Standard on Sustainability Assurance ASSA 5000
General Requirements for Sustainability Assurance Engagements

Issued by the Auditing and Assurance Standards Board

Obtaining a Copy of this Standard on Sustainability Assurance

This Standard on Sustainability Assurance is available on the Auditing and Assurance Standards Board (AUASB) website: www.auasb.gov.au

Contact Details

COPYRIGHT

© 2025 Commonwealth of Australia.  The text, graphics and layout of this Standard on Sustainability Assurance are protected by Australian copyright law and the comparable law of other countries.  Reproduction within Australia in unaltered form (retaining this notice) is permitted for personal and non‑commercial use subject to the inclusion of an acknowledgment of the source as being the Australian Auditing and Assurance Standards Board (AUASB).

Requests and enquiries concerning reproduction and rights for commercial purposes within Australia should be addressed to the Director – National, Auditing and Assurance Standards Board, PO Box 204, Collins Street West, Melbourne, Victoria 8007 or sent to enquiries@auasb.gov.au.  Otherwise, no part of this Standard on Sustainability Assurance may be reproduced, stored or transmitted in any form or by any means without the prior written permission of the AUASB except as permitted by law.

This Australian Standard on Sustainability Assurance reproduces substantial parts of the corresponding International Standard on Sustainability Assurance issued by the International Auditing and Assurance Standards Board (IAASB).  The AUASB acknowledges that the International Federation of Accountants is the owner of copyright in the International Standard on Auditing incorporated in this Standard on Sustainability Assurance throughout the world.

All existing rights in this material are reserved outside Australia.  Reproduction outside Australia in unaltered form (retaining this notice) is permitted for personal and non-commercial use only.

Further information and requests for authorisation to reproduce this Standard on Sustainability Assurance for commercial purposes outside Australia should be addressed to the Director – National, Auditing and Assurance Standards Board, PO Box 204, Collins Street West, Melbourne, Victoria 8007 or sent to enquiries@auasb.gov.au.  Any decision to approve a request may also require the agreement of IFAC.

ISSN 1030-603X

CONTENTS

PREFACE

AUTHORITY STATEMENT

CONFORMITY WITH INTERNATIONAL STANDARDS ON AUDITING

Paragraphs

Application......................................................Aus 0.1-Aus 0.2

Operative Date...................................................Aus 0.3-Aus 0.4

Introduction..............................................................1-7

Scope of this ASSA.........................................................8-14

Effective Date..............................................................15

Objectives..............................................................16-17

Definitions................................................................18

Requirements

Conduct of an Assurance Engagement in Accordance with the ASSAs...................19-25

Acceptance and Continuance of the Assurance Engagement...........................26-29

Firm-level Quality Management.................................................30

Engagement-level Quality Management.........................................31-63

Fraud and Non-Compliance with Laws and Regulations..............................64-67

Communication with Management and Those Charged with Governance....................68

Documentation...........................................................69-74

Preconditions for an Assurance Engagement......................................75-84

Terms of the Assurance Engagement............................................85-88

Evidence................................................................89-94

Planning...............................................................95-102

Risk Assessment Procedures...............................................103L-125

Responding to Risks of Material Misstatement..................................126L-152

Accumulation and Consideration of Identified Misstatements........................153-161

Evaluating the Description of Applicable Criteria....................................162

Subsequent Events.......................................................163-164

Written Representations from Management and Those Charged with Governance.........165-170

Other Information.......................................................171-177

Forming the Assurance Conclusion...........................................178-187

Preparing the Assurance Report.............................................188-212

Application and Other Explanatory Material

Introduction............................................................A1-A11

Scope of this ASSA.....................................................A12-A15

Definitions..........................................................A16R-A46

Conduct of an Assurance Engagement in Accordance with the ASSAs.................A47-A57

Acceptance and Continuance of the Assurance Engagement........................A58-A67

Firm-level Quality Management............................................A68-A74

Engagement-level Quality Management......................................A75-A161

Fraud and Non-Compliance with Laws and Regulations.........................A162-A165

Communication with Management and Those Charged with Governance.............A166-A170

Documentation.......................................................A171-A183

Preconditions for an Assurance Engagement..................................A184-A218

Terms of the Assurance Engagement.......................................A219-A224

Evidence...........................................................A225-A276

Planning............................................................A277-A312

Risk Assessment Procedures.............................................A313-A419

Responding to Risks of Material Misstatement...............................A420-A469R

Accumulation and Consideration of Identified Misstatements.....................A470-A498

Evaluating the Description of Applicable Criteria..............................A499-A501

Subsequent Events....................................................A502-A505

Written Representations from Management and Those Charged with Governance.......A506-A507

Other Information.....................................................A508-A518

Forming the Assurance Conclusion........................................A519-A536

Preparing the Assurance Report...........................................A537-A602

Appendix 1: Sustainability Matters and Sustainability Information

Appendix 2: The Practitioner’s Consideration of the Entity’s Process to Identify Sustainability Information to be Reported

Appendix 3: Illustrations of Assurance Reports on Sustainability Information  

preface

Reasons for Issuing ASSA 5000

The AUASB issues Standard on Sustainability Assurance ASSA 5000 General Requirements for Sustainability Assurance Engagements pursuant to the requirements of the legislative provisions and the Strategic Direction explained below.

The AUASB is a non-corporate Commonwealth entity of the Australian Government established under section 227A of the Australian Securities and Investments Commission Act 2001, as amended (ASIC Act).  Under section 336 of the Corporations Act 2001, the AUASB may make Standards on Sustainability Assurance for the purposes of the corporations legislation.  These Standards on Sustainability Assurance are legislative instruments under the Legislation Act 2003.

Under the Strategic Direction given to the AUASB by the Financial Reporting Council (FRC), the AUASB is required, inter alia, to develop auditing standards that have a clear public interest focus and are of the highest quality.

Main Features

This Standard on Sustainability Assurance is the Australian equivalent of ISSA 5000 General Requirements for Sustainability Assurance Engagements. This Standard is a new overarching standard for assurance on sustainability reporting that is:

• Responsive to the public interest need for a timely standard that supports the consistent performance of quality sustainability assurance engagements;
• Suitable across all sustainability topics, information disclosed about those topics, and reporting frameworks; and
• Implementable by all assurance practitioners.  

New Standard on Sustainability Assurance

This Standard on Sustainability Assurance is a new pronouncement of the AUASB and accordingly does not supersede a pre-existing Standard on Sustainability Assurance.

Dated: 28 January 2025  D Niven
 Chair - AUASB

Conformity with International Standards on Sustainability Assurance

This Standard on Sustainability Assurance conforms with International Standard on Sustainability Assurance ISSA 5000 General Requirements for Sustainability Assurance Engagements issued by the International Auditing and Assurance Standards Board.

Paragraphs that have been added to this Standard on Sustainability Assurance (and do not appear or appear differently in/from the text of the equivalent ISSA) are identified with the prefix “Aus”.

The following paragraphs and definitions are additional to or have been amended from ISSA 5000:

This Standard on Sustainability Assurance incorporates terminology and definitions used in Australia.

Compliance with this Standard on Sustainability Assurance enables compliance with ISSA 5000.

Standard on Sustainability Assurance ASSA 5000

General Requirements for Sustainability Assurance Engagements

Application

Aus 0.1 This Standard on Sustainability Assurance (ASSA) applies to assurance engagements on:

1.                 sustainability information in a sustainability report for a financial year in accordance with the Corporations Act 2001 (the Act);
2.                sustainability information where the engagement is held out to have been conducted in accordance with this ASSA; and
3.                 sustainability information for any other purpose, except where ASAE 3410 Assurance Engagements on Greenhouse Gas Statements (ASAE 3410) is required to be applied.  

Aus 0.2 This ASSA also applies, as appropriate, to assurance on other sustainability information.

Operative Date

Aus 0.3 Subject to paragraph Aus 0.4, this ASSA is effective for assurance engagements on sustainability information reported:

1.                 For periods beginning on or after 1 January 2025; or
2.                 As at a specific date on or after 1 January 2025.

Earlier application of this ASSA is permitted, except where ASAE 3410 is required to be applied.

Note: For the avoidance of doubt, paragraph Aus 0.3(b) does not require this standard to apply to any engagements for periods beginning before 1 January 2025.

Aus 0.4  For assurance engagements on sustainability information in a sustainability report under Chapter 2M of the Act for a financial year commencing from 1 January 2025 to 30 June 2030, this ASSA applies as specified in Australian Sustainability Assurance Standard ASSA 5010 Timeline for Audits and Reviews of Information in Sustainability Reports under the Corporations Act 2001.

Introduction

1.                    This Australian Standard on Sustainability Assurance (ASSA) deals with assurance engagements on sustainability information.

1.                    For purposes of this ASSA, sustainability information is information about sustainability matters. An entity’s disclosures about such matters may relate to several different topics (e.g., climate, labour practices, biodiversity) and aspects of topics (e.g., risks and opportunities, metrics and key performance indicators). Law or regulation or sustainability reporting frameworks may describe sustainability matters, topics or aspects of topics in different ways, and may also provide requirements or guidance for the entity in determining the sustainability information to be reported. (Ref: Para. A1, A21–A22, A43, Appendix 1)
2.                    Sustainability information is reported in accordance with the criteria. This ASSA requires the practitioner to evaluate whether the criteria that the practitioner expects to be applied in the preparation of the sustainability information are suitable for the engagement circumstances. In the absence of indications to the contrary, framework criteria that are embodied in law or regulation or are established by authorised or recognised organisations that follow a transparent due process are presumed to be suitable. (Ref: Para. A2, A197)
3.                    The criteria may specify a process by which the entity identifies sustainability matters to be reported, including the application of materiality in identifying such matters and the reporting boundary. In this ASSA, “the entity’s process to identify sustainability information to be reported” refers to the process applied by the entity to determine the sustainability matters to be reported in the sustainability information and the reporting boundary. (Ref: Para. A3)
4.                    The scope of the assurance engagement may extend to all of the sustainability information to be reported by the entity or only part of that information. For example, some jurisdictions may require the entirety of the sustainability information to be reported in accordance with an established framework to be subject to assurance. However, in certain jurisdictions, law or regulation may require that only climate-related disclosures in an entity’s sustainability information be subject to assurance. The reporting requirements of this ASSA require the practitioner to identify or describe the information that is subject to the assurance engagement. (Ref: Para. A4)
5.                    This ASSA is premised on the basis that: (Ref: Para. A5)
   1.                 [Deleted by the AUASB. Refer Aus 6.1.]

