2.4 Professional Ethics, Independence & Professional Skepticism
Key Takeaways
The IESBA International Code of Ethics and INTOSAI Code of Ethics (ISSAI 130) establish five universal fundamental principles: Integrity, Objectivity, Professional Competence and Due Care, Confidentiality, and Professional Behavior.
Independence comprises both Independence of Mind (an unbiased state of mind enabling objective judgment) and Independence in Appearance (avoiding circumstances where a reasonable third party would perceive bias).
The Conceptual Framework approach requires auditors to systematically identify threats to independence, evaluate their significance, and apply safeguards to eliminate or reduce them to an acceptably low level.
The five principal threats to auditor independence are Self-Interest, Self-Review, Advocacy, Familiarity, and Intimidation threats.
Professional skepticism is an attitude characterized by a questioning mind, critical assessment of audit evidence, and alertness to conditions indicating potential misstatement due to error or fraud, without assuming either management dishonesty or unquestioned honesty.
2.4 Professional Ethics, Independence & Professional Skepticism
Public confidence in financial and performance audits depends entirely upon the ethical integrity, demonstrable independence, and professional skepticism of the auditor. If an auditor possesses exceptional technical prowess but lacks independence or objectivity, the resulting audit opinion is worthless. In the context of the European Union, where auditors at the European Court of Auditors (ECA) and the Internal Audit Service (IAS) scrutinize billions of euros in public spending, adhering to the highest ethical benchmarks is a statutory obligation.
1. Ethical Frameworks: IESBA Code and ISSAI 130
Professional ethics in auditing are codified across two complementary international frameworks:
- The IESBA International Code of Ethics for Professional Accountants: Issued by the International Ethics Standards Board for Accountants (IESBA), this code establishes global ethical requirements, including the International Independence Standards, applied across both private practice and public sector organizations.
- INTOSAI Code of Ethics (ISSAI 130): Specifically designed for Supreme Audit Institutions, ISSAI 130 builds upon the IESBA tenets while incorporating unique public sector imperatives, including political neutrality, constitutional stewardship of public funds, and heightened public interest accountability.
2. The Five Fundamental Ethical Principles
Both the IESBA Code and ISSAI 130 mandate adherence to five fundamental principles of professional ethics:
- Integrity: The obligation to be straightforward, honest, fair, and truthful in all professional and business relationships. Integrity implies fair dealing and truthfulness; an auditor must not be associated with reports, returns, communications, or other information where they believe the information contains materially false or misleading statements.
- Objectivity: The obligation not to compromise professional or audit judgment because of bias, conflict of interest, or undue influence of others. The auditor must assess all evidence impartially, without preconceptions or external pressures.
- Professional Competence and Due Care: The ongoing commitment to attain and maintain professional knowledge and skill at the level required to ensure that clients or employers receive competent professional service. Due care requires acting diligently in accordance with applicable technical and professional standards.
- Confidentiality: The duty to respect the confidentiality of information acquired as a result of professional relationships. The auditor must not disclose confidential information outside the audit institution without proper and specific authority, unless there is a legal or professional right or duty to disclose, nor use such information for personal advantage or the advantage of third parties.
- Professional Behavior: The obligation to comply with relevant statutory laws and regulations, avoid any conduct that the auditor knows or should know might discredit the profession, and conduct oneself with dignity and courtesy.
3. Independence: The Two Essential Dimensions
Independence is not merely an ethical virtue; it is the operational prerequisite for delivering objective assurance. True independence encompasses two distinct dimensions:
- Independence of Mind: The state of mind that permits the expression of a conclusion without being affected by influences that compromise professional judgment, thereby allowing an individual to act with integrity, and exercise objectivity and professional skepticism. It is an internal, cognitive state of genuine impartiality.
- Independence in Appearance: The avoidance of facts and circumstances that are so significant that a reasonable and informed third party, weighing all the specific facts and circumstances available at the time, would be likely to conclude that an audit institution's or an audit team member's integrity, objectivity, or professional skepticism has been compromised.
An auditor may be completely unbiased in their personal thoughts (possessing independence of mind), but if they are auditing an entity run by an immediate family member, they violate independence in appearance and must recuse themselves.
4. The Conceptual Framework: Five Threats to Independence
The IESBA Code and ISSAI 130 mandate a conceptual framework approach requiring the auditor to:
- Identify threats to compliance with the fundamental principles.
- Evaluate the significance of the identified threats.
