairment of
goodwill and other assets on most of the audits we inspected. We identified the following
issues and, on one audit, this contributed to our assessment that it required significant
improvement:
• On two further audits we raised issues about the extent of audit evidence supporting
the audit team’s conclusions on the level of impairment or available headroom.
In one of these audits, the audit team modelled a number of potential scenarios,
including factoring in more pessimistic industry forecasts, but there was insufficient
support for the weighting placed on the different scenarios. In another case, the
audit team did not sufficiently demonstrate to what extent the downside risks in the
forecasts could be mitigated by other revenue streams.
• In addition, on one of these audits, there were differences between the forecasts
underpinning the impairment review and those used in the going concern
assessment; the audit team did not reconcile the impairment and going concern
cash flows.
In all audits assessed in this area as needing more than limited improvements, we
identified through our root cause analysis that while the senior members of the audit
team spent significant time challenging management to ensure that a sufficiently
robust assessment had been completed, they did not sufficiently evidence this
challenge within the audit working papers. In some audits we also identified that
there was insufficient challenge in some areas as a result of project management
weaknesses or prioritisation of areas of perceived higher risk or importance over
perceived lower risk areas. The evidence of the audit challenge was clearer in
circumstances where the company’s original underlying assessment was of a
high quality.
In response to the root causes identified we have made, or are making, further
enhancements as follows:
• We have also expanded the requirements when certain criteria are met, such as
the engagement being considered higher risk, to include a further consultation and
review by the specialist of the conclusions and how planned actions have been
addressed. This also ensures that appropriate prioritisation has taken place.
• The Audit Blueprint will also support audit teams to be able to more consistently
flag issues with management, Boards and Audit Committees when it is clear that
the company’s information is not ready for audit in accordance with the agreed
audit timetable.
• We have updated our consultation template to reflect the most recent inspection
findings.
• We held training sessions in late 2019 for all the impairment specialists who
perform the consultations, one of which was attended by the FRC, to share
updates on recent inspection findings and areas to consider ahead of the
December year-end consultations.
• To address the causal factor of assumed knowledge, where teams assume
certain facts and conclusions are self-evident and therefore do not evidence them
sufficiently, we are developing a series of small group workshops within our quality
communities with a focus on ‘telling the story’ in the audit file.
We are disappointed that issues found in this area led to one of our audits requiring
significant improvement. As with all audits falling short of our required quality standards,
we have completed extensive root cause analysis and have put in place a range of
actions both within the individual audit and at a firm-wide level as detailed above.
Key findings
We reviewed the audit of revenue on most of the audits we inspected, and we identified
the following issues in relation to the use of substantive analytical review procedures,
where audit teams had mainly assessed the revenue streams as normal risk:
• On four audits, we raised issues regarding the sufficiency of evidence to support the
appropriateness of the audit team’s independent pricing expectations. On two of these
audits there was also insufficient evidence over the reliability of sales volumes data used
to set the expectation. For these audits, substantive analytical review constituted the
main substantive procedure and there was generally no reliance on internal controls.
• On another audit, the group audit team did not sufficiently justify the adequacy of the
component audit team’s follow-up of variances identified between the independent
expectations set and the actual results of certain revenue streams.
• On one audit, insufficient testing was performed to ensure recorded revenue
reconciled to cash and other sales transactions. On another audit, we raised issues
with the sufficiency of testing of a key cash reconciliation control.
The firm’s use of substantive analytical procedures is higher than we typically see at other
firms. While it can potentially be effective, Deloitte should consider whether audit teams
are placing too much reliance on this type of audit procedure, in particular when no
controls reliance is being obtained or when it is difficult to set an independent expectation.
Firm’s actions:
Revenue is a key audit area and through risk assessment we focus our procedures on
the areas where they may be a significant risk of material misstatement.