Aus 6.1(a) The members of the engagement team and the engagement quality reviewer (for those engagements where one has been appointed) are subject to the applicable requirements of APES 110 Code of Ethics for Professional Accountants (including Independence Standards) issued by the Accounting Professional & Ethical Standards Board Limited and the provisions in Part 5 of the International Ethics Standards for Sustainability Assurance (Including International Independence Standards) issued by the International Ethics Standards Board for Accountants and applicable legislative or other requirements, or professional requirements, or requirements in law or regulation, that are at least as demanding; and (Ref: Para. A6–A7)

1.                 The practitioner who is performing the engagement is a member of a firm that is subject to ASQM 1,[1] or professional requirements, or requirements in law or regulation, regarding the firm’s responsibility for its system of quality management, that are at least as demanding as ASQM 1. (Ref: Para. A8–A11)

1.                    Quality management within firms that perform assurance engagements, and compliance with ethical principles, including independence requirements, are widely recognised as being in the public interest and an integral part of high-quality assurance engagements. When a practitioner performs a sustainability assurance engagement in accordance with this and other ASSAs, it is important to recognise that this ASSA includes requirements that reflect the premises described in paragraph 6. (Ref: Para. A5–A11)

Scope of this ASSA

1.                    Subject to the exceptions in paragraph Aus 0.1, this ASSA applies to all assurance engagements on sustainability information. This ASSA applies to all types of sustainability information, regardless of how that information is presented. (Ref: Para. A12–A14)
2.                    This ASSA deals with both reasonable and limited assurance engagements. Unless otherwise stated, each requirement of this ASSA applies to both reasonable and limited assurance engagements. Because the level of assurance obtained in a limited assurance engagement is substantially lower than in a reasonable assurance engagement, the procedures the practitioner will perform in a limited assurance engagement will vary in nature and timing from, and are less in extent than for, a reasonable assurance engagement. (Ref: Para. A15)
3.                The Framework for Assurance Engagements notes that an assurance engagement may be either an attestation engagement or a direct engagement. This ASSA deals only with attestation engagements. Therefore, references in this ASSA to "assurance engagement" or "engagement" mean an attestation engagement.

Relationship with ASAE 3000 (Revised)[2]

1.                This ASSA is an overarching standard that includes requirements and application material for all elements of a sustainability assurance engagement. Accordingly, the practitioner is not required to apply ASAE 3000 (Revised) when performing the engagement.

Relationship with the Audited Financial Report

1.                This ASSA does not address sustainability information that is required to be included in the entity’s financial report in accordance with the applicable financial reporting framework. The auditor of the entity’s financial report is required to apply the Australian Standards on Auditing to such information.
2.                Sustainability information may be presented together with the entity’s audited financial report, for example, as a part of the entity’s annual report or in a separate document or documents accompanying the annual report. In these circumstances, the audited financial reports are considered other information for purposes of this ASSA.

Scalability

1.                This ASSA is intended for assurance engagements on sustainability information of all entities, regardless of size or complexity. However, the requirements of this ASSA are intended to be applied in the context of the nature and circumstances of the engagement.

Effective Date

1.                [Deleted by the AUASB.  Refer Aus 0.3]

Objectives

1.                In conducting a sustainability assurance engagement, the objectives of the practitioner are:
   1.                 To obtain reasonable assurance or limited assurance, as applicable, about whether the sustainability information is free from material misstatement;
   2.                 To express a conclusion on the sustainability information through a written report that conveys a reasonable assurance or a limited assurance conclusion, as applicable, and describes the basis for the conclusion; and
   3.                 To communicate further as required by this ASSA and any other relevant ASSA.
2.                In all cases when reasonable assurance or limited assurance, as applicable, cannot be obtained and a qualified conclusion in the practitioner’s assurance report is insufficient in the circumstances for purposes of reporting to the intended users, this ASSA requires the practitioner to disclaim a conclusion or withdraw from the engagement, where withdrawal is possible under applicable law or regulation.

Definitions

1.                For the purposes of this Standard on Sustainability Assurance, the following terms have the meanings attributed below:

Aus 18.1 The definition of ‘the Code’ is Parts 1 to 3 of APES 110 Code of Ethics for Professional Accountants (including Independence Standards) issued by the Accounting Professional & Ethical Standards Board and the provisions in Part 5 of the International Ethics Standards for Sustainability Assurance (Including International Independence Standards) issued by the International Ethics Standards Board for Accountants.’.

Aus 18.2 The definition of ‘Engagement team’ is ‘The engagement leader and other personnel performing the engagement, and any other individuals who perform procedures on the engagement, excluding a practitioner’s external expert. (Ref: Para. A28–Aus A29.1)’.

Aus 18.3 The definition of ‘Relevant ethical requirements’ is ‘Principles of professional ethics and ethical requirements that are applicable to practitioners when undertaking assurance engagements on sustainability information. Relevant ethical requirements comprise the Code related to sustainability assurance engagements, together with applicable legislative or other requirements that are more restrictive, or professional requirements or requirements in law or regulation that an appropriate authority has determined to be at least as demanding as the provisions of the Code, including the relevant requirements in Chapter 2M of the Corporations Act 2001 in the case of an engagement for assurance over information in a sustainability report under that Act. (Ref: Para. A62–A63)’

Aus 18.4 For the avoidance of doubt, the following terms used in this standard are to be read as having the same meaning as the terms used in the Act shown in the table below when conducting an audit or review of information in a sustainability report under Chapter 2M of the Act:

Requirements

Conduct of an Assurance Engagement in Accordance with the ASSAs

Complying with Standards that Are Relevant to the Engagement

1.                The practitioner shall comply with this ASSA and any other ASSAs relevant to the engagement. (Ref: Para. A47)
2.                The practitioner shall not represent compliance with this or any other ASSAs unless the practitioner has complied with the requirements of this ASSA and any other ASSAs relevant to the engagement. (Ref: Para. A47–A48)

Text of an ASSA

1.                The practitioner shall have an understanding of the entire text of an ASSA, including its application and other explanatory material, to understand its objectives and to apply its requirements properly. (Ref: Para. A49–A54)

Complying with Relevant Requirements

1.                The practitioner shall comply with each requirement of this ASSA and any other relevant ASSAs unless, in the circumstances of the assurance engagement, the requirement is not relevant because it is conditional and the condition does not exist. Requirements that apply to only limited assurance or reasonable assurance engagements have the letter “L” (limited assurance) or “R” (reasonable assurance), respectively, after the paragraph number. When a requirement applies to both limited and reasonable engagements, but in a differential manner, such requirements have been presented in a columnar format with the “L” (limited assurance) and “R” (reasonable assurance) designations. (Ref: Para. A55)
2.                In exceptional circumstances, the practitioner may judge it necessary to depart from a relevant requirement in an ASSA. In such circumstances, the practitioner shall perform alternative procedures to achieve the aim of that requirement. The need for the practitioner to depart from a relevant requirement is expected to arise only when the requirement is for a specific procedure to be performed and, in the specific circumstances of the assurance engagement, that procedure would be ineffective in achieving the aim of the requirement. (Ref: Para. A56)

Documentation of a Departure from a Relevant Requirement

1.                If, in exceptional circumstances, the practitioner judges it necessary to depart from a relevant requirement in this ASSA or any other ASSAs, the practitioner shall document how the alternative procedures performed achieve the aim of that requirement, and the reasons for the departure. (Ref: Para. A57)

Failure to Achieve an Objective

1.                If an objective in this ASSA or any other ASSAs relevant to the engagement cannot be achieved, the practitioner shall evaluate whether this requires the practitioner to modify the practitioner’s conclusion or withdraw from the assurance engagement (where withdrawal is possible under applicable law or regulation). Failure to achieve an objective in this or any other relevant ASSA represents a significant matter requiring documentation in accordance with paragraph 69.

Acceptance and Continuance of the Assurance Engagement

1.                The practitioner shall accept or continue the engagement only when:
   1.                 The practitioner has no reason to believe that relevant ethical requirements, including independence, will not be satisfied; (Ref: Para. A58–A64)
   2.                 The practitioner has determined that those persons who are to perform the engagement collectively have the appropriate competence and capabilities, including having sufficient time, to perform the engagement; and
   3.                 The basis upon which the engagement is to be performed has been agreed, by:
      1.                  Establishing that the preconditions for an assurance engagement are present (see also paragraph 76); and
      2.                Confirming that there is a common understanding between the practitioner and the engaging party of the terms of the engagement, including the practitioner’s reporting responsibilities (see also paragraph 85).
2.                If the engaging party imposes a limitation on the scope of the practitioner’s work in the terms of a proposed engagement such that the practitioner believes the limitation will result in the practitioner disclaiming a conclusion on the sustainability information, the practitioner shall not accept such an engagement as an assurance engagement, unless required by law or regulation to do so.
3.                The engagement leader shall determine that the firm’s policies or procedures for the acceptance and continuance of client relationships and assurance engagements have been followed and that conclusions reached in this regard are appropriate in accepting the engagement in accordance with paragraph 26. (Ref: Para. A65–A67)
4.                If the engagement leader obtains information that may have caused the firm to decline the engagement had that information been known by the firm prior to accepting or continuing the client relationship or specific engagement, the engagement leader shall communicate that information promptly to the firm, so that the firm and the engagement leader can take the necessary action.

Firm-level Quality Management

1.                The engagement leader shall be a member of a firm that applies: (Ref: Para. A68–A72)
   1.                 ASQM 1; or
   2.                 Professional requirements, or requirements in law or regulation, that an appropriate authority has determined to be at least as demanding as ASQM 1. (Ref: Para: A73–A74)

Engagement-level Quality Management

Overall Responsibility for Managing and Achieving Quality

1.                The engagement leader shall take overall responsibility for managing and achieving quality on the engagement and being sufficiently and appropriately involved throughout the engagement such that the engagement leader has the basis for determining whether the significant judgements made, and the conclusions reached, are appropriate given the nature and circumstances of the engagement. (Ref: Para. A75–A79)
2.                If the engagement leader assigns the design or performance of procedures, tasks or actions related to a requirement of this ASSA to other members of the engagement team to assist the engagement leader in complying with the requirements of this ASSA, the engagement leader shall continue to take overall responsibility for managing and achieving quality on the engagement through direction and supervision of those members of the engagement team, and review of their work. (Ref: Para. A80)

Characteristics of the Engagement Leader

1.                The engagement leader shall have: (Ref: Para. A81–A83)
   1.                 Competence and capabilities in assurance skills and techniques developed through extensive training and practical application;
   2.                 An understanding of the relevant ethical requirements, including those related to independence, that are applicable given the nature and circumstances of the assurance engagement; and
   3.                 Sustainability competence sufficient to accept responsibility for the conclusions reached on the engagement.

