← AA: all sections
ACCA · Applied Skills

AA: Framework and regulation

27 free practice questions on framework and regulation, Section A of the ACCA Audit and Assurance (AA) question bank. Topics include Quality management, Objectives of external audit, Nature and development of audit, Accountability, stewardship and agency, Elements of an assurance engagement, Types of assurance engagement. Each question carries its syllabus reference and a worked explanation. Practise them in the quiz with instant feedback, or read every question with its answer further down this page.

→ Full AA question bank and timed mock exam
→ AA Common Mistakes

Explanations shown after each answer. Skip freely. No time limit.
Section:
0
answered
0
correct
—
score
—
remaining
Question 1

Loading questions…

All 27 framework and regulation questions

The same questions the quiz above draws on, in syllabus order, each with its answer and worked explanation. All 27 are multiple choice.

Question 1 · Syllabus ref A1a · Objectives of external audit

Which of the following best describes the primary objective of an external audit of financial statements?

  1. To express an opinion on whether the financial statements give a true and fair view
  2. To detect all fraud and error within the entity
  3. To prepare the financial statements on behalf of management
  4. To assess the operational efficiency of the entity
Show answer and explanation

Answer: A. The primary objective of an external audit is to express an opinion on whether the financial statements give a true and fair view — option A. Option B is wrong: auditors provide reasonable, not absolute, assurance and are not primarily responsible for detecting all fraud. Option C is wrong: preparing financial statements is management's responsibility. Option D describes an operational audit, not an external audit.

Question 2 · Syllabus ref A1b · Nature and development of audit

Which of the following best describes how the external audit developed historically?

  1. Auditing originated as a response to the separation of ownership and management, providing accountability to those who cannot directly monitor the business
  2. Audits were always required by statute for all companies
  3. Auditing was developed primarily to satisfy tax authorities
  4. Auditing developed as a voluntary service with no regulatory basis
Show answer and explanation

Answer: A. Auditing developed in response to the agency problem — option A. As businesses grew and owners delegated management to directors, owners needed independent verification that financial information was reliable. This accountability function remains the core rationale for the statutory audit. Option B is incorrect — many jurisdictions exempt small companies. Option C is incorrect — audit serves multiple stakeholders. Option D is incorrect — audit is now heavily regulated.

Question 3 · Syllabus ref A1c · Accountability, stewardship and agency

Alderton plc is owned by thousands of shareholders but managed by a board of directors. Which of the following best explains why an external audit is necessary?

  1. The directors are agents managing the company on behalf of shareholders; the audit provides independent assurance that directors have discharged their stewardship responsibilities honestly
  2. The audit is needed to prepare the financial statements because directors lack accounting expertise
  3. The audit ensures directors are paid the correct remuneration
  4. The audit substitutes for the directors' own accountability to shareholders
Show answer and explanation

Answer: A. This is the agency problem — option A. Shareholders (principals) cannot directly monitor management's activities, creating information asymmetry. The independent auditor provides assurance that statements are reliable, enabling shareholders to assess stewardship. Option B is incorrect — directors are responsible for preparing statements; the auditor reviews them. Option C relates to remuneration. Option D mischaracterises the audit — it supplements, not substitutes for, directors' accountability.

Question 4 · Syllabus ref A1d · Elements of an assurance engagement

An audit firm reviews a profit forecast prepared by a company's directors to support a bank loan application. Which option correctly identifies all five elements of this assurance engagement?

