(Ref: Para. Aus 0.1)

Reference to “subject matters” in this ASRS encompasses anything on which agreed-upon procedures are performed, including information, documents, measurements or compliance with laws and regulations, as relevant.

Examples of financial and non-financial subject matters on which an agreed-upon procedures engagement may be performed include:

• Financial subject matters relating to:
  • The entity’s financial report or specific classes of transactions, account balances or disclosures within the financial report.
  • Eligibility of expenditures claimed from a funding program.
  • Revenues for determining royalties, rent or franchise fees based on a percentage of revenues.
  • Capital adequacy ratios for regulatory authorities.
• Non-financial subject matters relating to:
  • Numbers of passengers reported to a civil aviation authority.
  • Observation of destruction of fake or defective goods reported to a regulatory authority.
  • Data generating processes for lottery draws reported to a regulatory authority.
  • Volume of greenhouse gas emissions reported to a regulatory authority.

The above list is not exhaustive. Additional types of subject matters may arise as external reporting demands evolve.

Relationship with ASQMs  (Ref: Para. Aus 3.1)

ASQM 1 deals with the firm’s responsibilities to design, implement and operate a system of quality management for related services engagements, including agreed-upon procedures engagements.^[4] ASQM 1 also deals with the firm’s responsibility to establish policies or procedures addressing engagements that are required to be subject to engagement quality reviews^[5]. ASQM 2 deals with the appointment and eligibility of the engagement quality reviewer, and the performance and documentation of the engagement quality review.^[6]

Under ASQM 1, the objective of the firm is to design, implement and operate a system of quality management for related services engagements, including agreed-upon procedures engagements, that provides the firm with reasonable assurance that:

1. The firm and its personnel fulfill their responsibilities in accordance with professional standards and applicable legal and regulatory requirements, and conduct engagements in accordance with such standards and requirements; and
2. Engagement reports issued by the firm or engagement partners are appropriate in the circumstances.^[7]

A jurisdiction that has not adopted ASQM 1 in relation to agreed-upon procedures engagements may set out requirements for quality management in firms performing such engagements. The provisions of this ASRS regarding quality management at the engagement level are premised on the basis that quality management requirements adopted are at least as demanding as those of ASQM 1. This is achieved when those requirements address the requirements of ASQM 1 and impose obligations on the firm that achieve the objective of ASQM 1. Compliance with ASQM 1 requires, among other things, that the firm’s system of quality management addresses the following eight components:^[8]

• The firm's risk assessment process;
• Governance and leadership;
• Relevant ethical requirements;
• Acceptance and continuance of client relationships and agreed-upon procedures engagements;
• Engagement performance;
• Resources;
• Information and communication; and
• The monitoring and remediation process.

Within the context of the firm’s system of quality management, engagement teams have a responsibility to implement policies or procedures applicable to the engagement.

Ordinarily, the engagement team may depend on the firm’s system of quality management unless:

• The engagement team’s understanding or practical experience indicates that the firm’s policies or procedures will not effectively address the nature and circumstances of the engagement; or
• Information provided by the firm or other parties, about the effectiveness of such policies or procedures suggests otherwise.

For example, the engagement team may depend on the firm’s system of quality management in relation to:

• Competence and capabilities of personnel through their recruitment and formal training.
• Maintenance of client relationships through the firm's policies or procedures for acceptance and continuance of client relationships and agreed-upon procedures engagements.
• Adherence to legal and regulatory requirements through the firm's monitoring and remediation process.

In considering deficiencies^[9] identified in the firm’s system of quality management that may affect the agreed-upon procedures engagement, the engagement partner may consider the remedial actions undertaken by the firm to address those deficiencies that the engagement partner considers are sufficient in the context of that agreed-upon procedures engagement.

A deficiency in the firm’s system of quality management does not necessarily indicate that an agreed-upon procedures engagement was not performed in accordance with professional standards and applicable legal and regulatory requirements, or that the agreed-upon procedures report was not appropriate.

