What the document covers
The bulletin connects understanding the entity to risk assessment and audit procedures. The response should follow the risks identified rather than a disconnected checklist.
Specific requirements and implications
The bulletin criticises reliance on a predecessor's clean opinion or unchanged prior-year files as evidence that no significant risks exist. Auditors need direct understanding of the business, its environment and controls, supported by enquiry, observation and analytical work. Management explanations should be corroborated, and findings should influence the audit response. Risk assessment continues during the engagement, so new information can require a revised plan rather than unquestioned completion of a standard programme.
Official source
A concise, independent Apex Gateway guide based on the official English source, not a reproduction of the complete document. Consult the original for full conditions, exceptions and subsequent updates.
Read the official PDF ↗