Relevant Ethical Requirements, Including Those Related to Independence

1.                The practitioner shall comply with relevant ethical requirements, including those related to independence, that comprise: (Ref: Para. A58–A61, A64)
   1.                 The provisions of the Code related to sustainability assurance engagements, together with any applicable legislative or other requirements that are more restrictive, including the relevant requirements in Chapter 2M of the Corporations Act 2001 in the case of an engagement for assurance over information in a sustainability report under that Act; or
   2.                 Professional requirements, or requirements in law or regulation, that an appropriate authority has determined to be at least as demanding as the provisions of the Code related to sustainability assurance engagements. (Ref: Para: A62–A63)
2.                The engagement leader shall take responsibility for other members of the engagement team having been made aware of relevant ethical requirements that are applicable given the nature and circumstances of the engagement, and the firm’s related policies or procedures, including those that address: (Ref: Para. A84–A85)
   1.                 Identifying, evaluating and addressing threats to compliance with relevant ethical requirements, including those related to independence;
   2.                 Circumstances that may cause a breach of relevant ethical requirements, including those related to independence, and the responsibilities of members of the engagement team when they become aware of breaches; and
   3.                 The responsibilities of members of the engagement team when they become aware of an instance of non-compliance with laws and regulations by the entity.
3.                If matters come to the engagement leader’s attention that indicate that a threat to compliance with relevant ethical requirements exists, the engagement leader shall evaluate the threat through complying with the firm’s policies or procedures, using relevant information from the firm, the engagement team or other sources, and take appropriate action. (Ref: Para. A85–A86)
4.                Throughout the engagement, the engagement leader shall remain alert, through observation and making enquiries as necessary, for evidence of breaches of relevant ethical requirements by members of the engagement team. If matters come to the engagement leader’s attention through the firm’s system of quality management or otherwise that indicate that members of the engagement team have breached relevant ethical requirements, the engagement leader, in consultation with others in the firm, shall determine the appropriate action. (Ref: Para. A86)

Assurance Skills and Techniques, Professional Scepticism and Professional Judgement

1.                The practitioner shall apply assurance skills and techniques as part of an iterative, systematic engagement process.
2.                The practitioner shall plan and perform the engagement with professional scepticism, recognising that circumstances may exist that cause the sustainability information to be materially misstated. (Ref: Para. A87–A92)
3.                The practitioner shall exercise professional judgement in planning and performing the engagement, including determining the nature, timing and extent of procedures. (Ref: Para. A93–A95)

Engagement Resources

1.                The engagement leader shall determine that sufficient and appropriate resources to perform the engagement are assigned or made available to the engagement team in a timely manner, taking into account the nature and circumstances of the engagement, the firm’s policies or procedures, and any changes that may arise during the engagement. (Ref: Para. A96–A97)
2.                [Deleted by the AUASB.  Refer Aus 42.1 and Aus 42.2.]

Aus 42.1 The engagement leader shall determine that members of the engagement team, and any practitioner’s external experts, collectively have the appropriate sustainability competence, competence and capabilities in assurance skills and techniques, and sufficient time, to perform the engagement. (Ref: Para. A98–A102)

Aus 42.2 The practitioner shall not use internal auditors to provide direct assistance on the sustainability assurance engagement. This extends to the use of internal auditors for direct assistance for components in the context of a group sustainability assurance engagement. (Ref: Para. Aus A29.1)

1.                If the practitioner intends to obtain evidence from using the work of a firm other than the practitioner’s firm, the engagement leader shall determine whether the engagement leader will be able to be sufficiently and appropriately involved in such work. When the engagement leader: (Ref: Para. A103–A106)
   1.                 Is able to be sufficiently and appropriately involved in that work, that firm is a component practitioner and the individuals performing the work are part of the engagement team. In such circumstances, the practitioner shall apply paragraphs 46–49 with respect to that work;
   2.                 Is unable to be sufficiently and appropriately involved in that work, that firm is another practitioner, and the practitioner shall apply paragraphs 50–55 with respect to that work.
2.                If, as a result of complying with the requirements in paragraphs 41–43, the engagement leader determines that resources assigned or made available are insufficient or inappropriate in the circumstances of the engagement, the engagement leader shall take appropriate action, including communicating with appropriate individuals in the firm about the need to assign or make available additional or alternative resources to the engagement. (Ref: Para. A107–A109)
3.                The engagement leader shall take responsibility for using the resources assigned or made available to the engagement team appropriately, given the nature and circumstances of the engagement. (Ref: Para. A110)

Direction, Supervision and Review

1.                The engagement leader shall take responsibility for the direction and supervision of the members of the engagement team and the review of their work. (Ref: Para. A111–A116)
2.                The engagement leader shall determine that the nature, timing and extent of direction, supervision and review is: (Ref: Para. A117–A118)
   1.                 Planned and performed in accordance with the firm’s policies or procedures, professional standards and applicable legal and regulatory requirements; and
   2.                 Responsive to the nature and circumstances of the engagement and the resources assigned or made available to the engagement team by the firm.
3.                The engagement leader shall review engagement documentation at appropriate points in time during the engagement, including documentation relating to: (Ref: Para. A119–A121, A173)
   1.                 Significant matters;
   2.                 Significant judgements, including those relating to difficult or contentious matters identified during the engagement, and the conclusions reached; and
   3.                 Other matters that, in the engagement leader’s professional judgement, are relevant to the engagement leader’s responsibilities.
4.                The engagement leader shall review, prior to their issuance, formal written communications to management, those charged with governance or regulatory authorities. (Ref: Para. A122)

Using the Work of Others

Using the Work of Another Practitioner

1.                If the practitioner intends to obtain evidence from using the work of another practitioner, the practitioner shall: (Ref: Para. A123–A124)
   1.                 Comply with relevant ethical requirements that apply to using the work of another practitioner; (Ref: Para. A125–A126)
   2.                 Evaluate whether that practitioner has the necessary competence and capabilities for the practitioner’s purposes; (Ref: Para. A127)
   3.                 Evaluate whether the nature, scope and objectives of that practitioner’s work are appropriate for the practitioner’s purposes; and (Ref: Para. A128)
   4.                 Determine whether the evidence obtained from that practitioner’s work is adequate for the practitioner’s purposes. (Ref: Para. A124)
2.                In making the evaluation in accordance with paragraph 50(c) and determination in accordance with paragraph 50(d), if the practitioner plans to use an assurance report of another practitioner that has been designed for use by user entities and their assurance practitioners across a value chain (referred to in this ASSA as a one-to-many report), the practitioner shall determine whether that assurance report provides sufficient appropriate evidence for the practitioner’s purposes by evaluating: (Ref: Para. A129–A131, A291)
   1.                 Whether the description of the procedures performed and the results thereof are appropriate for the practitioner’s purposes; and
   2.                 The adequacy of the standard(s) under which the assurance report was issued.
3.                If the practitioner intends to obtain evidence about the operating effectiveness of controls in accordance with paragraphs 119R or 120L, as applicable, the practitioner shall determine whether any complementary user entity controls identified in a one-to-many or other assurance report of another practitioner are relevant to the user entity. (Ref: Para: A130)
4.                In making the determination in accordance with paragraph 50(d), the practitioner shall, to the extent necessary in the circumstances, communicate with another practitioner about the findings from another practitioner’s work. (Ref: Para. A132–A133)
5.                The practitioner shall determine whether, and the extent to which, it is necessary to review additional documentation of the work performed by another practitioner. (Ref: Para. A134)
6.                If the practitioner determines that the evidence obtained from the work of another practitioner is not adequate for the practitioner’s purposes, including when the practitioner is unable to obtain information to make that determination or when the practitioner is not satisfied that communications with another practitioner are adequate for the practitioner’s purposes, the practitioner shall:
   1.                 Determine whether the practitioner is able to obtain sufficient appropriate evidence through performing alternative procedures; and
   2.                 If sufficient appropriate evidence cannot be obtained through performing alternative procedures, consider the implications for the engagement, including whether a scope limitation exists. (Ref: Para. A135)

Using the Work of a Practitioner’s Expert

1.                If the practitioner plans to use the work of a practitioner’s expert, the practitioner shall: (Ref: Para. A136-A140)
   1.                 Evaluate whether the expert has the necessary competence, capabilities and objectivity for the practitioner’s purposes; (Ref: Para. A141–A145)
   2.                 When evaluating the objectivity of a practitioner’s external expert, enquire regarding interests and relationships that may create a threat to that expert’s objectivity; (Ref: Para. A145–A147)
   3.                 Obtain a sufficient understanding of the field of expertise of the expert to determine the nature, scope and objectives of that expert’s work for the practitioner’s purposes; and (Ref: Para. A148–A149)
   4.                 Agree with the expert, in writing when appropriate, on:
      1.                  The nature, scope and objectives of that expert’s work; and (Ref: Para. A149–A150)
      2.                The respective roles and responsibilities of the practitioner and that expert, including the nature, timing and extent of communication between the practitioner and expert. (Ref: Para. A138–A139)
2.                The practitioner shall evaluate the adequacy of the practitioner’s expert’s work for the practitioner’s purposes, including: (Ref: Para. A137; A151)
   1.                 The relevance and reasonableness of that expert’s findings or conclusions, and their consistency with other evidence obtained by the practitioner;
   2.                 If that expert’s work involves use of significant assumptions and methods, the relevance and reasonableness of those assumptions and methods in the circumstances; and
   3.                 If that expert’s work involves the use of source data that is significant to that expert’s work, the relevance, completeness, and accuracy of that source data.
3.                If the practitioner determines that the work of the practitioner’s expert is not adequate for the practitioner’s purposes, the practitioner shall:
   1.                 Agree with that expert on the nature and extent of further work to be performed; or
   2.                 Perform additional procedures appropriate to the circumstances.

Using the Work of the Internal Audit Function

1.                If the practitioner plans to use the work of the internal audit function, the practitioner shall: (Ref: Para. A152–A154)
   1.                 Evaluate the extent to which the internal audit function’s organisational status and relevant policies and procedures support the objectivity of the internal auditors;
   2.                 Evaluate the level of competence of the internal audit function, including in sustainability matters and applicable criteria;
   3.                 Evaluate whether the internal audit function applies a systematic and disciplined approach, including a system of quality control;
   4.                 Determine whether, and to what extent, to use specific work of the internal audit function; and
   5.                 Determine whether that work is adequate for the practitioner’s purposes.