(Ref: Para. Aus. 0.2)

For terms of engagement covering multiple years, practitioners may wish to update the terms of engagement so that the agreed-upon procedures engagements will be conducted in accordance with this ASRS on or after the operative date.

Engaging Party and Other Intended Users (Ref: Para. 13(a), 13(b), 13(d), 13(g), 24(f)(i), 24(g), 30(e)(i), 30(e)(iii))

In some circumstances, the procedures may be agreed with intended users in addition to the engaging party. Intended users other than the engaging party may also acknowledge the appropriateness of the procedures.

The engaging party may be, under different circumstances, the responsible party, a regulator or other intended user. References to the engaging party in this ASRS include multiple engaging parties when relevant.

Findings (Ref: Para. 13(f))

Findings are capable of being objectively verified, which means that different practitioners performing the same procedures are expected to arrive at equivalent results. Findings exclude the expression of an opinion or a conclusion as well as any recommendations that the practitioner may make.

Practitioners may use the term “factual findings” in place of “findings”, for example, in cases when the practitioner is concerned that the term “findings” may be misunderstood. This may be the case in jurisdictions or languages where the term “findings” may be understood as including results that are not factual.

(Ref: Para. 17)

Objectivity and Independence

A practitioner performing an agreed-upon procedures engagement is required to comply with relevant ethical requirements. Relevant ethical requirements ordinarily comprise the APESB Code, together with national requirements that are more restrictive. The APESB Code requires practitioners to comply with fundamental principles including objectivity, which requires practitioners not to compromise their professional or business judgement because of bias, conflict of interest or the undue influence of others. Accordingly, relevant ethical requirements to which the practitioner is subject would, at a minimum, require the practitioner to be objective when performing an agreed-upon procedures engagement.

The APESB Code does not contain independence requirements for agreed-upon procedures engagements. However, national ethical codes, laws or regulations, other professional requirements, or conditions of a contract, program, or arrangement relating to the subject matter for the agreed-upon procedures engagement may specify requirements pertaining to independence.

Non-Compliance with Laws and Regulations^[10]

Law, regulation or relevant ethical requirements may:

1. Require the practitioner to report identified or suspected non-compliance with laws and regulations to an appropriate authority outside the entity.
2. Establish responsibilities under which reporting to an appropriate authority outside the entity may be appropriate in the circumstances.^[11]

Reporting identified or suspected non-compliance with laws and regulations to an appropriate authority outside the entity may be required or appropriate in the circumstances because:

1. Law, regulation or relevant ethical requirements require the practitioner to report;
2. The practitioner has determined reporting is an appropriate action to respond to identified or suspected non-compliance in accordance with relevant ethical requirements; or
3. Law, regulation or relevant ethical requirements provide the practitioner with the right to do so.

The practitioner is not expected to have a level of understanding of laws and regulations beyond that necessary to be able to perform the agreed-upon procedures engagement. However, law, regulation or relevant ethical requirements may expect the practitioner to apply knowledge, professional judgement and expertise in responding to identified or suspected non-compliance. Whether an act constitutes actual non-compliance is ultimately a matter to be determined by a court or other appropriate adjudicative body.

In some circumstances, the reporting of identified or suspected non-compliance with laws and regulations to an appropriate authority outside the entity may be precluded by the practitioner’s duty of confidentiality under law, regulation or relevant ethical requirements. In other cases, reporting identified or suspected non-compliance to an appropriate authority outside the entity would not be considered a breach of the duty of confidentiality under the relevant ethical requirements.^[12]

The practitioner may consider consulting internally (e.g., within the firm or network firm), obtaining legal advice to understand the professional or legal implications of taking any particular course of action, or consulting on a confidential basis with a regulator or a professional body (unless doing so is prohibited by law or regulations or would breach the duty of confidentiality).^[13]

(Ref: Para. 18)

Professional judgement is exercised in applying the requirements of this ASRS and relevant ethical requirements, and in making informed decisions about courses of action throughout the agreed-upon procedures engagement, as appropriate.