  1. Three-party relationship: auditor, directors, bank. Subject matter: profit forecast. Criteria: appropriate framework. Evidence: analytical procedures. Conclusion: opinion
  2. Three-party relationship: auditor, directors, ACCA. Subject matter: financial statements. Criteria: ISAs. Evidence: tests of detail. Conclusion: certificate
  3. Three-party relationship: auditor, shareholders, directors. Subject matter: internal controls. Criteria: governance codes. Evidence: inspection. Conclusion: report
  4. Three-party relationship: auditor, directors, bank. Subject matter: accounting software. Criteria: IT standards. Evidence: data analytics. Conclusion: advice
Show answer and explanation

Answer: A. The five elements are: (1) three-party relationship — auditor (practitioner), directors (responsible party), bank (intended users); (2) subject matter — the profit forecast; (3) suitable criteria — relevant framework for forecasts; (4) evidence — predominantly analytical procedures; (5) assurance report/conclusion — option A. Option B incorrectly identifies ACCA as the user. Option C has the wrong subject matter. Option D describes advice, not an assurance engagement.

Question 5 · Syllabus ref A1f · Types of assurance engagement

A company asks its auditors for a report on compliance with the terms of a loan covenant. Which type of assurance engagement is this?

  1. A limited assurance engagement
  2. An external audit engagement
  3. Agreed-upon procedures
  4. A reasonable assurance engagement other than an audit
Show answer and explanation

Answer: D. Compliance with a loan covenant is a reasonable assurance engagement other than an audit — option D. An external audit (option B) specifically covers statutory audit of financial statements. Agreed-upon procedures (option C) produce a factual findings report with no conclusion — not an assurance engagement. Limited assurance (option A) provides a negative conclusion and suits reviews, not compliance engagements where a positive conclusion is expected.

Question 6 · Syllabus ref A1g · Levels of assurance

Which of the following correctly describes the difference between reasonable assurance and limited assurance?

  1. Both are expressed as positive conclusions but at different confidence levels
  2. Reasonable assurance is expressed as a negative conclusion; limited assurance as a positive conclusion
  3. Reasonable assurance is expressed as a positive conclusion; limited assurance as a negative conclusion
  4. Both are expressed as negative conclusions
Show answer and explanation

Answer: C. Reasonable assurance — provided by an external audit — is expressed positively: 'In our opinion, the financial statements give a true and fair view.' Limited assurance — from a review — is expressed negatively: 'Nothing has come to our attention that causes us to believe...' — option C. The negative form reflects the less extensive procedures performed in a review.

Question 7 · Syllabus ref A2a · Regulatory environment — IAASB

Which body is responsible for setting International Standards on Auditing (ISAs)?

  1. The International Auditing and Assurance Standards Board (IAASB)
  2. The Financial Reporting Council (FRC)
  3. The Association of Chartered Certified Accountants (ACCA)
  4. The International Accounting Standards Board (IASB)
Show answer and explanation

Answer: A. The IAASB is responsible for setting ISAs — option A. The FRC (option B) is the UK regulator and adopts ISAs for UK use but does not set them globally. ACCA (option C) requires members to comply with relevant standards but does not set them. The IASB (option D) sets IFRS accounting standards, not auditing standards.

Question 8 · Syllabus ref A2b · Reasons for regulation of auditors

Which of the following is the most compelling reason why auditors are subject to external regulation?

  1. Because the public interest nature of auditing means that poor audit quality can cause widespread harm to investors, creditors and other stakeholders
  2. To ensure audit firms charge competitive fees
  3. To prevent auditors from providing non-audit services
  4. To ensure auditors use the most up-to-date software
Show answer and explanation

Answer: A. The public interest rationale drives audit regulation — option A. Many stakeholders rely on audited financial statements. If audit quality is poor, harm extends far beyond the immediate client — as demonstrated by high-profile corporate failures. This public interest dimension justifies external oversight of audit firms, standards and auditor independence. Options B, C and D are not the primary drivers of audit regulation.

Question 9 · Syllabus ref A2c · Appointment and removal of auditors

Which correctly describes a statutory right of auditors on removal from office?

  1. Auditors have the right to receive notice of the intended removal and to make written representations to shareholders
  2. Auditors have the right to prevent their removal by applying to the courts
  3. Auditors have no statutory rights on removal
  4. Auditors must agree to their removal before it can take effect
Show answer and explanation

Answer: A. On removal, auditors have the right to receive notice and deposit written representations for circulation to shareholders — option A. They also have the right to speak at the general meeting at which their term would have expired. These rights allow the auditor to alert shareholders if removal is linked to a disagreement over accounting matters. Option B is incorrect — auditors cannot prevent removal. Option C is incorrect — statutory rights exist. Option D is incorrect — auditor consent is not required.