Communications Among Those Involved in the Engagement

1.                The engagement leader shall take responsibility for determining that communications take place at appropriate times throughout the engagement among the engagement team and, as applicable, practitioner’s external experts and the internal audit function. (Ref: Para. A155–A159)

Consultation

1.                The engagement leader shall take responsibility for the engagement team undertaking consultation on:
   1.                 Difficult or contentious matters and matters on which the firm’s policies or procedures require consultation; and
   2.                 Other matters that, in the engagement leader’s professional judgement, require consultation.

Engagement Quality Review

1.                For those engagements for which an engagement quality review is required in accordance with ASQM 1 or the firm’s policies or procedures, the engagement leader shall discuss significant matters and significant judgements arising during the engagement, including those identified during the engagement quality review, with the engagement quality reviewer.

Monitoring and Remediation

1.                The engagement leader shall: (Ref: Para. A160–A161)
   1.                 Consider information from the firm’s monitoring and remediation process, as communicated by the firm, including, as applicable, information from the monitoring and remediation process of the network and across the network firms; and
   2.                 Determine whether the information may affect the engagement and, if so, take appropriate action.

Fraud and Non-Compliance with Laws and Regulations

1.                The practitioner shall maintain professional scepticism throughout the engagement, recognising the possibility that a material misstatement due to fraud could exist, notwithstanding the practitioner’s past experience of the honesty and integrity of the entity’s management and those charged with governance. (Ref: Para. A162)
2.                The practitioner shall remain alert to the possibility that procedures performed during the engagement may bring instances of non-compliance or suspected non-compliance with laws and regulations to the practitioner’s attention.
3.                In the absence of identified or suspected non-compliance, the practitioner is not required to perform procedures regarding the entity’s compliance with laws and regulations, other than those set out in paragraphs 65 and 111–112.
4.                If the practitioner identifies fraud or suspected fraud, or instances of non-compliance or suspected non-compliance with laws and regulations, the practitioner shall determine whether law, regulation or relevant ethical requirements: (Ref: Para. A163–A165, A434)
   1.                 Require the practitioner to report to an appropriate authority outside the entity; or 
   2.                 Establish responsibilities under which reporting to an appropriate authority outside the entity may be appropriate in the circumstances.

Communication with Management and Those Charged with Governance

1.                The practitioner shall communicate with management or those charged with governance, on a timely basis during the engagement, significant matters that, in the practitioner’s professional judgement, merit the attention of management or those charged with governance, as appropriate. (Ref: Para. A166–A170)

Documentation

Overarching Documentation Requirements

Form, Content and Extent of Engagement Documentation

1.                The practitioner shall prepare, on a timely basis, engagement documentation that provides a record of the basis for the assurance report that is sufficient and appropriate to enable a practitioner experienced in sustainability assurance, having no previous connection with the assurance engagement, to understand: (Ref: Para. A171–A173)
   1.                 The nature, timing and extent of the procedures performed to comply with this ASSA, other relevant ASSAs and applicable legal and regulatory requirements;
   2.                 The results of the procedures performed, and the evidence obtained; and
   3.                 Significant matters arising during the assurance engagement, the conclusions reached thereon, and significant professional judgements made in reaching those conclusions. (Ref: Para. A174–A176)
2.                In documenting the nature, timing and extent of procedures performed, the practitioner shall record: (Ref: Para. A177–A178)
   1.                 The identifying characteristics of the specific items or matters tested;
   2.                 Who performed the assurance engagement work and the date such work was completed; and
   3.                 Who reviewed the assurance engagement work performed and the date and extent of such review.
3.                The engagement documentation shall also include discussions of significant matters with management, those charged with governance and others, including the nature of the significant matters discussed, and when and with whom the discussions took place. (Ref: Para. A179)

Assembly of the Final Engagement File

1.                The practitioner shall assemble the engagement documentation in an engagement file and complete the administrative process of assembling the final engagement file on a timely basis after the date of the assurance report. After the assembly of the final engagement file has been completed, the practitioner shall not delete or discard engagement documentation of any nature before the end of its retention period. (Ref: Para. A180–A182)
2.                In circumstances other than those envisaged in paragraph 212, when the practitioner finds it necessary to modify existing engagement documentation or add new engagement documentation after the assembly of the final engagement file has been completed, the practitioner shall, regardless of the nature of the modifications or additions, document:
   1.                 The specific reasons for making them; and
   2.                 When and by whom they were made and reviewed.

Documentation Related to Quality Management

1.                The practitioner shall include in the engagement documentation: (Ref: Para. A183)
   1.                 Issues identified with respect to compliance with relevant ethical requirements and how they were resolved;
   2.                 Conclusions about compliance with independence requirements that apply to the engagement, and any relevant discussions with the firm that support these conclusions;
   3.                 Conclusions reached regarding the acceptance and continuance of client relationships and assurance engagements, including with respect to the preconditions for an assurance engagement; and
   4.                 The nature and scope of, and conclusions resulting from, consultations undertaken during the course of the engagement.

Preconditions for an Assurance Engagement

Establishing Whether the Preconditions Are Present

1.                The practitioner shall obtain a preliminary knowledge of the engagement circumstances, including: (Ref: Para. A184)
   1.                 The sustainability information to be reported; and
   2.                 Whether the scope of the proposed assurance engagement encompasses all or part of the sustainability information in (a). (Ref: Para. A185)
2.                In order to establish whether the preconditions for an assurance engagement are present, based on the preliminary knowledge of the engagement circumstances and discussion with the appropriate party(ies), the practitioner shall: (Ref: Para. A184, A186–A187)
   1.                 Consider whether the entity has a process to identify sustainability information to be reported; (Ref: Para. A187)
   2.                 Evaluate whether the roles and responsibilities of management, those charged with governance and the engaging party, if different, are suitable in the circumstances. In doing so, the practitioner shall also evaluate whether management, or those charged with governance, when appropriate, have a reasonable basis for the sustainability information; and (Ref: Para. A186(a), A188–A191)
   3.                 Evaluate whether the engagement exhibits all of the characteristics in paragraphs 77–80.

Appropriate Sustainability Matters

1.                The practitioner shall evaluate whether the sustainability matters within the scope of the engagement are appropriate. In doing so, the practitioner shall consider whether those sustainability matters are identifiable and capable of consistent measurement or evaluation against the applicable criteria, such that the resulting sustainability information can be subjected to procedures for obtaining sufficient appropriate evidence. (Ref: Para. A192–A193)

Suitability and Availability of Criteria

1.                The practitioner shall evaluate whether the criteria that the practitioner expects to be applied in the preparation of the sustainability information are suitable for the engagement circumstances and will be available to the intended users. In doing so, the practitioner shall:
   1.                 Evaluate whether there are criteria for all of the sustainability information subject to the assurance engagement; (Ref: Para. A194)
   2.                 Identify the sources of the criteria, including whether they are framework criteria, entity–developed criteria or a combination of both; (Ref: Para. A195–A198, A331)
   3.                 Evaluate whether the criteria exhibit the following characteristics: (Ref: Para. A199–A201, A332–A335)
      1.                  Relevance; (Ref: Para. A336–A337)
      2.                Completeness; (Ref: Para. A338)
      3.              Reliability; (Ref: Para. A339)
      4.              Neutrality; and (Ref: Para. A340–A341)
      5.                 Understandability; and (Ref: Para. A342)
   4.                 Evaluate whether and how the criteria will be made available to the intended users. (Ref: Para. A202)

Evidence to Support the Practitioner’s Conclusion and Form of Conclusion

1.                The practitioner shall determine whether
   1.                 The practitioner expects to be able to obtain the evidence needed to support the practitioner’s conclusion; and (Ref: Para. A203–A206L)
   2.                 The practitioner’s conclusion, in the form appropriate for the engagement, is to be contained in a written report.

Rational Purpose

1.                The practitioner shall determine whether the engagement exhibits a rational purpose. In doing so, the practitioner shall determine whether: (Ref: Para. A207–A208)
   1.                 In the case of a limited assurance engagement, the practitioner expects to be able to obtain a meaningful level of assurance; (Ref: Para. A209L–A211L)
   2.                 The engagement as a whole will be useful and not misleading to intended users; and
   3.                 The scope of the assurance engagement is appropriate, including when the scope of the assurance engagement excludes part of the sustainability information to be reported. (Ref: Para. A212–A217)

Deciding Whether to Accept or Continue the Assurance Engagement

1.                If the preconditions for an assurance engagement are not present, the practitioner shall discuss the matter with the engaging party. If changes cannot be made to meet the preconditions, the practitioner shall not accept the engagement as an assurance engagement, unless required by law or regulation to do so. However, an engagement accepted under such circumstances does not comply with this ASSA. Accordingly, the practitioner shall not include any reference within the assurance report to the engagement having been conducted in accordance with this ASSA or any other ASSAs.

Preconditions Not Present After Acceptance

1.                If it is discovered after the engagement has been accepted that one or more preconditions for an assurance engagement is not present, the practitioner shall discuss the matter with the appropriate party(ies), and shall determine: (Ref: Para. A218)
   1.                 Whether the matter can be resolved to the practitioner’s satisfaction;
   2.                 Whether it is appropriate to continue with the engagement; and
   3.                 Whether and, if so, how to communicate the matter in the assurance report.
2.                If it is discovered after the engagement has been accepted that some or all of the applicable criteria are unsuitable or some or all of the sustainability matters are not appropriate for an assurance engagement, the practitioner shall consider withdrawing from the engagement, if withdrawal is possible under applicable law or regulation. If the practitioner continues with the engagement, the practitioner shall express a qualified or adverse conclusion, or disclaimer of conclusion, as appropriate in the circumstances. (Ref: Para. A218)

Assurance Report Prescribed by Law or Regulation

1.                If law or regulation prescribes the layout or wording of the assurance report that is different from the requirements of the ASSAs, the practitioner shall evaluate:
   1.                 Whether intended users may misunderstand the practitioner’s conclusion; and
   2.                 If so, whether additional explanation in the assurance report can mitigate the possible misunderstanding.

If the practitioner concludes that additional explanation in the assurance report cannot mitigate the possible misunderstanding, the practitioner shall not accept the assurance engagement, unless required by law or regulation to do so. An assurance engagement conducted in accordance with such law or regulation does not comply with this ASSA. Accordingly, the practitioner shall not include any reference in the assurance report to the assurance engagement having been conducted in accordance with this ASSA.

