2070 Use of Experts
Jul-2020

Overview

In some performance audits or special examinations, the engagement leader may decide to consult or include on the audit team an individual with expertise in a specialized area—either from within the OAG (an internal expert) or on contract (an external expert), and/or to rely on the work prepared by an audited entity’s expert. Using “experts” is subject to certain requirements that are explained in this section.

CSAE 3001 Requirements

36. The engagement partner shall: (Ref: Para. A68)

[...]

(b) Be satisfied that the practitioner will be able to be involved in the work of:

(i) A practitioner’s expert where the work of that expert is to be used; and (Ref: Para. A69-A70)

(ii) Another practitioner, not part of the engagement team, where the assurance work of that practitioner is to be used, (Ref: Para. A71-A72)

to an extent that is sufficient to accept responsibility for the assurance conclusion on the underlying subject matter.

50. The practitioner shall make inquiries of the appropriate party(ies) regarding:

[...]

(c) Whether the responsible party has used any experts in dealing with the underlying subject matter. (Ref: Para. A102)

57. When the work of a practitioner’s expert is to be used, the practitioner shall also: (Ref: Para. A121-A125)

(a) Evaluate whether the practitioner’s expert has the necessary competence, capabilities and objectivity for the practitioner’s purposes. In the case of a practitioner’s external expert, the evaluation of objectivity shall include inquiry regarding interests and relationships that may create a threat to that expert’s objectivity; (Ref: Para. A126-A129)

(b) Obtain a sufficient understanding of the field of expertise of the practitioner’s expert; (Ref: Para. A130-A131)

(c) Agree with the practitioner’s expert on the nature, scope and objectives of that expert’s work; and (Ref: Para. A132-A133)

(d) Evaluate the adequacy of the practitioner’s expert’s work for the practitioner’s purposes. (Ref: Para. A134-A135)

58. When the work of another practitioner is to be used, the practitioner shall evaluate whether that work is adequate for the practitioner’s purposes.

59. If information to be used as evidence has been prepared using the work of a responsible party’s expert, the practitioner shall, to the extent necessary having regard to the importance of that expert’s work for the practitioner’s purposes:

(a) Evaluate the competence, capabilities and objectivity of that expert;

(b) Obtain an understanding of the work of that expert; and

(c) Evaluate the appropriateness of that expert’s work as evidence.

74. If the practitioner refers to the work of a practitioner’s expert in the assurance report, the wording of that report shall not imply that the practitioner’s responsibility for the conclusion expressed in that report is reduced because of the involvement of that expert. (Ref: Para. A184-A186)

CSAE 3001 Application Material

A67. The relevant rules of professional conduct / code of ethics require the professional accountant in public practice to agree to provide only those services that the professional accountant in public practice is competent to perform. The practitioner has sole responsibility for the assurance conclusion expressed, and that responsibility is not reduced by the practitioner’s use of the work of a practitioner’s expert. Nonetheless, if the practitioner using the work of a practitioner’s expert, having followed this CSAE, concludes that the work of that expert is adequate for the practitioner’s purposes, the practitioner may accept that expert’s findings or conclusions in the expert’s field as appropriate evidence.

Practitioner’s Expert (Ref: Para. 36(b)(i))

A69. Some of the assurance work may be performed by a multi-disciplinary team that includes one or more practitioner’s expert. For example, a practitioner’s expert may be needed to assist the practitioner in obtaining an understanding of the underlying subject matter and other engagement circumstances or in one or more of the matters mentioned in paragraph 51R (in the case of a reasonable assurance engagement) or 51L (in the case of a limited assurance engagement).

A70. When the work of a practitioner’s expert is to be used, it may be appropriate to perform some of the procedures required by paragraph 57 at the engagement acceptance or continuance stage.

Other Practitioners (Ref: Para. 36(b)(ii))

A71. The underlying subject matter may include matters upon which another practitioner may have expressed a conclusion. The practitioner may decide to use the evidence on which that other practitioner’s conclusion is based to provide evidence regarding the underlying subject matter.

