Practice Assurance standards
Guidance to help firms interpret and follow the four principles-based standards with examples of best and acceptable practice.
Guidance on the Practice Assurance standards is intended to help firms interpret and follow the principles-based standards, and sets out examples of best and acceptable practice. Effective to 27 July, 2011.
- Guidance on the Practice Assurance standards
- Standard 1: Laws, regulations and professional standards
- Standard 2: Client acceptance and disengagement
- Standard 3: Competence
- Standard 4: Quality control
Guidance on the Practice Assurance standards
Introduction
This guidance is intended to help firms interpret and follow the principles-based standards, and sets out examples of best and acceptable practice. The examples of best practice develop and extend the examples of acceptable practice. The examples given are not exhaustive.
Firms are free to follow whatever procedures they wish to act in accordance with the standards. However, they must be prepared to demonstrate that their procedures secure achievement of the standards in practice. Procedures may be operated either electronically or manually; their content and scope are more important than the way in which they are recorded.
Where a firm subcontracts work to others who are, themselves, subject to a scheme of quality review through their professional body, the firm may accept the quality requirements of the professional body concerned but should, nevertheless, ensure that its dealings with the sub-contractor are in accordance with these standards.
Further assistance in meeting the standards is provided in the form of helpsheets or in hard copy by telephoning +44 (0)1908 546 388.
Advice on interpreting the Code of Ethics is available from ICAEW's Ethics Advisory Services, T +44 (0)1908 248 250.
Standard 1: Laws, regulations and professional standards
A firm should comply with laws, regulations and standards that are relevant to the service provided, including ICAEW's bye-laws, regulations and ethical guidance.
Guidance
Most assignments are subject to some form of statutory requirement or guidance produced by a professional body, including guidance from ICAEW which is set out in Regulations, standards and guidance (icaew.com/regulations). A firm should have access to appropriate reference sources which enable it to be aware of any such requirements.
Examples
Evidence of satisfactory compliance with standard 1 will vary from firm to firm and will depend principally on the nature of the work undertaken by the firm. In other words, the evidence provided by a sole practitioner to demonstrate compliance with standard 1 may be very different from the evidence provided by a larger firm. Examples of best and acceptable practice are given.
Acceptable practice
- Copies of relevant legislation, regulations, bye-laws and ethical guidance available.
- ICAEW's current regulations, standards and guidance are available and applied.
Best practice
- Copies of relevant legislation, regulations, bye-laws and ethical guidance available with subscription service to ensure always up to date.
- Checklist of legislation for each assignment, client type or industry available.
- Relevant legislation available to all staff via computer systems.
- Each file has list of legislation and other regulations specifically applicable to client.
- Helpsheets available within the firm, eg, helpsheets on money laundering, accounts and auditing standards.
Helpsheets
The following helpsheets relevant to standard 1 are available:
- Affiliate status
- Changes in the composition of a firm
- Clients' Money Regulations
- Corporate practices
- Data Protection Act 1998 and the accountancy profession
- Fit and proper, independence and confidentiality
- Partnership agreements
- Practice names and letterheads
- Use of the description chartered accountant
- Wrongful trading
- Fee protection insurance
- Service Directive
- Money laundering (icaew.com/moneylaundering)
Standard 2: Client acceptance and disengagement
A firm should agree to act for a client only if, in so doing, it does not contravene ICAEW's professional, regulatory or ethical requirements.
Guidance
When accepting a client, and throughout the term of the engagement, a firm should be able to demonstrate that:
- there is no threat to the firm's integrity or objectivity that cannot be managed by appropriate safeguards;
- the firm will have access to adequate resources and expertise to provide the services required;
- the firm has made adequate enquiries to ensure that there are no other reasons to prevent it from providing the services, including those related to the law and regulations on money laundering; and
- the terms of engagement are clear and unequivocal.
Integrity, objectivity and independence
Integrity and objectivity are essential in the exercise of professional judgement. Threats to integrity and objectivity arise most frequently when there is a conflict of interest between a firm and its client or where different clients have conflicting interests.
The main considerations which should be taken into account are contained in the Code of Ethics, section 110 Integrity, 120 Objectivity, Part B - Professional accountants in public practice, 200 Introduction, 220 Conflicts of Interest, 280 Objectivity - All Services, 290 Independence - Audit and review engagements (icaew.com/regulations).