Question 10 · Syllabus ref A2d · Rights and duties of auditors

Which of the following is a statutory right of an external auditor of a company?

  1. The right of access to all books, accounts and vouchers, and the right to require information and explanations from officers
  2. The right to attend and speak at all board meetings
  3. The right to change the company's accounting policies if they are inappropriate
  4. The right to prevent the directors from paying dividends
Show answer and explanation

Answer: A. Auditors have a statutory right of access to books and records and a right to require information from officers — option A. Without unrestricted access to records and the ability to question management, the auditor could not gather sufficient evidence. Option B is incorrect — auditors have the right to attend general meetings (not board meetings) on matters relevant to the audit. Option C is incorrect — auditors cannot change policies; they can only report on their appropriateness. Option D is incorrect — dividends are a matter for directors and shareholders.

Question 11 · Syllabus ref A2e · Limitations of external audits

Which of the following is an inherent limitation of an external audit that means it cannot provide absolute assurance?

  1. Audit evidence is often persuasive rather than conclusive, and auditors exercise judgement in evaluating it
  2. Auditors do not visit the client's premises
  3. Auditors always rely entirely on management representations
  4. Auditors are not permitted to use statistical sampling
Show answer and explanation

Answer: A. Audit evidence is often persuasive rather than conclusive — option A. Documents can be forged, calculations may contain errors, and many estimates require judgement. Other inherent limitations include sampling (not 100% testing), difficulty detecting collusive fraud, and reliance on representations that may be false. Option B is incorrect — auditors regularly visit clients. Option C is incorrect — auditors seek corroborating evidence beyond representations. Option D is incorrect — sampling is a widely accepted audit technique.

Question 12 · Syllabus ref A2f · Development and status of ISAs

Which of the following correctly describes the status of ISAs in relation to national auditing standards?

  1. ISAs are issued by the IAASB and many countries adopt them directly or use them as the basis for national standards, though the relationship varies by jurisdiction
  2. ISAs automatically override all national auditing standards in every country
  3. ISAs are optional guidelines that audit firms may choose to follow or ignore
  4. ISAs only apply to the audit of multinational companies
Show answer and explanation

Answer: A. The relationship between ISAs and national standards varies by country — option A. Many jurisdictions adopt ISAs directly or incorporate them into national standards with modifications. The IAASB issues ISAs, but they gain legal force through national adoption processes. Option B is incorrect — ISAs do not automatically override national law. Option C is incorrect — in adopting countries, ISAs have legal or regulatory force. Option D is incorrect — ISAs apply to all audits in adopting jurisdictions.

Question 13 · Syllabus ref A2g · UK ISAs and IAASB ISAs

Which correctly describes the relationship between UK ISAs (issued by the FRC) and IAASB ISAs?

  1. UK ISAs are based on IAASB ISAs but may include additional UK-specific requirements; compliance with UK ISAs generally ensures compliance with the underlying IAASB ISAs
  2. UK ISAs and IAASB ISAs are identical in all respects
  3. UK ISAs replace IAASB ISAs entirely and are not related to them
  4. IAASB ISAs take precedence over UK ISAs in all circumstances
Show answer and explanation

Answer: A. UK ISAs are based on IAASB ISAs with UK additions — option A. The FRC adopts IAASB ISAs and adds UK-specific requirements where needed to reflect the UK legal and regulatory environment. Compliance with UK ISAs generally ensures compliance with the underlying IAASB ISAs. Option B is incorrect — UK ISAs typically contain additional paragraphs. Option C is incorrect — UK ISAs are explicitly based on IAASB ISAs. Option D is incorrect — in the UK, UK ISAs have legal standing, not IAASB ISAs directly.

