The users of the financial statements (shareholders, general managers, banks, etc.,) have to be certain that the information provided by the financial department of the entity presents the actual situation, so that fundamental decisions related to operation activities, investment, and financing can be made in order to comply with the direction intended by the shareholders.
Our job as independent auditors is to carry out an appreciation and understanding of the entity’s operations to evaluate risks and its effects in order to efficiently focus and execute audit tests, and based on those devise an opinion on whether the financial statements have been prepared, in the relevant areas, in accordance with a frame of reference generally accepted in each country, such as IFRS or US GAAP. Our work methodology is in full compliance with the independence and work quality guidelines from the International Standards on Auditing, ISA, issued by the International Federation of Accountants, IFAC.
Our methodology comprises carrying out external auditing based on risks, aiming at adding value to the entities requiring our services. For example:
A business approach which helps companies achieve their goals. The risk-based audit comprises different elements of an audit:
- objectives,
- processes,
- risks,
- control,
- tests,
- reports.
The relevance of any audit test can be seen in relation to the entire risk management framework, due to the relationships established between the risks universe and auditing.
An inclusive audit approach that facilitates management actions: the firm is closely involved in the risk process (thus measuring its appetite) through risk workshops, risk and control self-assessments, assurance activities, etc.
An optimal level of assurance that supports the business objectives completion: risk-based auditing is more efficient since it manages audits in high-risk areas, unlike those that do not represent greater risks.
A risk-based audit ensures that the most important risks for the organization (linked to key objectives) are audited and that the management assumes responsibility for the mitigation and monitoring of these high-risk areas on an ongoing basis.
Better prioritization of findings and recommendations: findings and recommendations can be classified to provide the greatest added value in terms of mitigated risks related to the achievement of business objectives.
With this practice, risk mitigation improvement: the risk-based audit highlights crucial risks that are inadequately controlled or over-controlled, thus improving risk mitigation.