Terms of the Assurance Engagement

Agreeing the Terms of the Assurance Engagement

1.                The practitioner shall agree the terms of the assurance engagement with the engaging party. The agreed terms shall be specified in sufficient detail in an engagement letter or other suitable form of written agreement, written confirmation, or in law or regulation, and shall include: (Ref: Para. A219–A222)
   1.                 Matters related to the objective and scope of the assurance engagement, including:
      1.                  The objective of the assurance engagement;
      2.                The sustainability information within the scope of the assurance engagement, and the sustainability information that is not within the scope of the assurance engagement;
      3.              The reporting boundary within the scope of the assurance engagement;
      4.              Whether the engagement is a limited assurance engagement, reasonable assurance engagement, or a combined limited and reasonable assurance engagement and the sustainability information that is subject to each level of assurance;
      5.                 The applicable criteria; and
      6.              That the assurance engagement will be conducted in accordance with ASSA 5000 General Requirements for Sustainability Assurance Engagements.
   2.                 The responsibilities of the practitioner; (Ref: Para. A221)
   3.                 The responsibilities of management or those charged with governance, as appropriate for:
      1.                  The preparation of the sustainability information in accordance with the applicable criteria, including, where relevant, its fair presentation;
      2.                When applicable, identifying, selecting or developing suitable criteria;
      3.              Referring to or describing in the sustainability information, the applicable criteria it has used and, when it is not readily apparent from the engagement circumstances, who developed them;
      4.              Designing, implementing and maintaining a system of internal control that it determines is necessary to enable the preparation of sustainability information in accordance with the applicable criteria that is free from material misstatement, whether due to fraud or error; and
      5.                 Providing the practitioner with:
         1.                    Access to all information of which management is aware that is relevant to the preparation of the sustainability information;
         2.                    Additional information that the practitioner may request for the purpose of the assurance engagement; and
         3.                    Unrestricted access to persons within the entity, from whom the practitioner determines it necessary to obtain evidence;
   4.                 Reference to the expected form and content of the report or reports to be issued by the practitioner and a statement that there may be modifications to the report in certain circumstances; and
   5.                 An acknowledgement that management agrees to provide written representations at the conclusion of the assurance engagement.
2.                For recurring assurance engagements, the practitioner shall evaluate whether the circumstances require the terms of the assurance engagement to be revised or there is a need to remind the appropriate party(ies) of the existing terms.

Changing the Terms of the Assurance Engagement

1.                The practitioner shall not agree to a change in the terms of the assurance engagement, including from a reasonable assurance engagement to a limited assurance engagement (i.e., to a lower level of assurance), when there is no reasonable justification for doing so. If the practitioner is unable to agree to a request to change in the terms of the assurance engagement and is not permitted by the appropriate party(ies) to continue the assurance engagement under the original terms, the practitioner shall: (Ref: Para. A223–A224)
   1.                 Withdraw from the assurance engagement, when possible under applicable law or regulation; and
   2.                 Determine whether there is any obligation, either contractual or otherwise, to report the circumstances to other parties, such as those charged with governance, owners or regulators.
2.                If the terms of the assurance engagement are changed:
   1.                 The practitioner and the appropriate party(ies) shall agree on and record the new terms of the assurance engagement in an engagement letter or other suitable form of written agreement; and
   2.                 The practitioner shall not disregard evidence that was obtained prior to the change.

Evidence

Designing and Performing Procedures to Obtain Sufficient Appropriate Evidence

1.                For the purpose of obtaining sufficient appropriate evidence, the practitioner shall design and perform procedures: (Ref: Para. A225–A226)
   1.                 In a manner that is not biased towards obtaining evidence that may be corroborative, or towards excluding evidence that may be contradictory; and (Ref: Para. A227–A228)
   2.                 The nature, timing and extent of which are appropriate in the circumstances to provide evidence to meet the intended purpose of those procedures. (Ref: Para. A229–A244)

Information Intended to be Used as Evidence

1.                When designing and performing procedures, the practitioner shall evaluate the relevance and reliability of information intended to be used as evidence, including information obtained from sources external to the entity. (Ref: Para. A245–A263)
2.                When using information produced by the entity, the practitioner shall evaluate whether the information is sufficiently reliable for the practitioner’s purposes, including, as necessary in the circumstances: (Ref: Para. A264–A265)
   1.                 Obtaining evidence about the accuracy and completeness of the information; and
   2.                 Evaluating whether the information is sufficiently precise and detailed for the practitioner’s purposes.

Work Performed by a Management’s Expert

1.                If information intended to be used as evidence has been prepared by a management’s expert, as part of the practitioner’s evaluation in accordance with paragraph 90, the practitioner shall, to the extent necessary, having regard to the significance of that expert’s work for the practitioner’s purposes: (Ref: Para. A266)
   1.                 Evaluate the competence, capabilities and objectivity of that expert; (Ref: Para. A267–A268)
   2.                 Obtain an understanding of the work performed by that expert; (Ref: Para. A269)
   3.                 Obtain an understanding about how the information prepared by that expert has been used by management in the preparation of the sustainability information; and (Ref: Para. A270–A271)
   4.                 Evaluate the appropriateness of the work of that expert as evidence. (Ref: Para. A272)

Doubts About the Relevance and Reliability of Information Intended to be Used as Evidence

1.                If conditions identified during the assurance engagement cause the practitioner to believe that a document may not be authentic or that terms in a document have been modified but not disclosed to the practitioner, the practitioner shall investigate further and determine the effect on the rest of the evidence obtained. (Ref: Para. A273–A275)
2.                If the practitioner has doubts about the relevance or reliability of information intended to be used as evidence, the practitioner shall: (Ref: Para. A276)
   1.                 Determine whether modifications or additions to procedures are necessary to resolve the doubts; and
   2.                 If the doubts cannot be resolved, consider the effect, if any, on other aspects of the engagement, including whether such doubts indicate a risk that disclosures may be materially misstated due to fraud.

Planning

Planning Activities

1.                The practitioner shall develop an overall strategy and engagement plan, including determining the nature, timing and extent of planned procedures. In doing so, the engagement leader shall consider information obtained in the acceptance and continuance process and, if applicable, whether knowledge obtained on other engagements performed by the engagement leader for the entity is relevant. (Ref: Para. A277–A287)
2.                For a group sustainability assurance engagement, in developing the overall strategy and engagement plan in accordance with paragraph 95, the practitioner shall determine: (Ref: Para. A284–A291)
   1.                 The sustainability information on which assurance work will be performed and the source of that information; (Ref: Para. A288)
   2.                 The resources needed to perform the engagement, including component practitioner(s); and (Ref: Para. A108, A289–A290)
   3.                 Whether to obtain evidence from the work performed by another practitioner(s). (Ref: Para. A291)
3.                The engagement leader and other key members of the engagement team shall be involved in planning the assurance engagement, including participating in the discussion among the engagement team members required by paragraph 105.

Materiality

1.                For purposes of planning and performing the assurance engagement, and evaluating whether the sustainability information is free from material misstatement, the practitioner shall: (Ref: Para. A292–A299)
   1.                 Consider materiality for qualitative disclosures; and (Ref: Para. A300)
   2.                 Determine materiality for quantitative disclosures. (Ref: Para. A301–A305)
2.                If the applicable criteria require the entity to apply both financial materiality and impact materiality in preparing the sustainability information, the practitioner shall take into account both perspectives when considering or determining materiality in accordance with paragraph 98. (Ref: Para. A306, A337)
3.            For quantitative disclosures, the practitioner shall determine performance materiality. (Ref: Para. A307–A311)

Revision of Materiality as the Engagement Progresses

1.            The practitioner shall revise materiality for a disclosure(s) in the event of becoming aware of information during the assurance engagement that would have caused the practitioner to have considered or determined a different materiality initially. (Ref: Para. A312)

Documentation

1.            The practitioner shall include in the engagement documentation:
   1.                 The factors relevant to the practitioner’s consideration of materiality for qualitative disclosures in accordance with paragraph 98(a);
   2.                 The basis for the determination of materiality for quantitative disclosures, in accordance with paragraph 98(b); and
   3.                 The basis for the practitioner’s determination of performance materiality in accordance with paragraph 100.

Risk Assessment Procedures

Designing and Performing Risk Assessment Procedures

1.            When designing and performing risk assessment procedures in accordance with paragraphs 103L and 103R, the practitioner shall consider information from the practitioner’s procedures regarding acceptance and continuance of the client relationship or the sustainability assurance engagement. (Ref: Para. A319)

1.            The engagement leader and other key members of the engagement team, and any key practitioner’s external experts, shall discuss the susceptibility of the disclosures to material misstatement, whether due to fraud or error, and the application of the applicable criteria to the entity’s facts and circumstances. The engagement leader shall determine which matters are to be communicated to members of the engagement team and to any practitioner’s external experts not involved in the discussion. (Ref: Para. A320–A321)

Understanding the Sustainability Matters and the Sustainability Information

1.            The practitioner shall obtain an understanding of the sustainability matters and the sustainability information, including the characteristics of events or conditions that could give rise to material misstatement of the disclosures. (Ref: Para. A322–A325)

Determining the Suitability of the Applicable Criteria

1.            The practitioner shall determine whether the applicable criteria are suitable for the engagement circumstances, including that they exhibit the characteristics in paragraph 78. (Ref: Para. A199–A201, A326–A342)

Understanding the Entity’s Reporting Policies

1.            The practitioner shall obtain an understanding of the entity’s reporting policies and the reason for any changes thereto. (Ref: Para. A2, A197, A343)
2.            The practitioner shall evaluate whether the entity’s reporting policies are appropriate and consistent with: (Ref: Para. A2, A343–A344)
   1.                 The applicable criteria; and
   2.                 Criteria used in the relevant industry.

Understanding the Entity and Its Environment

1.            The practitioner shall obtain an understanding of the entity and its environment, including:
   1.                 The nature of the entity’s operations, legal and organisational structure, ownership and governance, and business model; (Ref: Para. A345–A346)
   2.                 The reporting boundary and activities within the reporting boundary; and (Ref: Para. A347)
   3.                 Goals, targets, or strategic objectives related to sustainability matters and measures used to assess the entity's performance or determine management compensation. (Ref: Para. A348)

Understanding the Legal and Regulatory Framework

1.            The practitioner shall obtain an understanding of: (Ref: Para. A349–A351)
   1.                 The legal and regulatory framework applicable to the entity and the industry or sector in which the entity operates, in the context of the entity’s sustainability information; and
   2.                 How the entity is complying with that framework.

