Auditing Implications of the War in Ukraine – Part 1

Auditing Implications of the War in Ukraine – Part 1

Auditors in Ireland would be forgiven for thinking that, apart from rising fuel costs, the war in Ukraine is far away and has few audit implications. This blog is attempting to highlight the requirement in recent changes to the audit standards for auditors to ‘stand back’, frequently mentioned by the Financial Reporting Council in recent publications.

In this case, while your audit clients may not have direct connections with Ukraine or with sanctions against Russia, there may be relationships through clients’ supply chains, clients’ customer base and clients’ overseas subcontractors that leave the business exposed to a potential negative impact – even as simple as the shortage of raw materials (E.G. VW group) and its wider implications for the European economy.

The war in Ukraine is evolving rapidly, as is the reaction by the Irish government and its international counterparts with sanctions against Russia. In this blog we take a look at some of the key implications that may impact on the work of auditors.

Auditor’s Risk Assessment (ISA 315) – the ISAs (Ireland) still apply. The risk assessment will need to reflect changes within the audited entity’s business and operating environment and whether there are any new risks, significant or otherwise such as business interruption that may impact the entity’s ability to continue as a going concern. This may drive additional disclosures about the impact of the war, changes to forecasts, future plans, or even the entity’s business model or strategy.

Groups – The situation may also impact on group audits and collecting audit evidence (ISA 500).

Sanctions and AML – accountants are urged to look hard at any connections with Russia among their client base and perform updated due diligence, thinking more about the spirit of the law and not just the letter of the law. Accountants are re-screening clients, looking at sanction lists beyond the EU, and considering clients with Russian connections where they do not appear on sanctions lists.

We will take a look at further audit implications of the war in the Ukraine, in next week’s blog.

Are your AML Policies Controls & Procedures up to date?

We have just released our latest Anti-Money Laundering Policies Controls & Procedures Manual (March 2022) – View the Table of Contents click here.

We have also just released an updated AML webinar (March 2022) available here, which accompanies the AML Manual. It explains the current legal AML reporting position for accountancy firms.

To ensure your letters of engagement and similar templates are up to date visit our site here where immediate downloads are available in Word format. A bulk discount is available for orders of five or more items if bought together.

For our latest Audit Quality Control Manual (October 2021) (implementing the latest Irish Audit & Accounting Supervisory Authority standards including ISQC1 on audit quality control) click here. View the Table of Contents here.

Offshore Bank Accounts

Offshore Bank Accounts

Here we look at a potential money laundering scenario that can arise in practice. You have been filing income tax returns for your client for many years. Just last week your client has volunteered a confession that she has been keeping money offshore in a Panamanian bank account, the existence of which has never been declared on her tax returns.

Normally tax evasion is a reportable money laundering offence. Is there something different that may apply here?

Section 46 (1) of the 2010 Act states that disclosure of information which is subject to legal privilege is not required. Known as the ‘privilege circumstances exemption’, ‘relevant professional advisers’ (defined as accountant, auditor or tax adviser who is a member of a designated accountancy body or of the Irish Institute of Taxation) may, in the course of their work, receive information and documents that are subject to legal privilege, e.g. when engaged by a legal professional to carry out work on behalf of a client or when approached directly by a client to deal with previously undeclared taxes. If Section 46 applies in these circumstances, no money laundering report needs to be filed.

Given the complexity of these matters – as well as the need for a considered and consistent approach to all decisions, supported by adequate documentation – it is recommended that they are always discussed with the MLRO and legal/professional advice is obtained in writing.

The reporting exemption is unlikely to apply if the existence of the Panamanian bank account came to light in the course of your work and was not initially volunteered by the client or if the client subsequently refuses to go ahead and file/pay the relevant taxes, having had your professional advice. then Section 46 will fall away and a money laundering suspicious transaction report (STR) will need to be filed by the MLRO.

More guidance on this topic is available in Part 7.4 of the recent CCAB-I Guidance called Technical Release 01-2019 (Updated March 2022).

Accountants should also consult the Code of Ethics (ACCA, CPA Ireland, Chartered Accountants Ireland) of their respective professional bodies for the implications of the lack of integrity of their client and consider the implications of withdrawing from the assignment. Withdrawal from the engagement and the professional relationship is not a substitute for taking other actions that might be needed to achieve the professional accountant’s objectives. Again obtaining professional and legal advice is a good idea.’

Are your AML Policies Controls & Procedures up to date?

We have just released our latest Anti-Money Laundering Policies Controls & Procedures Manual (March 2022) – View the Table of Contents click here.

We have also just released an updated AML webinar (March 2022) available here, which accompanies the AML Manual. It explains the current legal AML reporting position for accountancy firms.

To ensure your letters of engagement and similar templates are up to date visit our site here where immediate downloads are available in Word format. A bulk discount is available for orders of five or more items if bought together.

For our latest Audit Quality Control Manual (October 2021) (implementing the latest Irish Audit & Accounting Supervisory Authority standards including ISQC1 on audit quality control) click here. View the Table of Contents here.

Is your AML Firm-Wide Risk Assessment up to Date?

Is your AML Firm-Wide Risk Assessment up to Date?

As far as accountancy firms go, there is a requirement for each firm to prepare an anti-money laundering (AML) written risk assessment (known as the firm-wide or business risk assessment) examining the business/practice in five key areas (more on this below). The legislation that brought this into place is section 30A of the Criminal Justice (Money Laundering and Terrorist Financing) (Amendment) Act, 2018, which became effective on 26 November 2018. The various professional bodies are examining these risk assessments in their recent practice inspections.