The primary root causes identified were firstly senior level team members not
providing sufficient in depth coaching of other members of the team designing tests
of substantive analytical review, and secondly a tendency of teams not to properly
evidence their rationale for taking a particular approach to the testing. There was also
a root cause of the prioritisation of higher risk areas of work, such as the significant
risk aspect of the revenue testing, meaning that less focus was placed on lower risk
areas where substantive analytical review was used.
• In early 2020 we issued an updated practice aid for performing substantive
analytical reviews, providing more guidance to those completing this work. This
practice aid highlights the pitfalls identified in 2019/20 external inspections; and
• We plan to do a deep dive session as part of our monthly professional update
on substantive analytical reviews in the summer, ahead of December year-end
planning work. This will ensure that teams focus at the planning stage on whether
substantive analytical review is appropriate, the independence of data sources and
the overall body of evidence on revenue considering all elements of testing.
Importantly, given the widespread impact that Covid-19 will have, particularly on
year-on-year trends, we are also developing guidance for audit teams to ensure
that they challenge their approach and consider what information would be required
from management to assess whether it is possible to develop a sufficiently precise
independent expectation to use in a substantive analytical review.
Key findings
Given the potential impact on the financial statements, we reviewed the audit of
management’s estimates on all of the audits inspected. We identified the following
issues relating to the extent of appropriate consideration or challenge of estimates and
provisions, including those in the testing of models:
• In relation to estimating expected credit losses under IFRS 9, on two audits there
were insufficient audit procedures or evidence retained to assess the reliability of
some of the models used to calculate the provision and the appropriateness of certain
assumptions.
• For the audit of a life insurance entity in which there was no controls reliance, the audit
team performed insufficient procedures to confirm that the actuarial models functioned
as intended.
• In relation to assessing the recoverability of deferred tax assets, on one audit there
was insufficient evidence obtained to support the appropriateness of the recovery
period with reference to probable future taxable profits.
• On two audits the audit team did not sufficiently justify ranges used in assessing
estimates for a conduct provision or pricing differences on commodity testing.
The audit of management estimates is one of the most challenging and complex
parts of any audit, as often the estimates that have been formed by management
cover a very large variety of areas, are many multiples of materiality and use complex
models, data from multiple sources and highly judgmental assumptions. Given this,
we invest significant time and effort in providing training for audit teams, guidance
materials, tools and templates and we will continue to do so. This will remain an area
that is challenging for auditors, particularly given the increasing complexity of many of
the estimates. Over the last four years we have significantly increased the number of
specialists in the audit of management estimates to further assist the audit teams in
providing high quality challenge; we expect to add additional specialists in the future.
Our root cause analysis identified challenges in project management (both auditor and
audited entity related) and assumed knowledge as being the most prevalent in the
findings of the FRC. With the implementation of revised ISA 540 “Auditing Accounting
Estimates, Including Fair Value Accounting Estimates, and Related Disclosures”,
we have already taken a number of different actions over the last year and have a
programme of further activities planned to assist our audit teams in this area. This
includes further guided risk assessment and Deloitte Way Workflow tools which we
believe will contribute significantly to helping address both project management
assumed knowledge challenges.
We are developing a guide which can be shared with audited entities to set out clear
expectations of what is required from management in preparation for the audit of
management estimates, and this is linked to our overall Audit Blueprint.
In relation to the specific points noted by the FRC, we also highlight the following
actions we have taken:
1. Given this was the first year of implementation of IFRS 9 and given the complexity
of the expected credit loss estimates required under that standard, we were very
pleased that the FRC considered the model audit programme that we developed
to be of a high standard. We have continued to develop our audit approach to
reflect the lessons we learned from our first year auditing expected credit losses
including ensuring the findings raised by the FRC were addressed.
2. We have enhanced the audit training given to all specialists used in audits such
as valuations, property, forensic accounting, insolvency, IT, pensions, tax and
valuations in order to continually enhance those specialists knowledge of audit
quality issues so that their specialist input is targeted accordingly and brings
further challenge to the audit process.