Question 14 · Syllabus ref A2h · Quality management — objectives

Which best describes the overall objective of quality management procedures in an audit firm?

  1. To provide reasonable assurance that the firm and its personnel comply with professional standards and that audit reports issued are appropriate
  2. To minimise the cost of audit engagements
  3. To ensure all engagements are completed within the agreed fee budget
  4. To maximise the number of audit clients retained
Show answer and explanation

Answer: A. The overall objective of quality management is to provide reasonable assurance that the firm and personnel comply with professional standards and that audit reports are appropriate in the circumstances — option A. Quality management moved from Section B1 to Section A2 in the S26-J27 syllabus. Options B, C and D relate to commercial considerations, not the purpose of quality management under ISQM 1.

Question 15 · Syllabus ref A2i · Quality management — procedures

Under international quality management standards, which of the following is a component that quality management procedures must address?

  1. Engagement resources, engagement performance, monitoring and remediation
  2. Ensuring all staff are members of a professional body
  3. Setting the audit fee to reflect engagement complexity
  4. Requiring all audit evidence to be stored in paper format
Show answer and explanation

Answer: A. Under ISQM 1, quality management procedures must address: leadership responsibilities, relevant ethical requirements, acceptance and continuance, engagement resources, engagement performance, information and communication, and monitoring and remediation — option A captures three of these components. Option B is not specifically required. Option C relates to commercial decisions. Option D contradicts modern practice where electronic working papers are standard.

Question 16 · Syllabus ref A2j · Quality management deficiencies

A quality review finds that several audit files for listed company audits lack evidence of an engagement quality review (EQR), contrary to firm policy. Which recommendation best addresses this?

  1. Implement a file sign-off control requiring engagement partner confirmation of EQR completion before the audit report is issued, and provide training to engagement teams
  2. Reduce the scope of quality reviews to exclude listed company audits
  3. Ask engagement partners to perform the EQR retrospectively after the report is issued
  4. Remove the EQR requirement from quality management policies
Show answer and explanation

Answer: A. The recommendation must address both the preventive control and the root cause — option A. A sign-off control creates a checkpoint preventing recurrence; training addresses knowledge gaps. Option B reduces oversight rather than addressing the deficiency. Option C — retrospective EQR after report issuance — defeats its purpose of ensuring the report is appropriate before release. Option D removes a required quality safeguard.

Question 17 · Syllabus ref A3a · Corporate governance objectives

A listed company's board consists entirely of executive directors. Which of the following best explains the corporate governance concern?

  1. There is no independent oversight of management — those running the business are the same as those overseeing it
  2. Executive directors are more likely to commit fraud
  3. Executive directors are not permitted to serve on audit committees
  4. The board will be unable to set company strategy without independent directors
Show answer and explanation

Answer: A. The absence of independent oversight is the concern — option A. When the board consists entirely of executives, the people managing the business are the same as those providing oversight, creating a conflict of interest and removing the checks and balances that non-executive directors provide. Option B is an incorrect generalisation. Option C is wrong — executives can serve on some committees though audit committees require independence. Option D is incorrect — executives are well-placed to set strategy; the issue is oversight.

Question 18 · Syllabus ref A3b · Corporate governance codes

Which provision of international corporate governance codes (such as OECD principles) is most directly relevant to external auditors?

  1. Provisions relating to auditor independence and the role of the audit committee in overseeing the financial reporting process
  2. Provisions requiring board members to be remunerated fairly
  3. Provisions setting minimum dividend payments to shareholders
  4. Provisions governing the terms of executive directors' service contracts
Show answer and explanation

Answer: A. Auditor independence and audit committee oversight of financial reporting are the provisions most directly relevant to external auditors — option A. The OECD principles require auditors to be independent of management and that an audit committee oversees the integrity of financial reporting, the audit process and auditor appointment. Options B, C and D relate to remuneration, dividends and employment — important governance matters, but not directly relevant to the external auditor's role.

