AT Section 101

Attest Engagements

Summary Table of Contents 
Source: SSAE No. 10; SSAE No. 11; SSAE No. 12.
See section 9101 for interpretations of this section.
Effective when the subject matter or assertion is as of or for a period ending on or after June 1, 2001, unless otherwise indicated.

Applicability

.01

This section applies to engagements, except for those services discussed in paragraph .04, in which a certified public accountant in the practice of public accountingfn 1 (hereinafter referred to as a practitioner) is engaged to issue or does issue an examination, a review, or an agreed-upon procedures report on subject matter, or an assertion about the subject matter (hereafter referred to as the assertion), that is the responsibility of another party.fn 2

[The following note is effective as of December 31, 2016. See  PCAOB Release No. 2015-002.]

Note: In connection with an engagement performed in accordance with this attestation standard, whenever the practitioner is required to make reference in a report to attestation standards established by the American Institute of Certified Public Accountants, the practitioner must instead refer to "the standards of the Public Company Accounting Oversight Board (United States)." A practitioner must also include the city and state (or city and country, in the case of non-U.S. practitioners) from which the practitioner's report has been issued.

.02

This section establishes a framework for attestfn 3 engagements performed by practitioners and for the ongoing development of related standards. For certain subject matter, specific attestation standards have been developed to provide additional requirements for engagement performance and reporting.

.03

When a practitioner undertakes an attest engagement for the benefit of a government body or agency and agrees to follow specified government standards, guides, procedures, statutes, rules, and regulations, the practitioner is obliged to follow those governmental requirements as well as the applicable attestation standards.

.04

Professional services provided by practitioners that are not covered by this SSAE include the following:

  1. Services performed in accordance with Statements on Auditing Standards (SASs)
  2. Services performed in accordance with Statements on Standards for Accounting and Review Services (SSARSs)
  3. Services performed in accordance with the Statement on Standards for Consulting Services (SSCS), such as engagements in which the practitioner's role is solely to assist the client (for example, acting as the company accountant in preparing information other than financial statements), or engagements in which a practitioner is engaged to testify as an expert witness in accounting, auditing, taxation, or other matters, given certain stipulated facts
  4. Engagements in which the practitioner is engaged to advocate a client's position—for example, tax matters being reviewed by the Internal Revenue Service
  5. Tax engagements in which a practitioner is engaged to prepare tax returns or provide tax advice
    [The following item is effective as of December 31, 2016. See  PCAOB Release No. 2015-002. The item effective before December 31, 2016, can be found  here.] 
  6. Engagements in which the practitioner is engaged to report on whether a material weakness in internal control over financial reporting continues to exist for any purpose other than the company's internal use. Such engagements must be conducted pursuant to AS 6115, Reporting on Whether a Previously Reported Material Weakness Continues to Exist.
    [The following items are added effective on or after June 1, 2014, due to issuance of PCAOB Attestation Standard No. 1, Examination Engagements Regarding Compliance Reports of Brokers and Dealers, and PCAOB Attestation Standard No. 2, Review Engagements Regarding Exemption Reports of Brokers and Dealers. See PCAOB Release No. 2013-007.]
  7. Engagements in which a practitioner is engaged to perform an examination of certain statements of a broker or dealer in a compliance report that is prepared pursuant to SEC Rule 17a-5. Such engagements must be conducted pursuant to Attestation Standard No. 1, Examination Engagements Regarding Compliance Reports of Brokers and Dealers.
  8. Engagements in which a practitioner is engaged to perform a review of statements of a broker or dealer in an exemption report that is prepared pursuant to SEC Rule 17a-5. Such engagements must be conducted pursuant to Attestation Standard No. 2, Review Engagements Regarding Exemption Reports of Brokers and Dealers.

.05

An attest engagement may be part of a larger engagement, for example, a feasibility study or business acquisition study may also include an examination of prospective financial information. In such circumstances, these standards apply only to the attest portion of the engagement.

.06

Any professional service resulting in the expression of assurance must be performed under AICPA professional standards that provide for the expression of such assurance. Reports issued by a practitioner in connection with other professional standards should be written to be clearly distinguishable from and not to be confused with attest reports. For example, a practitioner performing an engagement which is intended solely to assist an organization in improving its controls over the privacy of client data should not issue a report as a result of that engagement expressing assurance as to the effectiveness of such controls. Additionally, a report that merely excludes the words, " ...was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants..." but is otherwise similar to an examination, a review or an agreed-upon procedures attest report may be inferred to be an attest report.

Definitions and Underlying Concepts

Subject Matter

.07

The subject matter of an attest engagement may take many forms, including the following:

  1. Historical or prospective performance or condition (for example, historical or prospective financial information, performance measurements, and backlog data)
  2. Physical characteristics (for example, narrative descriptions, square footage of facilities)
  3. Historical events (for example, the price of a market basket of goods on a certain date)
  4. Analyses (for example, break-even analyses)
  5. Systems and processes (for example, internal control)
  6. Behavior (for example, corporate governance, compliance with laws and regulations, and human resource practices)

The subject matter may be as of a point in time or for a period of time.

Assertion

.08

An assertion is any declaration or set of declarations about whether the subject matter is based on or in conformity with the criteria selected.

.09

A practitioner may report on a written assertion or may report directly on the subject matter. In either case, the practitioner should ordinarily obtain a written assertion in an examination or a review engagement. A written assertion may be presented to a practitioner in a number of ways, such as in a narrative description, within a schedule, or as part of a representation letter appropriately identifying what is being presented and the point in time or period of time covered.

.10

When a written assertion has not been obtained, a practitioner may still report on the subject matter; however, the form of the report will vary depending on the circumstances and its use should be restricted.fn 4 In this section, see paragraphs .58 and .60 on gathering sufficient evidence and paragraphs .73 to .75 and .78 to .80 for reporting guidance.

Responsible Party

.11

The responsible party is defined as the person or persons, either as individuals or representatives of the entity, responsible for the subject matter. If the nature of the subject matter is such that no such party exists, a party who has a reasonable basis for making a written assertion about the subject matter may provide such an assertion (hereinafter referred to as the responsible party).

.12

The practitioner may be engaged to gather information to enable the responsible party to evaluate the subject matter in connection with providing a written assertion. Regardless of the procedures performed by the practitioner, the responsible party must accept responsibility for its assertion and the subject matter and must not base its assertion solely on the practitioner's procedures.fn 5

.13

Because the practitioner's role in an attest engagement is that of an attester, the practitioner should not take on the role of the responsible party in an attest engagement. Therefore, the need to clearly identify a responsible party is a prerequisite for an attest engagement. A practitioner may accept an engagement to perform an examination, a review or an agreed-upon procedures engagement on subject matter or an assertion related thereto provided that one of the following conditions is met.

  1. The party wishing to engage the practitioner is responsible for the subject matter, or has a reasonable basis for providing a written assertion about the subject matter if the nature of the subject matter is such that a responsible party does not otherwise exist.
  2. The party wishing to engage the practitioner is not responsible for the subject matter but is able to provide the practitioner, or have a third party who is responsible for the subject matter provide the practitioner, with evidence of the third party's responsibility for the subject matter.

.14

The practitioner should obtain written acknowledgment or other evidence of the responsible party's responsibility for the subject matter, or the written assertion, as it relates to the objective of the engagement. The responsible party can acknowledge that responsibility in a number of ways, for example, in an engagement letter, a representation letter, or the presentation of the subject matter, including the notes thereto, or the written assertion. If the practitioner is not able to directly obtain written acknowledgment, the practitioner should obtain other evidence of the responsible party's responsibility for the subject matter (for example, by reference to legislation, a regulation, or a contract).

Applicability to Agreed-Upon Procedures Engagements

.15

An agreed-upon procedures attest engagement is one in which a practitioner is engaged to issue a report of findings based on specific procedures performed on subject matter. The general, fieldwork, and reporting standards for attest engagements set forth in this section are applicable to agreed-upon procedures engagements. Because the application of these standards to agreed-upon procedures engagements is discussed in section 201, Agreed-Upon Procedures Engagements, such engagements are not discussed further in this section.

The Relationship of Attestation Standards to Quality Control Standards

[The following paragraph is deleted effective December 15, 2025. See PCAOB Release No. 2024-005.]

.16

The practitioner is responsible for compliance with the American Institute of Certified Public Accountants' (AICPA's) Statements on Standards for Attestation Engagements (SSAEs) in an attest engagement. Rule 202, Compliance With Standards, of the Code of Professional Conduct [ET section 202.01], requires members to comply with such standards when conducting professional services.

