Learn the essentials of review engagements, focusing on limited assurance, key procedures, report structure, and professional standards under AR-C Section 90.
A review engagement plays a critical role in providing decision-makers with limited assurance on financial statements. While less rigorous than an audit, the review process adds credibility to financial information and fosters trust among stakeholders. This section explores the nature of a review engagement, the key procedures accountants typically perform, and the form and content of a standard review report. We also discuss the limitations of a review engagement and how these differences from an audit should be communicated to financial statement users.
A review engagement differs significantly from an audit in both scope and level of assurance. The American Institute of Certified Public Accountants (AICPA) outlines these differences in AR-C Section 90, “Review of Financial Statements.”
1.1 Limited (Negative) Assurance
In a review engagement, the CPA provides limited assurance, often referred to as negative assurance. The practitioner states that they are “not aware of any material modifications” that should be made to the financial statements in order for them to be presented in accordance with the applicable financial reporting framework (e.g., U.S. GAAP). This stands in contrast to the reasonable (positive) assurance that accompanies an audit report.
1.2 Reliance on Inquiry and Analytical Procedures
Because of the limited nature of the engagement, reviewers primarily rely on inquiries of management and analytical procedures. By design, the CPA does not perform extensive verification of account balances and transactions, nor do they carry out detailed tests of controls. Consequently, a review provides less assurance and has a lower level of scrutiny compared to an audit.
1.3 Management Responsibilities
Management is responsible for preparing financial statements in accordance with the applicable framework. They must ensure the completeness and accuracy of the financial information and respond to inquiries honestly. The CPA often obtains a management representation letter to formally document management’s responsibilities and representations made during the review process.
1.4 When Is a Review Appropriate?
A review engagement can be ideal for entities requiring a moderate level of assurance for lenders, investors, or regulatory bodies, but who do not need the extensive procedures associated with an audit. For instance, smaller companies or organizations with stable financial reporting environments may opt for a review to balance cost-effectiveness with some level of external assurance.
The procedures performed in a review engagement are substantially less in scope than an audit. Nonetheless, certain key steps ensure the accountant gathers sufficient evidence to support limited assurance.
2.1 Inquiries of Management
The CPA makes inquiries about:
• Significant accounting policies and any changes in those policies.
• Unusual or complex transactions that impact the financial statements.
• Management’s process for preparing estimates and identifying potential errors.
• Material events or transactions that may have occurred after the reporting period.
• Related-party transactions, contingencies, or subsequent events that could affect the financial statements.
2.2 Analytical Procedures
Analytical procedures compare current financial results to prior periods, budgets, or industry benchmarks to identify inconsistencies or unexpected trends. Notable steps include:
• Comparative Analysis: Examining financial statement line items against historical data.
• Ratio Analysis: Reviewing key ratios (e.g., current ratio, gross margin) for deviations from expectations.
• Trend Analysis: Identifying significant fluctuations year over year or quarter over quarter.
2.3 Reading the Financial Statements
Although no detailed tests of details are performed, the CPA carefully reads the financial statements to assess the overall presentation. They look for:
• Proper classification of accounts in accordance with the relevant reporting framework.
• Consistency of disclosures across financial statement periods.
• Any obvious departures from the applicable reporting framework.
2.4 Additional Procedures if Red Flags Arise
While typical review procedures do not involve the depth of an audit, if significant issues emerge (e.g., potential material misstatement, unusual transactions, or contradictory statements by management), the CPA may decide to perform additional procedures to resolve these concerns. If not resolved satisfactorily, the CPA might revise the report or retreat from the engagement entirely.
A properly structured review report communicates the limited assurance provided, the nature of procedures performed, and the key distinctions from an audit.
3.1 Title and Addressee
The review report begins with a title clearly indicating that it is a “Independent Accountant’s Review Report.” The addressee is typically the governing body (e.g., board of directors) or management of the organization.
3.2 Introduction Paragraph
This paragraph clarifies the financial statements under review and states that they are the responsibility of management. It also indicates that the accountant’s responsibility is to conduct the review in accordance with Statements on Standards for Accounting and Review Services (SSARS).
3.3 Management’s Responsibility
Within the review report, the accountant reaffirms that management is responsible for the preparation and fair presentation of the financial statements in accordance with the applicable financial reporting framework.
3.4 Accountant’s Responsibility and Basis for Limited Assurance
This section explains that the accountant’s responsibility is to conduct the engagement in accordance with SSARS, specifically AR-C Section 90. It points out that a review primarily involves inquiry and analytical procedures, and that it is substantially less in scope than an audit, which provides a basis for only limited assurance.