A72. The work of another practitioner may be used in relation to, for example, an underlying subject matter at a remote location or in a foreign jurisdiction. Such other practitioners are not part of the engagement team. Relevant considerations when the engagement team plans to use the work of another practitioner may include:

  • Whether the other practitioner understands and complies with the ethical requirements that are relevant to the engagement and, in particular, is independent.
  • The other practitioner’s professional competence.
  • The extent of the engagement team’s involvement in the work of the other practitioner.
  • Whether the other practitioner operates in a regulatory environment that actively oversees that practitioner.

A102. Whether a party employed or otherwise engaged by a responsible party is an expert for the purposes of this CSAE is a matter of professional judgment for the practitioner. For example, a responsible party may engage an individual or organization possessing skills and experience not normally possessed by the responsible party. In the practitioner’s judgment, depending on the circumstances of the engagement, this may indicate that the responsible party has used the work of an expert that significantly affects the underlying subject matter and has important implications for the engagement. Paragraph 59 deals with circumstances when information to be used as evidence has been prepared using the work of a responsible party’s expert.

Considerations When a Practitioner’s Expert Is Involved on the Engagement

Nature, Timing and Extent of Procedures (Ref: Para. 57)

A121. The following matters are often relevant when determining the nature, timing and extent of procedures with respect to the work of a practitioner’s expert when some of the assurance work is performed by one or more practitioner’s expert (see paragraph A69):

(a) The importance of that expert’s work in the context of the engagement (see also paragraphs A122-A123);

(b) The nature of the matter to which that expert’s work relates;

(c) The risks of significant deviation in the matter to which that expert’s work relates;

(d) The practitioner’s knowledge of and experience with previous work performed by that expert; and

(e) Whether that expert is subject to the practitioner’s firm’s quality control policies and procedures (see also paragraphs A124-A125).

Integrating the work of a practitioner’s expert

A122. Assurance engagements may be performed on a wide range of underlying subject matters that require specialized skills and knowledge beyond those possessed by the engagement partner and other members of the engagement team and for which the work of a practitioner’s expert is used. In some situations, the practitioner’s expert will be consulted to provide advice on an individual matter, but the greater the importance of the practitioner’s expert’s work in the context of the engagement, the more likely it is that expert will work as part of a multi-disciplinary team comprising subject matter experts and other assurance personnel. The more that expert’s work is integrated in nature, timing and extent with the overall work effort, the more important effective two-way communication is between the practitioner’s expert and other assurance personnel. Effective two-way communication facilitates the proper integration of the expert’s work with the work of others on the engagement.

A123. As noted in paragraph A70, when the work of a practitioner’s expert is to be used, it may be appropriate to perform some of the procedures required by paragraph 57 at the engagement acceptance or continuance stage. This is particularly so when the work of the practitioner’s expert will be fully integrated with the work of other assurance personnel and when the work of the practitioner’s expert is to be used in the early stages of the engagement, for example, during initial planning and risk assessment.

The practitioner’s firm’s quality control policies and procedures

A124. A practitioner’s internal expert may be a partner or staff, including temporary staff, of the practitioner’s firm and, therefore, subject to the quality control policies and procedures of that firm in accordance with CSQC 1, or other professional requirements, or requirements in law or regulation, that are at least as demanding as CSQC 1. Alternatively, a practitioner’s internal expert may be a partner or staff, including temporary staff, of a network firm, which may share common quality control policies and procedures with the practitioner’s firm. A practitioner’s external expert is not a member of the engagement team and is not subject to quality control policies and procedures in accordance with CSQC 1.

A125. Engagement teams are entitled to rely on the firm’s system of quality control, unless information provided by the firm or other parties suggests otherwise. The extent of that reliance will vary with the circumstances, and may affect the nature, timing and extent of the practitioner’s procedures with respect to such matters as:

  • Competence and capabilities, through recruitment and training programs.
  • The practitioner’s evaluation of the objectivity of the practitioner’s expert. Practitioner’s internal experts are subject to relevant ethical requirements, including those pertaining to independence.
  • The practitioner’s evaluation of the adequacy of the practitioner’s expert’s work. For example, the firm’s training programs may provide the practitioner’s internal experts with an appropriate understanding of the interrelationship of their expertise with the evidence gathering process. Reliance on such training and other firm processes, such as protocols for scoping the work of the practitioner’s internal experts, may affect the nature, timing and extent of the practitioner’s procedures to evaluate the adequacy of the practitioner’s expert’s work.
  • Adherence to regulatory and legal requirements, through monitoring processes.
  • Agreement with the practitioner’s expert.