3. We have increased the focus given to assessing the risks of material misstatement
in the actuarial models used by life insurance companies and ensuring that the
response to those risks is appropriate, whether performed by actuarial specialists
or the core audit team.
The actions we have taken, in particular to enhance scepticism and challenge, will be
ever more relevant as the impacts of Covid-19 further heighten the levels of estimation
uncertainty which we have to address in audits.
Good practice
We identified examples of good practice in the audits we reviewed, including the following:
• E
ffective group oversight: the group audit team’s direction and supervision of
components included the issuance of detailed instructions for key areas of focus and
involved a robust review of component audit working papers.
• E
ffective group oversight: the evidence of group oversight was comprehensive, with
extensive information obtained from the component auditors and good evidence of
review and challenge by the group audit team.
•
Robust risk assessment: for the fair value of financial instruments, the risk
assessment included a detailed evaluation of the financial instruments and a thorough
analysis of the underlying products and respective inherent risks.
• R
obust risk assessment: for fraud risk, the engagement risk assessment
procedures were well thought through and included the involvement of the firm’s fraud
specialist team in assessing and responding to the risk of fraud.
• E
ffective substantive testing on a bank: we considered the independent
revaluation procedures performed by the firm’s financial instruments experts to be
comprehensive. Effective testing was also performed over settlement, nostro and
clearing account balances which involved the audit team independently rebuilding the
bank’s tool to enable the matching of the balances to external data feeds.
•
Comprehensive IFRS 9 expected credit loss (ECL) audit programme: whilst
we have seen varying degrees of application, the firm has designed a clear and
comprehensive IFRS 9 ECL model audit programme which provides a robust
framework for use on audits.
•
Thorough testing of IT control deficiencies: effective additional procedures were
performed to address control deficiencies over privileged access rights and in testing
compensating business controls.
•
Good quality reports to the Audit Committee: these included, in two cases,
extensive detail of both the audit work performed and the nature and extent of the
audit team’s challenge of management in areas of significant risk.
This year, our firm-wide work primarily focused on the following areas:
Background
Processes relating to the appraisal and remuneration of partners and staff are a key
element of a firm’s overall system of quality control and are integral to supporting and
appropriately incentivising audit quality. Our inspection included an evaluation of the firm’s
policies and procedures and their application to a sample of partners and staff for the
2018 appraisal year, across the following areas: appraisals and remuneration; promotions;
recruitment; and portfolio and resource management.
Key findings
We had no significant findings to report.
Good practice
We identified the following areas of good practice:
•
Partner and senior staff performance: the effective use of a wide range of audit
quality metrics to assess partners and staff.
•
Partner appraisal and promotion processes: the incorporation of upward
feedback into the process.
• Partner portfolios: the robustness of the firm’s processes for the centralised review
and monitoring of partner portfolios.
We are pleased with the FRC’s comments – we have transformed our people and
partner procedures over the last few years. We have enhanced the evaluation process
for partners and staff with an increased focus on quality in reward decisions. The
INEs have also been involved with this process to provide additional independent
challenge. We have continued to instil a cultural change with audit quality front and
centre. We will continue to significantly focus on partner and staff matters.
We have plans to further enhance our processes on audit quality objectives and
how audit quality dashboards are used to embed audit quality into how we evaluate
our people.
Background
Audit quality control processes incorporate risk management procedures and are
undertaken at various stages of the engagement. In accordance with the requirements
of ISQC1, the firm has detailed policies and procedures relating to acceptance and
continuance decisions for audited entities. We have reviewed these processes and their
application within our firm-wide inspection activity this year.
Given the greater number of audit tenders in recent years, we assessed firms’ acceptance
and continuance processes as at October 2019. We also discussed with senior leadership
any proposed changes to these processes together with each firm’s strategic decisions.
In addition, we considered firms’ policies relating to withdrawal/dismissal from audits and,
for a sample of audits, the statements provided to the public, successor auditors and the
regulatory authority in connection with withdrawal/dismissal.
