International Quality Management System (UK) 2 or just simply ISQM 2, is an integrated software application that combines quality assurance and business process management tools to help businesses achieve success. In this blog, we’ll look into the new standards and determine if this is the right choice for your organisation. We’ll be examining the features and benefits of using the system, and how to apply it within your firm. Read on to find out whether ISQM 2 is the right software solution for your business.
The new ISQM 2 standard focuses on the performance and evaluation of the engagement quality reviewer (EQR) conducting an audit review and their responsibilities relating to the conclusions and documentation of the EQ review. It aims to ensure the right person performs the review of the audit at the right time and outlines the responsibilities associated with the role.
A robust and properly functioning ISQM 2 goes beyond just improving quality standards of the firm and undertaking an audit. Not only does it safeguard the firm and the entities being audited but it also enhances compliance with international standards.
According to the IAASB, the changes in ISQM 2 are intended to:
ISQM 2 requires the firm to establish policies or procedures so the EQ reviewer can take responsibility for the documentation of the EQ review, and perform the EQ review at appropriate points during the audit engagement.
The requirements of the documentation should specify the audit to be reviewed by the EQ reviewer and demonstrate that the reviewer meets the eligibility requirements and any other assurance.
The regulations for ISQM 1, specifically paragraph 34(f), sets out the circumstances when an engagement quality review (EQR) must be performed in accordance with ISQM (UK) 2. These include:
ISQM 2 should be used for audits of entities with accounting periods commencing on or after 15 December 2022. Other than a short period, the new standard will apply for the first time for 31 December 2023 year ends.
Where a review is required, ISQM 2 sets out a number of specific requirements for the appointment and eligibility of engagement quality reviewers (EQR) (see below), the performance of the EQR and the documentation required. There are further specific EQR enhancements where the entity is listed and/or a PIE.
For the majority of HAT firms, the listed and/or PIE enhancements are not relevant. However, there are some key enhancements in ISQM 2 for an EQR on an unlisted, non-PIE entity. These are as follows:
A firm may require a hot review (sometimes referred to as a second partner review) in certain circumstances as an internal safeguard (for example, to deal with the long association threat posed by the R.I acting for more than 10 years). This would not need to comply with the detailed requirements of ISQM (UK) 2. However, the thought processes around this needs to be clearly documented on file. As noted below, enhancements have been made to the HAT methodologies to deal with these new requirements.
Under the new ISQM 2 requirements, there are certain criteria that should apply to EQRs conducting audit reviews. The appointed EQR should have the experience and appropriate authority within the firm to complete and challenge an EQ. They need to be objective and work independently of the audit team, and have sufficient time to complete an engagement quality review.
The EQR is required to review and understand the judgments made on an audit by the engagement team. The EQR will determine if the audit engagement documentation supports the conclusions and will determine if the engagement team has followed the international standard and professionalism on reaching those decisions. An audit report cannot be finalised until the reviewer determines the process is completed.
ISQM 1 is the new engagement quality standard that requires a more proactive approach to identifying and managing quality risks on each audit. ISQM2 addresses this by focusing on the decisions and outcomes of the engagement quality reviewer (EQR) and their responsibilities relating to the performance and documentation of an EQ review.
More detailed information and implementation support material can be found on the International Auditing and Assurance Standards Board (IAASB) site and includes factsheets and guides.
If firms are still looking for guidance, IFAC have published a three-part series to help small and medium-sized practices implement the new quality management standards.
The first instalment: It is time to get ready for the new quality management standards, was published in October 2022. While this may no longer be relevant for most firms, it can be accessed if needed here.
The second instalment: Developing a detailed implementation plan was issued in July 2023 and, as per IFAC’s website, “provides a step approach to identifying your quality objectives; completing your quality risk assessment process; identifying existing, or creating new, responses to those quality risks; and implementing, documenting, and communicating your system of quality management.” This can be accessed here.
The third instalment is expected later in 2023 and will cover monitoring and remediation. This may be the most useful, as firms look to evaluate their SOQM. Firms are advised to check IFAC’s website on a periodic basis to see if instalment three has been published.