In accepting, conducting and reporting on an agreed-upon procedures engagement, professional judgement is exercised, for example, in:

Accepting the engagement

• Discussing and agreeing with the engaging party (and if relevant, other parties) the nature, timing and extent of the procedures to be performed (taking into account the purpose of the engagement).
• Determining whether engagement acceptance and continuance conditions have been met.
• Determining the resources necessary to carry out the procedures as agreed in the terms of the engagement, including the need to involve a practitioner’s expert.
• Determining appropriate actions if the practitioner becomes aware of facts or circumstances suggesting that the procedures to which the practitioner is being asked to agree are inappropriate for the purpose of the agreed-upon procedures engagement.

Conducting the engagement

• Determining appropriate actions or responses if, when performing the agreed-upon procedures, the practitioner becomes aware of:
  • Matters that may indicate fraud or an instance of non-compliance or suspected non-compliance with laws or regulations.
  • Other matters that cast doubt on the integrity of the information relevant to the agreed-upon procedures engagement or that indicate that the information may be misleading.
  • Procedures that cannot be performed as agreed.

Reporting on the engagement

• Describing the findings in an objective manner and in sufficient detail, including when exceptions are found.

In conducting the agreed-upon procedures engagement, the need for the practitioner to exercise professional judgement when performing the agreed-upon procedures is limited for reasons including:

• An agreed-upon procedures engagement involves the performance of procedures that have been agreed upon by the practitioner and the engaging party, where the engaging party has acknowledged that the procedures performed are appropriate for the purpose of the engagement.
• The agreed-upon procedures and the findings that result from performing those procedures are capable of being described objectively, in terms that are clear, not misleading, and not subject to varying interpretations.
• The findings are capable of being objectively verified, which means that different practitioners performing the same procedures are expected to arrive at equivalent results.

(Ref: Para. 19–20)

The actions of the engagement partner and appropriate messages to the other members of the engagement team, in taking overall responsibility for managing and achieving quality on each engagement, emphasise the importance to achieving the quality of the engagement of:

1. Performing work that complies with professional standards and regulatory and legal requirements;
2. Complying with the firm’s policies or procedures as applicable; and
3. Issuing the practitioner’s report for the engagement in accordance with this ASRS.

ASQM 1 requires the firm to establish quality objectives dealing with the appropriateness of its judgements about whether to accept or continue a client relationship or engagement based on information obtained about the nature and circumstances of the agreed-upon procedures engagement and the integrity and ethical values of the client (including management, and, when appropriate, those charged with governance) that is sufficient to support such judgements. If the engagement partner has cause to doubt management’s integrity to a degree that is likely to affect proper performance of the engagement, it may not be appropriate to accept the engagement.

ASQM 1 sets out the responsibilities of the firm for establishing quality objectives that address the fulfillment of responsibilities in relation to relevant ethical requirements. This ASRS sets out the engagement partner’s responsibilities with respect to the engagement team’s compliance with relevant ethical requirements.^[14]

If the practitioner is unable to meet the requirement in paragraph 20, it may be appropriate for the practitioner to agree with the engaging party to limit the scope of the agreed-upon procedures engagement to procedures for which the practitioner can appropriately take responsibility. The engaging party may separately engage an expert to perform the other procedures.

(Ref: Para. 21–23)

In obtaining an understanding of the purpose of the agreed-upon procedures engagement, the practitioner may become aware of indications that the procedures the practitioner is asked to perform are inappropriate for the purpose of the agreed-upon procedures engagement. For example, the practitioner may be aware of facts or circumstances that indicate:

• The procedures are selected in a manner intended to bias the intended users’ decision-making.
• The subject matter on which the agreed-upon procedures are performed is unreliable.
• An assurance engagement or advisory service may better serve the needs of the engaging party or other intended users.