Enquiries and Discussion with Appropriate Parties

1.            The practitioner shall make enquiries of appropriate parties and, when appropriate, others within the entity regarding whether: (Ref: Para. A352–A353)
   1.                 They have knowledge of any fraud or suspected fraud or identified or suspected non-compliance with laws and regulations affecting the sustainability information; and
   2.                 The entity has an internal audit function and, if so, make further enquiries to obtain an understanding of the activities and main findings, if any, of the internal audit function with respect to the sustainability information.

Understanding the Components of the Entity’s System of Internal Control

The Control Environment

The Entity’s Risk Assessment Process

The Entity’s Process for Monitoring the System of Internal Control

The Information System and Communication

1.            The practitioner shall obtain an understanding of the entity’s information system and communication relevant to the sustainability matters and the preparation of the sustainability information, including: (Ref: Para. A377–A381)
   1.                 The entity’s process to identify sustainability information to be reported. (Ref: Para. A382–A384)
   2.                 How information from external sources, such as service organisations or other organisations in the entity’s value chain, is recorded, processed, corrected as necessary, and incorporated into the sustainability information. (Ref: Para. A385)
   3.                 For estimates and forward-looking information, how the entity identifies the relevant methods, assumptions or sources of data, and the need for changes in them, that are appropriate in the context of the applicable criteria.

1.            Based on the practitioner’s understanding of the information system and communication in accordance with paragraph 117, the practitioner shall evaluate whether the entity’s information system appropriately supports the preparation of the sustainability information in accordance with the applicable criteria. (Ref: Para. A386)

Control Activities

119R. The practitioner shall obtain an understanding of control activities by identifying: (Ref: Para. A387–A392)

1.                 Controls for which the practitioner plans to obtain evidence by testing their operating effectiveness, which shall include:
   1.                  Controls that address risks for which substantive procedures alone do not provide sufficient appropriate evidence; or
   2.                If applicable, any complementary user entity controls identified in an assurance report of another practitioner that are determined to be relevant to the user entity in accordance with paragraph 52;
2.                 Based on the controls identified in (a), the IT applications and the other aspects of the entity’s IT environment that are subject to risks arising from the use of IT;
3.                 The entity’s general IT controls that address risks arising from the use of IT identified in (b); and
4.                 Other controls that the practitioner considers are appropriate to identify and assess the risks of material misstatement at the assertion level for disclosures and design further procedures responsive to those assessed risks.

Design and Implementation of Controls

Identifying Control Deficiencies

1.            Based on the practitioner’s understanding of the components of the entity’s system of internal control, the practitioner shall consider whether one or more control deficiencies have been identified. (Ref: Para. A400–A403)

Identifying and Assessing the Risks of Material Misstatement

123R.  Due to the unpredictable way in which management is able to override controls, the practitioner shall treat risks of management override of controls as risks of material misstatement due to fraud and thus risks of material misstatement at the upper end of the spectrum of risk. (Ref: Para. A418R)

Evaluating the Evidence Obtained from the Risk Assessment Procedures

1.            The practitioner shall determine whether the evidence obtained from the risk assessment procedures provides an appropriate basis for the identification and assessment of the risks of material misstatement. If not, the practitioner shall perform additional risk assessment procedures until evidence has been obtained to provide such a basis. (Ref: Para. A419)

Documentation

1.            The practitioner shall include in the engagement documentation: 
   1.                 The engagement team discussion in accordance with paragraph 105, and the significant decisions reached; 
   2.                 Key elements of the practitioner’s understanding, enquiries and discussion in accordance with paragraphs 106–119R;
   3.                 The evaluation of the design of identified controls, and determination of whether such controls have been implemented, in accordance with paragraph 120L, if applicable, and paragraph 120R; and  
   4.                 The identified and assessed risks of material misstatement, in accordance with paragraphs 122L and 122R.

Responding to Risks of Material Misstatement

Designing and Performing Further Procedures

1.            In designing and performing further procedures, the practitioner shall: (Ref: Para. A424–A427)
   1.                 Consider the reasons for the assessment given to the risks of material misstatement;
   2.                 Consider whether the practitioner intends to obtain evidence about the operating effectiveness of controls in determining the nature, timing and extent of other procedures; and
   3.                 Obtain more persuasive evidence the higher the practitioner’s assessment of risk.

Overall Responses

Responding to Identified or Suspected Fraud or Non-Compliance with Laws and Regulations

1.            The practitioner shall respond appropriately to fraud or suspected fraud, or non-compliance or suspected non-compliance with laws and regulations, identified during the engagement by obtaining: (Ref: Para. A430–A431)
   1.                 An understanding of the nature of the act and the circumstances in which it occurred; and
   2.                 Further information to evaluate the possible effect on the sustainability information.

1.            If the practitioner suspects there may be instances of fraud or non-compliance with laws and regulations, the practitioner shall discuss the matter, unless prohibited by law or regulation, with the appropriate level of management and, where appropriate, those charged with governance. (Ref: Para. A432)
2.            The practitioner shall evaluate the implications of identified or suspected fraud or non-compliance with laws and regulations for the assurance engagement, including the practitioner’s risk assessment procedures and the reliability of written representations, and take appropriate action. (Ref: Para. A433–A435)

Tests of Controls

1.            If the practitioner intends to obtain evidence about the operating effectiveness of controls identified in accordance with paragraphs 119R or 120L, the practitioner shall design and perform tests of controls by: (Ref: Para. A436–A437)
   1.                 Performing enquiry and other procedures to obtain evidence about the operating effectiveness of the controls, including:
      1.                  How the controls were applied at relevant times during the period to which the sustainability information relates;
      2.                The consistency with which they were applied; and
      3.              By whom or by what means they were applied.
   2.                 Determining whether the controls to be tested depend upon other controls and, if so, whether it is necessary to obtain evidence supporting the effective operation of those indirect controls.
2.            The practitioner shall test controls for the appropriate period for which the practitioner intends to obtain evidence about the operating effectiveness of those controls, subject to paragraph 134.
3.            If the practitioner obtains evidence about the operating effectiveness of controls during an interim period and intends to extend the conclusions of those tests of controls for the remaining period, the practitioner shall obtain evidence about the operating effectiveness of those controls for the period subsequent to the interim period.
4.            If the practitioner plans to use evidence from a previous sustainability assurance engagement about the operating effectiveness of controls, the practitioner shall establish the continuing relevance of the evidence by obtaining evidence about whether significant changes in those controls have occurred subsequent to the previous engagement. The practitioner shall obtain this evidence by performing enquiry, combined with observation or inspection, to confirm the understanding of those specific controls, and (Ref: Para. A438–A439)
   1.                 If there have not been changes that affect the continuing relevance of the evidence from the previous engagement, the practitioner shall test the controls at least once in every third engagement, and shall test some controls in each engagement.
   2.                 If there have been changes that affect the continuing relevance of the evidence from the previous engagement, the practitioner shall test the controls in the current engagement.
5.            If the practitioner plans to obtain evidence about the operating effectiveness of controls over a risk of material misstatement for which the assessment of risk is close to the upper end of the spectrum of risk, the practitioner shall test those controls in the current period.
6.            When evaluating the operating effectiveness of controls, the practitioner shall evaluate whether misstatements detected through performing other procedures indicate that controls are not operating effectively. The absence of misstatements detected by other procedures, however, does not provide evidence that controls being tested are effective.
7.            If deviations from controls that the practitioner tests are detected, the practitioner shall make specific enquiries to understand these matters and their potential consequences and shall determine whether:
   1.                 The tests of controls that have been performed provide sufficient appropriate evidence about the operating effectiveness of those controls;
   2.                 Additional tests of controls are necessary; or
   3.                 The potential risks of material misstatement need to be addressed by performing substantive procedures.

Substantive Procedures

139R. The further procedures required by paragraph 126R shall include substantive procedures that are responsive to each risk for which the assessment of that risk is close to the upper end of the spectrum of risk. (Ref: Para. A407) 

140R. Irrespective of the assessed risks of material misstatement, the practitioner shall consider the need to design and perform substantive procedures for disclosures that, in the practitioner’s judgement, are material. (Ref: Para. A440R–A441R)

141R. The practitioner shall consider whether external confirmation procedures are to be performed. (Ref: Para. A442–A443)

1.            If substantive procedures are performed at an interim date and the practitioner intends to extend the conclusions of those substantive procedures for the remaining period, the practitioner shall perform: (Ref: Para. A444–A445)
   1.                 Substantive procedures, combined with tests of controls for the period subsequent to the interim period; or
   2.                 If the practitioner determines that it is sufficient, substantive procedures only that provide a reasonable basis for extending the conclusions to the period subsequent to the interim period.

Analytical Procedures

Sampling

1.            If the practitioner uses sampling as a means for selecting items for testing, the practitioner shall: (Ref: Para. A449)
   1.                 Consider the purpose of the procedure and the characteristics of the population from which the sample will be drawn;
   2.                 Determine a sample size sufficient to reduce sampling risk to an appropriately low level; and
   3.                 Select the sample, perform procedures on the items selected, and evaluate the results.

Estimates and Forward–Looking Information

Revising the Risk Assessment in a Reasonable Assurance Engagement

147R. If the practitioner becomes aware of a matter or obtains new information that is inconsistent with the evidence on which the practitioner originally based the identification and assessment of the risks of material misstatement at the assertion level for the disclosures, the practitioner shall:

1.                 Revise, if necessary, the assessment of the risks of material misstatement; and

1.                 Perform additional procedures to obtain further evidence to enable the practitioner to express a reasonable assurance conclusion. (Ref: Para. A463R)

Determining Whether Additional Procedures Are Necessary in a Limited Assurance Engagement

148L. If the practitioner becomes aware of a matter that causes the practitioner to believe the sustainability information may be materially misstated, the practitioner shall design and perform additional procedures to obtain further evidence until the practitioner is able to: (Ref: Para A464L–A467L)

1.                 Conclude that the matter(s) is not likely to cause the sustainability information to be materially misstated; or

1.                 Determine that the matter(s) causes the sustainability information to be materially misstated.

The Entity’s Process for Assembling the Sustainability Information

Documentation

1.            The practitioner shall include in the engagement documentation:
   1.                 The overall responses in accordance with paragraphs 128L and 128R and the reasons for such responses;
   2.                 The results of the further procedures, including the conclusions where these are not otherwise clear;
   3.                 Identified or suspected fraud or non-compliance with laws and regulations and the procedures performed, the significant professional judgements made, and the conclusions reached thereon; and
   4.                 When applicable, conclusions reached about whether it is appropriate to use evidence about the operating effectiveness of controls obtained in previous engagements.

