Auditors and fraud: Auditing rules
It’s important to understand the guidance given to auditors on the topic of fraud. Accountants performing audits in the United States follow Generally Accepted Auditing Standards (GAAS) in their performance of audits. Additional guidance is provided in the Statements on Standards for Auditing and Review Services (SSARS) and Statements on Auditing Standards (SAS). These sets of authoritative guidance outline the responsibilities that auditors have for finding fraud while performing audits and reviews.
SAS number 99, “Consideration of Fraud in a Financial Statement Audit,” became effective in late 2003. This statement directs auditors to use professional skepticism and to consider that a fraud could have occurred and could materially affect the financial statements. The auditors must consider and identify the risk of fraud, and must continuously evaluate evidence throughout the audit to determine whether or not there are any fraud indicators.
The American Institute of Certified Public Accountants (AICPA) recently issued SSARS number 12, “Omnibus Statement on Standards for Accounting and Review Services.” This applies to reviews, rather than audits. Reviews provide less assurance on the financial statements, as the review procedures are typically less thorough and less detailed than audit procedures. This statement dictates that during a review, the auditor is not required to assess the risk of fraud or develop plans specifically to identify fraud.
The guidance for auditors is continuously evolving as the accounting profession acknowledges that fraud is becoming a bigger issue for clients. All of this alphabet soup can be boiled down to the fact that it is management’s responsibility, not the auditor’s, to prevent and detect fraud. The auditors must consider fraud throughout their procedures, but they do not have an absolute responsibility for the detection of fraud.

The problem I see is that people don’t really understand what audits are about or what they say about the financial statements. And the new standards like SAS 99 haven’t really helped either.
I agree that the new rules haven’t necessarily improved things. They just helped our auditors charge us more for the same work.
I do feel that our auditors are doing more work than they used to, but the cost increase has not been proportionate. We are being charged way more for this little bit of extra work!
Well isn’t part of the problem also the fact that maybe the auditing rules just haven’t kept up with changes in business?