[The following paragraph is deleted effective December 15, 2025. See PCAOB Release No. 2024-005.]

.17

A firm of practitioners has a responsibility to adopt a system of quality control in the conduct of a firm's attest practice.fn 6 Thus, a firm should establish quality control policies and procedures to provide it with reasonable assurance that its personnel comply with the attestation standards in its attest engagements. The nature and extent of a firm's quality control policies and procedures depend on factors such as its size, the degree of operating autonomy allowed its personnel and its practice offices, the nature of its practice, its organization, and appropriate cost-benefit considerations. [As amended, effective September 2002, by Statement on Standards for Attestation Engagements No. 12.]

[The following paragraph is deleted effective December 15, 2025. See PCAOB Release No. 2024-005.]

.18

Attestation standards relate to the conduct of individual attest engagements; quality control standards relate to the conduct of a firm's attest practice as a whole. Thus, attestation standards and quality control standards are related and the quality control policies and procedures that a firm adopts may affect both the conduct of individual attest engagements and the conduct of a firm's attest practice as a whole. However, deficiencies in or instances of noncompliance with a firm's quality control policies and procedures do not, in and of themselves, indicate that a particular engagement was not performed in accordance with attestation standards. [As amended, effective September 2002, by Statement on Standards for Attestation Engagements No. 12.]

General Standards

Training and Proficiency

[The following paragraph is effective for fiscal years beginning on or after December 15, 2024. See PCAOB Release No. 2024-004. The paragraph effective for fiscal years beginning before December 15, 2024 can be found here.]

.19

The first general standard is—The engagement shall be performed by a practitioner having competence in the attest function.fn6

.20

Performing attest services is different from preparing and presenting subject matter or an assertion. The latter involves collecting, classifying, summarizing, and communicating information; this usually entails reducing a mass of detailed data to a manageable and understandable form. On the other hand, performing attest services involves gathering evidence to support the subject matter or the assertion and objectively assessing the measurements and communications of the responsible party. Thus, attest services are analytical, critical, investigative, and are concerned with the basis and support for the subject matter or the assertion.

Adequate Knowledge of Subject Matter

.21

The second general standard is—The engagement shall be performed by a practitioner having adequate knowledge of the subject matter.

.22

A practitioner may obtain adequate knowledge of the subject matter through formal or continuing education, including self-study, or through practical experience. However, this standard does not necessarily require a practitioner to personally acquire all of the necessary knowledge in the subject matter to be qualified to express a conclusion. This knowledge requirement may be met, in part, through the use of one or more specialists on a particular attest engagement if the practitioner has sufficient knowledge of the subject matter (a) to communicate to the specialist the objectives of the work and (b) to evaluate the specialist's work to determine if the objectives were achieved.

Suitability and Availability of Criteria

.23

The third general standard is—The practitioner shall perform the engagement only if he or she has reason to believe that the subject matter is capable of evaluation against criteria that are suitable and available to users.

Suitability of Criteria

.24

Criteria are the standards or benchmarks used to measure and present the subject matter and against which the practitioner evaluates the subject matter.fn * Suitable criteria must have each of the following attributes:

  • Objectivity—Criteria should be free from bias.
  • Measurability—Criteria should permit reasonably consistent measurements, qualitative or quantitative, of subject matter.
  • Completeness—Criteria should be sufficiently complete so that those relevant factors that would alter a conclusion about subject matter are not omitted.
  • Relevance—Criteria should be relevant to the subject matter.

.25

Criteria that are established or developed by groups composed of experts that follow due process procedures, including exposure of the proposed criteria for public comment, ordinarily should be considered suitable. Criteria promulgated by a body designated by the AICPA Governing Council under the AICPA Code of Professional Conduct are, by definition, considered to be suitable.

.26

Criteria may be established or developed by the client, the responsible party, industry associations, or other groups that do not follow due process procedures or do not as clearly represent the public interest. To determine whether these criteria are suitable, the practitioner should evaluate them based on the attributes described in paragraph .24.

.27

Regardless of who establishes or develops the criteria, the responsible party or the client is responsible for selecting the criteria and the client is responsible for determining that such criteria are appropriate for its purposes.

.28

The use of suitable criteria does not presume that all persons or groups would be expected to select the same criteria in evaluating the same subject matter. There may be more than one set of suitable criteria for a given subject matter. For example, in an engagement to express assurance about customer satisfaction, a responsible party may select as a criterion for customer satisfaction that all customer complaints are resolved to the satisfaction of the customer. In other cases, another responsible party may select a different criterion, such as the number of repeat purchases in the three months following the initial purchase.

.29

In evaluating the measurability attribute as described in paragraph .24, the practitioner should consider whether the criteria are sufficiently precise to permit people having competence in and using the same measurement criterion to be able to ordinarily obtain materially similar measurements. Consequently, practitioners should not perform an engagement when the criteria are so subjective or vague that reasonably consistent measurements, qualitative or quantitative, of subject matter cannot ordinarily be obtained. However, practitioners will not always reach the same conclusion because such evaluations often require the exercise of considerable professional judgment.

.30

For the purpose of assessing whether the use of particular criteria can be expected to yield reasonably consistent measurement and evaluation, consideration should be given to the nature of the subject matter. For example, soft information, such as forecasts or projections, would be expected to have a wider range of reasonable estimates than hard data, such as the calculated investment performance of a defined portfolio of managed investment products.

.31

Some criteria may be appropriate for only a limited number of parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria. For instance, criteria set forth in a lease agreement for override payments may be appropriate only for reporting to the parties to the agreement because of the likelihood that such criteria would be misunderstood or misinterpreted by parties other than those who have specifically agreed to the criteria. Such criteria can be agreed upon directly by the parties or through a designated representative. If a practitioner determines that such criteria are appropriate only for a limited number of parties, the use of the report should be restricted to those specified parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria.

.32

The third general standard in paragraph .23 applies equally regardless of the level of the attest service to be provided. Consequently, it is inappropriate to perform a review engagement if the practitioner concludes that an examination cannot be performed because competent persons using the same criteria would not be able to obtain materially similar evaluations.

Availability of Criteria

.33

The criteria should be available to users in one or more of the following ways:

  1. Available publicly
  2. Available to all users through inclusion in a clear manner in the presentation of the subject matter or in the assertion
  3. Available to all users through inclusion in a clear manner in the practitioner's report
  4. Well understood by most users, although not formally available (for example, “The distance between points A and B is twenty feet;” the criterion of distance measured in feet is considered to be well understood)
  5. Available only to specified parties; for example, terms of a contract or criteria issued by an industry association that are available only to those in the industry

.34

If criteria are only available to specified parties, the practitioner's report should be restricted to those parties who have access to the criteria as described in paragraphs .78 and .80.

Independence

.35

The fourth general standard is—In all matters relating to the engagement, an independence in mental attitude shall be maintained by the practitioner.fn 7

.36

The practitioner should maintain the intellectual honesty and impartiality necessary to reach an unbiased conclusion about the subject matter or the assertion. This is a cornerstone of the attest function.

.37

In the final analysis, independence in mental attitude means objective consideration of facts, unbiased judgments, and honest neutrality on the part of the practitioner in forming and expressing conclusions. It implies not the attitude of an advocate or an adversary but an impartiality that recognizes an obligation for fairness. Independence in mental attitude presumes an undeviating concern for an unbiased conclusion about the subject matter or an assertion no matter what the subject matter or the assertion may be.

.38

The profession has established, through the AICPA's Code of Professional Conduct, precepts to guard against the presumption of loss of independence. Presumption is stressed because the possession of intrinsic independence is a matter of personal quality rather than of rules that formulate certain objective tests. Insofar as these precepts have been incorporated in the profession's code, they have the force of professional law for the independent practitioner.

Due Professional Care

.39

The fifth general standard is—Due professional care shall be exercised in the planning and performance of the engagement.

[The following paragraph is effective for fiscal years beginning on or after December 15, 2024. See PCAOB Release No. 2024-004. The paragraph effective for fiscal years beginning before December 15, 2024 can be found here.]

.40

Due professional care concerns what the practitioner does and how well the practitioner does it. Due professional care means acting with reasonable care and diligence; exercising professional skepticism;fn 7A acting with integrity; and complying with applicable professional and legal requirements.fn 7B The exercise of due professional care requires critical review at every level of supervision of the work done and the judgment exercised by those assisting in the engagement, including the preparation of the report.