Accumulation and Consideration of Identified Misstatements

Accumulation of Identified Misstatements

1.            The practitioner shall accumulate misstatements identified during the engagement, other than those that are clearly trivial. (Ref: Para. A470–A476)
2.            The practitioner shall: (Ref: Para. A477–A480)
   1.                 Consider whether identified misstatements, either individually or in aggregate, may be due to fraud; and
   2.                 Respond appropriately if there are indicators that there may be material misstatements due to fraud.

Consideration of Identified Misstatements as the Engagement Progresses

1.            The practitioner shall determine whether the approach to the engagement needs to be revised if: (Ref: Para. A481)
   1.                 The nature of identified misstatements and the circumstances of their occurrence indicate that other misstatements may exist that, when aggregated with misstatements accumulated during the engagement, could be material; or
   2.                 The misstatements accumulated during the engagement may, in the aggregate, result in the sustainability information being materially misstated.

Communicating and Correcting Misstatements

1.            The practitioner shall communicate to management, on a timely basis, all misstatements accumulated during the assurance engagement, and shall request management to correct those misstatements. (Ref: Para. A482)
2.            If, at the practitioner’s request, management has examined the sustainability information and corrected misstatements that were detected, the practitioner shall perform additional procedures with respect to the work performed by management to determine whether material misstatements remain.
3.            If management refuses to correct some or all of the misstatements communicated by the practitioner, the practitioner shall obtain an understanding of management’s reasons for not doing so and shall consider that understanding when forming the practitioner’s conclusion. (Ref: Para. A483)

Evaluating the Effect of Uncorrected Misstatements

1.            Prior to evaluating the effect of uncorrected misstatements, the practitioner shall consider whether the results of procedures performed and evidence obtained indicate that materiality needs to be revised.
2.            The practitioner shall determine whether uncorrected misstatements are material, individually or in the aggregate. In making this determination, the practitioner shall consider the size and nature of the misstatements, and the particular circumstances of their occurrence. (Ref: Para. A484–A498)

Documentation

1.            The practitioner shall include in the engagement documentation:
   1.                 All misstatements accumulated during the engagement, other than those that are clearly trivial, and whether they have been corrected (paragraphs 153 and 156); and
   2.                 The practitioner’s conclusion as to whether uncorrected misstatements are material, individually or in aggregate, and the basis for that conclusion (paragraph 160).

Evaluating the Description of Applicable Criteria

1.            The practitioner shall evaluate whether the sustainability information adequately references or describes the applicable criteria and the sources of those criteria. (Ref: Para. A499–A501)

Subsequent Events

1.            The practitioner shall: (Ref: Para. A502–A504L)
   1.                 Perform procedures to identify events occurring up to the date of the assurance report that may have an effect on the sustainability information and the assurance report; and
   2.                 Evaluate the sufficiency and appropriateness of evidence obtained about whether such events are appropriately reflected in that sustainability information in accordance with the applicable criteria.
2.            The practitioner shall respond appropriately to facts that become known to the practitioner after the date of the assurance report, that, had they been known to the practitioner at that date, may have caused the practitioner to amend the assurance report. (Ref: Para. A505)

Written Representations from Management and Those Charged with Governance

1.            The practitioner shall request from management and, where appropriate, those charged with governance a written representation: (Ref: Para. A506–A507)
   1.                 That they have fulfilled their responsibility for the preparation of the sustainability information, including comparative information where appropriate, in accordance with the applicable criteria, as set out in the terms of the engagement;
   2.                 That they have provided the practitioner with all relevant information and access as agreed in the terms of the engagement and reflected all relevant matters in the sustainability information;
   3.                 Whether they believe the effects of uncorrected misstatements are immaterial, individually and in the aggregate, to the sustainability information. A summary of such items shall be included in, or attached to, the written representation;
   4.                 Whether they believe that significant assumptions used in making estimates and preparing forward-looking information are appropriate;
   5.                 That they have communicated to the practitioner all deficiencies in internal control relevant to the engagement that are not clearly trivial of which they are aware;
   6.                  Whether they have disclosed to the practitioner their knowledge of any fraud or suspected fraud or identified or suspected non-compliance with laws and regulations where the fraud or non-compliance could have a material effect on the sustainability information; and
   7.                 That they adjusted the sustainability information for or disclosed all events occurring subsequent to the date of the sustainability information and for which the applicable criteria require adjustment or disclosure.
2.            If, in addition to the required representations, the practitioner determines that it is necessary to obtain one or more written representations to support other evidence relevant to the sustainability information, the practitioner shall request them.
3.            When written representations relate to matters that are material to the sustainability information, the practitioner shall:
   1.                 Evaluate their reasonableness and consistency with other evidence obtained, including other representations (oral or written); and
   2.                 Consider whether those making the representations can be expected to be well-informed on those matters.
4.            The date of the written representations shall be as near as practicable to, but not after, the date of the assurance report.
5.            If one or more of the requested written representations are not provided or the practitioner concludes that there is sufficient doubt about the competence, integrity, ethical values, or diligence of those providing the written representations, or that the written representations are otherwise not reliable, the practitioner shall:
   1.                 Discuss the matter with management and, where appropriate, those charged with governance;
   2.                 Re-evaluate the integrity of those from whom the representations were requested or received and evaluate the effect that this may have on the reliability of representations (oral or written) and evidence in general; and 
   3.                 Take appropriate actions, including determining the possible effect on the conclusion in the assurance report.
6.            The practitioner shall disclaim a conclusion on the sustainability information or withdraw from the engagement, when withdrawal is possible under applicable law or regulation, if:
   1.                 The practitioner concludes that there is sufficient doubt about the integrity of the person(s) providing the written representations required by paragraphs 165(a) and (b) that written representations in these regards are not reliable; or
   2.                 The entity does not provide the written representations required by paragraphs 165(a) and (b).

Other Information

Obtaining the Other Information

1.            The practitioner shall: (Ref: Para. A508–A511)
   1.                 Identify the other information by determining, through discussion with management, the document or documents expected to be issued that will contain the sustainability information and the assurance report thereon, and the entity’s planned manner and timing of the issuance of such document(s); and
   2.                 Make arrangements with management to obtain in a timely manner prior to the date of the assurance report, the final version of such document(s).

Reading and Considering the Other Information

1.            The practitioner shall read the other information obtained prior to the date of the assurance report and, in doing so shall: (Ref: Para. A512–A513)
   1.                 Consider whether there is a material inconsistency between the other information and the sustainability information;
   2.                 Consider whether there is a material inconsistency between the other information and the practitioner’s knowledge obtained during the assurance engagement, in the context of evidence obtained and conclusions reached in the engagement; and
   3.                 Remain alert for indications that the other information, not related to the sustainability information or to the practitioner’s knowledge obtained during the engagement, appears to be materially misstated.

Responding When a Material Inconsistency Appears to Exist or Other Information Appears to Be Materially Misstated

1.            If the practitioner identifies that a material inconsistency appears to exist or becomes aware that the other information appears to be materially misstated, the practitioner shall discuss the matter with management and, if necessary, perform other procedures to conclude whether:
   1.                 A material misstatement of the other information exists;
   2.                 A material misstatement of the sustainability information exists; or
   3.                 The practitioner’s understanding of the entity and its environment needs to be updated.
2.            If the other information includes the entity’s financial report is subject to audit and the practitioner identifies that a material inconsistency appears to exist between those financial reports and the sustainability information, or becomes aware that the financial reports appear to be materially misstated, the practitioner shall also communicate the matter to the auditor of the entity’s financial report, unless prohibited by law or regulation, or professional requirements.

Responding When the Practitioner Concludes That a Material Misstatement of the Other Information Exists

1.            If the practitioner concludes that a material misstatement of the other information exists, the practitioner shall request management to correct the other information. If management: (Ref: Para. A514–A515)
   1.                 Agrees to make the correction, the practitioner shall determine that the correction is made; or
   2.                 Refuses to make the correction, the practitioner shall communicate the matter to those charged with governance and request that the correction be made.
2.            If the practitioner concludes that a material misstatement exists in the other information and it is not corrected after communicating with those charged with governance, the practitioner shall take appropriate action, including: (Ref: Para. A514–A515)
   1.                 Considering the implications for the assurance report and communicating with those charged with governance about how the practitioner plans to address the material misstatement in the assurance report; or (Ref: Para. A516)
   2.                 If withdrawal is possible under applicable law or regulation, withdrawing from the engagement. (Ref: Para. A517)

Responding When a Material Misstatement of the Sustainability Information Exists or the Practitioner’s Understanding of the Entity and Its Environment Needs to Be Updated

1.            If, as a result of performing the procedures in paragraph 172, the practitioner concludes that a material misstatement of the sustainability information exists, or the practitioner’s understanding of the entity and its environment needs to be updated, the practitioner shall respond appropriately. (Ref: Para. A518)

Forming the Assurance Conclusion

Evaluating the Evidence Obtained

1.            The practitioner shall evaluate the sufficiency and appropriateness of the evidence obtained, including evidence from the work performed by a practitioner’s external expert, another practitioner or internal audit function, and, if necessary in the circumstances, attempt to obtain further evidence. In making this evaluation, the practitioner shall: (Ref: Para. A519–A522)
   1.                 Evaluate whether the evidence obtained meets the intended purpose of the procedures; and
   2.                 Consider all evidence obtained, including evidence that is consistent or inconsistent with other evidence, and regardless of whether it appears to corroborate or to contradict the disclosures.
2.            The practitioner shall evaluate whether judgements and decisions made by management in the estimates made and assumptions used in preparing the sustainability information, including with respect to forward-looking information, even if they are individually reasonable, are indicators of possible management bias. When indicators of possible management bias are identified, the practitioner shall evaluate the implications for the assurance engagement. Where there is intention to mislead, management bias is fraudulent in nature.
3.            If the practitioner obtains evidence that is inconsistent with other evidence, the practitioner shall: (Ref: Para. A523–A526)
   1.                 Determine what modifications or additions to procedures are necessary to understand and address the inconsistency; and
   2.                 Consider the effect, if any, on other aspects of the assurance engagement.