Other actions that may satisfy the practitioner that the conditions in paragraphs 21 and 22 are met include:

• Comparing the procedures to be performed with written requirements set out, for example, in law or regulation, or in a contractual agreement (sometimes referred to as the “Terms of Reference”), where appropriate.
• Requesting the engaging party to:
  • Distribute a copy of the anticipated procedures and the form and content of the agreed-upon procedures report as set out in the terms of engagement to the intended user(s).
  • Obtain acknowledgement from the intended user(s) of the procedures to be performed.
  • Discuss the procedures to be performed with appropriate representatives of the intended user(s).
• Reading correspondence between the engaging party and other intended user(s) if the engaging party is not the only intended user.

If the conditions in paragraphs 21 and 22 are not met, it is unlikely that an agreed-upon procedures engagement is able to meet the needs of the engaging party or other intended users. In such circumstances, the practitioner may suggest other services, such as an assurance engagement, that may be more appropriate.

All the conditions in paragraphs 21 and 22 also apply to procedures that have been added or modified during the course of the engagement.

Descriptions of Agreed-Upon Procedures and Findings (Ref: Para. 22 (c))

The procedures to be performed during the agreed-upon procedures engagement may be prescribed by law or regulation. In some circumstances, law or regulation may also prescribe the way the procedures or findings are to be described in the agreed-upon procedures report. As set out in paragraph 22(c), a condition of accepting an agreed-upon procedures engagement is that the practitioner has determined that the agreed-upon procedures and findings can be described objectively, in terms that are clear, not misleading, and not subject to varying interpretations.

Agreed-upon procedures are described objectively, in terms that are clear, not misleading, and not subject to varying interpretations. This means that they are described at a level of specificity sufficient for an intended user to understand the nature and extent and if applicable, the timing, of the procedures performed. It is important to recognise that any term could potentially be used in an unclear or misleading manner, depending on context or the absence thereof. Assuming that the terms are appropriate in the context in which they are used, examples of descriptions of actions that may be acceptable include:

• Confirm.
• Compare.
• Agree.
• Trace.
• Inspect.
• Enquire.
• Recalculate.
• Observe.

Terms that may be unclear, misleading, or subject to varying interpretations depending on the context in which they are used, may include, for example:

• Terms that are associated with assurance under the AUASB’s Standards such as “present fairly” or “true and fair,” “audit,” “review,” “assurance,” “opinion,” or “conclusion.”
• Terms that imply expression of an assurance opinion or conclusion such as “we certify,” “we verify,” “we have ascertained” or “we have ensured” with regard to the findings.
• Unclear or vague phrases such as “we obtained all the explanations and performed such procedures as we considered necessary.”
• Terms that are subject to varying interpretations such as “material” or “significant.”
• Imprecise descriptions of procedures such as “discuss,” “evaluate,” “test,” “analyse” or “examine” without specifying the nature and extent, and if applicable, the timing, of the procedures to be performed. For example, using the word “discuss” may be imprecise without specifying with whom the discussion is held or the specific questions asked.
• Terms that suggest that the findings do not reflect factual results such as “in our view,” “from our perspective” or “we take the position that.”

For example, a procedure such as “review cost allocations to determine if they are reasonable” is unlikely to meet the condition for terms to be clear, not misleading, or not subject to varying interpretations because:

• The term “review” may be misinterpreted by some users to mean that the cost allocation was the subject of a limited assurance engagement even though no such assurance is intended by the procedure.
• The term “reasonable” is subject to varying interpretations as to what constitutes “reasonable.”

In circumstances when law or regulation specifies a procedure or describes a procedure using terms that are unclear, misleading, or subject to varying interpretations, the practitioner may satisfy the condition in paragraph 22(c) by, for example, requesting the engaging party to:

• Modify the procedure or the description of the procedure so that it is no longer unclear, misleading, or subject to varying interpretations.
• If a term that is unclear, misleading or subject to varying interpretations cannot be amended, for example because of law or regulation, include a definition of the term in the agreed-upon procedures report.