Such reliance does not reduce the practitioner’s responsibility to meet the requirements of this CSAE.

The Competence, Capabilities and Objectivity of the Practitioner’s Expert (Ref: Para. 57(a))

A126. Information regarding the competence, capabilities and objectivity of a practitioner’s expert may come from a variety of sources, such as:

  • Personal experience with previous work of that expert.
  • Discussions with that expert.
  • Discussions with other practitioners or others who are familiar with that expert’s work.
  • Knowledge of that expert’s qualifications, membership of a professional body or industry association, license to practice, or other forms of external recognition.
  • Published papers or books written by that expert.
  • The firm’s quality control policies and procedures (see also paragraphs A124-A125).

A127. While practitioner’s experts do not require the same proficiency as the practitioner in performing all aspects of an assurance engagement, a practitioner’s expert whose work is used may need a sufficient understanding of relevant CSAEs to enable that expert to relate the work assigned to them to the engagement objective.

A128. The evaluation of the significance of threats to objectivity and of whether there is a need for safeguards may depend upon the role of the practitioner’s expert and the importance of the expert’s work in the context of the engagement. There may be some circumstances in which safeguards cannot reduce threats to an acceptable level, for example, if a proposed practitioner’s expert is an individual who has played an important role in assisting the responsible party in making decisions regarding aspects of the underlying subject matter.

A129. When evaluating the objectivity of a practitioner’s external expert, it may be relevant to:

  • Inquire of the appropriate party(ies) about any known interests or relationships that the appropriate party(ies) has with the practitioner’s external expert that may affect that expert’s objectivity.
  • Discuss with that expert any applicable safeguards, including any professional requirements that apply to that expert, and evaluate whether the safeguards are adequate to reduce threats to an acceptable level. Interests and relationships that it may be relevant to discuss with the practitioner’s expert include:
    • Financial interests.
    • Business and personal relationships.
    • Provision of other services by the expert, including by the organization in the case of an external expert that is an organization.

In some cases, it may also be appropriate for the practitioner to obtain a written representation from the practitioner’s external expert about any interests or relationships with the appropriate party(ies) of which that expert is aware.

Obtaining an Understanding of the Field of Expertise of the Practitioner’s Expert (Ref: Para. 57(b))

A130. Having a sufficient understanding of the field of expertise of the practitioner’s expert enables the practitioner to:

(a) Agree with the practitioner’s expert the nature, scope and objectives of that expert’s work for the practitioner’s purposes; and

(b) Evaluate the adequacy of that work for the practitioner’s purposes.

A131. Aspects of the practitioner’s expert’s field relevant to the practitioner’s understanding may include:

  • Whether that expert’s field has areas of specialty within it that are relevant to the engagement.
  • Whether any professional or other standards and regulatory or legal requirements apply.
  • What assumptions and methods, including models where applicable, are used by the practitioner’s expert, and whether they are generally accepted within that expert’s field and appropriate in the circumstances of the engagement.
  • The nature of internal and external data or information the practitioner’s expert uses.

Agreement with the Practitioner’s Expert (Ref: Para. 57(c))

A132. It may be appropriate for the practitioner’s agreement with the practitioner’s expert to also include matters such as the following:

(a) The respective roles and responsibilities of the practitioner and that expert;

(b) The nature, timing and extent of communication between the practitioner and that expert, including the form of any report to be provided by that expert; and

(c) The need for the practitioner’s expert to observe confidentiality requirements.

A133. The matters noted in paragraph A125 may affect the level of detail and formality of the agreement between the practitioner and the practitioner’s expert, including whether it is appropriate that the agreement be in writing. The agreement between the practitioner and a practitioner’s external expert is often in the form of an engagement letter.