Question 19 · Syllabus ref A3c · Directors' responsibilities — internal controls

Under good corporate governance, which correctly describes respective responsibilities of directors and auditors regarding internal controls?

  1. The directors are responsible for establishing and maintaining an adequate system of internal control; the auditor understands and evaluates those controls for audit purposes
  2. The auditor is responsible for designing and implementing the company's internal control system
  3. The audit committee designs internal controls; the board audits their effectiveness
  4. Both directors and auditors share equal responsibility for maintaining internal controls
Show answer and explanation

Answer: A. Directors bear responsibility for establishing and maintaining internal controls — option A. Under governance codes, the board must maintain a sound system of risk management and internal control. The auditor obtains an understanding of controls sufficient to plan the audit and, where appropriate, tests them to determine the extent of substantive testing needed. Option B incorrectly assigns design responsibility to the auditor. Option C confuses audit committee and board roles. Option D incorrectly equalises responsibility.

Question 20 · Syllabus ref A3d · Corporate governance deficiencies

A company's board has six executive directors and no non-executive directors. The chairman is also the CEO. The audit committee has three executive members. Which correctly identifies the corporate governance deficiencies?

  1. Three deficiencies: no non-executive directors on the board; chairman and CEO roles are combined; the audit committee has no independent members
  2. No deficiencies — the company has a full board and audit committee
  3. The only deficiency is the combined chairman/CEO role
  4. The board composition is acceptable as long as total board members exceed five
Show answer and explanation

Answer: A. There are three distinct deficiencies — option A. (1) Good governance requires a balance of executive and independent NEDs — a board with no NEDs lacks independent oversight. (2) The chairman should be independent — combining chairman and CEO concentrates power in one person. (3) The audit committee should comprise independent NEDs only — executives on the committee defeat its purpose. The examiner warns that deficiencies must be correctly identified, not just facts restated.

Question 21 · Syllabus ref A3e · Audit committee benefits

Which of the following is a benefit of an audit committee to the external auditor?

  1. The audit committee provides an independent channel through which the auditor can communicate concerns without going directly to executive management
  2. The audit committee prepares the financial statements, reducing the auditor's workload
  3. The audit committee sets the audit fee, ensuring fair remuneration
  4. The audit committee performs audit testing, reducing the extent of audit procedures required
Show answer and explanation

Answer: A. The audit committee provides an independent channel of communication — option A. If the auditor has concerns about management's conduct or financial reporting, they can raise these with the audit committee (composed of independent NEDs) rather than with the very management whose work is being questioned. Option B is incorrect — management prepares financial statements. Option C is incorrect — the committee may recommend the fee but does not guarantee fair remuneration. Option D is incorrect — the committee does not perform audit testing.

Question 22 · Syllabus ref A4a · Fundamental principles of ethics — confidentiality

An auditor discovers that a client has been making illegal payments to government officials. A journalist then asks about the client's affairs. Which fundamental principle is most directly relevant to the auditor's response?

  1. Integrity
  2. Objectivity
  3. Confidentiality
  4. Professional competence and due care
Show answer and explanation

Answer: C. Confidentiality — option C — is most directly at stake. The auditor has obtained information about the client in the course of professional work and must not disclose it to third parties, including journalists, without proper authority or a legal or professional right or duty to do so. There may be separate considerations about reporting illegal payments to authorities, but the immediate response to a journalist is governed by the confidentiality principle.

Question 23 · Syllabus ref A4b · Threats to independence — self-review

An audit firm has provided bookkeeping services to an audit client for three years, recording all transactions. Which threat to independence does this create?

  1. Self-review threat, because the firm may audit its own work when auditing the financial statements
  2. Self-interest threat, because the firm has a financial interest in the client
  3. Advocacy threat, because the firm is promoting the client's interests
  4. Familiarity threat, because long association reduces professional scepticism
Show answer and explanation

Answer: A. Providing bookkeeping services creates a self-review threat — option A. When the audit firm prepares the accounting records and then audits the financial statements derived from them, it reviews its own work, making it less likely to identify and report errors in records it produced. Option B (self-interest) arises from financial interests such as fees or shareholdings. Option C (advocacy) arises when the firm promotes a client's position in a dispute. Option D (familiarity) arises from long personal association — a different issue.