[The following paragraph is deleted effective for fiscal years beginning on or after December 15, 2024. See PCAOB Release No. 2024-004. The paragraph effective for fiscal years beginning before December 15, 2024 can be found here.]

.41

[deleted]

Standards of Fieldwork

Planning and Supervision

.42

The first standard of fieldwork is—The work shall be adequately planned and assistants, if any, shall be properly supervised.

.43

Proper planning and supervision contribute to the effectiveness of attest procedures. Proper planning directly influences the selection of appropriate procedures and the timeliness of their application, and proper supervision helps ensure that planned procedures are appropriately applied.

.44

Planning an attest engagement involves developing an overall strategy for the expected conduct and scope of the engagement. To develop such a strategy, practitioners need to have sufficient knowledge to enable them to understand adequately the events, transactions, and practices that, in their judgment, have a significant effect on the subject matter or the assertion.

.45

Factors to be considered by the practitioner in planning an attest engagement include the following:

  1. The criteria to be used
  2. Preliminary judgments about attestation riskfn 9 and materiality for attest purposes
  3. The nature of the subject matter or the items within the assertion that are likely to require revision or adjustment
  4. Conditions that may require extension or modification of attest procedures
  5. The nature of the report expected to be issued

[The following paragraph is effective until December 14, 2025. See PCAOB Release No. 2024-005. The paragraph effective on December 15, 2025 can be found here.]

.46

The practitioner should establish an understanding with the client regarding the services to be performed for each engagement.fn 10 Such an understanding reduces the risk that either the practitioner or the client may misinterpret the needs or expectations of the other party. For example, it reduces the risk that the client may inappropriately rely on the practitioner to protect the entity against certain risks or to perform certain functions that are the client's responsibility. The understanding should include the objectives of the engagement, management's responsibilities, the practitioner's responsibilities, and limitations of the engagement. The practitioner should document the understanding in the working papers, preferably through a written communication with the client. If the practitioner believes an understanding with the client has not been established, he or she should decline to accept or perform the engagement.

.47

The nature, extent, and timing of planning will vary with the nature and complexity of the subject matter or the assertion and the practitioner's prior experience with management. As part of the planning process, the practitioner should consider the nature, extent, and timing of the work to be performed to accomplish the objectives of the attest engagement. Nevertheless, as the attest engagement progresses, changed conditions may make it necessary to modify planned procedures.

.48

Supervision involves directing the efforts of assistants who participate in accomplishing the objectives of the attest engagement and determining whether those objectives were accomplished. Elements of supervision include instructing assistants, staying informed of significant problems encountered, reviewing the work performed, and dealing with differences of opinion among personnel. The extent of supervision appropriate in a given instance depends on many factors, including the nature and complexity of the subject matter and the qualifications of the persons performing the work.

.49

Assistants should be informed of their responsibilities, including the objectives of the procedures that they are to perform and matters that may affect the nature, extent, and timing of such procedures. The practitioner with final responsibility for the engagement should direct assistants to bring to his or her attention significant questions raised during the attest engagement so that their significance may be assessed.

.50

The work performed by each assistant should be reviewed to determine whether it was adequately performed and to evaluate whether the results are consistent with the conclusion to be presented in the practitioner's report.

Obtaining Sufficient Evidence

.51

The second standard of fieldwork is—Sufficient evidence shall be obtained to provide a reasonable basis for the conclusion that is expressed in the report.

.52

Selecting and applying procedures that will accumulate evidence that is sufficient in the circumstances to provide a reasonable basis for the level of assurance to be expressed in the attest report requires the careful exercise of professional judgment. A broad array of available procedures may be applied in an attest engagement. In establishing a proper combination of procedures to appropriately restrict attestation risk, the practitioner should consider the following presumptions, bearing in mind that they are not mutually exclusive and may be subject to important exceptions.

  1. Evidence obtained from independent sources outside an entity provides greater assurance about the subject matter or the assertion than evidence secured solely from within the entity.
  2. Information obtained from the independent attester's direct personal knowledge (such as through physical examination, observation, computation, operating tests, or inspection) is more persuasive than information obtained indirectly.
  3. The more effective the controls over the subject matter, the more assurance they provide about the subject matter or the assertion.

.53

Thus, in the hierarchy of available attest procedures, those that involve search and verification (for example, inspection, confirmation, or observation), particularly when using independent sources outside the entity, are generally more effective in restricting attestation risk than those involving internal inquiries and comparisons of internal information (for example, analytical procedures and discussions with individuals responsible for the subject matter or the assertion). On the other hand, the latter are generally less costly to apply.

.54

In an attest engagement designed to provide a high level of assurance (referred to as an examination), the practitioner's objective is to accumulate sufficient evidence to restrict attestation risk to a level that is, in the practitioner's professional judgment, appropriately low for the high level of assurance that may be imparted by his or her report. In such an engagement, a practitioner should select from all available procedures—that is, procedures that assess inherent and control risk and restrict detection risk—any combination that can restrict attestation risk to such an appropriately low level.

.55

In an attest engagement designed to provide a moderate level of assurance (referred to as a review), the objective is to accumulate sufficient evidence to restrict attestation risk to a moderate level. To accomplish this, the types of procedures performed generally are limited to inquiries and analytical procedures (rather than also including search and verification procedures).

.56

Nevertheless, there will be circumstances in which inquiry and analytical procedures (a) cannot be performed, (b) are deemed less efficient than other procedures, or (c) yield evidence indicating that the subject matter or the assertion may be incomplete or inaccurate. In the first circumstance, the practitioner should perform other procedures that he or she believes can provide him or her with a level of assurance equivalent to that which inquiries and analytical procedures would have provided. In the second circumstance, the practitioner may perform other procedures that he or she believes would be more efficient to provide him or her with a level of assurance equivalent to that which inquiries and analytical procedures would provide. In the third circumstance, the practitioner should perform additional procedures.

.57

The extent to which attestation procedures will be performed should be based on the level of assurance to be provided and the practitioner's consideration of (a) the nature and materiality of the information to be tested to the subject matter or the assertion taken as a whole, (b) the likelihood of misstatements, (c) knowledge obtained during current and previous engagements, (d) the responsible party's competence in the subject matter, (e) the extent to which the information is affected by the asserter's judgment, and (f) inadequacies in the responsible party's underlying data.

.58

As part of the attestation procedures, the practitioner considers the written assertion ordinarily provided by the responsible party. If a written assertion cannot be obtained from the responsible party, the practitioner should consider the effects on his or her ability to obtain sufficient evidence to form a conclusion about the subject matter. When the practitioner's client is the responsible party, a failure to obtain a written assertion should result in the practitioner concluding that a scope limitation exists.fn 11 When the practitioner's client is not the responsible party and a written assertion is not provided, the practitioner may be able to conclude that he or she has sufficient evidence to form a conclusion about the subject matter.

Representation Letter

.59

During an attest engagement, the responsible party makes many representations to the practitioner, both oral and written, in response to specific inquiries or through the presentation of subject matter or an assertion. Such representations from the responsible party are part of the evidential matter the practitioner obtains.

.60

Written representations from the responsible party ordinarily confirm representations explicitly or implicitly given to the practitioner, indicate and document the continuing appropriateness of such representations, and reduce the possibility of misunderstanding concerning the matters that are the subject of the representations. Accordingly, in an examination or a review engagement, a practitioner should consider obtaining a representation letter from the responsible party. Examples of matters that might appear in such a representation letter include the following:fn 12

  1. A statement acknowledging responsibility for the subject matter and, when applicable, the assertion
  2. A statement acknowledging responsibility for selecting the criteria, where applicable
  3. A statement acknowledging responsibility for determining that such criteria are appropriate for its purposes, where the responsible party is the client
  4. The assertion about the subject matter based on the criteria selected
  5. A statement that all known matters contradicting the assertion and any communication from regulatory agencies affecting the subject matter or the assertion have been disclosed to the practitioner
  6. Availability of all records relevant to the subject matter
  7. A statement that any known events subsequent to the period (or point in time) of the subject matter being reported on that would have a material effect on the subject matter (or, if applicable, the assertion) have been disclosed to the practitioner
  8. Other matters as the practitioner deems appropriate

.61

When the client is not the responsible party, the practitioner should consider obtaining a letter of written representations from the client as part of the attest engagement. Examples of matters that might appear in such a representation letter include the following:

  1. A statement that any known events subsequent to the period (or point in time) of the subject matter being reported on that would have a material effect on the subject matter (or, if applicable, the assertion) have been disclosed to the practitioner
  2. A statement acknowledging the client's responsibility for selecting the criteria, where applicable
  3. A statement acknowledging the client's responsibility for determining that such criteria are appropriate for its purposes
  4. Other matters as the practitioner deems appropriate

.62

If the responsible party or the client refuses to furnish all written representations that the practitioner deems necessary, the practitioner should consider the effects of such a refusal on his or her ability to issue a conclusion about the subject matter. If the practitioner believes that the representation letter is necessary to obtain sufficient evidence to issue a report, the responsible party's or the client's refusal to furnish such evidence in the form of written representations constitutes a limitation on the scope of an examination sufficient to preclude an unqualified opinion and is ordinarily sufficient to cause the practitioner to disclaim an opinion or withdraw from an examination engagement. However, based on the nature of the representations not obtained or the circumstances of the refusal, the practitioner may conclude, in an examination engagement, that a qualified opinion is appropriate. Further, the practitioner should consider the effects of the refusal on his or her ability to rely on other representations. When a scope limitation exists in a review engagement, the practitioner should withdraw from the engagement. (See paragraph .75.)