Evaluating the Adequacy of the Practitioner’s Expert’s Work (Ref: Para. 57(d))

A134. The following matters may be relevant when evaluating the adequacy of the practitioner’s expert’s work for the practitioner’s purposes:

(a) The relevance and reasonableness of that expert’s findings or conclusions, and their consistency with other evidence;

(b) If that expert’s work involves use of significant assumptions and methods, the relevance and reasonableness of those assumptions and methods in the circumstances; and

(c) If that expert’s work involves the use of source data that is significant to that expert’s work, the relevance, completeness, and accuracy of that source data.

A135. If the practitioner determines that the work of the practitioner’s expert is not adequate for the practitioner’s purposes, options available to the practitioner include:

(a) Agreeing with that expert on the nature and extent of further work to be performed by that expert; or

(b) Performing additional procedures appropriate to the circumstances.

Reference to the Practitioner’s Expert in the Assurance Report (Ref: Para. 74)

A184. In some cases, law or regulation may require a reference to the work of a practitioner’s expert in the assurance report, for example, for the purposes of transparency in the public sector. It may also be appropriate in other circumstances, for example, to explain the nature of a modification of the practitioner’s conclusion, or when the work of an expert is integral to findings included in a long form report.

A185. Nonetheless, the practitioner has sole responsibility for the conclusion expressed, and that responsibility is not reduced by the practitioner’s use of the work of a practitioner’s expert. It is important, therefore, that if the assurance report refers to a practitioner’s expert, that the wording of that report does not imply that the practitioner’s responsibility for the conclusion expressed is reduced because of the involvement of that expert.

A186. A generic reference in a long-form report to the engagement having been conducted by suitably qualified personnel including subject matter experts and assurance specialists is unlikely to be misunderstood as reduced responsibility. The potential for misunderstanding is higher, however, in the case of short-form reports, where minimum contextual information is able to be presented, or when the practitioner’s expert is referred to by name. Therefore, additional wording may be needed in such cases to prevent the assurance report implying that the practitioner’s responsibility for the conclusion expressed is reduced because of the involvement of the expert.

OAG Policy

The audit team shall consult an internal expert (i.e. an internal specialist), as deemed necessary according to the risk assessment that is conducted during the planning phase of the audit. [Nov-2015]

When a special expertise is necessary and is not available internally, the audit team shall use an external expert and comply with requirements related to the selection, supervision, and use of his/her work. [Nov-2015]

When an audit team decides to rely on the work of an audited entity expert (i.e. responsible party’s expert), it shall evaluate the competence, capabilities, and objectivity of this expert, obtain an understanding of the work of that expert, and evaluate the adequacy of the work done for the audit. [Nov-2015]

OAG Guidance

What CSAE 3001 means by “experts”

CSAE 3001 refers to four different types of experts: a practitioner’s internal expert, a practitioner’s external expert, a responsible party’s expert, and another practitioner. Following CSAE 3001 requirements and OAG policies and practices, the OAG is using the following definitions of experts.

A practitioner’s expert is an individual possessing expertise in a field other than assurance, whose work is used to help the audit team obtain sufficient appropriate evidence. The practitioner’s expert may be either an internal expert or an external expert.

A practitioner’s internal expert (i.e. an internal specialist in the context of the OAG) is a staff member who is subject to quality control policies and procedures in accordance with CSQC 1, and who needs to comply with ethical requirements, including those pertaining to independence.

A practitioner’s external expert (i.e. a consultant in the context of the OAG) is not a member of the engagement team and is not subject to quality control policies and procedures in accordance with CSQC 1.

A responsible party’s expert (i.e. an audited entity expert in the context of the OAG) is an expert who is employed or engaged by the audited entity to conduct work on its behalf in an area other than assurance work (for example, engineering, information systems, etc.). A responsible party’s expert is usually engaged by the audited entity when the audited entity does not possess the needed skills and experience.

Another practitioner is a practitioner who is not part of the engagement team (i.e. outside the OAG), but who has conducted assurance work that is used by the audit team. It could be, as an example, a Crown corporation with multiple subsidiaries that was audited by firms other than the OAG, and their audit work and conclusions are relevant to an OAG special examination; or in a performance audit of capital assets, an audited entity that engaged another auditor (other than the OAG) to provide assurance and conclusions on its controls over the procurement process, which is relevant to the OAG audit.