Key findings
We had no significant findings to report.
Good practice
We identified the following area of good practice:
•
Real time monitoring of resourcing: The effective interaction of the firm’s finance
and resourcing systems with the acceptance and continuance process to monitor
resourcing needs.
We welcome the FRC good practice observations. We have continued to invest in our
systems in readiness for the new global system of quality control standard for audit
firms, ISQM 1. We have a particular focus on audit engagement resourcing and we will
continue to assess whether we have the right resources for every engagement and
plan our resourcing to support the wellbeing of our people.
AQR procedures
We reviewed key aspects of the firm’s plans to improve audit quality, including the firm’s
monitoring of the progress of key audit quality initiatives. This included the consideration
of recurring themes identified in the RCA of past inspection findings, in the following areas:
culture of the firm (including in relation to challenge of management); in-flight reviews
(internal reviews undertaken during the audit)/central support; and project management/
milestone programs (monitoring the phases of completion of audits).
Background
Deloitte mandates a number of areas to ensure consistent audit quality and its related
initiatives include:
Key findings
Our key findings are set out below and have been communicated to the audit leadership
during the year so that relevant actions could be taken on a timely basis:
• Increase the number of in-flight reviews: while the firm has other central review and
support functions, the level of resources to perform full in-flight reviews, during the
audit, and the number of those reviews, is behind some other similar sized firms.
These should be increased, given the importance of in-flight procedures and the fact
that the other support mechanisms do not adequately compensate for them.
• P
roject management procedures: the firm has a formal milestone program,
whereby the firm sets clear targets to enable monitoring of when the key phases of the
audit should have been completed.
We agree with the FRC that enhancing our detailed AQP to have a higher level
summary with clear tracking status of key initiatives will be beneficial. We are
developing this and expect to provide full details of our enhanced monitoring and
reporting in our Transparency Report in September 2020. The UKOB including
our INEs are very focused on audit quality, and while reporting of the AQP has not
yet been formalised, audit quality matters are already consistently discussed and
challenged at that level.
• We also believe it critical to consider the companies we accept and reaccept
for audit.
• For the most risky and complex matters we have introduced a specialist panel
of senior partners and specialists to help challenge a particularly complex or
judgemental area. Piloted for some December 2019 year ends, this is now
available to audits with greater than normal risk levels with year ends from March
2020 onwards. We would anticipate this being utilised on audits with the most
complex or finely balanced judgements to assess.
• Partners are identified for award against the same criteria, and these awards are
announced by our Audit Business leader. This forms part of the annual partner
appraisal and remuneration process.
• The awards are given on a quarterly basis for individuals and teams, sponsored
by our audit executive, with nominations by any level of staff. We have recognised
144 individuals and teams as part of these awards over the last year. These
awards are highly regarded and publicised and celebrated within the audit practice
both by audit leadership and individual business units.
• We continue to develop ways in which we can embed the recognition of positive
behaviours within our annual performance evaluation processes, in particular in
relation to challenge.
• The continued roll out of our enhanced audit tools, Deloitte Way Workflows,
supports how we embed challenge into the audit process so that the evidence on
the audit file is clear and consistent with the work performed.
Use of specialists
• We have increased the use of specialists, including forensic specialists to
challenge around fraud and fraud risk factors, and insolvency specialists to
challenge on going concern and viability.
• We have expanded the scope of our impairment centre of excellence (as explained
on page 17).
• We have increased the number of controls coaches working directly with individual
engagement teams. A focus on internal controls has become increasingly
important over the last few years within the UK corporate reporting environment
and we will maintain our focus on this area.
• Additional use of specialists has also been a feature of our response to Covid-19
in developing additional guidance and in responding as part of individual audits.
• Our core training TechEx in summer 2019, which is attended by all qualified
grades of staff, included a focused session on auditing of accounting estimates.
