## **Learning Outcomes**

After reading this article, you will be able to describe the structure and purpose of a firm's system of quality management as set out in ISQM 1. You will identify key quality objectives, explain the eight ISQM 1 components, and outline the responsibilities of firm leadership, the engagement partner, and other staff. You should also be able to recognise quality deficiencies and recommend improvements within a practical scenario.

## **ACCA Audit and Assurance (AA) Syllabus**

For ACCA Audit and Assurance (AA), you are required to understand the need for firm-level quality management and how ISQM 1 establishes principles for high audit quality. You should focus your revision on:

- The purpose of a system of quality management at audit firms.
- The eight elements of ISQM 1: governance and leadership, ethical requirements, acceptance and continuance, engagement performance, resources, information and communication, monitoring and remediation, and risk assessment.
- Main responsibilities of firm leadership and engagement partners under ISQM 1.
- Actions when deficiencies in quality management systems are identified.
- The link between ISQM 1, audit performance, and public trust in the assurance profession.

## **Test Your Knowledge**

_Attempt these questions before reading this article. If you find some difficult or cannot remember the answers, remember to look more closely at that area during your revision._

1. List any four components required by ISQM 1 for a firm's quality management system.
2. Who is primarily responsible for the overall quality of an audit firm’s system of quality management?
3. True or false? An engagement quality review must be performed for all audit engagements.
4. Briefly explain the difference between "monitoring" and "remediation" as per ISQM 1.

## **Introduction**

A strong system of firm-level quality management is essential for delivering high-quality audits and assurance services. ISQM 1 (International Standard on Quality Management 1) sets out requirements for audit firms to proactively design, implement, and operate a system that ensures compliance with professional standards and supports the issuance of appropriate reports. This article explains the main elements of ISQM 1, responsibilities for quality, and the processes for identifying and addressing quality deficiencies.

> **Key Term: ISQM 1 (International Standard on Quality Management 1)**
> A professional standard requiring audit firms to establish and maintain a system of quality management, covering risk assessment, policies, and practices for consistent audit quality.

## Responsibilities for Quality Management

The primary responsibility for the system of quality management rests with the firm’s leadership. ISQM 1 requires that overall accountability is assigned to the individual(s) with the authority and appropriate experience—commonly the managing partner or equivalent.

> **Key Term: system of quality management**
> The collective policies, procedures, and activities designed to manage risks to audit quality and meet quality objectives at firm level.

Firms must ensure quality is embedded throughout their structure, from policies and tone set by leadership to supervision of individual engagements.

> **Key Term: engagement partner**
> The person with overall responsibility for an individual audit or assurance engagement, including audit quality on that engagement.

### Leadership and Culture

Leadership sets the example regarding ethics, professional behaviour, and commitment to audit quality. The firm's culture must encourage employees to report concerns and uphold integrity. This includes not tolerating actions inconsistent with the ethical and quality objectives of the firm.

## The Eight Components of ISQM 1

ISQM 1 requires firms to address eight interrelated components to achieve its quality objectives.

### 1. Governance and Leadership

Firms must demonstrate commitment to quality through strong governance structures, clear assignment of responsibilities, and ongoing supervision. Policies should explicitly state that audit quality comes before commercial interests.

### 2. Ethical Requirements

Firms must establish procedures to ensure all personnel comply with ethical standards, including the fundamental principles of integrity, objectivity, professional competence, confidentiality, and professional behaviour.

> **Key Term: ethical requirements**
> The rules and professional code of conduct that practitioners and firm staff must follow, including independence and freedom from bias.

### 3. Acceptance and Continuance of Client Relationships and Engagements

Firms must assess the integrity and suitability of clients before acceptance and throughout the client relationship. This includes evaluating potential clients for risks related to reputation, conflicts of interest, and ability to comply with ethical requirements.

### 4. Engagement Performance

Policies and procedures must set out how audit engagements should be planned, performed, supervised, and reviewed, including direction and oversight by senior staff. A key requirement is the performance of engagement quality reviews for high-risk, listed, or other specified engagements.

> **Key Term: engagement quality review**
> An independent review of significant judgements and the conclusion reached on an audit or assurance engagement, performed before the report is finalised.

