Guide: Reporting on an Entity's Cybersecurity Risk Management Program and Controls

Appendix I

Overview of Statements on Quality Control Standards

This appendix is nonauthoritative and is included for informational purposes only.

This appendix is a partial reproduction of chapter 1 of the AICPA practice aid Establishing and Maintaining a System of Quality Control for a CPA Firm’s Accounting and Auditing Practice, available at www.aicpa.org/interestareas/frc/pages/enhancingauditqualitypracticeaid.aspx.

This appendix highlights certain aspects of the quality control standards issued by the AICPA. If appropriate, readers should also refer to the quality control standards issued by the PCAOB, available at www.pcaobus.org/Standards/QC/Pages/default.aspx.

1.01 The objectives of a system of quality control are to provide a CPA firm with reasonable assurance¹ that the firm and its personnel comply with professional standards and applicable regulatory and legal requirements, and that the firm or engagement partners issue reports that are appropriate in the circumstances. QC section 10, A Firm’s System of Quality Control (AICPA, Professional Standards), addresses a CPA firm’s responsibilities for its system of quality control for its accounting and auditing practice. That section is to be read in conjunction with the AICPA Code of Professional Conduct and other relevant ethical requirements.

1.02 A system of quality control consists of policies designed to achieve the objectives of the system and the procedures necessary to implement and monitor compliance with those policies. ...