Situations that may threaten a firm's integrity, objectivity or independence include, but are not limited to:
- the relative size of an individual fee;
- a mutual or conflicting business interest between the firm (or persons with close connections with the firm) and a client;
- loans to or from clients;
- the receipt of goods, services or hospitality from a client;
- a beneficial interest in shares or other investments in clients.
The Code of Ethics includes examples of safeguards that are available to remove or reduce such threats. For example, where a potential conflict of interest between the firm and the client is identified, it may be sufficient to disclose, in full, the circumstances to the client and obtain his/her informed consent. Firms should refer to the ethical guidance for a more detailed discussion of these and other related issues.
Resources and expertise
Resources and expertise should be adequate for the services to be provided. A firm should not take on a new client unless it has access to appropriate staff to deal with the increase in work. Firms should guard against creating unmanageable pressures for themselves that could adversely affect their services to clients.
It is important that a firm only undertakes work that it is competent to perform. The staff dealing with the assignment should have the necessary technical knowledge. Particular care should be taken to ensure that the relevant expertise is available, within the firm or from external sources, to deal with specialist areas.
All technical staff should receive appropriate ongoing training. In particular, all professionally qualified staff and principals should comply with the CPD requirements of their professional body. For members of ICAEW, these can be found in the Continuing Professional Development regulations.
All staff should have access to appropriate technical material and resources.
Professional enquiries prior to acceptance
Enquiries should be made to ensure that there are no other reasons to prevent the firm from entering into an engagement.
These enquiries should include communicating with the prospective client's existing accountant to establish if there are any considerations that might affect the firm's decision whether to accept appointment. Suggestions on how to carry out such professional enquiries are included in the Code of Ethics, section 210 Professional Appointment (icaew.com/regulations).
Firms should carry out their obligation to respond promptly to such enquiries from other firms and, if there is a subsequent transfer of client, cooperate with the new accountant.
Firms should be aware of the laws and regulations in the UK relating to money laundering. Failure to observe the Money Laundering Regulations 2007 can put members and other staff at risk of criminal prosecution. The money laundering links on ICAEW's website provide up-to-date advice for firms on meeting their obligations under the Money Laundering Regulations 2007.
Terms of engagement
Many disputes with clients result from a misunderstanding or misinterpretation of the nature or scope of a firm's terms of engagement. A clear statement of the terms and conditions of engagement before starting work can help to avoid misunderstandings over the scope of the work to be completed. This could be particularly important for professional indemnity insurance purposes and could help to avoid disputes or enable them to be resolved more easily.
If the nature of the services or the scope of the work changes at any time, the firm and client should agree revised terms to ensure that the client understands the revised terms.
Terms of disengagement
Complaints are often made to ICAEW when a firm ceases to act and the client misunderstands the extent of the work the firm has agreed to complete. To avoid this, a firm is advised to agree terms of disengagement at the appropriate time, identifying the work to be completed and the terms on which this will be done.
Examples
Evidence of satisfactory compliance with standard 2 will vary from firm to firm and will depend on the size of the firm and the nature of its clients.
Examples of best and acceptable practice are given below.
Acceptable practice
Integrity, objectivity and independence
- Integrity and objectivity issues considered and, where identified, file note of relevant issues and safeguards put in place. Objectivity in assurance engagements requires independence to be considered.
Resources and expertise
- Where the firm identifies that the nature of the work is outside its usual activities, file note confirming that the skills needed will be available on the assignment.
Professional enquiries prior to acceptance
- Anti-money laundering procedures, as required by the Money Laundering Regulations 2007.
- Guidance in the Code of Ethics, section 210, Professional Appointment, followed.
Terms of engagement
- If client does not return signed engagement letter, client advised in writing, stating that approval of the terms of the engagement will be assumed, unless the firm hears otherwise within a specified period of time.
- File note of agreed subsequent changes.
- Know your client information on file for each client.
- Terms and conditions issued to clients including complaints procedure and fee charging arrangements.
Terms of disengagement
- File note of agreed disengagement terms retained.
Best practice
Integrity, objectivity and independence
- When considering a new client, suitable enquiries made of principals and staff asking if they have any independence issues.
- Where assurance engagements are performed, annual independence and fit and proper (where appropriate) declarations completed by all principals and all staff with requirement to inform of changed circumstances immediately.
- Where relevant, independence and objectivity issues have been considered for each assignment and noted on file.