Standards of Reporting

.63

The first standard of reporting is—The report shall identify the subject matter or the assertion being reported on and state the character of the engagement.

.64

The practitioner who accepts an attest engagement should issue a report on the subject matter or the assertion or withdraw from the attest engagement. If the practitioner is reporting on the assertion, the assertion should be bound with or accompany the practitioner's report or the assertion should be clearly stated in the practitioner's report.fn 13

.65

The statement of the character of an attest engagement includes the following two elements: (a) a description of the nature and scope of the work performed and (b) a reference to the professional standards governing the engagement. The terms examination and review should be used to describe engagements to provide, respectively, a high level and a moderate level of assurance. The reference to professional standards should be accomplished by referring to “attestation standards established by the American Institute of Certified Public Accountants.”

.66

The second standard of reporting is—The report shall state the practitioner's conclusion about the subject matter or the assertion in relation to the criteria against which the subject matter was evaluated. However, if conditions exist that, individually or in combination, result in one or more material misstatements or deviations from the criteria, the practitioner should modify the report and, to most effectively communicate with the reader of the report, should ordinarily express his or her conclusion directly on the subject matter,fn 14 not on the assertion.

.67

The practitioner should consider the concept of materiality in applying this standard. In expressing a conclusion, the practitioner should consider an omission or a misstatement to be material if the omission or misstatement—individually or when aggregated with others—is such that a reasonable person would be influenced by the omission or misstatement. The practitioner should consider both qualitative and quantitative aspects of omissions and misstatements.

.68

The term general use applies to attest reports that are not restricted to specified parties. General-use attest reports should be limited to two levels of assurance: one based on a restriction of attestation risk to an appropriately low level (an examination) and the other based on a restriction of attestation risk to a moderate level (a review). In an engagement to achieve a high level of assurance (an examination), the practitioner's conclusion should be expressed in the form of an opinion. When attestation risk has been restricted only to a moderate level (a review), the conclusion should be expressed in the form of negative assurance.

.69

A practitioner may report on subject matter or an assertion at multiple dates or covering multiple periods during which criteria have changed (for example, a report on comparative information). In those circumstances, the practitioner should determine whether the criteria are clearly stated or described for each of the dates or periods, and whether the changes have been adequately disclosed.

.70

If the criteria used for the subject matter for the current date or period differ from those criteria used for the subject matter for a preceding date or period and the subject matter for the prior date or period is not presented, the practitioner should consider whether the changes in criteria are likely to be significant to users of the report. If so, the practitioner should determine whether the criteria are clearly stated or described and the fact that the criteria have changed is disclosed. (See paragraphs .76 and .77.)

.71

The third standard of reporting is—The report shall state all of the practitioner's significant reservations about the engagement, the subject matter, and, if applicable, the assertion related thereto.

.72

Reservations about the engagement refers to any unresolved problem that the practitioner had in complying with these attestation standards, interpretive standards, or the specific procedures agreed to by the specified parties. The practitioner should not express an unqualified conclusion unless the engagement has been conducted in accordance with the attestation standards. Such standards will not have been complied with if the practitioner has been unable to apply all the procedures that he or she considers necessary in the circumstances.

.73

Restrictions on the scope of an engagement, whether imposed by the client or by such other circumstances as the timing of the work or the inability to obtain sufficient evidence, may require the practitioner to qualify the assurance provided, to disclaim any assurance, or to withdraw from the engagement. For example, if the practitioner's client is the responsible party, a failure to obtain a written assertion should result in the practitioner concluding that a scope limitation exists. (See paragraph .58.)

.74

The practitioner's decision to provide a qualified opinion, to disclaim an opinion, or to withdraw because of a scope limitation in an examination engagement depends on an assessment of the effect of the omitted procedure(s) on his or her ability to express assurance. This assessment will be affected by the nature and magnitude of the potential effects of the matters in question, and by their significance to the subject matter or the assertion. If the potential effects are pervasive to the subject matter or the assertion, a disclaimer or withdrawal is more likely to be appropriate. When restrictions that significantly limit the scope of the engagement are imposed by the client or the responsible party, the practitioner generally should disclaim an opinion or withdraw from the engagement. The reasons for a qualification or disclaimer should be described in the practitioner's report.

.75

In a review engagement, when the practitioner is unable to perform the inquiry and analytical or other procedures he or she considers necessary to achieve the limited assurance contemplated by a review, or when the client is the responsible party and does not provide the practitioner with a written assertion, the review will be incomplete. A review that is incomplete is not an adequate basis for issuing a review report and, accordingly, the practitioner should withdraw from the engagement.

.76

Reservations about the subject matter or the assertion refers to any unresolved reservation about the assertion or about the conformity of the subject matter with the criteria, including the adequacy of the disclosure of material matters. They can result in either a qualified or an adverse opinion, depending on the materiality of the departure from the criteria against which the subject matter or the assertion was evaluated, or a modified conclusion in a review engagement.

.77

Reservations about the subject matter or the assertion may relate to the measurement, form, arrangement, content, or underlying judgments and assumptions applicable to the subject matter or the assertion and its appended notes, including, for example, the terminology used, the amount of detail given, the classification of items, and the bases of amounts set forth. The practitioner considers whether a particular reservation should affect the report given the circumstances and facts of which he or she is aware at the time.

.78

The fourth standard of reporting is—The report shall state that the use of the report is restricted to specified parties under the following circumstances:

  • When the criteria used to evaluate the subject matter are determined by the practitioner to be appropriate only for a limited number of parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria
  • When the criteria used to evaluate the subject matter are available only to specified parties
  • When reporting on subject matter and a written assertion has not been provided by the responsible party
  • When the report is on an attest engagement to apply agreed-upon procedures to the subject matter

.79

The need for restriction on the use of a report may result from a number of circumstances, including the purpose of the report, the criteria used in preparation of the subject matter, the extent to which the procedures performed are known or understood, and the potential for the report to be misunderstood when taken out of the context in which it was intended to be used. A practitioner should consider informing his or her client that restricted-use reports are not intended for distribution to nonspecified parties, regardless of whether they are included in a document containing a separate general-use report.fn 15fn 16 However, a practitioner is not responsible for controlling a client's distribution of restricted-use reports. Accordingly, a restricted-use report should alert readers to the restriction on the use of the report by indicating that the report is not intended to be and should not be used by anyone other than the specified parties.

.80

An attest report that is restricted as to use should contain a separate paragraph at the end of the report that includes the following elements:

  1. A statement indicating that the report is intended solely for the information and use of the specified parties
  2. An identification of the specified parties to whom use is restricted
  3. A statement that the report is not intended to be and should not be used by anyone other than the specified parties
  4. An example of such a paragraph is the following.
  5. This report is intended solely for the information and use of [the specified parties] and is not intended to be and should not be used by anyone other than these specified parties.

.81

Other attestation standards may specify situations that require restricted reports such as the following:

  1. A review report on management's discussion and analysis
  2. A report on prospective financial information when the report is intended for use by the responsible party alone, or by the responsible party and third parties with whom the responsible party is negotiating directly, as described in section 301, Financial Forecasts and Projections, paragraph .10.
  3. Furthermore, nothing in this section precludes a practitioner from restricting the use of any report.

.82

If a practitioner issues a single combined report covering both (a) subject matter or presentations that require a restriction on use to specified parties and (b) subject matter or presentations that ordinarily do not require such a restriction, the use of such a single combined report should be restricted to the specified parties.

