Stating Compliance with GAGAS in the Audit Report
Requirements: Stating Compliance with GAGAS in the Audit Report
When auditors are required to conduct an engagement in accordance with GAGAS or are representing to others that they did so, they should cite compliance with GAGAS in the audit report as set forth in paragraphs 2.17 through 2.19.
Auditors should include one of the following types of GAGAS compliance statements in reports on GAGAS engagements, as appropriate.
- Unmodified GAGAS compliance statement: Stating that the auditors conducted the engagement in accordance with GAGAS. Auditors should include an unmodified GAGAS compliance statement in the audit report when they have (1) followed unconditional and applicable presumptively mandatory GAGAS requirements or (2) followed unconditional requirements, documented justification for any departures from applicable presumptively mandatory requirements, and achieved the objectives of those requirements through other means.
Modified GAGAS compliance statement: Stating either that
the auditors conducted the engagement in accordance with GAGAS, except for specific applicable requirements that were not followed, or
because of the significance of the departure(s) from the requirements, the auditors were unable to and did not conduct the engagement in accordance with GAGAS.
When auditors use a modified GAGAS statement, they should disclose in the report the applicable requirement(s) not followed, the reasons for not following the requirement(s), and how not following the requirement(s) affected or could have affected the engagement and the assurance provided.
When auditors do not comply with applicable requirement(s), they should (1) assess the significance of the noncompliance to the engagement objectives; (2) document the assessment, along with their reasons for not following the requirement(s); and (3) determine the type of GAGAS compliance statement.
Application Guidance: Stating Compliance with GAGAS in the Audit Report
Situations for using modified compliance statements include scope limitations, such as restrictions on access to records, government officials, or other individuals needed to conduct the engagement.
The auditors’ determination of noncompliance with applicable requirements is a matter of professional judgment, which is affected by the significance of the requirement(s) not followed in relation to the engagement objectives.
Determining whether an unmodified or modified GAGAS compliance statement is appropriate is based on the consideration of the individual and aggregate effect of the instances of noncompliance with GAGAS requirements. Factors that the auditor may consider include
the pervasiveness of the instance(s) of noncompliance;
the potential effect of the instance(s) of noncompliance on the sufficiency and appropriateness of evidence supporting the findings, conclusions, and recommendations; and
whether report users might misunderstand the implications of a modified or unmodified GAGAS compliance statement.