Determining the need to use an expert

The OAG may use a broad range of internal experts (i.e. internal specialists) in its audits—for example, lawyers, or specialists in IT, in research and quantitative analysis, financial instruments, human resources, or grants and contributions. In some cases, the engagement leader may need to use an external expert (i.e. consultant) from outside the OAG if the expertise is not available internally—for example, a scientist with expertise in the release of pollutants from industrial processes in an audit on environmental monitoring.

The audit team may use a practitioner’s expert in a variety of ways, such as by:

  • seeking input on relevant research materials and best practices related to the underlying subject matter;
  • confirming the practitioner’s understanding of the key risks;
  • obtaining advice in determining which aspects of the underlying subject matter are most important;
  • obtaining reports on specific aspects of the performance audit, such as valuations;
  • obtaining input on the analysis and interpretation of key findings; or
  • undertaking assurance work.

The need to use an internal or an external expert as a team member to conduct some audit work or simply to get advice from is identified during the planning phase of an audit, when the audit team assesses the subject matter risks and its own engagement risks. See OAG Audit 4020 Risk assessment for more information about this assessment.

Selecting an expert

The requirements that apply to selecting an expert differ if that expert is an internal expert (i.e. internal specialists) or an external expert (i.e. consultant).

Internal experts (i.e. internal specialists) are staff members who are subject to quality control policies and procedures in accordance with CSQC 1. They need to comply with ethical requirements, including those pertaining to independence, as does any other audit team member. OAG Audit 1031 Ethical requirements relating to an assurance engagement sets out the ethical requirements that apply to all team members. Ethical requirements include objectivity and independence, due care (honesty and diligence), and confidentiality. OAG Audit 3031 Independence provides specific guidance related to the independence of team members from the entity being audited.

There is no need to evaluate the competence and capabilities of an internal expert because the OAG’s systems for recruitment, training, and assignment ensure that OAG internal specialists are competent and have the needed capabilities to support audit teams.

External experts (i.e. consultants) are not considered to be members of the engagement team and are not subject to quality control policies and procedures in accordance with CSQC 1. The audit team needs to have reasonable assurance concerning the external expert’s ethical conduct.

During the selection process of an external expert, the audit team needs to evaluate whether the practitioner’s external expert has the necessary competence, capabilities (and that there are no threats to that expert’s objectivity), before working on an audit. The significance of the threat to objectivity depends on the role that the external expert will play during the audit and the importance of that expert’s work in the context of the audit. When evaluating the objectivity of an external expert, it may be relevant to inquire about any known interests or relationship between the external expert and the audited entity that could affect his/her objectivity and determine if any applicable safeguards can be put in place to reduce threats to an acceptable level.

The team should also obtain a sufficient understanding of the field of expertise of that external expert and be familiar with his/her work or have references from others with whom the expert is associated or has worked for. If relevant, the team checks whether the specialist is a member in good standing of a professional body or industry association, or has a licence to practice, and researches the consultant’s expertise and reputation. Published papers, books, or other peer-reviewed materials are also evidence of the external expert’s reputation.

As part of its selection process the audit team needs to document

  • the reason for using an external expert and for selecting the particular expert (qualifications, etc.),
  • the expert’s role in the audit and his/her relationship with the audit team, and
  • information concerning the external expert’s independence and objectivity.

A responsible party’s expert—The OAG may also use information prepared by a responsible party’s expert as evidence, for example, a technical engineering report prepared for the entity.

When assessing whether the work of the responsible party’s expert is adequate for the purposes of the engagement, the audit team may consider factors such as:

  • the objective of the work;
  • the relevance of the work to the subject matter or criteria of the performance audit; and
  • the reputation and expertise of the other practitioner or responsible party’s expert.

Planning and supervising the work of an expert

It is important for the entire audit team, including internal or external experts, to be clear about their roles and responsibilities in the audit. The following aspects need to be understood by the experts and all others on the team:

  • the context of the audit, and its significance and risks;
  • the extent of the expert’s involvement;
  • the nature, timing, and extent of the expert’s work and of the review of that work;
  • the deliverable expected from the expert;
  • requirements such as due care, objectivity, confidentiality, exchange of information, and documentation; and
  • how the expert’s working papers—the property of the OAG—will be handled and by whom.