.83

In some instances, a separate restricted-use report may be included in a document that also contains a general-use report. The inclusion of a separate restricted-use report in a document that contains a general-use report does not affect the intended use of either report. The restricted-use report remains restricted as to use, and the general-use report continues to be for general use.

Examination Reports

.84

When expressing an opinion, the practitioner should clearly state whether, in his or her opinion, (a) the subject matter is based on (or in conformity with) the criteria in all material respects or (b) the assertion is presented (or fairly stated), in all material respects, based on the criteria. Reports expressing an opinion may be qualified or modified for some aspect of the subject matter, the assertion or the engagement (see the third reporting standard). However, as stated in paragraph .66, if conditions exist that, individually or in combination, result in one or more material misstatements or deviations from the criteria, the practitioner should modify the report and, to most effectively communicate with the reader of the report, should ordinarily express his or her conclusion directly on the subject matter, not on the assertion. In addition, such reports may emphasize certain matters relating to the attest engagement, the subject matter, or the assertion. The form of the practitioner's report will depend on whether the practitioner opines on the subject matter or the assertion.

.85

The practitioner's examination report on subject matter should include the following:

  1. A title that includes the word independent
  2. An identification of the subject matter and the responsible party
  3. A statement that the subject matter is the responsibility of the responsible party
  4. A statement that the practitioner's responsibility is to express an opinion on the subject matter based on his or her examination
  5. A statement that the examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants, and, accordingly, included procedures that the practitioner considered necessary in the circumstances
  6. A statement that the practitioner believes the examination provides a reasonable basis for his or her opinion
  7. The practitioner's opinion on whether the subject matter is based on (or in conformity with) the criteria in all material respects
  8. A statement restricting the use of the report to specified parties under the following circumstances (see paragraphs .78 to .83):
    1. When the criteria used to evaluate the subject matter are determined by the practitioner to be appropriate only for a limited number of parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria
    2. When the criteria used to evaluate the subject matter are available only to the specified parties
    3. When a written assertion has not been provided by the responsible party (The practitioner should also include a statement to that effect in the introductory paragraph of the report.)
  9. The manual or printed signature of the practitioner's firm
  10. The date of the examination report

Appendix A [paragraph .114], “Examination Reports,” includes a standard examination report on subject matter. (See Example 1.)

.86

The practitioner's examination report on an assertion should include the following:

  1. A title that includes the word independent
  2. An identification of the assertion and the responsible party (When the assertion does not accompany the practitioner's report, the first paragraph of the report should also contain a statement of the assertion.)
  3. A statement that the assertion is the responsibility of the responsible party
  4. A statement that the practitioner's responsibility is to express an opinion on the assertion based on his or her examination
  5. A statement that the examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants, and, accordingly, included
  6. A statement that the practitioner believes the examination provides a reasonable basis for his or her opinion
  7. The practitioner's opinion on whether the assertion is presented (or fairly stated), in all material respects, based on the criteria (However, see paragraph .66.)
  8. A statement restricting the use of the report to specified parties under the following circumstances (see paragraphs .78 to .83):
    1. When the criteria used to evaluate the subject matter are determined by the practitioner to be appropriate only for a limited number of parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria
    2. When the criteria used to evaluate the subject matter are available only to the specified parties
  9. The manual or printed signature of the practitioner's firm
  10. The date of the examination report

Appendix A [paragraph .114] includes a standard examination report on an assertion. (See Example 2.)

.87

Nothing precludes the practitioner from examining an assertion but opining directly on the subject matter. (See Appendix A [paragraph .114], Example 3.)

Review Reports

.88

In a review report, the practitioner's conclusion should state whether any information came to the practitioner's attention on the basis of the work performed that indicates that (a) the subject matter is not based on (or in conformity with) the criteria or (b) the assertion is not presented (or fairly stated) in all material respects based on the criteria. (As discussed more fully in the commentary to the third reporting standard, if the subject matter or the assertion is not modified to correct for any such information that comes to the practitioner's attention, such information should be described in the practitioner's report.)

.89

The practitioner's review report on subject matter should include the following:

  1. A title that includes the word independent
  2. An identification of the subject matter and the responsible party
  3. A statement that the subject matter is the responsibility of the responsible party
  4. A statement that the review was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants
  5. A statement that a review is substantially less in scope than an examination, the objective of which is an expression of opinion on the subject matter, and accordingly, no such opinion is expressed
  6. A statement about whether the practitioner is aware of any material modifications that should be made to the subject matter in order for it to be based on (or in conformity with), in all material respects, the criteria, other than those modifications, if any, indicated in his or her report
  7. A statement restricting the use of the report to specified parties under the following circumstances (see paragraphs .78 to .83):
    1. When the criteria used to evaluate the subject matter are determined by the practitioner to be appropriate only for a limited number of parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria
    2. When the criteria used to evaluate the subject matter are available only to the specified parties
    3. When a written assertion has not been provided by the responsible party and the responsible party is not the client (The practitioner should also include a statement to that effect in the introductory paragraph of the report.)
  8. The manual or printed signature of the practitioner's firm
  9. The date of the review report

Appendix B [paragraph .115] “Review Reports,” includes a standard review report on subject matter. (See Example 1.) Appendix B [paragraph .115] also includes a review report on subject matter that is the responsibility of a party other than client; the report is restricted as to use because a written assertion has not been provided by the responsible party. (See Example 2.)

.90

The practitioner's review report on an assertion should include the following:

  1. A title that includes the word independent
  2. An identification of the assertion and the responsible party (When the assertion does not accompany the practitioner's report, the first paragraph of the report should also contain a statement of the assertion.)
  3. A statement that the assertion is the responsibility of the responsible party
  4. A statement that the review was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants
  5. A statement that a review is substantially less in scope than an examination, the objective of which is an expression of opinion on the assertion, and accordingly, no such opinion is expressed
  6. A statement about whether the practitioner is aware of any material modifications that should be made to the assertion in order for it to be presented (or fairly stated), in all material respects, based on (or in conformity with) the criteria, other than those modifications, if any, indicated in his or her report (However, see paragraph .66.)
  7. A statement restricting the use of the report to specified parties under the following circumstances (see paragraphs .78 to .83):
    1. When the criteria used to evaluate the subject matter are determined by the practitioner to be appropriate only for a limited number of parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria
    2. When the criteria used to evaluate the subject matter are available only to the specified parties
  8. The manual or printed signature of the practitioner's firm
  9. The date of the review report

Appendix B [paragraph .115] includes a review report on an assertion that is restricted as to use because the criteria are available only to the specified parties. (See Example 3.)

Other Information in a Client-Prepared Document Containing the Practitioner's Attest Reportfn 17 

[The following paragraph is effective as of December 31, 2016. See  PCAOB Release No. 2015-002. The paragraph effective before December 31, 2016, can be found  here.] 

.91

A client may publish various documents that contain information (hereinafter referred to as other information) in addition to the practitioner's attest report on subject matter (or on an assertion related thereto). Paragraphs .92 to .94 provide guidance to the practitioner when the other information is contained in (a) annual reports to holders of securities or beneficial interests, annual reports of organizations for charitable or philanthropic purposes distributed to the public, and annual reports filed with regulatory authorities under the Securities Exchange Act of 1934 or (b) other documents to which the practitioner, at the client's request, devotes attention. These paragraphs are not applicable when an attest report appears in a registration statement filed under the Securities Act of 1933. (See AS 6101, Letters for Underwriters and Certain Other Requesting Parties, and AS 4101, Responsibilities Regarding Filings Under Federal Securities Statutes.) Also, these paragraphs are not applicable to other information on which the practitioner or another practitioner is engaged to issue an opinion.

.92

The practitioner's responsibility with respect to other information in such a document does not extend beyond the information identified in his or her report, and the practitioner has no obligation to perform any procedures to corroborate any other information contained in the document. However, the practitioner should read the other information not covered by the practitioner's report or by the report of the other practitioner and consider whether it, or the manner of its presentation, is materially inconsistent with the information appearing in the practitioner's report. If the practitioner believes that the other information is inconsistent with the information appearing in the practitioner's report, he or she should consider whether the practitioner's report requires revision. If the practitioner concludes that the report does not require revision, he or she should request the client to revise the other information. If the other information is not revised to eliminate the material inconsistency, the practitioner should consider other actions, such as revising his or her report to include an explanatory paragraph describing the material inconsistency, withholding the use of his or her report in the document, or withdrawing from the engagement.