- Where issues identified, file note of relevant issues and safeguards put in place.
Resources and expertise
- Where appropriate, file note identifying specific skills needed for each new client, and staff to be used to meet those needs.
- Specific skills needed for each client re-assessed annually.
Professional enquiries prior to acceptance
- Anti-money laundering procedures as required by the Money Laundering Regulations 2007, documented and applied to all clients.
Terms of engagement
- Signed engagement letter retained on file.
- Record on file of matters discussed with each new client.
- Other than in a sole practice, second principal approval for accepting certain categories of new client.
- Regular review to ensure engagement letter remains up to date and revised letter issued if any changes.
Terms of disengagement
- Disengagement letter retained on file, as signed by client.
- Copy of disengagement checklist on client file.
Helpsheets
The following helpsheets relevant to standard 2 are available.
- Subcontracting - Acting as subcontractor
- Changes in a professional appointment
- Confidentiality and disclosure
- Deciding to accept appointment
- Document retention policies
- New client information
- Managing professional liability risks
- Disengagement letters
- Disengagement checklist
- Engagement letters
- Disclaimer of liability to third parties
- Withholding signature and/or service
- Subcontracting - Employing subcontractors
- Professional enquiry
- Engagement terms
- What if you have not issued an engagement letter?
Standard 3: Competence
A firm should ensure that all principals, staff and subcontractors are competent to carry out their work.
Guidance
To ensure that principals and staff (including subcontractors) are competent, firms will need to have appropriate arrangements in place for:
- recruitment;
- development and training;
- access to up-to-date technical and non-technical reference material and information sources;
- provision of consultation where necessary;
- allocation of staff to assignments consistent with their capabilities; and
- appropriate supervision and review of work.
Recruitment
The recruitment process should include an assessment of the fit and proper status of applicants and their competence and relevant experience to carry out the work that will be assigned to them. The firm is advised to take up references, including those of previous employers. It is also advisable to see original rather than photocopied certificates providing evidence of qualifications.
Development and training
Generally
The level of skills and knowledge required of an individual depend on the work to be carried out and the level of responsibility.
The firm should ensure that the development needs of all principals and members of staff are assessed on a regular basis both formally through, for example, manager reviews and appraisals and informally through peer discussions. The firm should ensure that staff keep up to date and undertake appropriate development and training to enable them to carry out their work competently. It is recommended that all staff have a formal performance appraisal at least once a year that includes a discussion of their development and training needs.
Continuing professional development
All professional staff should comply with the continuing professional development requirements of their own professional bodies.
Technical reference material
The firm should ensure that staff have access to the relevant technical and other information that they need.
Consultation
The firm should encourage staff and subcontractors to consult with others in the firm on technical, ethical and other issues whenever appropriate. It may be necessary to seek external advice if the appropriate expertise is not available within the firm.
Sole practitioners may find it helpful to set up arrangements with another firm or consultancy organisation in order to seek advice and information, as well as making full use of ICAEW's own helplines and library and information service.
Examples
Evidence of satisfactory compliance with standard 3 will vary from firm to firm and will depend on the size and structure of the firm. Examples of best and acceptable practice are given below.
Acceptable practice
Recruitment
- Written or oral references obtained.
- Interview conducted and applicant's own CV on file.
- Fit and proper forms signed and on file, updated if circumstances change.
- Independence/confidentiality forms signed and on file, updated if circumstances change.
- Written statement of employment (including job description and the principal terms and conditions) given to the employee and held on file.
Development and training
- CPD requirements complied with and records on file.
Technical reference material
- Relevant technical reference material available and kept up to date.
Consultation
- Names of potential external consultants on file (not necessarily a formal agreement with each one).
- Written records of consultation on significant issues.
- Use of ICAEW technical and other helplines.
Best practice
Recruitment
- Personnel file maintained for each member of staff.
- Each applicant required to complete an application form.
- Probationary period required for new staff.
- Written references obtained and qualifications verified.
- Annual fit and proper forms signed and on file. Principals and staff required to declare any changed circumstances when they happen.
- Annual independence/confidentiality forms signed and on file. Principals and staff required to declare any changed circumstances when they happen.
- Signed contract of employment and job description retained on file and reviewed annually.
- Induction programmes produced and followed.
Development and training
- Mentor/mentee arrangements in place which are supported by a nominated development and training individual or training principal.