In supervising an expert, it is essential to ensure that the expert’s work meets the OAG’s standards for evidence and that the expert’s findings are fully corroborated. Internal experts who are OAG employees are likely to be familiar with OAG policies, standards, processes, and procedures and how these ensure that the OAG meets or exceeds applicable CPA Canada standards. However, external experts hired from outside the OAG usually need strong guidance from the audit team on OAG policies and procedures.

It should be noted that the relationship and communication between the OAG and the external expert is formalized in the OAG’s contract with the individual arranged through Contract and Procurement Services. For further information to request professional service contracts, see the Other Guidance section below.

Using the work of an external expert, an audited entity’s expert, or another practitioner

External expert

When the work of an external expert is used, the audit team needs to review it, to ensure its adequacy, and to ensure that it follows appropriate standards and OAG policies.

The expert’s evidence is subject to the same scrutiny and professional judgment and skepticism as the evidence gathered by other members of the team (OAG Audit 1041 Applying professional skepticism and OAG Audit 1042 Applying professional judgment). However, the audit team needs to consider additional risk factors that may be associated with using an external expert. One team member normally reviews the data, assumptions, and methods the expert used, and looks at

  • the relevance and reasonableness of that expert’s findings or conclusions, and their consistency with other audit findings to make sure the evidence the expert provided is sufficient and appropriate (OAG Audit 7021 Evaluate the sufficiency and appropriateness of audit evidence);

  • the relevance and reasonableness of assumptions and methods used in the circumstances; and

  • the relevance, completeness, and accuracy of source data used.

When the audit team determines that the work of the external expert is not adequate, options available include:

  • agreeing with that expert on the nature and extent of further work to be performed by that expert, and
  • performing additional procedures appropriate to the circumstances.

During the external expert’s involvement in the audit, the audit team needs to

  • ensure that external expert’s work is appropriately saved in the audit file,
  • prepare a description of the work conducted by the external expert and its relationship to other audit findings,
  • document the review of the external expert’s work and findings, and
  • integrate the external expert’s findings with those of the rest of the team.

The engagement leader in consultation with the audit director decides which of the expert’s findings to report in the audit report. This decision is made in the context of the audit as a whole and a separate conclusion is not reached based only on the expert’s work.

Audited entity’s expert or another practitioner

The audit team may use information prepared by an entity’s expert as evidence, for example, a technical engineering report prepared for the responsible party. The audit team needs to make inquiries regarding whether the audited entity has used any experts in dealing with the subject matter of the audit. When it is the case, and when information to be used as evidence in the audit report has been prepared using the work of an audited entity’s expert or the assurance work of another practitioner, the audit team needs, to the extent necessary, according to the importance of that evidence for the subject matter of the audit

  • evaluate the competence, capabilities, and objectivity of that expert;
  • obtain an understanding of the work of that expert; and
  • evaluate the appropriateness of that expert’s work as evidence.

Access to entity records and personnel

Any external expert engaged by the OAG and who works as part of the audit team has a right of access to entity records and personnel at all convenient times during the course of an audit (OAG Audit 2060 Accessing/requesting audit documentation). The expert must strictly observe all OAG requirements for security of audit information held by the OAG (see Other Guidance below to get further information on the Guide on Handling Protected and Classified Information and Asset). If the external expert has his or her own confidentiality requirements set by his or her profession, these are to be discussed and agreed upon with the engagement leader and the audit director.

Reporting considerations

The audit report does not refer to using experts. The name of an external expert does not appear in the audit report when engaged from outside the OAG; however, if an internal expert (an internal specialist) was used, his or her name may appear in the report in the list of team members, depending on the extent of his or her involvement.

If the work of an expert (internal or external) is mentioned in the audit report, the wording must not imply that the engagement leader’s responsibility for the conclusion is reduced because of the involvement of that expert (OAG Audit 7030 Drafting the audit report).