3.2 Engagement Quality Reviews: SQMS No. 2

3.2 Engagement Quality Reviews: SQMS No. 2

Exam Focus: Engagement Quality Reviews (EQRs) are a high-frequency testing area on the AUD exam. Under SQMS No. 2 (Engagement Quality Reviews), effective for audits and reviews of financial statements for periods beginning on or after December 15, 2025 (and for other engagements beginning on or after that date), the AICPA established dedicated, standalone requirements for the appointment and conduct of EQRs. Candidates must understand when an EQR is mandatory, the eligibility and competence qualifications of the reviewer, the critical two-year cooling-off period, the exact scope of an EQR (significant judgments versus detailed re-audit), and the rule that the report cannot be dated until the EQR is complete.

---

Objective and Framework of SQMS No. 2

While SQMS No. 1 governs the firm's overall quality management system, SQMS No. 2 addresses the specific mechanism of an Engagement Quality Review. An EQR is an objective evaluation of the significant judgments made by the engagement team and the conclusions reached thereon, performed by an eligible reviewer on or before the date of the engagement report.

SQMS 2 establishes that an EQR is not a routine supervisory layer. It does not replace the engagement partner's review, nor does it relieve the engagement partner of professional responsibility. Instead, it serves as an independent firm-level control designed to assess whether the engagement team exercised appropriate professional skepticism and reached sound conclusions on critical audit matters.

┌─────────────────────────────────────────────────────────────┐
│                     SQMS No. 1 Framework                    │
│  (Firm establishes policies determining which audits get an │
│   EQR based on risk assessments)                            │
└──────────────────────────────┬──────────────────────────────┘
                               │ Triggers
                               ▼
┌─────────────────────────────────────────────────────────────┐
│                     SQMS No. 2 Execution                    │
│  (Governs who can be appointed, strict objectivity rules,   │
│   review procedures on significant judgments, and sign-off) │
└─────────────────────────────────────────────────────────────┘

---

Criteria for Requiring an EQR

Under SQMS No. 1 and SQMS No. 2, an EQR is not automatically required for every single compilation or routine audit. Instead, an EQR is mandatory under the following circumstances:

1. Mandated by Law or Regulation: When statutes, state accountancy boards, or regulatory agencies explicitly require an independent review (for example, SEC rules requiring engagement quality reviews under PCAOB AS 1220 for public issuers);
2. Firm Policy Based on Quality Risk: The firm must establish policies requiring an EQR for engagements exhibiting elevated quality risk profiles, such as:
   • Audits of Public Interest Entities (PIEs), such as large non-profits, financial institutions, insurance carriers, and municipal entities;
   • Initial audit engagements involving complex operations or restructuring;
   • Entities operating in highly volatile or specialized industries (e.g., biotech, derivatives trading, crypto);
   • Engagements with significant going concern uncertainties or historical financial restatements; or
   • Engagements where unusual circumstances or high fraud risks have been identified.

---

Appointment and Eligibility of the Reviewer

To ensure that the EQR provides a truly objective check, SQMS No. 2 imposes rigorous eligibility requirements on who may serve as the engagement quality reviewer:

1. Independent Appointment

The reviewer must be appointed through the firm's formal quality management process (e.g., by the managing partner, quality director, or technical committee).

The Appointment Rule: SQMS No. 2 requires the firm to assign responsibility for appointing EQ reviewers to individuals with the competence, capabilities, and authority to do so. Firm policies should keep the engagement partner from controlling the choice, because a reviewer picked by the partner faces a threat to objectivity.

2. Competence, Capabilities, and Authority

The reviewer must possess:

• Competence and capabilities, including sufficient time and the technical and industry knowledge needed to evaluate the significant judgments made;
• Sufficient experience to evaluate complex audit areas and challenging accounting estimates; and
• Organizational authority: The reviewer must hold sufficient standing within the firm (or profession) to challenge the engagement partner directly and resolve disputes without fear of career retaliation.

3. Objectivity and Safeguards: The Two-Year Cooling-Off Period

Objectivity is the foundational requirement of SQMS 2. The reviewer cannot maintain relationships or perform actions that impair impartiality:

• No Engagement Team Membership: The reviewer cannot participate in performing the audit, cannot supervise staff, and cannot make decisions for the engagement team.
• The Two-Year Cooling-Off Period: An individual who served as the engagement partner on an audit cannot serve as the engagement quality reviewer for that same engagement until at least two full years have elapsed.

Timeline of Cooling-Off Period Requirement:
Year 1 Audit: Partner Smith is Engagement Partner
Year 2 Audit: Partner Smith rotates off. Partner Jones becomes Engagement Partner.
              Partner Smith CANNOT serve as EQR (Year 1 of cooling off).
Year 3 Audit: Partner Smith CANNOT serve as EQR (Year 2 of cooling off).
Year 4 Audit: Partner Smith is now ELIGIBLE to serve as EQR for this client.

Why Two Years? The two-year break ensures that the former engagement partner is no longer reviewing accounting policies, materiality thresholds, or multi-year risk models that they originally designed and approved, thereby restoring intellectual objectivity.

