The Concept and Need for Assurance

Assurance is an independent professional service that enhances the credibility and reliability of information. The IAASB (International Auditing and Assurance Standards Board) International Framework for Assurance Engagements defines an assurance engagement as:

An engagement in which a practitioner aims to obtain sufficient appropriate evidence in order to express a conclusion designed to enhance the degree of confidence of the intended users (other than the responsible party) about the subject matter information.

In simpler terms: an independent expert examines information prepared by one party and provides an opinion or conclusion to another party about whether that information is reliable. The most common form of assurance is the external audit of financial statements.

Why is assurance needed?

The fundamental reason is the separation of ownership and management in modern business — particularly in companies where shareholders (owners) are different from the directors (managers) who run the business day to day. This creates the agency problem.

The agency relationship arises when one party (the principal — e.g., shareholders) delegates authority to another party (the agent — e.g., directors/management) to act on their behalf.

The agency problem: The interests of the agent may not always align with the interests of the principal. Directors may:

• Maximise their own remuneration, perks, or job security rather than shareholder wealth
• Take excessive risks, or conversely be too risk-averse
• Present the company's financial results in an overly favourable light to protect their positions
• Withhold or distort information that would be useful to shareholders

There is also an information asymmetry — management has detailed, day-to-day knowledge of the business, while shareholders and other external users typically rely on the financial statements management prepares. Shareholders cannot independently verify whether the financial statements are a faithful representation.

Assurance helps bridge this gap. An independent auditor examines the financial statements and provides an opinion on whether they present a true and fair view. This:

• Increases users' confidence in the financial information
• Reduces the information risk — the risk that the information on which users base their decisions is incorrect or misleading
• Helps hold management accountable to shareholders and other stakeholders
• Improves the functioning of capital markets — investors are more willing to invest when they can trust financial information
• May help the entity obtain finance on better terms (lenders have more confidence in audited statements)

Other factors creating the need for assurance:

• Complexity: Financial reporting is increasingly complex (IFRS standards, fair values, estimates). Users need confidence that the rules have been applied correctly.
• Remoteness: Users are often geographically or organisationally remote from the entity and cannot directly observe its operations.
• Volume: The sheer volume of transactions makes it impractical for users to check the information themselves.
• Consequences of error: Decisions based on incorrect financial information (investing, lending) can result in significant financial loss.

The International Framework identifies two levels of assurance:

1. Reasonable assurance (high, but not absolute)

• The practitioner reduces engagement risk to an acceptably low level
• The conclusion is expressed in the positive form: "In our opinion, the financial statements give a true and fair view…" or "In our opinion, the financial statements are presented fairly, in all material respects, in accordance with IFRSs."
• More extensive evidence-gathering procedures are required
• Example: An external audit of financial statements (ISA-based audit)
• Reasonable assurance is the highest level of assurance available — absolute assurance is never achievable because of inherent limitations (sampling, judgement, estimates, possibility of collusion in fraud)

2. Limited assurance (moderate)

• The practitioner reduces engagement risk to a level that is acceptable in the circumstances but higher than for reasonable assurance
• The conclusion is expressed in the negative form: "Based on our review, nothing has come to our attention that causes us to believe that the financial statements are not presented fairly…"
• Less extensive procedures — typically inquiry and analytical procedures rather than detailed substantive testing
• Example: A review engagement (ISRE 2400, ISRE 2410) — e.g., a review of interim financial statements

No assurance

• Some engagements provide no assurance at all — the practitioner does not express any conclusion about the information
• Examples: Agreed-upon procedures (ISRS 4400) — the practitioner performs specific procedures agreed with the client and reports factual findings only; the users draw their own conclusions. Compilation engagements (ISRS 4410) — the practitioner assists in preparing financial information but does not express any assurance on it.

The International Framework identifies five elements that must be present in all assurance engagements:

Element 1: A Three-Party Relationship

Element 2: Appropriate Subject Matter

Element 3: Suitable Criteria

Element 4: Sufficient Appropriate Evidence

Element 5: A Written Assurance Report

A wide range of stakeholders benefit from assurance services:

Types of assurance engagement beyond the statutory audit:

• Review engagements — limited assurance on financial statements (e.g., interim reviews under ISRE 2410)
• Sustainability / ESG assurance — assurance on environmental, social, and governance reports
• Internal audit — assurance on internal controls, risk management, and governance (provided by an internal function or outsourced firm)
• Due diligence — investigative work to support a transaction (e.g., acquisition, financing)
• Prospective financial information — assurance on forecasts or projections
• Compliance engagements — assurance that the entity has complied with specific regulations or contractual terms

The statutory audit serves a public interest function. Although the auditor is appointed by, and reports to, the shareholders, the wider public benefits from the audit because:

• Capital market confidence: Investors, both institutional and individual, rely on audited financial information to allocate capital efficiently. Without audit, the cost of capital would rise due to increased information risk.
• Accountability and trust: The audit reinforces the accountability of directors to shareholders and, more broadly, to society. Audited information underpins trust in the business environment.
• Deterrent effect: The knowledge that financial statements will be independently audited deters management from deliberate misstatement or fraud.
• Economic stability: By identifying material misstatements and going concern issues early, auditors help prevent sudden corporate failures that could destabilise the wider economy.

The auditor's public interest responsibility is reflected in the professional and ethical obligations imposed by the ICAEW Code of Ethics, the FRC's Ethical Standard, and ISAs — all of which emphasise independence, objectivity, professional competence, and integrity.

Limitations of assurance:

Even a reasonable assurance engagement cannot provide absolute assurance. Inherent limitations include:

• Sampling: Auditors test a sample of transactions, not every single one. There is always a risk that material misstatements in untested items go undetected.
• Judgement and estimates: Financial statements involve significant judgements and estimates (e.g., provisions, fair values, useful lives). Reasonable people can disagree on these.
• Fraud: Well-concealed fraud, especially involving collusion among management or with third parties, may not be detected even by a properly conducted audit.
• Persuasive, not conclusive: Audit evidence is persuasive rather than conclusive. The auditor forms an opinion based on the balance of evidence, not certainty.
• Timeliness: The audit is performed after the year end on historical information — it does not predict the future.