Attestation Engagement

An Attestation Engagement is the process of hiring a third-party practitioner and securing their subject matter expertise to verify the validity and accuracy of assertions made by a responsible party (management) in a given matter. For this, a service provider interprets and analyzes the information presented to them and submits a report in the prescribed format.

Entities appointed for such work offer their professional opinion and assurance on financial statements, internal controls, compliance levels, etc. It detects and prevents reporting errors and possible fraud while helping clients ensure compliance with regulatory requirements. Private and public entities use this service for compliance audits, interim financial statements preparation, etc. This service, provided by accounting and auditing firms, is delivered in line with defined procedures.

• An attestation engagement in auditing is a professional service provided by accounting and auditing firms where an independent third party examines and reports on a subject matter for a client.
• The purpose is to offer a professional opinion and confirm the reliability of the assertions made about the matter under scrutiny.
• Direct engagements are undertaken to present a direct opinion based on independent findings a practitioner reaches through information collected independently.
• Assurance engagements are a type of attestation where a practitioner offers assurance about the accuracy or validity of information.

The attestation engagement definition, according to the American Institute of Certified Public Accountants (AICPA), states that an attestation engagement means employing an independent practitioner to examine and provide an objective opinion on the subject matter under study. Such matters may include regulatory compliance, financial statements, and internal controls, among other things. It must be noted that practitioners also publish limitations in their reports to ensure a sound judgment.

This process protects stakeholders, creditors, and investors as it helps verify a company’s assertion or information. It enhances the reliability of a firm’s financial information. The American Institute of Certified Public Accountants (AICPA) and Public Company Accounting Oversight Board (PCAOB) have defined procedures for such engagements.

Compliance standards include Statements on Standards for Attestation Engagements (SSAEs) and International Standards on Auditing (ISA). Agreed-upon standards and procedures may also form the basis of such engagements.

Process

The process starts with a relevant third-party entity or firm accepting the engagement. At this stage, the requirements are defined, and a professional outlines the scope of the task assigned. Qualified practitioners like Certified Public Accountants (CPAs) typically lead these engagements and attest to such subject matter. A document is created stating the obligations of the responsible party, which is generally the client or management making the assertion. They are asked to provide all the relevant information and proof to prove the credibility of their claims or assertions.

The practitioner then performs risk assessments, defines procedures or criteria, and collects evidence to evaluate the subject matter. The subject matter is then assessed against the criteria to express an opinion. Based on the findings and conclusions, a report is submitted to publish their professional opinion. The opinion expressed in such a report about the fairness or reliability of the subject matter offers limited or moderate assurance based on the information scrutinized.

Such attestation engagements in auditing enhance the credibility of the business or financial information clients present to stakeholders. Companies operating in varied sectors avail themselves of such services to assure stakeholders of the reliability and accuracy of their internal control systems, projections, and financial statements, among other things.

Companies hire experts in various scenarios, including the verification of pro forma financial information, financial projections, etc. In addition to private and public companies, not-for-profit organizations can also use these services.

Since such activities offer limited or moderate assurance about a company’s financial health, investors can make sound investment decisions. On a macro level, these engagements boost accountability at various stages, control systemic risks, and curb manipulation, strengthening the financial system in an economy.

Let us understand the topic using a few examples.

Example #1

Suppose Acet Attestations, a reputable auditing firm, is hired by Luminary Innovations, a well-known tech business, for a review engagement. A review engagement is a type of attestation engagement where limited assurance is sought through this process.

Dr. Samantha Fox, the CEO of Luminary Innovations, wants confirmation that the financial data that will be presented to prospective investors is accurate. Under the careful direction of auditor Max Carter, Ace Attestations follows SSAE No. 22's review processes to the letter. SSAE No. 22 aims to offer clarity and present the findings in a transparent manner.

Following a comprehensive investigation, Max gives Luminary Innovations limited confidence about its financial information and publishes a report detailing the methods followed, along with highlighting the limitations of the process. Dr. Fox and her stakeholders are reassured by this open investigation and review procedure, which promotes faith in the company's financial statements.

Example #2

On December 10, 2020, the American Institute of Certified Public Accountants (AICPA) released Statement on Standards for Attestation Engagements (SSAE) No. 22, which is a replacement for SSAE No. 18. From June 15, 2022, review reports must adhere to this new standard, which attempts to improve the uniformity and openness of review engagements (a type of attestation engagement).

It allows practitioners to report adverse findings as and when required and compels them to indicate in the review report the steps taken to acquire limited certainty. Additionally, SSAE No. 22 accommodates the ideas expressed in AT-C section 210 and AT-C section 205 (auditing and attestation standards by American Institute of Certified Public Accountants). The aim is to enhance transparency in reporting and notify users of any significant misstatements in the content.

Example #3

Suppose Sungold Pvt. Ltd. is a manufacturer of solar panels in Texas. The company requires a loan of $ 1,00,000 to expand its operations to other parts of the region. For this, they meet with institutional lenders who require reports on compliance and internal controls as part of due diligence.

Sungold Pvt. Ltd. hires a third-party audit firm, Kingly Accounting & Auditing, to deliver reports on compliance and internal controls. Evelyn, an accountant from Kingly Accounting & Auditing, analyzes the compliance levels of the company, keeping relevant statutory requirements and tax regulations in view. She also studies the company’s contracts to check their suitability. Furthermore, she focuses on environmental regulations, certifications, and permits that Sungold Pvt. Ltd. must have to assure lenders of their business practices and acquire the loan.

As part of internal control testing, Evelyn evaluates the strengths and weaknesses seen across all departments, including inventory management, payroll, cash management, working capital, etc. She covers every aspect per the requirements stated in the attestation engagement letter.

Based on the report submitted by Kingly Accounting & Auditing, Stargold Pvt. Ltd. was able to acquire the loan. Since the auditors did not express any concerns in their reports, lenders felt it was safe to provide the loan as the lending risk seemed low.  

The table below summarizes the differences between these two types of engagement:

The table below highlights the differences between attestation and assurance engagements.

The table below illustrates the differences between these review types.

This article has been a guide to what is an Attestation Engagement. We explain its examples and compare it with direct and assurance engagements, and audit. You may also find some useful articles here –

• Single Audit
• Field Auditor
• Audit Evidence