Question 24 · Syllabus ref A4c · Safeguards — familiarity threat

An audit partner has been responsible for a listed client's audit for nine years. Which safeguard is most appropriate to address the familiarity threat?

  1. The partner should rotate off the engagement and be replaced by a different partner
  2. The partner should immediately resign from the firm
  3. The partner should disclose the long association in the audit report
  4. The client should be required to change audit firm immediately
Show answer and explanation

Answer: A. Partner rotation — option A — is the standard safeguard for familiarity threats from long association. Most governance codes require key audit partners to rotate off listed company audits after a specified period (commonly five to seven years), with a cooling-off period before they can return. Option B (resignation from firm) is disproportionate. Option C (disclosure only) does not reduce the threat. Option D (firm rotation) may be required in some jurisdictions but is not the primary safeguard for this specific threat.

Question 25 · Syllabus ref A4d · Independence — financial interest

An audit firm holds a material direct financial interest in an audit client. Which of the following correctly describes the impact on independence?

  1. Independence is impaired by a self-interest threat so significant it cannot be reduced by any safeguard — the firm must not accept or must resign from the engagement
  2. Independence is impaired by a self-review threat that cannot be reduced to an acceptable level
  3. Independence is only impaired if the financial interest is disclosed to the client
  4. There is no independence issue provided the interest is held by a non-audit partner
Show answer and explanation

Answer: A. A material direct financial interest creates a self-interest threat so significant no safeguard can reduce it to an acceptable level — option A. The auditor has a direct financial stake in the client's performance which could influence the audit opinion. The only appropriate action is to divest the interest or withdraw. Option B incorrectly identifies this as a self-review threat. Option C is incorrect — disclosure does not cure a fundamental independence breach. Option D is incorrect — financial interests held by any partner can impair independence.

Question 26 · Syllabus ref A1e · Five elements — responsible party

In an external audit engagement, who is the responsible party?

  1. The external auditor who signs the audit report
  2. Management, who are responsible for preparing the financial statements on which the auditor provides assurance
  3. The shareholders who use the financial statements
  4. The audit committee, which oversees the financial reporting process
Show answer and explanation

Answer: B. In an audit, the responsible party is management — option B. The five elements of an assurance engagement are: (1) three-party relationship: practitioner (auditor), responsible party (management/directors), and intended users (shareholders); (2) subject matter (the financial statements); (3) suitable criteria (the applicable financial reporting framework); (4) evidence; (5) the assurance report. Management prepares the subject matter (financial statements) and is therefore the responsible party. Option A (auditor) is the practitioner. Options C and D are users or oversight bodies.

Question 27 · Syllabus ref A4b · Advocacy threat

An audit firm is asked to represent its audit client in a tax dispute with HMRC. Which ethical threat does this primarily create?

  1. Familiarity threat, due to long association with the client
  2. Advocacy threat, because representing the client requires the firm to promote the client's position, which may compromise the firm's objectivity when auditing
  3. Self-review threat, because the firm may review its own work when auditing the tax entries
  4. Intimidation threat, because HMRC may pressure the audit firm
Show answer and explanation

Answer: B. Representing a client in a dispute creates an advocacy threat — option B. When the audit firm acts as the client's advocate in a legal or regulatory dispute, it is promoting the client's position. This can compromise (or appear to compromise) the firm's objectivity when auditing, because having argued strongly for a particular position, the firm may be less willing to challenge it in the audit. This threat is particularly significant for listed entities. Option A (familiarity) arises from long personal associations, not from specific engagements. Option C (self-review) would arise from also preparing the tax computations. Option D (intimidation) arises from threats by the client or others.

Other AA topics

Advertisement