What Are Generally Accepted Auditing Standards (GAAS)?
Generally Accepted Auditing Standards (GAAS) are a set of systematic guidelines used by auditors when conducting an audit report on an entity's financial statements. These standards fall under the broader financial category of Accounting and Auditing Standards. GAAS provide a framework for conducting high-quality audits, ensuring consistency and reliability in the auditor's work. They dictate the auditor's qualifications, the conduct of the audit, and the nature of the report, aiming to assure users that financial information is presented fairly. The adherence to Generally Accepted Auditing Standards helps to maintain public trust in the financial reporting process.
History and Origin
The origins of Generally Accepted Auditing Standards in the United States trace back to the American Institute of Certified Public Accountants (AICPA). For many years, the AICPA established and maintained these standards. However, a significant shift occurred in the early 2000s following major corporate accounting scandals, most notably the Enron scandal in 2001, which led to widespread investor distrust and the dissolution of Arthur Andersen, one of the "Big Five" accounting firms at the time.12, 13
In response to these events, the U.S. Congress passed the Sarbanes-Oxley Act of 2002 (SOX).10, 11 A key provision of SOX was the creation of the Public Company Accounting Oversight Board (PCAOB), a nonprofit corporation overseen by the Securities and Exchange Commission (SEC). The PCAOB was mandated to oversee the audits of public companies to protect investors.8, 9 Consequently, for public company audits, the PCAOB adopted the AICPA's existing Generally Accepted Auditing Standards as "interim standards" and has since developed its own comprehensive set of PCAOB auditing standards, which supersede GAAS for public entities.5, 6, 7 GAAS, as issued by the AICPA, continues to apply to audits of private companies and other non-issuers.
Key Takeaways
- Generally Accepted Auditing Standards (GAAS) are professional guidelines that govern the conduct of financial audits.
- They provide a framework for auditors to ensure the quality, consistency, and reliability of audit work.
- GAAS cover general standards, standards of fieldwork, and standards of reporting.
- For public companies in the U.S., the PCAOB's auditing standards supersede GAAS.
- Adherence to GAAS is crucial for maintaining public confidence in financial reporting.
Interpreting the GAAS
Generally Accepted Auditing Standards are not a rigid checklist but rather a conceptual framework that guides an auditor's professional judgment. They provide principles for planning an audit, performing audit procedures, and issuing the audit report. The standards emphasize the importance of the auditor's professional competence and independence, along with exercising due professional care throughout the engagement.
Interpreting GAAS involves understanding the spirit behind each standard. For instance, the general standards require that the audit be performed by a person or persons having adequate technical training and proficiency as an auditor. This means that the audit team must possess the necessary knowledge and skills to understand the client's industry, accounting systems, and relevant accounting principles. Similarly, standards of fieldwork require proper planning, risk assessment, and obtaining sufficient appropriate audit evidence to form an opinion.
Hypothetical Example
Consider "Tech Innovations Inc.," a privately held software company. Its management decides to seek an independent audit of its annual financial statements to present to potential investors. Tech Innovations Inc. engages "AuditPro LLC," a private accounting firm.
To conduct this engagement, AuditPro LLC's team must adhere to Generally Accepted Auditing Standards.
- General Standards: The audit team members assigned to Tech Innovations Inc. must be competent and possess the necessary experience in auditing software companies. They must also maintain auditor independence from Tech Innovations Inc., meaning they have no financial interest in the company and are not influenced by management.
- Standards of Fieldwork:
- Planning and Supervision: The engagement partner at AuditPro LLC, Sarah, and her team first develop an audit plan. They assess Tech Innovations Inc.'s internal controls related to revenue recognition and expense recording.
- Understanding the Entity and its Environment: They gain an understanding of Tech Innovations Inc.'s business model, its competitive landscape, and its specific software products to identify potential risks of material misstatement.
- Audit Evidence: The team then performs substantive procedures, such as examining sales contracts, confirming accounts receivable balances with customers, and reviewing payroll records. They collect sufficient appropriate audit evidence to support their conclusions about the fairness of the financial statements.
- Standards of Reporting: Based on the evidence gathered, Sarah's team prepares an audit report. If they find that Tech Innovations Inc.'s financial statements are presented fairly in all material respects, they will issue an unmodified opinion. If there are significant issues, the opinion might be modified, explaining the nature of the misstatement or limitation.
By following these Generally Accepted Auditing Standards, AuditPro LLC ensures a systematic and reliable audit process for Tech Innovations Inc.
Practical Applications
Generally Accepted Auditing Standards are foundational to the auditing profession, guiding the daily work of auditors across various sectors. Their practical applications are evident in:
- Private Company Audits: For companies that are not publicly traded, GAAS provide the authoritative guidance for conducting statutory audits, internal audits, and other attestation engagements. This helps private businesses secure financing, attract investors, or comply with contractual agreements by providing credible financial assurances.