We invested significantly in building a programme that included theoretical models
covering cognitive bias, practical exercises and interactive activities which involved:
• Exploring types of cognitive bias which can influence the way we assess
information when auditing management estimates: confirmation bias, authority
bias and anchoring bias. This session involved a number of practical and
theoretical exercises designed to equip our audit staff with the skills necessary
to identify and overcoming bias in audit procedures.
• We continue to develop our learning programmes to include psychology and other
behavioural based theory that can enhance the culture of professional scepticism
and challenge in our audits.
As an audit practice one small but important measure we have taken is to stop the
use of the term ‘clients’ to refer to the companies we audit. This type of change takes
time to embed, but this is an important mindset shift for us as auditors. Our audit
leadership all refer to the companies we audit, and we are driving this change through
the audit practice both in the verbal and written language we use.
Our response to Covid-19 has further developed our culture of challenge in the audit
process. We have introduced enhanced tools and guidance for our auditors. For
listed audits and public interest entities we have introduced an additional independent
partner review of the response to Covid-19 and the audit opinion, and we have
increased senior audit partner involvement on all public interest entity audits.
Inflight reviews
Our inflight reviews are performed with the same rigour and depth as a full internal
practice reviews of an archived file, and are performed in stages along with the audit
as it progresses through the various milestones. Our inflight reviews are one of a suite
of inflight monitoring, support and review activities in place in our audit practice.
We have responded to the FRC findings that we should do more in this area and
we have created a risk monitoring database and dashboard to assist in assessing
risk across our PIE audits and monitoring the central support in place around
those audits. This was implemented ahead of December 2019 year ends and we
undertook a number of incremental inflight actions as a result. We also considered
if there were other central actions which would be appropriate to implement. We
are now formalising the process of using this dashboard and developing a more
automated update process and review cycle throughout the year of the overview this
dashboard provides.
The other areas of inflight activities, in addition to the EQCR and full or focused inflight
reviews, include: diagnostics during audits to monitor compliance with Audit Quality
Milestones; audit health checks which check compliance in specific topic areas;
thematic inflight reviews where the audit response to broader themes (such as
We also have centres of excellence for various topics, and an established consultation
process with technical experts that provide further external challenge to our teams
on the most judgemental areas such as impairment or IFRS 9. The Emerging Issues
Group provides engagement-specific in-sights through market and industry research.
Our highest risk audits are subject to our monitoring programme for higher risk audits
that further involves additional monitoring and processes to address this elevated
level of risk.
Background
The RCA process should be designed to identify the causes of inspection findings, in
order to aim to prevent them from recurring. It is part of a continuous improvement cycle
of inspecting audits, investigating the root causes for inspection results and improving the
firms’ ability to act on them through implementing effective actions.
The firm has been performing RCA for a number of years and follows methodology
and guidance issued to it by the global firm, supplemented by additional UK specific
procedures.
This year, we have reviewed the firm’s 2018/19 process for undertaking its RCA, including
resources and timing.
Key findings
The firm should further improve the RCA process, particularly in relation to:
• Reporting of good practices: the reporting of RCA themes does not sufficiently
highlight good practices.
•
Timing of reviews: the firm sets deadlines for completion of RCA on individual audits.
This ensures that the RCA is performed on an ongoing basis.
•
Use of dedicated RCA review staff: some of the staff used to perform RCA are
dedicated to this and do not have other responsibilities. This improves the experience
and consistency of the process.
•
Team wide interviews: as well as interviews of individual staff, there are also
interviews of all team members at the same time.
We welcome the FRC’s positive comments on the areas of good practice in our
root cause analysis (RCA) process and the ways in which it can be enhanced. We
continually invest in enhancing our RCA process because we know how important
it is for us to identify both positive and negative root causes and to take swift and
pervasive action.
As the nature and amount of our RCA activities have increased we are developing how
we analyse and identify themes across all RCA activities using technology and visual
reporting tools.
• We have improved our recording of causal themes to facilitate thematic analysis
and linkage back to audits and findings. We are continuing to explore the use of
our analytics technology to give us further insight.