3.5 Conclusion (Limited Assurance Paragraph)
The standard conclusion states:
“Based on our review, we are not aware of any material modifications that should be made to the accompanying financial statements in order for them to be in conformity with [applicable financial reporting framework].”
This phrasing underscores the negative assurance provided in a review.
3.6 Signature, City, and State
The report concludes with the signature of the accountant or firm and the city and state where they practice. The date of the review report is typically the date on which the accountant has completed the review procedures.
4.1 Scope Limitations
Because a review does not include tests of controls or detailed substantive procedures, there is an inherent limitation in the level of assurance provided. Financial statements may contain material misstatements that the limited procedures performed in a review would not detect.
4.2 No Opinion Expressed
Unlike an audit, the CPA does not express an opinion on whether the financial statements fairly present the entity’s financial position. Instead, the CPA issues a negative assurance report, stating that no material modifications are needed based on information gleaned from a limited scope of procedures.
4.3 Reliance on Management Assertions
Because the CPA primarily uses management’s responses to inquiries and performs analytical procedures, the review heavily relies on the integrity and completeness of those responses. The risk exists that management may inadvertently or deliberately conceal information.
4.4 Potential for Additional Procedures or Withdrawal
If evidence arises during the review that suggests the financial statements may be materially misstated, the CPA may need to carry out additional procedures to address the concern. If the issue remains unresolved or indicates significant risk, the CPA can modify the review report or withdraw from the engagement.
Below is a simple schematic (Mermaid diagram) illustrating the flow of typical review engagement procedures:
flowchart LR A[Engagement Acceptance] --> B[Obtain Understanding of Entity] B --> C[Inquiries of Management] C --> D[Analytical Procedures] D --> E[Evaluate Findings] E --> F[Communicate Results via Review Report] F --> G[If Issues Arise, Conduct Additional Procedures or Modify Report]
6.1 Best Practices
• Obtain a Clear Engagement Letter: Before starting a review, the CPA should outline the scope, objectives, and limitations in writing to manage expectations.
• Maintain Open Dialogue with Management: Frequent communication minimizes the risk of misunderstandings and clarifies issues promptly.
• Document Thoroughly: Detailed working papers capturing inquiries, analytical procedures, and conclusions support the final report.
• Address Inconsistencies Early: Promptly resolve discrepancies discovered during inquiry or analytical review to avoid last-minute complications.
6.2 Common Pitfalls
• Insufficient Evidence: Failing to perform enough procedures (or thorough documentation) can undermine the credibility of the review.
• Over-Reliance on Management: While the review depends on management’s information, the CPA must remain professionally skeptical.
• Confusion with Audit Requirements: Sometimes a reviewer incorrectly applies audit-level procedures or inadvertently suggests an opinion-level assurance.
• Inadequate Scope Clarification: Not communicating the limitations of a review to report users can lead to misunderstandings about the level of assurance provided.
• AR-C Section 90, “Review of Financial Statements.”
• AICPA’s Official Guidance on SSARS for Reviews, Compilations, and Preparation Engagements.
• AICPA Sample Review Reports, including modifications for known departures from GAAP.
• Practice aids that help distinguish a review from a compilation or full-scope audit engagement.
A review engagement strikes a balance between the minimal involvement of compilations and the rigorous scrutiny of audits. Through inquiries and analytical procedures, the CPA gathers sufficient evidence to provide limited (negative) assurance on the financial statements. Understanding the form, content, and limitations of a review report is crucial for CPAs and users of financial information alike. By recognizing the inherent boundaries of a review and effectively communicating them, accountants can offer meaningful assurance in a cost-effective manner while upholding professional standards and public trust.
Auditing & Attestation CPA Mock Exams (AUD): Comprehensive Prep
• Tackle full-length mock exams designed to mirror real AUD questions—from risk assessment and ethics to internal control and substantive procedures.
• Refine your exam-day strategies with detailed, step-by-step solutions for every scenario.
• Explore in-depth rationales that reinforce understanding of higher-level concepts, giving you a decisive edge on test day.
• Boost confidence and reduce exam anxiety by building mastery of the wide-ranging AUD blueprint.
Disclaimer: This course is not endorsed by or affiliated with the AICPA, NASBA, or any official CPA Examination authority. All content is created solely for educational and preparatory purposes.