.93

If, while reading the other information for the reasons set forth in paragraph .92, the practitioner becomes aware of information that he or she believes is a material misstatement of fact that is not a material inconsistency as described in paragraph .92, he or she should discuss the matter with the client. In connection with this discussion, the practitioner should consider that he or she may not have the expertise to assess the validity of the statement, that there may be no standards by which to assess its presentation, and that there may be valid differences of judgment or opinion. If the practitioner concludes he or she has a valid basis for concern, the practitioner should propose that the client consult with some other party whose advice may be useful, such as the entity's legal counsel.

.94

If, after discussing the matter, the practitioner concludes that a material misstatement of fact remains, the action taken will depend on his or her judgment in the circumstances. The practitioner should consider steps such as notifying the client's management and audit committee in writing of his or her views concerning the information and consulting his or her legal counsel about further action appropriate in the circumstances.fn 18

Consideration of Subsequent Events in an Attest Engagement

.95

Events or transactions sometimes occur subsequent to the point in time or period of time of the subject matter being tested but prior to the date of the practitioner's report that have a material effect on the subject matter and therefore require adjustment or disclosure in the presentation of the subject matter or assertion. These occurrences are referred to as subsequent events. In performing an attest engagement, a practitioner should consider information about subsequent events that comes to his or her attention. Two types of subsequent events require consideration by the practitioner.

.96

The first type consists of events that provide additional information with respect to conditions that existed at the point in time or during the period of time of the subject matter being tested. This information should be used by the practitioner in considering whether the subject matter is presented in conformity with the criteria and may affect the presentation of the subject matter, the assertion, or the practitioner's report.

.97

The second type consists of those events that provide information with respect to conditions that arose subsequent to the point in time or period of time of the subject matter being tested that are of such a nature and significance that their disclosure is necessary to keep the subject matter from being misleading. This type of information will not normally affect the practitioner's report if the information is appropriately disclosed.

.98

While the practitioner has no responsibility to detect subsequent events, the practitioner should inquire of the responsible party (and his or her client if the client is not the responsible party) as to whether they are aware of any subsequent events, through the date of the practitioner's report, that would have a material effect on the subject matter or assertion.fn 19 If the practitioner has decided to obtain a representation letter, the letter ordinarily would include a representation concerning subsequent events. (See paragraphs .60 and .61.)

[The following paragraph is effective as of December 31, 2016. See  PCAOB Release No. 2015-002. The paragraph effective before December 31, 2016, can be found  here.]

.99

The practitioner has no responsibility to keep informed of events subsequent to the date of his or her report; however, the practitioner may later become aware of conditions that existed at that date that might have affected the practitioner's report had he or she been aware of them. In such circumstances, the practitioner may wish to consider the guidance in AS 2905,Subsequent Discovery of Facts Existing at the Date of the Auditor's Report.

Attest Documentationfn 20

.100

The practitioner should prepare and maintain attest documentation, the form and content of which should be designed to meet the circumstances of the particular attest engagement.[fn 21] Attest documentation is the principal record of attest procedures applied, information obtained, and conclusions or findings reached by the practitioner in the engagement. The quantity, type, and content of attest documentation are matters of the practitioner's professional judgment. [As amended, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

.101

Attest documentation serves mainly to:

  1. Provide the principal support for the practitioner's report, including the representation regarding observance of the standards of fieldwork, which is implicit in the reference in the report to attestation standards.fn 22
  2. Aid the practitioner in the conduct and supervision of the attest engagement.

For examinations of prospective financial statements, attest documentation ordinarily should indicate that the process by which the entity develops its prospective financial statements was considered in determining the scope of the examination. [Paragraph added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

.102

Examples of attest documentation are work programs, analyses, memoranda, letters of confirmation and representation, abstracts or copies of entity documents, and schedules or commentaries prepared or obtained by the practitioner. Attest documentation may be in paper form, electronic form, or other media. [Paragraph renumbered and amended, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

[The following paragraph is effective until December 14, 2025. See PCAOB Release No. 2024-005. The paragraph effective on December 15, 2025 can be found here.]

.103

Attest documentation should be sufficient to (a) enable members of the engagement teamfn 22A with supervision and review responsibilities to understand the nature, timing, extent, and results of attest procedures performed, and the information obtainedfn 23 and (b) indicate the engagement team member(s) who performed and reviewed the work. [Paragraph added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

.104

Attest documentation is the property of the practitioner, and some states recognize this right of ownership in their statutes. The practitioner should adopt reasonable procedures to retain attest documentation for a period of time sufficient to meet the needs of his or her practice and to satisfy any applicable legal or regulatory requirements for records retention.fn 24[fn 25] [Paragraph renumbered and amended, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

.105

The practitioner has an ethical, and in some situations a legal, obligation to maintain the confidentiality of client information or information of the responsible party.fn 26 Because attest documentation often contains confidential information, the practitioner should adopt reasonable procedures to maintain the confidentiality of that information.fn † [Paragraph added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

.106

The practitioner also should adopt reasonable procedures to prevent unauthorized access to attest documentation. [Paragraph added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

.107

Certain attest documentation may sometimes serve as a useful reference source for the client, but it should not be regarded as a part of, or a substitute for, the client's records. [Paragraph renumbered and amended, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

[.108]

[Paragraph renumbered and deleted by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

Attest Services Related to Consulting Service Engagements

Attest Services as Part of a Consulting Service Engagement

.109

When a practitioner provides an attest service (as defined in this section) as part of a consulting service engagement, this SSAE applies only to the attest service. The SSCS applies to the balance of the consulting service engagement. [Paragraph renumbered by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

.110

When the practitioner determines that an attest service is to be provided as part of a consulting service engagement, the practitioner should inform the client of the relevant differences between the two types of services and obtain concurrence that the attest service is to be performed in accordance with the appropriate professional requirements. The practitioner should take such actions because the professional requirements for an attest service differ from those for a consulting service engagement. [Paragraph renumbered by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

.111

The practitioner should issue separate reports on the attest engagement and the consulting service engagement and, if presented in a common binder, the report on the attest engagement or service should be clearly identified and segregated from the report on the consulting service engagement. [Paragraph renumbered by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

Subject Matter, Assertions, Criteria, and Evidence

.112

An attest service may involve subject matter, an assertion, criteria, or evidential matter developed during a concurrent or prior consulting service engagement. Subject matter or an assertion developed with the practitioner's advice and assistance as the result of such consulting services engagement may be the subject of an attest engagement, provided the responsible party accepts and acknowledges responsibility for the subject matter or assertion. (See paragraph .12.) Criteria developed with the practitioner's assistance may be used to evaluate subject matter in an attest engagement, provided such criteria meet the requirements of this section. Relevant information obtained in the course of a concurrent or prior consulting service engagement may be used as evidential matter in an attest engagement, provided the information satisfies the requirements of this section. [Paragraph renumbered by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

Effective Date

.113

This section is effective when the subject matter or assertion is as of or for a period ending on or after June 1, 2001. Early application is permitted. [Paragraph renumbered by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]


Appendix A

Examination Reports

.114

Example 1

This is a standard examination report on subject matter for general use. This report pertains to subject matter for which suitable criteria exist and are available to all users through inclusion in a clear manner in the presentation of the subject matter. (See paragraphs .78 to .83 for guidance on restricting the use of the report when criteria are available only to specified parties; see Example 4 for an illustration of such a report.) A written assertion has been obtained from the responsible party.

Independent Accountant's Report

We have examined the [identify the subject matter—for example, the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX]. XYZ Company's management is responsible for the schedule of investment returns. Our responsibility is to express an opinion based on our examination.

Our examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants and, accordingly, included examining, on a test basis, evidence supporting [identify the subject matter—for example, XYZ Company's schedule of investment returns] and performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the subject matter.]

In our opinion, the schedule referred to above presents, in all material respects, [identify the subject matter—for example, the investment returns of XYZ Company for the year ended December 31, 20XX] based on [identify criteria—for example, the ABC criteria set forth in Note 1].

[Signature]

[Date]

Example 2

This report is a standard examination report on an assertion for general use. The report pertains to subject matter for which suitable criteria exist and are available to all users through inclusion in a clear manner in the presentation of the subject matter. (See paragraphs .78 to .83 for guidance on restricting the use of the report when criteria are available only to specified parties.) A written assertion has been obtained from the responsible party.

Independent Accountant's Report

We have examined management's assertion that [identify the assertion—for example, the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX is presented in accordance with ABC criteria set forth in Note 1]. XYZ Company's management is responsible for the assertion. Our responsibility is to express an opinion on the assertion based on our examination.

Our examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants and, accordingly, included examining, on a test basis, evidence supporting management's assertion and performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the assertion.]

