2.4 Professional Skepticism, Professional Judgment & Client Confidentiality

2.4 Professional Skepticism, Professional Judgment & Client Confidentiality

CPA Exam Focus: Professional skepticism and professional judgment represent the operational core of every audit procedure. On the exam, questions test not only their conceptual definitions under AU-C 200 and PCAOB AS 1015, but also the cognitive biases that undermine them, the precise legal exceptions to client confidentiality under ET 1.700, and the rigid rules governing contingent fees and commissions.

---

Professional Skepticism: The Auditor's Mindset

Professional skepticism is defined across auditing standards (AU-C 200, PCAOB AS 1015, ISA 200) as an attitude that includes a questioning mind, being alert to conditions that may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence.

+-------------------------------------------------------------------------+
|                   THE PROFESSIONAL SKEPTICISM CONTINUUM                 |
+-------------------------------------------------------------------------+
| [Complete Trust]  <----  [PROFESSIONAL SKEPTICISM]  ---->  [Accusatory] |
| Assume honesty             Neither assumes honesty          Presumes    |
| without testing            nor assumes dishonesty           fraud/guilt |
| (UNACCEPTABLE)             (REQUIRED AUDIT MINDSET)        (UNBALANCED) |
+-------------------------------------------------------------------------+

Core Elements of Professional Skepticism

1. A Questioning Mind: Approaching audit evidence with an inquisitive, challenging perspective rather than passive acceptance. The auditor asks probing questions: "Why did this account balance change? Does this transaction have economic substance? Is management's explanation corroborated by third-party data?"
2. Critical Assessment of Evidence: Actively scrutinizing consistency among documents, evaluating the reliability of evidence sources, and questioning whether contradictory evidence outweighs corroborating evidence.
3. Alertness to Inconsistencies & Fraud Indicators: Remaining vigilant for conditions such as missing documentation, unexplained ledger entries, transactions executed outside the normal course of business, or management reluctance to provide access.

Cognitive Biases Undermining Skepticism

The CPA Exam frequently assesses an auditor's vulnerability to unconscious cognitive biases that degrade skepticism:

---

Professional Judgment: Execution & Documentation

Professional judgment is the application of relevant training, knowledge, and experience within the context provided by auditing, accounting, and ethical standards in making informed decisions about the courses of action that are appropriate in the circumstances of the audit engagement.

Mandatory Documentation of Judgment

Auditing standards (AU-C 230 / PCAOB AS 1215) dictate that whenever professional judgment is exercised regarding significant, subjective, or contentious matters, the auditor must document the decision-making process. Good documentation of those judgments typically covers:

• The facts, circumstances, and technical accounting literature evaluated.
• The range of reasonable alternatives considered.
• The rationale for the final conclusion reached.
• How contradictory or inconsistent evidence was investigated and resolved.
• Consultations with firm technical specialists or industry leaders.

---

Confidential Client Information (ET Section 1.700)

Under AICPA Rule 1.700, a member in public practice shall not disclose any confidential client information without the specific consent of the client.

Critical Legal Distinction: Confidentiality vs. Privileged Communication

• Confidentiality is an ethical and contractual obligation created by professional codes and civil law. The CPA has a duty to keep client records private.
• Privileged Communication is a legal right created by statute that shields communications from disclosure in a court of law (e.g., attorney-client privilege).
• NO COMMON-LAW ACCOUNTANT PRIVILEGE: Under common law and federal law, accountant-client communications are not privileged! In federal courts, criminal proceedings, and SEC investigations, an auditor can be legally compelled to produce workpapers and testify against their client.

+-------------------------------------------------------------------------+
|     THE FOUR CODIFIED EXCEPTIONS TO CONFIDENTIALITY (NO CONSENT)        |
+-------------------------------------------------------------------------+
| 1. Subpoena or Summons: Compliance with a validly issued court subpoena |
|    or enforceable government summons.                                   |
| 2. Compliance with Laws / Standards: Complying with applicable laws,   |
|    regulations, or GAAP/GAAS disclosure rules (e.g., report issuance).  |
| 3. Professional Review / Peer Review: Official peer reviews authorized  |
|    by the AICPA, state CPA societies, or state boards of accountancy.   |
| 4. Disciplinary Proceedings / Legal Defense: Inquiries by AICPA/state   |
|    boards. (ET 1.700.070 also permits disclosure to pursue or  |
|    defend a lawsuit, including to the member's insurer.)                |
+-------------------------------------------------------------------------+

Scenarios That REQUIRE Client Consent

Candidates are frequently tested on situations where CPAs mistakenly believe they can disclose records without consent:

1. Third-Party Service Providers and AI Tools: Before sending confidential client information to an outside service provider, including a third-party cloud or AI service, the member must either have a contract requiring the provider to keep it confidential (with reasonable assurance that its safeguards work) or obtain the client's specific consent (ET 1.700.040).
2. Successor Auditor Inquiries: Under AU-C 210, a predecessor auditor cannot discuss the client or make audit workpapers available to a prospective successor auditor without the client's consent; under AU-C 210 the successor asks management to authorize the predecessor to respond.
3. Bank or Credit Grantor Requests: Even if a client's bank calls asking to verify an audited balance sheet, the CPA cannot confirm or release any information without client consent.

Contrast: Sale or Merger of a Practice. A review of a member's practice in connection with a prospective purchase, sale, or merger is treated as a practice review. It may proceed without client consent if the member takes appropriate precautions, such as a written confidentiality agreement with the prospective buyer (ET 1.700.050).

---

Contingent Fees & Commissions (ET 1.510 & ET 1.520)

To safeguard independence and objectivity, the Code strictly regulates fee arrangements:

Contingent Fees (ET Section 1.510 / Rule 302)

A contingent fee is a fee established for the performance of any service pursuant to an arrangement in which no fee will be charged unless a specified finding or result is attained, or in which the amount of the fee is otherwise dependent upon the finding or result of such service.

• Strict Prohibition for Attest Clients: A CPA firm cannot perform any service for a contingent fee, or receive a contingent fee from a client for whom the firm performs:
  1. An audit or review of a financial statement;
  2. A compilation of a financial statement when the member expects that a third party will rely on the statement and does not disclose a lack of independence;
  3. An examination of prospective financial information (forecasts/projections).
• Tax Return Prohibition: A member in public practice cannot prepare an original or amended tax return or claim for a tax refund for a contingent fee for any client!
• Permitted Contingent Fees: Fees are permitted if they are fixed by courts or other public authorities, or in tax matters if determined based on the results of judicial proceedings or government agency findings (e.g., representing a client in a contested IRS examination or bankruptcy court proceedings where fees are subject to court approval).

Commissions and Referral Fees (ET Section 1.520 / Rule 503)

• Attest Clients (PROHIBITED): A member in public practice cannot recommend or refer to a client any product or service for a commission, or receive a commission for referring an attest client's business to a third party. This is an absolute bar.
• Non-Attest Clients (PERMITTED WITH DISCLOSURE): A member in public practice may receive a commission for recommending products or services (e.g., selling accounting software or financial planning products) to a non-attest client (such as a tax-only or consulting client), provided the member makes a written disclosure of the commission arrangement to the client.
• Referral Fees: Any member who accepts a referral fee for recommending another CPA, or who pays a referral fee to obtain a client, must disclose the payment or receipt of the referral fee to the client.