- Address the threats by eliminating them or applying safeguards to reduce them to an acceptably low level. If acceptable safeguards cannot be implemented, the auditor must decline or terminate the engagement.
| Threat Category | Nature of the Threat | Realistic Public Sector Example | Appropriate Safeguard |
|---|---|---|---|
| Self-Interest Threat | Financial or other personal interests improperly influencing judgment | An auditor owns shares in a defense contractor bidding on an EU procurement project under audit | Mandatory disqualification; divestment of financial holdings before audit participation |
| Self-Review Threat | Evaluating the results of a previous judgment or service provided by the auditor | An auditor evaluates an IT grant management portal that they helped design during an earlier advisory assignment | Excluding the individual from the audit team; performing an independent secondary review |
| Advocacy Threat | Promoting an auditee's or client's position to the point of compromising objectivity | An auditor publicly lobbies Member State officials to defend a controversial DG spending policy | Prohibiting public advocacy; enforcing strict institutional media protocols |
| Familiarity Threat | Becoming too sympathetic or trusting due to a long or close relationship | An audit lead has audited the exact same regional agricultural agency for eight consecutive years | Rotation where required by the governing policy; independent quality review and other threat-specific safeguards |
| Intimidation Threat | Being deterred from acting objectively by actual or perceived pressures or threats | A high-ranking ministry official threatens to lobby for budget cuts against the SAI if critical findings are published | Statutory constitutional tenure; reporting directly to parliament; multi-person collegiate signoff |
5. Safeguards in Public Sector Auditing
Public sector audit institutions implement robust institutional safeguards to counter ethical threats:
- Statutory Protections: Members of the European Court of Auditors are appointed for six-year terms with legal protection for independence, subject to the appointment and removal rules in the governing framework, neutralizing intimidation threats.
- Rotation and assignment safeguards: Apply rotation, consultation or independent review when required by the governing rules and proportionate to the identified threat.
- Cooling-off and recusal: Apply the restrictions, recusal periods or safeguards required by the governing ethics and employment rules; there is no universal period for every public-sector auditor.
- Ethics Committees & Transparency Registers: The ECA and the Commission maintain dedicated ethics advisory bodies, mandatory annual declarations of financial and external interests, and strict gifts and hospitality bans.
6. Professional Skepticism in Practice
Under ISA 200 and ISSAI 100, professional skepticism is defined as:
"An attitude that includes a questioning mind, being alert to conditions which may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence."
Professional skepticism must be distinguished from both gullibility and cynicism:
- It does not mean assuming management is fraudulent or dishonest without evidence.
- It does not mean accepting management assertions, representations, or oral assurances at face value.
Operational Applications of Professional Skepticism
In practice, an auditor demonstrates professional skepticism by:
- Questioning Contradictory Evidence: If electronic procurement timestamps contradict warehouse receiving logs, the auditor actively investigates the discrepancy rather than assuming a clerical error.
- Scrutinizing Management Estimates: Critically testing the economic assumptions, discount rates, and historical recovery rates used by management to establish project impairment provisions.
- Evaluating Document Authenticity: Remaining vigilant regarding indicators of alteration, backdating, unusual email formatting, or missing formal approvals on high-value contracts.
- Challenging Unusual Transactions: Probing high-value payments executed immediately prior to the budgetary year-end close (the classic "December spending rush").
What is the critical distinction between Independence of Mind and Independence in Appearance as defined by the IESBA Code and ISSAI 130?
Independence of mind applies exclusively to junior team members, whereas independence in appearance applies only to audit partners
Independence of mind concerns financial investments, whereas independence in appearance relates exclusively to political party membership
Independence of mind is a statutory legal requirement, whereas independence in appearance is merely an optional best practice
Independence of mind is the internal state of genuine cognitive impartiality, whereas independence in appearance requires avoiding circumstances that would lead a reasonable and informed third party to conclude objectivity is compromised
An auditor at a Supreme Audit Institution is assigned to lead a compliance audit of an agency's grant management system. Two years prior, the same auditor served as an external IT consultant who designed the internal control architecture of that exact system. Which threat to independence is directly triggered?
Self-review threat
Advocacy threat
Familiarity threat
Intimidation threat
How is professional skepticism defined and operationalized under ISA 200 and ISSAI 100?
An unyielding assumption that all management representations are fraudulent until proven legitimate in a court of law
An attitude characterized by a questioning mind, critical assessment of audit evidence, and alertness to conditions that may indicate misstatement due to error or fraud
A passive acceptance of management documents provided they carry official administrative stamps and signatures
A forensic investigation technique used only after formal criminal indictments are issued by public prosecutors
Which of the following represents an effective institutional safeguard specifically designed to counter familiarity threats in recurring public sector audit engagements?
Permitting the audited entity to directly select the members of the incoming audit team
Requiring the audit team to conduct all interviews offsite without inspecting operational facilities
Applying the rotation, consultation or independent-review safeguards required by the governing ethics rules and proportionate to the identified threat
Exempting long-tenured audit teams from documenting their working papers and audit conclusions
Sections you finish are checked off in the contents.