In our opinion, management's assertion referred to above is fairly stated, in all material respects, based on [identify established or stated criteria—for example, the ABC criteria set forth in Note 1].

[Signature]

[Date]

Example 3

This is an examination report for general use; the introductory paragraph states the practitioner has examined management's assertion but the practitioner opines directly on the subject matter (see paragraph .87). The report pertains to subject matter for which suitable criteria exist and are available to all users through inclusion in a clear manner in the presentation of the subject matter. (See paragraphs .78 to .83 for guidance on restricting the use of the report when criteria are available only to specified parties.) A written assertion has been obtained from the responsible party.

Independent Accountant's Report

We have examined management's assertion that [identify the assertion—for example, the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX is presented in accordance with the ABC criteria set forth in Note 1]. XYZ Company's management is responsible for the assertion. Our responsibility is to express an opinion based on our examination.

Our examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants and, accordingly, included examining, on a test basis, evidence supporting [identify the subject matter—for example, XYZ Company's schedule of investment returns] and performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the assertion.]

In our opinion, the schedule referred to above, presents, in all material respects, [identify the subject matter—for example, the investment returns of XYZ Company for the year ended December 31, 20XX] based on [identify criteria—for example, the ABC criteria set forth in Note 1].

[Signature]

[Date]

Example 4

This is an examination report on subject matter. Although suitable criteria exist, use of the report is restricted because the criteria are available only to specified parties. (See paragraph .34.) A written assertion has been obtained from the responsible party.

Independent Accountant's Report

We have examined the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX. XYZ Company's management is responsible for the schedule of investment returns. Our responsibility is to express an opinion based on our examination.

Our examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants and, accordingly, included examining, on a test basis, evidence supporting [identify the subject matter—for example, XYZ Company's schedule of investment returns] and performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the assertion.]

In our opinion, the schedule referred to above, presents, in all material respects, [identify the subject matter—for example, the investment returns of XYZ Company for the year ended December 31, 20XX] based on the ABC criteria referred to in the investment management agreement between XYZ Company and DEF Investment Managers, Ltd., dated November 15, 20X1.

This report is intended solely for the information and use of XYZ Company and [identify other specified parties—for example, DEF Investment Managers, Ltd.] and is not intended to be and should not be used by anyone other than these specified parties.

[Signature]

[Date]

Example 5

This is an examination report with a qualified opinion because conditions exist that, individually or in combination, result in one or more material misstatements or deviations from the criteria; the report is for general use. The report pertains to subject matter for which suitable criteria exist and are available to all users through inclusion in a clear manner in the presentation of the subject matter. (See paragraphs .78 to .83 for guidance on restricting the use of the report when criteria are available only to specified parties.) A written assertion has been obtained from the responsible party.

Independent Accountant's Report

We have examined the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX. XYZ Company's management is responsible for the schedule of investment returns. Our responsibility is to express an opinion based on our examination.

Our examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants and, accordingly, included examining, on a test basis, evidence supporting [identify the subject matter—for example, XYZ Company's schedule of investment returns] and performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.

Our examination disclosed the following [describe condition(s) that, individually or in the aggregate, resulted in a material misstatement or deviation from the criteria].

In our opinion, except for the material misstatement [or deviation from the criteria] described in the preceding paragraph, the schedule referred to above, presents, in all material respects, [identify the subject matter—for example, the investment returns of XYZ Company for the year ended December 31, 20XX] based on [identify criteria—for example, the ABC criteria set forth in Note 1 ].

[Signature]

[Date]

Example 6

This is an examination report that contains a disclaimer of opinion because of a scope restriction. (See paragraph .74 for reporting guidance when there is a scope restriction.) The report pertains to subject matter for which suitable criteria exist and are available to all users through inclusion in a clear manner in the presentation of the subject matter.

Independent Accountant's Report

We were engaged to examine the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX. XYZ Company's management is responsible for the schedule of investment returns.

[Scope paragraph should be omitted.]

[Include paragraph to describe scope restrictions.]

Because of the restriction on the scope of our examination discussed in the preceding paragraph, the scope of our work was not sufficient to enable us to express, and we do not express, an opinion on whether the schedule referred to above presents, in all material respects, [identify the subject matter—for example, the investment returns of XYZ Company for the year ended December 31, 20XX] based on [identify criteria—for example, the ABC criteria set forth in Note 1].

[Signature]

[Date]

Example 7

This is an examination report on subject matter that is the responsibility of a party other than the client. The report is restricted as to use since a written assertion has not been provided by the responsible party. (See paragraph .78.) The subject matter pertains to criteria that are suitable and are available to the client.

Independent Accountant's Report

To the Board of Directors

DEF Company:

We have examined the [identify the subject matter—for example, the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX]. XYZ Company's management is responsible for the schedule of investment returns. XYZ management did not provide us a written assertion about their schedule of investment returns for the year ended December 31, 20XX. Our responsibility is to express an opinion based on our examination.

Our examination was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants and, accordingly, included examining, on a test basis, evidence supporting [ identify the subject matter—for example, XYZ Company's schedule of investment returns] and performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the subject matter.]

In our opinion, the schedule referred to above presents, in all material respects, [identify the subject matter—for example, the investment returns of XYZ Company for the year ended December 31, 20XX] based on [identify criteria—for example, the ABC criteria set forth in Note 1].

This report is intended solely for the information and use of the management and board of directors of DEF Company and is not intended to be and should not be used by anyone other than these specified parties.

[Signature]

[Date]

[Paragraph renumbered by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

Appendix B

Review Reports

.115

Example 1

This is a standard review report on subject matter for general use. The report pertains to subject matter for which suitable criteria exist and are available to all users through inclusion in a clear manner in the presentation of the subject matter. (See paragraphs .78 to .83 for guidance on restricting the use of the report when criteria are available only to specified parties.) A written assertion has been obtained from the responsible party.

Independent Accountant's Report

We have reviewed the [identify the subject matter—for example, the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX]. XYZ Company's management is responsible for the schedule of investment returns.

Our review was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants. A review is substantially less in scope than an examination, the objective of which is the expression of an opinion on [identify the subject matter—for example, XYZ Company's schedule of investment returns]. Accordingly, we do not express such an opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the subject matter.]

Based on our review, nothing came to our attention that caused us to believe that the [identify the subject matter—for example, schedule of investment returns of XYZ Company for the year ended December 31, 20XX] is not presented, in all material respects, in conformity with [identify the criteria—for example, the ABC criteria set forth in Note 1].

[Signature]

[Date]

Example 2

This is a review report on subject matter that is the responsibility of a party other than the client. This review report is restricted as to use since a written assertion has not been provided by the responsible party. (See paragraph .78.) The subject matter pertains to criteria that are suitable and are available to the client.

Independent Accountant's Report

To the Board of Directors

DEF Company:

We have reviewed [identify the subject matter—for example, the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX]. XYZ Company's management is responsible for the schedule of investment returns. XYZ Company's management did not provide us a written assertion about their schedule of investment returns for the year ended December 31, 20XX.

Our review was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants. A review is substantially less in scope than an examination, the objective of which is the expression of an opinion on [identify the subject matter—for example, XYZ Company's schedule of investment returns]. Accordingly, we do not express such an opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the subject matter.]

Based on our review, nothing came to our attention that caused us to believe that [identify the subject matter—for example, the schedule of investment returns of XYZ Company for the year ended December 31, 20XX] is not presented, in all material respects, in conformity with [identify the criteria—for example, the ABC criteria set forth in Note 1].

This report is intended solely for the information and use of the management and board of directors of DEF Company and is not intended to be and should not be used by anyone other than these specified parties.

[Signature]

[Date]

Example 3

This is a review report on an assertion. Although suitable criteria exist for the subject matter, the report is restricted as to use since the criteria are available only to specified parties; if the criteria are available as described in paragraph .33 (a) to (d), the paragraph restricting the use of the report would be omitted. A written assertion has been obtained from the responsible party.

Independent Accountant's Report

We have reviewed management's assertion that [identify the assertion—for example, the accompanying schedule of investment returns of XYZ Company for the year ended December 31, 20XX is presented in accordance with the ABC criteria referred to in Note 1]. XYZ Company's management is responsible for the assertion.

Our review was conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants. A review is substantially less in scope than an examination, the objective of which is the expression of an opinion on management's assertion. Accordingly, we do not express such an opinion.

[Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the assertion.]