• We have redesigned our database for recorded causes and themes to facilitate
more timely and improved reporting to key stakeholders.
• We have increased the number of positive RCA on engagement reviews that have
been identified with good practice, and we have reviewed in detail the areas with
no or low level findings to help us identify good practice and behaviours that drive
high audit quality; and
Full details of our RCA activities are set out in our Transparency Report each year and
will again be included in detail in the upcoming report in September 2020.
This appendix sets out information relating to the firm’s internal quality monitoring for
individual audit engagements. We consider that publication of these results provides a
fuller understanding of quality monitoring in addition to our regulatory inspections, but we
have not verified the accuracy or appropriateness of these results.
To understand how the firm’s internal quality monitoring results sit as part of the
firm’s overall assessment of quality this should be read in conjunction with the firm’s
Transparency Report for 2019 and the report to be published in 2020, which provide
further detail of the firm’s wider system of quality control, other layers of quality monitoring
and, importantly, our focus around public interest.
The scope of inspections and differences in how inspections are performed and rated
means that the results of the firm’s internal quality monitoring may differ from those of
external regulatory inspections and other firms.
Non-Compliant
Results of internal quality monitoring for the last 3 years Improvement required
100% 5% 5% Compliant
9%
6%
90% 17%
80% 21%
70%
60%
50% 89%
40% 78%
70%
30%
20%
10%
0%
2019 2018 2017
100%
Engagement reviews are assigned an overall evaluation rating based on the practice
review findings noted. The ratings received are classified as either Compliant,
Improvement Required or Non-Compliant. A compliant rating indicates there are no
exceptions or the exceptions identified are of a very minor nature relating to isolated
instances of non-compliance with certain policies, requirements or standards; an
Improvement Required rating indicates that there are a small number of findings relating to
these areas, whereas a non-compliant rating indicates that non-compliance with several
policies, requirements or professional standards or an individually significant matter
was identified and it cannot be determined that policies, requirements or professional
standards reviewed are fully implemented.
For all internal inspections, the firm uses moderation panels to rate individual findings and
the overall engagement and takes into account the ratings applied by regulators when
doing so. The moderation panel will normally include three or four members and will
be comprised of partners and directors in the central inspection team and experienced
partners from the UK or overseas member firms. These panellists are independent from
the audit team and the team that undertook the inspection.
The firm undertakes Root Cause Analysis (“RCA”) for all improvement required and non-
compliant engagement inspections, as well as on positive results to identify factors to
support audit quality. The firm performs retrospective remediation of all high and medium
findings, and prospective remediation on all other findings in the subsequent year’s audit.
Readers should note the decline in results profile of our internal archived file inspection
programme over the past 3 years. Having evaluated the results we consider this
decline to be mostly attributable to the continual improvements we have made to
our internal inspection process to achieve our objective of assessing the quality
of our audits against the highest bar possible. To do this we take account of the
expectations of our global regulators including the FRC and the PCAOB as well as our
own Deloitte global quality standards, and in 2019 changed our approach to rating
individual engagements by making it harder to achieve a Compliant rating, which
accounts for 7% of the overall 8% change. We also made our inspections more robust
by pushing our reviewers to be more granular in their approach to reviewing, and to
employ an even greater level of professional scepticism.
Whilst the firm tries to at least mirror the processes of the external regulator due
to differences in how inspections are performed and rated, the results of the firm’s
internal quality monitoring may differ from those of external regulatory inspections and
other firms.
Our overall aim is that our internal inspections serve as one of our tools to drive
continuous improvement in audit quality. We place our focus on rigorous compliance
with applicable standards, also taking account the approaches adopted by our
external regulators. We perform a wide and detailed in-depth review seeking to identify
areas to be improved on individual audits. We continually assess and seek feedback
on our internal monitoring process to make further enhancements to support the
delivery of audit quality.