- Process in place to encourage ongoing review of development needs through, for example, manager reviews and peer discussions.
- Development process in place that encourages consideration of professional expectations, key risks and requirements of key stakeholders.
- Record of the results of key development and training activities.
- Follow-up of training needs and record of follow-up.
Technical reference material
- Relevant technical reference material obtained with subscriptions to updating services.
Consultation
- Internal (or external) consultation required in specific situations.
- Signed agreement on file with external consultant.
- Written records maintained of all internal or external consultations.
Helpsheets
The following helpsheets relevant to standard 3 are available:
- Consultation arrangements
Standard 4: Quality control
A firm should ensure that work is conducted within an environment where quality is monitored.
Guidance
A firm should have procedures and systems in place, appropriate to its size, to ensure that:
- the work of the firm is organised and controlled to ensure Practice Assurance standards are met;
- appropriate supervision and review arrangements are applied;
- all work undertaken is adequately recorded;
- all principals and staff are made aware of the firm's systems and procedures;
- the firm complies with its own procedures; and
- any complaints from clients are dealt with promptly and effectively.
Organisation and control
The way in which work is organised and controlled will vary according to the size of the firm. Larger firms are likely to need much more sophisticated control and reporting processes than sole practitioners. However, sole practitioners should always bear in mind the possibility of sudden enforced absence, possibly through illness, and make arrangements to ensure that the practice can continue to operate in such circumstances. This may include setting up formal arrangements with another member to cover any period of incapacity.
Firms should ensure that responsibilities are clearly identified. In a firm with more than one principal, it should be clear which principal is responsible for each assignment. Staff should be clear about, for example, who is able to write letters on behalf of the firm and who is able to give tax or other judgmental advice to clients.
Files should be well organised and kept up to date. The filing system should be understood by all members of staff and there should be contingency arrangements in place in case of fire or theft. All files and documentation relating to clients (whether in hard copy or electronic form) should be held securely, and confidentiality should be maintained. Receipt and return of client books and papers should be recorded. If any documents, including accounts, are to be made available to third parties, there should be written authorisation from the client. There should be a system of brought forward notification to ensure that matters are attended to promptly and both internally and externally imposed deadlines are met. There should also be a policy regarding file destruction.
IT procedures and security
Increased dependence on computer systems presents specific threats. There should be regular back-up of files and protection from unauthorised access and viruses and the contingency arrangements should include action to cope with major systems failure. Where hard copy documentation is not kept, there should be a policy for computer file retention and file destruction.
Supervision and review
All firms (other than sole practitioners with no staff) should have procedures to ensure that work, including that of subcontractors, is adequately supervised and reviewed before it is finalised. Appropriate procedures should be determined by each firm to minimise the risk of errors and misjudgements that might result in sub-standard output.
It is usual practice for senior staff to supervise and review the work of more junior staff. In addition, a firm may decide that in some circumstances, the work of one principal should be reviewed by another. This is likely to depend on the degree of risk associated with the work. Sole practitioners may decide that there are certain engagements where it is appropriate to have their work reviewed by an external consultant with expertise in the relevant area. Such reviews are part of the assignment process and if review papers are not retained, a note should be made on file that a review has taken place.
Recording work
All significant work undertaken should be recorded on file and sources of information and evidence identified. Care should be taken to make notes of relevant telephone conversations and meetings. All assumptions and estimates should be shown and the thought processes in arriving at judgmental decisions should be recorded. There should be evidence that completed accounts have been agreed by the client. Any oral advice given to a client should be recorded in a file note.
There should be a clear policy indicating who is authorised to write to clients and third parties such as HMRC. Firms should ensure that they have written authority from the client to act as its agent - for example, in dealing with HMRC - and there should be written evidence of the client's agreement where accounts or other information are to be provided to third parties.
Complaints from clients
In the engagement letter, all clients should be informed of the firm's complaints procedures and of their right to complain to ICAEW. Any complaints from clients should be investigated immediately by a principal of the firm. If, following the investigation, the firm is of the opinion that the complaint is justified, it should do whatever is appropriate to resolve the matter for example, by remedial work, apology, the provision of information, the return of books or documents or the reduction or repayment of fees.
The Duty on Firms to Investigate Complaints - Guidance on How to Handle or Avoid Them (icaew.com/regulations) gives further information on how to deal with complaints .
