2.3 Independence Under Government (GAGAS) & Employee Benefit (DOL) Standards

2.3 Independence Under Government (GAGAS) & Employee Benefit (DOL) Standards

CPA Exam Focus: AUD candidates frequently encounter questions contrasting standard AICPA independence rules with the stricter, specialized independence regimes enforced by the Government Accountability Office (GAO Yellow Book / GAGAS) and the Department of Labor (DOL). Memorizing where these bodies are more restrictive than the AICPA—especially regarding non-audit services, client SKE oversight, and financial interest timing—is essential for passing the exam.

---

The GAGAS Independence Framework (GAO Yellow Book)

Government Auditing Standards (GAGAS), commonly known as the Yellow Book, are promulgated by the Comptroller General of the United States through the GAO. GAGAS applies to audits of government entities, state and local agencies, public authorities, and non-profit organizations that receive federal financial assistance (such as entities subject to the Single Audit Act under OMB Uniform Guidance).

The Two Overarching Principles of GAGAS Independence

Two long-standing ideas run through the GAGAS nonaudit-service requirements:

1. Prohibition of Management Responsibilities: Audit organizations must not perform management responsibilities for an audited entity.
2. Prohibition of Self-Review: Audit organizations must not audit their own work or provide non-audit services that are significant or material to the subject matter or financial statements of the audit.

+-------------------------------------------------------------------------+
|                   GAGAS CONCEPTUAL FRAMEWORK PROCESS                    |
+-------------------------------------------------------------------------+
| 1. Identify Threats to Independence (including Bias & Structural).      |
| 2. Evaluate Threat Significance (individually and in the aggregate).    |
| 3. Apply Safeguards to reduce threats to an acceptable level.           |
| 4. MANDATORY SAFEGUARD: Assess and document client management's SKE    |
|    (Skills, Knowledge, and/or Experience) before non-audit services.    |
| 5. If threats cannot be eliminated or reduced: DECLINE or WITHDRAW.     |
+-------------------------------------------------------------------------+

---

Threats to Independence Under GAGAS

While the AICPA framework outlines seven threats, GAGAS presents a slightly modified taxonomy that includes two threats unique to governmental audits:

Mitigating Structural Threats

Government audit organizations can mitigate structural threats if specific statutory or constitutional protections exist, such as:

• The head of the audit organization is directly elected by the public.
• The audit organization reports directly to the legislative body rather than the executive agency being audited.
• The audit organization has statutory authority to publish its reports directly to the public without executive pre-approval.

---

Non-Audit Services Under GAGAS & The SKE Requirement

Non-audit services provided to government audit clients present acute self-review and management participation threats. Under GAGAS, before an auditor agrees to provide any non-audit service (such as drafting financial statements, preparing accounting entries, or cash-to-accrual conversions), three mandatory requirements must be satisfied:

1. The SKE Assessment (Skills, Knowledge, and/or Experience)

The auditor must determine and document that the client has designated an individual within management who possesses suitable Skills, Knowledge, and/or Experience (SKE) to oversee the non-audit service:

• What SKE Means: The designated official does not need the expertise to perform or re-perform the service themselves.
• What SKE Requires: The designated individual must understand the nature, purpose, and results of the service, make all significant management decisions, evaluate the adequacy of the final product, and accept full responsibility for the results.
• Failure of SKE: If the client lacks an individual with sufficient SKE, the auditor cannot perform the non-audit service without impairing independence. In such cases, the auditor must decline the non-audit service or withdraw from the audit.

2. Written Agreement on Responsibilities

The auditor must establish and document a written understanding with the client regarding:

• The objectives and scope of the non-audit service.
• Management's responsibility for oversight, establishing controls, and accepting the final deliverables.
• The auditor's responsibilities and professional limitations.

3. Preparation of Financial Statements and Note Disclosures

Under GAGAS, preparing draft financial statements, notes, or cash-to-accrual conversion entries is classified as a significant self-review threat. The auditor must:

• Document the evaluation of the threat significance.
• Document the client's SKE oversight.
• Apply firm safeguards (such as having an independent partner who did not prepare the statements review the audit workpapers and disclosures).

---

Department of Labor (DOL) Independence Rules (ERISA Audits)

The Department of Labor regulates annual audits of employee benefit plans under the Employee Retirement Income Security Act of 1974 (ERISA). Form 5500 filings requiring an independent qualified public accountant (IQPA) are governed by 29 CFR 2509.75-9 (DOL Interpretive Bulletin 75-9).

Critical Exam Rule: DOL independence rules for employee benefit plans are in many respects far stricter than AICPA rules, particularly regarding financial interest timing and the maintenance of accounting records!

+-------------------------------------------------------------------------+
|                     DOL ERISA INDEPENDENCE HIGHLIGHTS                   |
+-------------------------------------------------------------------------+
| 1. Financial Interests: ANY direct financial interest in the plan or    |
|    plan sponsor during the PERIOD COVERED BY THE FINANCIAL STATEMENTS    |
|    impairs independence (disposing before fieldwork does NOT cure it!). |
| 2. Prohibited Roles: Cannot serve as promoter, underwriter, trustee,   |
|    director, officer, or employee of the plan or plan sponsor.          |
| 3. Recordkeeping Prohibition: An auditor CANNOT maintain financial      |
|    records, post journal entries, or process benefit claims for a plan. |
+-------------------------------------------------------------------------+

Disqualifying Financial Interests Under the DOL

An accountant or firm is not independent with respect to an employee benefit plan if the accountant, the firm, or a member of the firm (all partners, plus professional employees who work on the audit or are located in an office that performs a significant portion of it) maintains:

• Any direct financial interest or material indirect financial interest in the plan or the plan sponsor.
• Timing Trap: This prohibition applies during:
  1. The period of the professional engagement,
  2. The period covered by the financial statements, AND
  3. At the date of the opinion.

AICPA vs. DOL Timing Comparison: Under the AICPA Code, the financial-interest prohibition applies during the period of the professional engagement, which begins when the member signs the initial engagement letter or begins the attest work, whichever is earlier. A covered member who disposed of a client investment before that period began generally is not impaired by the earlier holding. Under DOL rules, the prohibition also covers the period covered by the financial statements, so a direct interest held at any point during the plan year impairs independence for that audit even if it was sold before fieldwork.

Prohibited Official Positions & Plan Maintenance

Under DOL 2509.75-9, independence is impaired if the accountant or firm employee serves as a:

• Promoter, underwriter, or investment adviser to the plan or sponsor.
• Voting trustee, director, officer, or employee of the plan or sponsor.
• Recordkeeper: Maintaining the financial records of the plan (bookkeeping, reconciling trust statements, processing payroll deductions, or calculating participant vesting) is strictly prohibited. Unlike the AICPA, the DOL does not permit routine recordkeeping for benefit plans even if management possesses SKE.

---

Master Comparison: AICPA vs. SEC vs. GAGAS vs. DOL