Compliance with Independence Requirements (Ref: Para. 22(e), 24(e))

Paragraph 22(e) applies when the practitioner is required to comply with independence requirements for reasons such as those set out in paragraph A15. Paragraph 22(e) also applies when the practitioner agrees with the engaging party, in the terms of engagement, to comply with independence requirements. For example, the practitioner may have initially determined that the practitioner is not required by relevant ethical requirements, law or regulation, or other reasons to comply with independence requirements. However, when considering acceptance and continuance of the engagement or agreeing the terms of engagement, the practitioner’s knowledge of the following matters may indicate that a discussion with the engaging party as to whether compliance with certain identified independence requirements is appropriate for the purpose of the agreed-upon procedures engagement:

• The purpose of the agreed-upon procedures engagement;
• The identity of the engaging party, other intended users and responsible party (if different from the engaging party);
• The nature, timing and extent of the procedures to be performed; or
• Other engagements that the practitioner is performing or has performed for the engaging party, other intended users or the responsible party (if different from the engaging party).

The practitioner may be the auditor of the financial report of the engaging party (or responsible party if different from the engaging party). In such a circumstance, if the practitioner is also engaged to conduct an agreed-upon procedures engagement, intended users of the agreed-upon procedures report may assume that the practitioner is independent for the purpose of the agreed-upon procedures engagement. Therefore, the practitioner may agree with the engaging party that the practitioner’s compliance with the independence requirements applicable to audits of financial report is appropriate for the purpose of the agreed-upon procedures engagement. In such a case, a statement that the practitioner is required to comply with such independence requirements is included in the terms of the engagement, in accordance with paragraph 24(e).

(Ref: Para. 24–25)

[Deleted by the AUASB .  Refer Aus A39.1]

When relevant, additional matters may be included in the engagement letter, for example:

• Arrangements concerning the involvement of a practitioner’s expert in some aspects of the agreed-upon procedures engagement.
• Any restrictions on the distribution of the agreed-upon procedures report.

An illustrative engagement letter for an agreed-upon procedures engagement is set out in Appendix 1.

The practitioner may agree with the engaging party that the procedures to be performed will include quantitative thresholds for determining exceptions. If so, these quantitative thresholds are included in the descriptions of the procedures in the terms of the engagement.

In some circumstances, law or regulation may prescribe only the nature of the procedures to be performed. In such circumstances, in accordance with paragraph 24(i), the practitioner agrees the timing and extent of procedures to be performed with the engaging party so that the engaging party has a basis to acknowledge that the procedures to be performed are appropriate for the purpose of the engagement.

In some circumstances, agreeing the terms of engagement and performing the agreed-upon procedures takes place in a linear and discrete manner. In other circumstances, agreeing the terms of engagement and performing the agreed-upon procedures is an iterative process, with changes to the agreed-upon procedures being agreed as the engagement progresses in response to new information coming to light. If procedures that have been previously agreed upon need to be modified, paragraph 25 requires the practitioner to agree the amended terms of engagement with the engaging party. The amended terms of engagement may, for example, take the form of an updated engagement letter, an addendum to an existing engagement letter, or other form of written acknowledgement.

Recurring Engagements (Ref: Para. 26)

The practitioner may decide not to send a new engagement letter or other written agreement for a recurring engagement. However, the following factors may indicate that it is appropriate to revise the terms of the engagement, or to remind the engaging party of the existing terms of the engagement:

• Any indication that the engaging party misunderstands the purpose of the agreed-upon procedures engagement or the nature, timing or extent of the agreed-upon procedures.
• Any revised or special terms of the engagement, including any changes in the previously agreed-upon procedures.
• A change in legal, regulatory or contractual requirements affecting the engagement.
• A change in management or those charged with governance of the engaging party.