Compliance review of firm's procedures
The way in which a firm carries out a review of compliance with its own procedures and these standards, and the frequency of the reviews, will depend largely on the size of the firm and the nature of its work.
It is possible for a sole practitioner to carry out a review of his/her own work, perhaps using a proprietary review programme.
Alternatively an external reviewer could be of help. Reviews are available from ICAEW's Practice Advisory Service, a training group or other similar consultancy, or a reciprocal arrangement can be made with another member who provides similar services.
The review should consider firm issues, such as whether staff are receiving adequate training and whether access to technical material is sufficient. Bank accounts should be reviewed to check that any client money has been dealt with in accordance with the Clients' Money Regulations. The review should also include a selection of client files to ensure that the work carried out conforms to the terms of the engagement letter.
There should be a sample check of the output of the firm to verify that the correct systems and procedures have been applied and to check the quality of the work carried out, including that of any advice given. A sample of accounts prepared by the firm should be reviewed to check that they are materially correct and comply with statute and other relevant requirements. A sample of tax files should be reviewed to consider both the calculations and the advice given and the review should identify whether submission deadlines were met. Similar reviews should be carried out in other areas of work. The sample should be selected primarily to focus on higher risk assignments - for example, those where a report is being made to a third party or where the firm has been providing services of a specialist nature. However, all offices of the firm, all professional staff and all types of work should be covered over a period of time.
Examples
Evidence of satisfactory compliance with standard 4 will vary from firm to firm and will depend principally on the size and complexity of the firm and the nature of its clients.
Examples of best and acceptable practice are given below.
Acceptable practice
Organisation and control
- Adequate guidance is given to all staff on all areas of work undertaken.
- Filing system in place.
- Brief notes maintained, to assist in the absence of the practitioner or key members of staff.
- Reminder system in place for tracking work, so that deadlines are not missed.
- Relevant file notes kept of telephone calls and meetings.
- File retention policy in place.
- Consideration whether sufficient PII cover in place.
- Alternate arrangements made where applicable.
IT procedures and security
- Back-up files made and retained on a regular basis.
- Anti-virus software installed.
Supervision and review
- Policy in place for review of files, including hot reviews.
- Evidence of review on file.
Recording work
- All significant work recorded on file.
- Final copies of tax returns, signed accounts and other reports on file.
- Relevant file note made of any other discussions/enquiries.
Complaints from clients
- Engagement letter sent to client stating complaint procedures.
- Evidence that any complaint from a client has been investigated and resolved.
Compliance review
- Consideration of need for internal whole-firm review conducted annually.
- Consideration of need for internal cold file reviews of any particularly high risk assignments.
Best practice
Organisation and control
- Office procedures manual covering all types of work undertaken by the firm and its other procedures.
- Secure filing and referencing system in place.
- Organisation chart maintained.
- File notes kept of all telephone conversations and meetings, highlighting any advice given.
- Specific decision taken whether any file should be destroyed.
- Firm undertakes annual PII review in conjunction with brokers/insurers.
- Contractual arrangements in place (where applicable) for an alternate.
- Consideration given to succession planning, where applicable, and appropriate arrangements made.
IT procedures and security
- Written procedures maintained.
- Back-up files retained at a separate location or in a fire-proof safe.
Supervision and review
- Second principal/manager hot reviews where considered necessary.
Recording work
- Fully documented files with indexes maintained.
- Final copies of signed accounts and other reports on file, cross-referenced to key working papers.
- File note made of any other relevant discussions/enquiries.
- Appropriate work programmes on file.
- Procedures documented in manual.
Complaints from clients
- Engagement letter signed and returned by client states complaints procedures.
- Internal procedures to investigate complaints.
- Separate files maintained to show how individual complaints are dealt with.
Compliance review
- External whole-firm and cold file reviews conducted annually.
- Results of cold file reviews given to all principals and staff with a note of any required remedial action.
- Remedial action followed up.
Helpsheets
The following helpsheets relevant to standard 4 are available:
- Alternate arrangements
- Cold file audit compliance checklist
- Whole-firm reviews audit compliance checklist
- Clients' Money Regulations - compliance checklist
- Credit control procedures
- DPB annual compliance review
- IT systems compliance review
- Practice insurances
- Professional indemnity insurance review
- Practice Assurance compliance review
- Quality control of statutory accounts