The firm’s root cause analysis for the most recent internal inspections programme
identified a number of thematic root causes of findings. These were in the areas of:
• M
ind-set related root causes due to Assumed Knowledge, where information
or evidence that is considered obvious to the engagement team as a result of
their familiarity or industry expertise) is not included on the audit file to ‘tell the
story’, and examples in individual portfolios of prioritisation of higher risk areas of
audit work.
• R
esourcing and deployment root causes with examples of capacity challenges
and issues with work allocation to junior staff on individual engagement teams.
• S
killset root causes with examples of certain gaps in knowledge or experience,
or particular industry/accounting matters at either preparer or reviewer level.
There were also some additional individual root causes identified on the engagements
assessed as non-compliant but these were not considered to be thematic. These
related to a workload and capacity cause and to unplanned long term sickness
absence. Actions were taken at a business unit level relevant to the specific
engagement to address these.
Thematic causes from engagement reviews were communicated to the business unit
leaders and to the practice to increase awareness of the common pitfalls together with
positive causal factors identified.
• Increased challenge by reviewers to identify where the audit file may not tell
the story.
• The commencement of a review of the timing of the learning curriculum and the
linkage of that to audit transformation including defining the expectations of each
grade of staff, including where appropriate a focus on coaching of junior grades.
Background
The firm is subject to annual independent monitoring by ICAEW. ICAEW undertakes its
reviews under delegation from the FRC as the Competent Authority. ICAEW reviews audits
outside the FRC’s population of retained audits, and accordingly its work covers private
companies, smaller AIM listed companies, charities and pension schemes. ICAEW does
not undertake work on the firm’s firm-wide controls as it places reliance on the work
performed by the FRC.
Scope
Reviews of audits are either standard-scope or focused. Standard-scope reviews are
designed to form an overall view of the quality of the audit. ICAEW assesses the audits
it reviews as either ‘satisfactory/acceptable’, ‘improvement required’ or ‘significant
improvement required’. Where appropriate, ICAEW also carries out focused reviews
to follow up on significant issues highlighted in the previous year’s file reviews or other
specific risks. These reviews are limited in scope. Visit icaew.com/auditguidance for
further information about ICAEW’s audit monitoring process including its approach to
assessing audits.
ICAEW has completed its 2019 monitoring review and the report summarising its audit
file review findings and any follow-up action proposed by the firm will be considered by
ICAEW’s audit registration committee in September 2020.
Results
In 2019, the audit work reviewed was generally of a good standard. Nine standard-scope
reviews were satisfactory/acceptable, however one required significant improvement.
ICAEW did not carry out any focused reviews. ICAEW assessed one audit as needing
significant improvement because the consolidated accounts contained errors stemming
from mistakes in the consolidation process. The errors should have been identified by the
firm’s quality control procedures. ICAEW had no significant concerns about the rest of the
audit work on this file. Other findings included a theme relating to substantive analytical
review of revenue, and isolated aspects of audit evidence and documentation. ICAEW
identified and shared a number of examples of good practice.
Satisfactory/acceptable
Standard-scope reviews
Improvement required
100%
1 1
90% 2
Significant improvement
required
80%
70%
60%
11
9 12
50%
8
40%
30%
20%
10%
0%
2019 2018 2017
Given the sample size, changes from one year to the next in the proportion of audits falling within each
category cannot be relied upon to provide a complete picture of a firm’s performance or overall change
in audit quality.
Financial Deloitte
37 Reporting – Audit Quality Inspection (July 2020)
Council
LLP 37
This report has been prepared for general information only. The FRC does not
accept any liability to any party for any loss, damage or costs howsoever arising,
whether directly or indirectly, whether in contract, tort or otherwise from any
action or decision taken (or not taken) as a result of any person relying on or
otherwise using this document or arising from any omission from it.
Financial
38 Reporting
Deloitte – Audit Quality Inspection (July 2020)
Council
LLP 38
Financial Reporting Council
www.frc.org.uk