2.1 Definition of Assurance & The Three-Party Model

Definition of Assurance & The Three-Party Model

Quick Reference: Under the International Framework for Assurance Engagements (promulgated by the IAASB and adopted by the Institute of Chartered Accountants of Bangladesh - ICAB), an assurance engagement is defined as an engagement in which a practitioner aims to obtain sufficient appropriate evidence in order to express a conclusion designed to enhance the degree of confidence of the intended users (other than the responsible party) about the outcome of the measurement or evaluation of an underlying subject matter against criteria.

Assurance is the bedrock of financial markets, corporate governance, and economic stability. In Bangladesh, where capital markets are developing rapidly under the oversight of the Bangladesh Securities and Exchange Commission (BSEC) and Financial Reporting Council (FRC), high-quality assurance provides trust to shareholders, lenders, tax authorities, and international trade partners.

---

The Five Fundamental Elements of an Assurance Engagement

For any professional engagement to be classified as an assurance engagement under ICAB/IAASB standards, it must exhibit all five of the following structural elements:

+-------------------------------------------------------------------------+
|                    5 ELEMENTS OF ASSURANCE ENGAGEMENTS                  |
+-------------------------------------------------------------------------+
|  1. Three-Party Relationship  (Practitioner, Responsible Party, Users)  |
|  2. Appropriate Subject Matter (Financials, Controls, Compliance, ESG)   |
|  3. Suitable Criteria          (BFRS/IFRS, Companies Act 1994, COSO)     |
|  4. Sufficient Appropriate Evidence (Audit trail, confirmations, tests) |
|  5. Written Assurance Report   (Reasonable Audit / Limited Review)      |
+-------------------------------------------------------------------------+

1. A Three-Party Relationship

Unlike standard two-party commercial contracts (e.g., a consulting engagement between a client and an advisor), an assurance engagement always involves three separate and distinct parties:

• The Practitioner (Auditor): A qualified professional accountant holding a Certificate of Practice (CoP) from ICAB. The practitioner is responsible for gathering evidence, maintaining independence, applying professional scepticism, and issuing an objective conclusion.
• The Responsible Party (Management / Board): The party responsible for the underlying subject matter or the subject matter information (e.g., the Board of Directors of a Bangladeshi public limited company responsible for preparing financial statements under Section 183 of the Companies Act 1994).
• The Intended Users: The individuals or groups for whom the practitioner prepares the assurance report (e.g., existing and prospective equity shareholders, institutional lenders such as Sonali Bank or BRAC Bank, trade creditors, the National Board of Revenue - NBR, and regulatory bodies like the BSEC and FRC).

2. An Appropriate Subject Matter

The subject matter is the specific domain, topic, or data that is being evaluated or measured. It can take many forms:

• Financial Performance or Conditions: Historical financial statements (balance sheet, profit & loss statement, cash flow statement).
• Non-Financial Performance: Key performance indicators (KPIs), operational efficiency reports, or corporate sustainability/ESG disclosures.
• Physical Characteristics: Capacity of a manufacturing facility, inventory quantities, or land holdings.
• Systems and Processes: Internal control framework, IT general controls, or cybersecurity infrastructure.
• Behavior or Compliance: Compliance with statutory regulations, loan covenants, or environmental laws.

To be appropriate, the subject matter must be identifiable, capable of consistent evaluation, and of such a nature that evidence can be gathered to support a conclusion.

3. Suitable Criteria

Criteria are the benchmarks, rules, or standards used to evaluate or measure the subject matter. Without clear criteria, any conclusion is subjective and arbitrary. Characteristics of suitable criteria include:

Common Examples in Bangladesh:

• For financial statement audits: International Financial Reporting Standards (IFRS) / Bangladesh Financial Reporting Standards (BFRS) and the Companies Act 1994.
• For internal control reviews: The COSO Internal Control - Integrated Framework.
• For tax compliance reviews: The Income Tax Act 2023 of Bangladesh.

4. Sufficient Appropriate Evidence

The practitioner must plan and execute audit procedures to obtain sufficient (quantity) and appropriate (quality: relevance and reliability) evidence. Evidence supports the practitioner’s conclusion and reduces engagement risk to an acceptably low level.

5. Written Assurance Report

The final deliverable is a formal written report containing a clear, explicit expression of the practitioner’s conclusion. The report communicates the level of assurance provided to the intended users.

---

Attestation vs. Direct Reporting Engagements

The IAASB framework categorizes assurance engagements into two primary operational structures:

ATTESTATION ENGAGEMENT:
[Responsible Party] --(Measures Subject Matter)--> [Subject Matter Information / Assertion]
                                                                 |
[Practitioner] <-----(Gathers Evidence on Assertion)-------------+
       |
       +-----> [Assurance Report on Assertion / Financial Statements]

DIRECT REPORTING ENGAGEMENT:
[Practitioner] --(Directly Measures Subject Matter against Criteria)--> [Assurance Report]

• Attestation Engagement: The responsible party measures or evaluates the underlying subject matter against the criteria and presents the subject matter information (e.g., management prepares financial statements). The practitioner then obtains evidence to express a conclusion on whether that management assertion is fairly stated.
• Direct Reporting Engagement: The practitioner directly measures or evaluates the underlying subject matter against criteria and presents the resulting subject matter information directly in the assurance report (e.g., an independent environmental compliance audit conducted directly by the practitioner).

---

Statutory and Economic Need for Assurance in Bangladesh

Assurance is mandatory for registered companies in Bangladesh, but its value extends far beyond legal compliance.

1. Economic Value & Reduction of Information Risk

In business, information risk is the risk that financial statements or operational reports used to make decisions are inaccurate, false, or misleading. When management prepares reports, an inherent conflict of interest exists because management wants to present the company in the most favorable light. Assurance provided by an independent ICAB Chartered Accountant bridges this trust gap, reducing information risk for investors and lenders. Consequently, businesses with audited financial statements enjoy a lower cost of capital and easier access to bank credit.

2. Statutory Mandates in Bangladesh

• Companies Act 1994 (Sections 210-213): Mandatory statutory annual audit for all public and private limited companies incorporated in Bangladesh.
• Financial Reporting Act 2015 (FRA 2015): Created the Financial Reporting Council (FRC) to oversee financial reporting, set standards, and monitor auditors of Public Interest Entities (PIEs) such as banks, insurance companies, listed firms, and large state-owned enterprises.
• BSEC Corporate Governance Code 2018: Mandates statutory audits and specialized compliance certifications for all publicly traded companies listed on the Dhaka Stock Exchange (DSE) and Chittagong Stock Exchange (CSE).

---

Common Exam Traps & ICAB Focus Points

Exam Tip: ICAB Certificate Level exams frequently test whether a scenario qualifies as an assurance engagement. Always verify if all five elements are present. If there are only two parties (e.g., a management consulting engagement advising the CFO on cost-cutting), it is NOT an assurance engagement!