- Non-Profit Organizations: GAAS are applied when auditing non-profit entities to ensure accountability to donors, grantors, and the public. This helps in verifying that funds are used appropriately and financial statements accurately reflect the organization's activities.
- Governmental Audits: While specific government auditing standards exist (e.g., Government Auditing Standards, or "Yellow Book"), these often incorporate and build upon the fundamental principles of GAAS, adapting them to the unique context of public sector financial management and compliance requirements.
- Promoting Audit Quality: Organizations like the Center for Audit Quality (CAQ), an autonomous public policy organization affiliated with the AICPA, work to enhance audit quality and bolster public confidence in the auditing process.3, 4 They promote adherence to high standards, which are rooted in the principles of GAAS, and provide resources for audit firms and audit committees.2
- Educational and Licensing Frameworks: GAAS forms a core part of the curriculum for accounting students and is tested in professional certification exams for Certified Public Accountants (CPAs), ensuring that new professionals enter the field with a solid understanding of auditing principles.
Limitations and Criticisms
While Generally Accepted Auditing Standards are crucial for audit quality, they do have inherent limitations and have faced criticisms.
One primary limitation is that GAAS provides a framework rather than a rigid set of rules, requiring significant professional judgment from auditors. While this flexibility can be beneficial, it also introduces subjectivity and can lead to inconsistencies in application if auditors do not exercise adequate due professional care or possess sufficient expertise.
Furthermore, audits conducted under GAAS, by their very nature, are designed to provide reasonable assurance, not absolute assurance, that financial statements are free from material misstatement. This means there's always a risk that some misstatements, particularly those involving sophisticated fraud, may not be detected. The auditor's opinion is based on testing and sampling, not an examination of every transaction.
A significant criticism, especially regarding the broader auditing landscape that GAAS contributed to, relates to the cost of compliance. The rigorous requirements, particularly those stemming from the post-Enron era's heightened focus on audit quality and internal controls (such as Section 404 of the Sarbanes-Oxley Act for public companies), can impose substantial costs on entities, particularly smaller businesses. Critics argue that for some companies, the extensive external auditor attestation of internal controls can be disproportionately expensive, potentially discouraging private companies from going public due to the high regulatory burden.1
The concept of auditor independence, while central to GAAS, has also faced scrutiny. Concerns can arise when auditing firms provide both audit and consulting services to the same client, potentially creating conflicts of interest. Although regulations attempt to mitigate these conflicts, maintaining absolute independence in practice remains a continuous challenge.
Generally Accepted Auditing Standards (GAAS) vs. Public Company Accounting Oversight Board (PCAOB) Auditing Standards
While both Generally Accepted Auditing Standards (GAAS) and Public Company Accounting Oversight Board (PCAOB) Auditing Standards aim to ensure high-quality financial statement audits, their scope and authority differ significantly, leading to common confusion.
Generally Accepted Auditing Standards (GAAS) are issued by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA). These standards primarily apply to audits of private companies, non-profit organizations, and governmental entities in the United States. GAAS emphasize general qualifications and conduct, fieldwork procedures, and reporting. They are a principles-based framework guiding auditors in planning, performing, and reporting on financial statement audits for entities not subject to SEC oversight.
In contrast, PCAOB Auditing Standards are established by the Public Company Accounting Oversight Board (PCAOB), an entity created by the Sarbanes-Oxley Act. These standards apply exclusively to audits of public companies (issuers) registered with the Securities and Exchange Commission (SEC). While the PCAOB initially adopted the AICPA's GAAS as interim standards, it has since developed its own set of detailed and more stringent auditing and related professional practice standards. The PCAOB's standards often include more specific requirements, particularly concerning internal controls over financial reporting and auditor independence, reflecting the heightened regulatory scrutiny for public companies aimed at protecting investors and enhancing corporate governance.
FAQs
What are the three categories of Generally Accepted Auditing Standards?
Generally Accepted Auditing Standards are traditionally categorized into three groups: General Standards, Standards of Fieldwork, and Standards of Reporting. General Standards address the auditor's qualifications and conduct, emphasizing competence and independence. Standards of Fieldwork relate to the planning of the audit engagement and the collection of sufficient appropriate audit evidence. Standards of Reporting guide the auditor in formulating and presenting the audit report.
Who issues Generally Accepted Auditing Standards?
Generally Accepted Auditing Standards (GAAS) for audits of private companies and other non-issuers in the United States are issued by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA). For public companies, however, the Public Company Accounting Oversight Board (PCAOB) issues its own auditing standards, which supersede GAAS.
Are GAAS still relevant today?
Yes, Generally Accepted Auditing Standards (GAAS) remain highly relevant today, particularly for audits of private companies and other non-issuers. While public company audits in the U.S. follow PCAOB standards, the core principles of GAAS, such as auditor competence, auditor independence, due professional care, proper planning, risk assessment, and evidence gathering, are foundational to all types of financial statement audits. Many international auditing standards also share similar underlying principles with GAAS.