External Reviewers for Smaller Firms

Sole practitioners and small firms frequently lack a second qualified partner who meets independence and technical criteria. Under SQMS 2, firms may contract an external qualified individual (such as a partner from another CPA firm or an independent technical consultant) to perform the EQR. The firm remains responsible for verifying the external provider's competence and objectivity.

---

Scope and Timing of the EQR

One of the most common misconceptions tested on the CPA exam is the belief that an EQR is a complete re-audit of the engagement files. It is not.

What the EQR Covers: Significant Judgments

The reviewer performs a targeted evaluation focused exclusively on significant matters and significant judgments:

• Risk Assessment: Reviewing the engagement team's assessment of significant risks, including identified fraud risks (AU-C 240) and responses;
• Materiality: Evaluating the determination of materiality, performance materiality, and tolerable misstatement;
• Complex Estimates & Valuations: Scrutinizing management's critical accounting estimates (e.g., fair value measurements, allowance for credit losses, goodwill impairment);
• Uncorrected Misstatements: Reviewing the schedule of accumulated misstatements and evaluating whether uncorrected errors are materially pervasive;
• Consultations & Disagreements: Reviewing documentation of technical consultations held with specialists or national offices and verifying that agreed conclusions were implemented;
• Financial Statements & Report: Reading the draft financial statements, notes, and the proposed auditor's report to evaluate whether the wording is appropriate under the circumstances.

What the EQR Does NOT Do

• The reviewer does not re-perform audit tests or recalculate routine sample schedules;
• The reviewer does not review every workpaper or routine administrative memo; and
• The reviewer does not assume responsibility for the engagement.

Timing: Pre-Issuance Clearance

The EQR is conducted concurrently with the audit during planning, execution, and wrap-up. However, the critical operational rule is:

The Hard Stop on Dating the Report: The engagement partner cannot date the auditor's report until notified by the engagement quality reviewer that the review is complete. If the partner and reviewer disagree, the firm's differences-of-opinion policies must resolve the matter before the report is dated.

---

Comparison Table: Engagement Partner vs. Engagement Quality Reviewer

---

Documentation Requirements for the EQR

Under SQMS No. 2, the engagement quality reviewer must prepare sufficient documentation to enable an experienced auditor to understand the nature, timing, and extent of the review. The EQR workpapers must document:

1. The name of the engagement quality reviewer and any individuals who assisted;
2. Identification of the specific engagement documentation reviewed;
3. Confirmation that the reviewer fulfilled all required review procedures under SQMS 2;
4. Confirmation that the review was completed on or before the date of the auditor's report; and
5. An affirmative statement that the reviewer is not aware of any unresolved matters that would cause the reviewer to believe that the significant judgments made by the engagement team and the conclusions reached were not appropriate.

---

Realistic Exam Scenario: Objectivity Safeguards in Practice

The Situation

David was the lead engagement partner for the audit of Horizon Logistics for four consecutive years (Year 1 through Year 4). In Year 5, David rotated off the audit team to comply with firm policy. Elena, a newly admitted partner, took over as lead engagement partner for the Year 5 audit.

Because Horizon Logistics completed a complex $500 million debt refinancing in Year 5, Elena requested that David serve as the Engagement Quality Reviewer for the Year 5 audit, noting that "David knows the company's debt covenants better than anyone in the firm and can perform the review in half the time."

Analysis Under SQMS No. 2

• Violation of the Cooling-Off Rule: David served as the engagement partner in Year 4. Under SQMS No. 2, David is subject to a strict two-year cooling-off period (covering Years 5 and 6). He is ineligible to serve as the EQR for Horizon Logistics until the Year 7 audit.
• Appointment Concern: Elena (the engagement partner) is steering the choice of reviewer. SQMS No. 2 places appointment with individuals the firm designates, and a partner-selected reviewer creates a threat to objectivity.
• Objectivity Impairment: David's prior involvement would impair his objectivity, as he would be reviewing internal controls and debt baseline valuations that he himself evaluated and approved in prior years.

---

Common Exam Traps & Blueprint Pitfalls

Trap 1: Believing the EQR can sign off after report release. Candidates often confuse the 60-day documentation completion window with EQR timing. An EQR is a pre-issuance quality control. The report cannot be dated until the EQ reviewer notifies the engagement partner that the review is complete.

Trap 2: Assuming the EQR does a complete second audit. An EQR does not re-audit the company. Reviewers focus strictly on significant judgments, high-risk areas, complex estimates, and draft reporting.

Trap 3: Confusing SEC partner rotation with AICPA cooling-off. SEC/PCAOB rules mandate a 5-year lead partner rotation. In contrast, SQMS No. 2 establishes a two-year cooling-off period before an engagement partner can act as the EQR for that same client.

Trap 4: Allowing the engagement partner to resolve disputes unilaterally. If the engagement partner and the EQR disagree on an accounting treatment (e.g., revenue recognition), the partner cannot "override" the EQR. The report cannot be dated until the firm's differences-of-opinion process resolves the matter.