Based on our review, nothing came to our attention that caused us to believe that management's assertion referred to above is not fairly stated, in all material respects, based on [identify the criteria—for example, the ABC criteria referred to in the investment management agreement between XYZ Company and DEF Investment Managers, Ltd., dated November 15, 20X1].

This report is intended solely for the information and use of XYZ Company and [identify other specified parties—for example, DEF Investment Managers, Ltd.] and is not intended to be and should not be used by anyone other than these specified parties.

[Signature]

[Date]

[Paragraph renumbered by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

Footnotes (AT Section 101—Attest Engagements):

fn 1 For a definition of the term practice of public accounting, see Definitions [ET section 92.25].

fn 2 See section 301, Financial Forecasts and Projections, paragraph .02, for additional guidance on applicability when engaged to provide an attest service on a financial forecast or projection.

fn 3 The term attest and its variants, such as attesting and attestation, are used in a number of state accountancy laws, and in regulations issued by state boards of accountancy under such laws, for different purposes and with different meanings from those intended by this section. Consequently, the definition of attest engagements set out in paragraph .01, and the attendant meaning of attest and attestation as used throughout the section, should not be understood as defining these terms and similar terms, as they are used in any law or regulation, nor as embodying a common understanding of the terms which may also be reflected in such laws or regulations.

fn 4 When the practitioner is unable to perform the inquiry and analytical or other procedures that he or she considers necessary to achieve the limited assurance contemplated by a review, or when the client is the responsible party and does not provide the practitioner with a written assertion, the review will be incomplete. A review that is incomplete is not an adequate basis for issuing a review report and, accordingly, the practitioner should withdraw from the engagement.

fn 5 See paragraph .112 regarding the practitioner's assistance in developing subject matter or criteria.

fn 6 The elements of quality control are identified in Statement on Quality Control Standards (SQCS) No. 2, System of Quality Control for a CPA Firm's Accounting and Auditing Practice [QC section 20]. A system of quality control is broadly defined as a process to provide the firm with reasonable assurance that its personnel comply with applicable professional standards and the firm's standards of quality. [As amended, effective September 2002, by Statement on Standards for Attestation Engagements No. 12.]

fn * An example of suitable criteria are the Trust Services criteria (includes WebTrust and SysTrust) developed by the AICPA's Assurance Services Executive Committee. These criteria may be used when the subject matter of the engagement is the security, availability, processing integrity, online privacy, or confidentiality of a system. The Trust Services criteria are presented in sections 17,100 and 17,200 of the AICPA's Technical Practice Aids. [Footnote added by the Assurance Services Executive Committee, January 2003.]

fn 6 See paragraph .07 of AS 1000, General Responsibilities of the Auditor in Conducting an Audit, for a description of competence.

fn 7 The practitioner performing an attest engagement should be independent pursuant to Rule 101, Independence, of the Code of Professional Conduct [ET section 101.01]. Interpretation No. 11, “Independence and the Performance of Professional Services Under the Statements on Standards for Attestation Engagements and Statement on Auditing Standards No. 75, Engagements to Apply Agreed-Upon Procedures to Specified Elements, Accounts, or Items of a Financial Statement,” [ET section 101.13], to rule 101 [ET section 101.01] provides guidance about its application to certain attest engagements.

fn 7A      Professional skepticism is an attitude that includes a questioning mind and a critical assessment of information related to the audit. See paragraph .11 of AS 1000 for further discussion of the concept of professional skepticism.

fn 7B      The term “applicable professional and legal requirements,” as used in this standard, has the same meaning as defined in Appendix A of AS 1000, which includes professional standards as defined in PCAOB Rule 1001(p)(vi) (i.e., certain accounting principles and other standards) and rules of the PCAOB that are not professional standards. This definition also includes statutes with which the auditor is required to comply. See, e.g., Section 10A of the Securities Exchange Act of 1934, 15 U.S.C. § 78j-1.

fn 8 [Footnote deleted.]

fn 9Attestation risk is the risk that the practitioner may unknowingly fail to appropriately modify his or her attest report on the subject matter or an assertion that is materially misstated. It consists of (a) the risk (consisting of inherent risk and control risk) that the subject matter or assertion contains deviations or misstatements that could be material and (b) the risk that the practitioner will not detect such deviations or misstatements (detection risk).

fn 10 See SQCS No. 2, paragraph 16 [QC section 20.16].

fn 11 When the client is the responsible party, it is presumed that the client will be capable of providing the practitioner with a written assertion regarding the subject matter. Failure to provide the written assertion in this circumstance is a client-imposed limitation on the practitioner's evidence-gathering efforts. In an examination, the practitioner should modify the report for the scope limitation. In a review engagement, such a scope limitation results in an incomplete review and the practitioner should withdraw from the engagement.

fn 12 Specific written representations will depend on the circumstances of the engagement (for example, whether the client is the responsible party) and the nature of the subject matter and the criteria. For example, when the client is not the responsible party but has selected the criteria, the practitioner might obtain the representation regarding responsibility for selection of the criteria from the client rather than the responsible party (see paragraph .61).

fn 13 The use of a "hot link" within the practitioner's report to management's assertion, such as might be used in a WebTrustSM report, would meet this requirement.

fn 14 Specific standards may require that the practitioner express his or her conclusion directly on the subject matter. For example, if management states in its assertion that a material weakness exists in the entity's internal control over financial reporting, the practitioner should state his or her opinion directly on the effectiveness of internal control, not on management's assertion related thereto.

fn 15 In some cases, restricted-use reports filed with regulatory agencies are required by law or regulation to be made available to the public as a matter of public record. Also, a regulatory agency as part of its oversight responsibility for an entity may require access to restricted-use reports in which they are not named as a specified party.

fn 16 This section does not preclude the practitioner, in connection with establishing the terms of the engagement, from reaching an understanding with the client that the intended use of the report will be restricted, and from obtaining the client's agreement that the client and the specified parties will not distribute the report to parties other than those identified in the report.

fn 17 Such guidance pertains only to other information in a client-prepared document. The practitioner has no responsibility to read information contained in documents of nonclients. Further, the practitioner is not required to read information contained in electronic sites, or to consider the consistency of other information in electronic sites with the original documents since electronic sites are a means of distributing information and are not "documents" as that term is used in this section. Practitioners may be asked by their clients to render attest services with respect to information in electronic sites, in which case, other attest standards may apply to those services.

fn 18 If the client does not have an audit committee, the practitioner should communicate with individuals whose authority and responsibility are equivalent to those of an audit committee, such as the board of directors, the board of trustees, an owner in a owner-managed entity, or those who engaged the practitioner.

fn 19 For certain subject matter, specific subsequent event standards have been developed to provide additional requirements for engagement performance and reporting. Additionally, a practitioner engaged to examine the design or effectiveness of internal control over items not covered by section 501, Reporting on an Entity's Internal Control Over Financial Reporting, or section 601, Compliance Attestation, should consider the subsequent events guidance set forth in sections 501.65-.68 and 601.50-.52.

fn 20Attest documentation also may be referred to as working papers. [Footnote added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

[fn 21] [Footnote renumbered and deleted by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

fn 22 However, there is no intention to imply that the practitioner would be precluded from supporting his or her report by other means in addition to attest documentation. [Footnote added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

fn 22A The term “engagement team,” as used in this standard for attest engagements, has a meaning analogous to the term’s definition in Appendix A of AS 2101, Audit Planning, for audit engagements.

fn 23 A firm of practitioners has a responsibility to adopt a system of quality control policies and procedures to provide the firm with reasonable assurance that its personnel comply with applicable professional standards, including attestation standards, and the firm's standards of quality in conducting individual attest engagements. Review of attest documentation and discussions with engagement team members are among the procedures a firm performs when monitoring compliance with the quality control policies and procedures that it has established. (Also, see paragraphs .17 and .18.) [Footnote added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

fn 24 The procedures should enable the practitioner to access electronic attest documentation throughout the retention period. [Footnote added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

[fn 25] [Footnote renumbered and deleted by the issuance of Statement on Standards for Attestation Engagements No. 11, January 2002.]

fn 26 Also, see Rule 301, Confidential Client Information, of the AICPA's Code of Professional Conduct [ET section 301.01]. [Footnote added, effective for attest engagements when the subject matter or assertion is as of or for a period ending on or after December 15, 2002, by Statement on Standards for Attestation Engagements No. 11.]

fn †Note: See the Attest Interpretation, "Providing Access to or Copies of Attest Documentation to a Regulator" (section 9101.43-.46).

Copyright © 2001 - 2004, American Institute of Certified Public Accountants, Inc.