(Ref: Para. 28)

The practitioner may decide to request written representations in some circumstances, for example:

• If the agreed-upon procedures involve enquiries, the practitioner may request written representations on the responses that have been provided verbally.
• If the engaging party is not the responsible party, the practitioner may agree with the engaging party to include, as an agreed-upon procedure, requests for written representations from the responsible party.

(Ref: Para. 29)

Using the work of a practitioner’s expert may involve the use of an expert to assist the practitioner in:

• Discussing with the engaging party the agreed-upon procedures to be performed. For example, a lawyer may provide suggestions to the practitioner on the design of a procedure to address legal aspects of a contract; or
• Performing one or more of the agreed-upon procedure(s). For example, a chemist may perform one of the agreed-upon procedures such as determining the toxin levels in a sample of grains.

A practitioner’s expert may be an external expert engaged by the practitioner or an internal expert who is part of the firm and therefore subject to the firm’s system of quality management. Ordinarily, the practitioner may depend on the firm’s system of quality management, unless:

• The practitioner’s understanding or practical experience indicates that the firm’s policies or procedures will not effectively address the nature and circumstances of the engagement; or
• Information provided by the firm or other parties, about the effectiveness of such policies or procedures suggests otherwise.

The extent of that dependence will vary with the circumstances and may affect the nature, timing and extent of the practitioner’s procedures with respect to matters such as:

• Competence and capabilities, through recruitment and training programs.
• The practitioner’s evaluation of the objectivity of the practitioner’s expert.
• Agreement with the practitioner’s expert.

Such dependence does not reduce the practitioner’s responsibility to meet the requirements of this ASRS.

If the practitioner’s expert is performing one or more of the agreed-upon procedure(s), the agreement of the nature, scope and objectives of that expert’s work as required by paragraph 29(b) includes the nature, timing and extent of the procedure(s) to be performed by the practitioner’s expert. In addition to the matters required by paragraph 29(b), it may be appropriate for the practitioner’s agreement with the practitioner’s expert to include matters such as the following:

1. The respective roles and responsibilities of the practitioner and that expert;
2. The nature, timing and extent of communication between the practitioner and that expert, including the form of any report to be provided by that expert; and
3. The need for the practitioner’s expert to observe confidentiality requirements.

The matters noted in paragraph A47 may affect the level of detail and formality of the agreement between the practitioner and the practitioner’s expert, including whether it is appropriate that the agreement be in writing. The agreement between the practitioner and the practitioner’s external expert is often in the form of an engagement letter.

When the work of a practitioner’s expert is to be used, it may be appropriate to perform some of the procedures required by paragraph 29 at the engagement acceptance or continuance stage.

(Ref: Para. 30–33)

Appendix 2 contains illustrations of agreed-upon procedures reports.

Subject Matter on which the Agreed-Upon Procedures Are Performed (Ref: Para. 30(c))

If applicable, to avoid misunderstanding, the practitioner may wish to clarify that the agreed-upon procedures report does not extend to information beyond subject matters on which the agreed-upon procedures are performed. For example, if the practitioner was engaged to perform agreed-upon procedures on an entity’s accounts receivable and inventory, the practitioner may wish to include a statement that the agreed-upon procedures report relates only to these accounts and does not extend to the entity’s financial report taken as a whole.

Purpose of the Agreed-Upon Procedures Report (Ref: Para. 30(d))

[Deleted by the AUASB.  Refer Aus A53.1]

In addition to the statement required by paragraph 30(d) and paragraph Aus 30(s), the practitioner may consider it appropriate to restrict the distribution of the agreed-upon procedures report.  Agreement with the engaging party(ies) regarding acceptable distribution may be reflected in the terms of the engagement.