The risk assessment must be kept up to date but there is little clarification in the legislation about ‘what up to date’ means. If your practice has essentially not changed in structure/number of offices or the services it offers since you prepared your first risk assessment in 2018, now is a good time to give it a brief refresh. If there have been more fundamental changes, including new Partners/services, then a more detailed refresh is required.

More guidance on this topic has been prepared by the Consultative Committee of Accountancy BodiesIreland (CCAB-I) and is available here as CAI Technical Release 01/2019.  The five key areas that must receive attention in the document are:

  • clients – locally based are generally less risky than overseas clients;
  • the products and services provided – bookkeeping is generally less risky than liquidation work;
  • the countries the clients operate in – clients based in sanctioned territories, or Irish clients doing business with such countries are usually prone to more money laundering (ML) risk;
  • the transactions the firm is involved in – decision making on behalf of clients is usually a higher trigger point for risk; and
  • the delivery channels – with remote delivery seen as more prone to ML risk.

There will sometimes be overlap between these risk factors, and this is explained in more detail in the guidance and in the template available below.

A template to help you prepare the Firm-Wide Business Risk Assessment is available here for €60+VAT for immediate download in word format.

For more blogs please visit this link and for our publications and manuals and services click here.

More than a decade on: why is AML still an issue?

More than a decade on: why is AML still an issue?

It would seem fair to assume that after eleven years the profession has got to grips with the anti-money laundering (AML) regulations. However they remain one of the key problem areas encountered on regulatory inspections.

Perhaps the obvious reason for failing to focus on AML procedures is that firms can’t raise a fee note for such work. Some view AML as an unwelcome and onerous regulation that puts barriers in the way of helping clients, and adds no value. Consequently, some firms give scant attention to AML procedures.

However, AML regulations are a global reality, one that firms have to get to grips with. If you establish appropriate procedures, they do not need to be regarded as onerous.

Long-established clients

There was an exemption in the implementation of the Criminal Justice Act, 1994 (that came into effect for accountancy firms in the Republic of Ireland from 15 September, 2003) that meant that customer due diligence (ID checks) were not required for clients in place at that date. However, the subsequent 2010 legislation removed that same exemption. A further piece of legislation called the Criminal Justice Act, 2013 updates certain parts of the 2010 law.

The 2010 law, called the ‘Criminal Justice (Money Laundering and Terrorist Financing) Act, 2010’, came into effect from 15 July 2010 and abolished the 1994 law while it re-implemented most of its requirements and added others.  Firms should now therefore have due diligence for every client and retain that documentation for at least five years after the last business transaction with that client. See the latest guidance from the professional accountancy bodies at the Consultative Committee of Accountancy Bodies – Ireland, (CAAB-I), ‘ Anti-Money Laundering Procedures Republic of Ireland’ dated September 2010. (http://www.cmf.ie/picts/Anti-Money%20laundering%20procedures%20ROI.pdf)

In many cases firms will have documentation that will satisfy the due diligence requirements (e.g. a Revenue Commissioners tax demand or Department of Social Protection correspondence and details of a client’s personal bank statement or pension scheme). If this is not the case simply ask to see your client’s photo-driving licence and take a copy, or use some other form of electronic verification to get the evidence you need, using sources like C6 (http://www.c6-intelligence.com/) or Veriphy  (http://www.veriphy.co.uk/), provided the client is assessed as ‘low’ risk. Politically Exposed Persons (PEPs) as defined in the legislation (which includes relatives and business associates of such persons) must be specifically identified and treated as high risk, which means additional evidence and explanations must be documented about their financial transactions and sources of wealth. Legislation is expected in 2015 to expand the definition of PEPs to include locally resident persons who are politically exposed.

Risk assessment

The customer due diligence procedures should be risk-based. While most firms complete some form of risk assessment, many go on to ignore it with regards to the amount of AML checking they undertake. This often leads to excessive checking for some clients and insufficient checking for others. Forms need to be completed to document the risk assessment and evidence gathering process and to show its subsequent regular review and action taken, following review.

 

Beneficial ownership

For most clients, this is not an issue as their structure is simple and ownership is clear. However, it can be a major issue when you have structures involving anonymity, such as trusts or companies in Panama, Delaware BVI and Cayman Islands, or other offshore as well as some onshore territories using ‘bearer shares’ (the latter regarded as ‘high’ risk).

The legislation requires any client using anonymous structures or clients that you have not met face to face, to be treated as high risk. You must have the same level of identification for high risk beneficial shareholders as you do for the client’s principals/directors. Without evidence to support this beneficial ownership you cannot act and continuing to do so may lead not only to breach of the legislation but also to unnecessary professional indemnity risks.

Keeping information up to date

Often firms might have done a blitz when the new laws first came in, in 2003 or 2010, but have done little since. You must regularly review the evidence you have to confirm that it is still accurate and up to date. If there have been changes in ownership, the principals or the nature of the business then you must update your records. If everything is still valid, no updates are necessary.

Training

The regulations require staff to receive training and evidence must be retained that the staff have understood the training (so some form of written quiz is necessary). This should form part of your induction programme for all new staff. You also have to provide ongoing training to staff in recognising and dealing with suspicious transactions and keep records of these regular updates and the names of staff attending.

Conclusion

AML regulations are here to stay and failure to comply can have regulatory consequences. Therefore, it makes sense to implement procedures to ensure compliance, but with the minimum effort required.

 

For more information contact John at 00 353 86 839 8360 or at john@jmcc.ie