### 5. Resources

Firms must ensure they have sufficient and appropriate human, technological, and intellectual resources. Staff should be competent and adequately supervised, and relevant training, methodologies, or IT tools should be available.

### 6. Information and Communication

Firms need to establish effective channels for sharing information, from leadership communications on audit quality to clear reporting of deficiencies or concerns. Open and timely communication supports appropriate action.

### 7. Monitoring and Remediation

The system must include processes for monitoring the operation of quality management components. Where deficiencies are identified—such as from file reviews or external inspections—prompt remedial action must be taken.

### 8. The Firm’s Risk Assessment Process

ISQM 1 requires an ongoing risk assessment process to identify, evaluate, and address quality risks. Policies and responses must be reviewed and updated as risks to audit quality change.

## Applying ISQM 1 in Practice

### **Worked Example 1.1**

You are a partner in a mid-sized firm. An external regulatory review identifies that some audit files were not adequately reviewed at manager and partner level, resulting in insufficient evidence over valuation of receivables.

**Question:**  
Which ISQM 1 component(s) have failed, and what must the firm do?

> **Answer:**  
> Deficiency relates to "engagement performance" (controls over supervision and review) and "monitoring and remediation" (since external review uncovered the problem). The firm must investigate the root cause (often lack of training or workload pressures), act to address it (e.g. provide targeted training, revise workload allocation), and monitor that corrective measures are effective.

### **Worked Example 1.2**

A junior auditor flags ethical concerns about a client's management but is reluctant to report them for fear of reprisal.

**Question:**  
Which ISQM 1 area needs attention?

> **Answer:**  
> This indicates weaknesses in "governance and leadership" and "information and communication." Leadership must encourage a speak-up culture where concerns regarding ethics or quality are raised without fear, and ensure there are safe channels to do so.

## Engagement Quality Reviews

An engagement quality review (EQR) must be performed for certain audits, such as listed companies or engagements involving high risk or significant judgments. The reviewer must be independent of the engagement team, experienced, and granted adequate time and authority. The engagement partner is responsible for ensuring the EQR takes place before signing the report and for discussing significant matters with the reviewer.

> **Key Term: engagement quality reviewer**
> An individual, independent of the engagement team, assigned to perform and document an objective evaluation of the significant judgements made and conclusions reached on an engagement.

### **Exam Warning**

Failure to distinguish EQR from normal engagement review is a frequent exam error. Only appointed reviewers (not the audit partner or direct team member) qualify as engagement quality reviewers under ISQM 2.

## Monitoring and Remediation

Firms must monitor the system of quality management as a whole, through inspection of engagements, assessment of quality indicators, and review of identified deficiencies. All findings should be assessed for severity and cause. Urgent action is required if the quality of issued audit reports, independence, or public confidence is at risk. Remedial actions may include staff training, revised policies, or additional quality control checks.

> **Key Term: deficiency**
> A failure in the system of quality management or the operation of a policy or procedure, which may result in inappropriate reports or non-compliance with standards.

## Summary

A robust system of quality management, as required by ISQM 1, is essential for maintaining the integrity and reliability of audit services. Firm leadership must drive quality, supported by risk assessment, clear policies, resource management, and effective monitoring. When deficiencies arise, the firm must act quickly to investigate, remediate, and prevent recurrence. High-quality audits rely on everyone in the firm understanding their responsibilities for quality at every stage.

## **Key Point Checklist**

_This article has covered the following key knowledge points:_

- The aim of firm-level quality management and the content of ISQM 1.
- The responsibilities of firm leadership and engagement partners for audit quality.
- The eight components of a system of quality management.
- The concept and purpose of engagement quality reviews (EQR).
- The process for monitoring the system and remediating deficiencies.
- The need for a risk-based, proactive approach to quality management in audit firms.

## **Key Terms and Concepts**

- ISQM 1 (International Standard on Quality Management 1)
- system of quality management
- engagement partner
- ethical requirements
- engagement quality review
- engagement quality reviewer
- deficiency

Firm-level quality management - ISQM 1 components and responsibilities