[Deleted by the AUASB.  Refer Aus A54.1]

Factors that the practitioner may consider in deciding whether to restrict the distribution of the agreed-upon procedures report include, for example, whether:

• There is an elevated risk of users other than the intended users misunderstanding the purpose of the agreed-upon procedures engagement or misinterpreting the findings.
• The agreed-upon procedures are designed solely for the use of internal users such as management and those charged with governance of the engaging party.
• The agreed-upon procedures or findings involve confidential information.

Agreed-Upon Procedures and Findings (Ref: Para. 30(n) -30(o))

If the practitioner is unable to describe the agreed-upon procedures or findings without including confidential or sensitive information, the practitioner may consider:

• Consulting internally (for example, within the firm or network firm);
• Consulting externally (for example, with the relevant professional body or another practitioner); or
• Obtaining legal advice,
• to understand the professional or legal implications of taking any particular course of action.

There may be circumstances when the fact that previously agreed-upon procedures have not been performed or have been modified is important to the intended users’ consideration of the agreed-upon procedures and findings. For example, this may be the case when the procedures are set out in law or regulation. In such circumstances, the practitioner may identify, in the agreed-upon procedures report, the procedures agreed in the original terms of the engagement which could not be performed or were modified, and why that has arisen.

The practitioner may refer to the date when the agreed-upon procedures were agreed in the terms of the engagement.

Reference to Practitioner’s Expert (Ref: Para. 31)

In some circumstances, law or regulation may require a reference, in the agreed-upon procedures report, to a practitioner’s expert who performed any of the agreed-upon procedures. For example, such a reference may be required for the purposes of transparency in the public sector. The practitioner may also consider it appropriate in other circumstances, for example, when referring to the practitioner’s expert when describing the agreed-upon procedures. Nonetheless, the practitioner has sole responsibility for the findings included in the agreed-upon procedures report, and that responsibility is not reduced by the use of the practitioner’s expert. It is important therefore that if the agreed-upon procedures report refers to the practitioner’s expert, the report does not imply that the practitioner’s responsibility is reduced because of the reference to the practitioner’s expert.

(Ref: Para. 34)

A practitioner may be requested to perform other engagements together with the agreed-upon procedures engagement, such as providing recommendations arising from the agreed-upon procedures engagement. Such requests may take the form of one request for the practitioner to perform agreed-upon procedures and make recommendations, and the terms of the various engagements may be set out in a single engagement letter. To avoid misunderstanding, paragraph 34 requires that the agreed-upon procedures report be clearly distinguished from the reports of other engagements. For example, the recommendations may be:

• Provided in a separate document from the agreed-upon procedures report; or
• Included in a document that contains both the agreed-upon procedures report and recommendations but the recommendations are clearly differentiated from the agreedupon procedures report, for example, by including the agreed-upon procedures report and the recommendations in separate sections of the document.

(Ref: Para. 35)

Documentation of the nature, timing and extent of the agreed-upon procedures performed may include a record of, for example:

• The identifying characteristics of the subject matter(s) on which the agreed-upon procedures are performed. Identifying characteristics will vary depending on the nature of the agreed-upon procedure and the subject matter(s) on which the agreedupon procedure is performed. For example:
  • For a procedure on purchase orders, the practitioner may identify the documents selected by their dates and unique purchase order numbers.
  • For a procedure requiring selection of all items over a specific amount from a given population, the practitioner may record the scope of the procedure and identify the population (for example, all journal entries over a specified amount from the journal register for a specific period, all timesheets for hours recorded over a certain number for specified months or every tenth item on a specific list).
  • For a procedure requiring enquiries of specific personnel, the practitioner may record the dates of the enquiries, the names and job designations of the personnel and the specific enquiries made
  • For an observation procedure, the practitioner may record the process or matter being observed, the relevant individuals, their respective responsibilities, and where and when the observation was carried out.
• Who performed the agreed-upon procedures and the date such procedures were performed.
• Who reviewed the agreed-upon procedures performed, and the date and extent of such review.