Concluding

1.            The practitioner shall form a conclusion about whether the sustainability information is free from material misstatement, whether due to fraud or error. In forming that conclusion, the practitioner shall consider the practitioner’s evaluation in paragraphs 178 and 179 regarding the sufficiency and appropriateness of evidence obtained and the determination in paragraph 160 of whether uncorrected misstatements are material, individually or in the aggregate. (Ref: Para. A527)
2.            When the principles of fair presentation are embodied in the applicable criteria, the evaluation required by paragraph 181 shall also include consideration of: (Ref: Para. A528–A529)
   1.                 The overall presentation, structure, and content of the sustainability information; and
   2.                 When appropriate in the context of the criteria, the wording of the practitioner’s conclusion, or other engagement circumstances, whether the sustainability information represents the sustainability matters in a manner that achieves fair presentation.
3.            If sustainability information prepared in accordance with a fair presentation framework does not achieve fair presentation, the practitioner shall discuss the matter with management and, depending on the requirements of the applicable framework and how the matter is resolved, shall determine whether it is necessary to modify the conclusion in the assurance report in accordance with paragraph 203.
4.            If the sustainability information is prepared in accordance with compliance criteria, the practitioner is not required to evaluate whether the sustainability information achieves fair presentation. However, if the practitioner concludes that such sustainability information is misleading, the practitioner shall discuss the matter with management and, depending on how it is resolved, shall determine whether, and how, to communicate it in the practitioner’s report.

Scope Limitation

1.            If the practitioner is unable to obtain sufficient appropriate evidence, a scope limitation exists, and the practitioner shall either: (Ref: Para. A530–A531)
   1.                 Express a qualified conclusion;
   2.                 Disclaim a conclusion; or
   3.                 Withdraw from the engagement, if withdrawal is possible under applicable law or regulation, as appropriate.

Taking Overall Responsibility for Managing and Achieving Quality

1.            Prior to dating the assurance report, the engagement leader shall:
   1.                 Take responsibility for determining whether relevant ethical requirements, including independence, have been fulfilled.
   2.                 Determine, through review of engagement documentation and discussion with the engagement team, that sufficient appropriate evidence has been obtained to support the conclusions reached and for the assurance report to be issued.
   3.                 Review the sustainability information and the assurance report, to determine that the report to be issued will be appropriate in the circumstances.
   4.                 Determine that:
      1.                  The engagement leader’s involvement has been sufficient and appropriate throughout the engagement such that the engagement leader has the basis for determining that the significant judgements made and the conclusions reached are appropriate given the nature and circumstances of the engagement; and (Ref: Para. A532–A534)
      2.                The nature and circumstances of the engagement, any changes thereto, and the firm’s related policies or procedures have been taken into account in complying with the requirements of this ASSA.
   5.                 If the engagement is subject to an engagement quality review, determine that the engagement quality review has been completed.

Documentation

1.            The practitioner shall include in the engagement documentation:
   1.                 The basis for the engagement leader’s determination in accordance with paragraph 186(b) that sufficient appropriate evidence has been obtained, including:
      1.                  The determination in accordance with paragraph 50(d) that the work of another practitioner is adequate for the practitioner’s purposes;
      2.                The evaluation in accordance with paragraph 57 that the work of a practitioner’s external expert is adequate for the practitioner’s purposes;
      3.              The determination in accordance with paragraph 59(e) that the work of the internal audit function is adequate for the practitioner’s purposes; and
      4.              If the practitioner identified information that was inconsistent with their final conclusion regarding a significant matter and how the practitioner addressed the inconsistency (see paragraph 180); and (Ref: Para. A535)
   2.                 The basis for the engagement leader’s determination in accordance with paragraph 186(d)(i) that the engagement leader’s involvement has been sufficient and appropriate throughout the engagement. (Ref: Para. A536)

Preparing the Assurance Report

1.            The assurance report shall be in writing and shall contain a clear expression of the practitioner’s reasonable assurance opinion or limited assurance conclusion about the sustainability information. (Ref: Para. A537–A538)
2.            The practitioner’s conclusion shall be clearly separated from information or explanations that are not intended to affect the practitioner’s conclusion, including any:
   1.                 Emphasis of Matter paragraphs;
   2.                 Other Matter paragraphs;
   3.                 Findings related to particular aspects of the engagement;
   4.                 Recommendations; or
   5.                 Additional information included in the assurance report.

The wording used shall make it clear that an Emphasis of Matter paragraph, Other Matter paragraph, findings, recommendations or additional information is not intended to detract from the practitioner’s conclusion. (Ref: Para. A537–A538)

Assurance Report Content

1.            The assurance report shall include at a minimum the following basic elements: (Ref: Para. A539, A567–A569)
   1.                 A title that clearly indicates the report is an independent practitioner’s limited, reasonable or combined limited and reasonable assurance report. (Ref: Para. A540)
   2.                 An addressee. (Ref: Para. A541)
   3.                 The practitioner’s conclusion in the first section of the assurance report, which: (Ref: Para. A542–A552)
      1.                  Includes a heading reflecting the type of conclusion provided, either:
         1.                    For unmodified conclusions, “Reasonable Assurance Opinion,” “Limited Assurance Conclusion,” or appropriate headings for an assurance report for a combined reasonable assurance and limited assurance engagement; or
         2.                    For modified conclusions, the heading in a. above shall be prefixed with “Qualified,” “Adverse,” or “Disclaimer of” as appropriate, and, for an assurance report for a combined reasonable and limited assurance engagement, clear identification of which opinion(s) or conclusion(s) is modified;
      2.                Identifies the entity whose sustainability information has been subject to the assurance engagement;
      3.              Identifies or describes the level of assurance, either reasonable or limited or different levels of assurance for different parts of the sustainability information, obtained by the practitioner; (Ref: Para. A542)
      4.              Identifies or describes the sustainability information subject to the assurance engagement, including, if appropriate, the sustainability matters and how that information is reported; (Ref: Para. A543–A544)
      5.                 Specifies the date of, or period or periods covered by the sustainability information;
      6.              Expresses a conclusion, which: (Ref: Para. A545L–A547)
         1.                    For reasonable assurance, shall be expressed in a positive form, that the sustainability information is prepared or fairly presented, in all material respects, in accordance with the applicable criteria; or
         2.                    For limited assurance, shall be expressed in a form that conveys whether, based on the procedures performed and evidence obtained, a matter(s) has come to the practitioner’s attention to cause the practitioner to believe that the sustainability information is not prepared or not fairly presented, in all material respects, in accordance with the applicable criteria;
      7.            Identifies the applicable criteria, whether framework criteria, entity-developed criteria or both, and, for entity-developed criteria, where it is located; (Ref: A548–A551)
      8.          The conclusion in paragraph 190(c)(vi) shall be phrased in terms of: (Ref: Para. A545L–A547)
         1.                    The sustainability information and the applicable criteria; or
         2.                    A statement made by the appropriate party(ies); and
      9.              When appropriate, the conclusion shall inform the intended users of the context in which the practitioner’s conclusion is to be read. (Ref: Para. A552)
   4.                 The basis for conclusion directly following the Conclusion section, with the heading “Basis for Opinion” for a reasonable assurance report, “Basis for Conclusion” for a limited assurance report, or appropriate heading(s) for an assurance report for a combined reasonable and limited assurance engagement that:
      1.                  States that the engagement was conducted in accordance with ASSA 5000 General Requirements for Sustainability Assurance Engagements; (Ref: Para. A553)
      2.                For a limited assurance engagement, states that:
         1.                    The procedures in a limited assurance engagement vary in nature and timing from, and are less in extent than for, a reasonable assurance engagement; and
         2.                    Consequently, the level of assurance obtained in a limited assurance engagement is substantially lower than the assurance that would have been obtained had a reasonable assurance engagement been performed;
      3.              Refers to the section of the assurance report that describes the practitioner’s responsibilities in accordance with this ASSA (see paragraph 190(h));
      4.              States that the practitioner complies with the independence and other ethical requirements of:
         1.                    The Code related to sustainability assurance engagements; or
         2.                    Other professional requirements or requirements in law or regulation, and shall:

1.                      Identify those requirements; and
2.                    Disclose the name of the appropriate authority that has determined such requirements to be at least as demanding as the provisions of the Code related to sustainability assurance engagements;  
   1.                 If the relevant ethical requirements require the practitioner to publicly disclose when the practitioner applied independence requirements specific to sustainability assurance engagements of certain entities, the statement in accordance with part (iv) above shall indicate that the practitioner is independent of the entity in accordance with the independence requirements applicable to the sustainability assurance engagements of those entities; (Ref: Para. A554)
   2.              States that the firm of which the practitioner is a member applies:
      1.                    ASQM 1; or
      2.                    Other professional requirements, or requirements in law or regulation, and shall:

1.                      Identify those requirements; and
2.                    Disclose the name of the appropriate authority that has determined such requirements to be at least as demanding as ASQM 1;
   1.            States whether the practitioner believes that the evidence the practitioner has obtained is sufficient and appropriate to provide a basis for the practitioner’s conclusion; and
   2.          If the practitioner expresses a modified conclusion, provides a description of the matter(s) giving rise to the modification.

1.                 Where applicable, a section with a heading "Other Information,” containing the matters in accordance with paragraph 202.
2.                  A section with the heading "Responsibilities for the Sustainability Information” that:
   1.                  States that management or those charged with governance, as appropriate, is responsible for: (Ref: Para. A555–A556)
      1.                    The preparation and, if applicable, fair presentation of the sustainability information in accordance with the applicable criteria; and (Ref: Para. A557)
      2.                    Designing, implementing and maintaining such internal controls that management determines is necessary to enable the preparation of sustainability information in accordance with the applicable criteria that is free from material misstatement, whether due to fraud or error; and
   2.                If those responsible for oversight of the process to prepare the sustainability information are different from those who fulfill the responsibilities described in (f)(i), identifies those responsible for oversight. (Ref: Para. A556)
3.                 If applicable, a section with the heading “Inherent Limitations in Preparing the Sustainability Information” that describes any significant inherent limitations associated with the measurement or evaluation of the sustainability matters against the applicable criteria, including inherent limitations relating to forward-looking information included in the sustainability information. (Ref: Para. A494, A558–A560 and A579)
4.                 A section with the heading "Practitioner’s Responsibilities” that states that: (Ref: Para. A555)
   1.                  The objective of the practitioner is to plan and perform the assurance engagement to obtain limited or reasonable assurance, as applicable, about whether the sustainability information is free from material misstatement, whether due to fraud or error, and to issue an assurance report that includes a conclusion (for limited assurance) or opinion (for reasonable assurance);
   2.                Misstatements can arise from fraud or error, and:
      1.                    Are considered material if, individually or in the aggregate, they could reasonably be expected to influence the decisions of intended users taken on the basis of the sustainability information; or
      2.                    If materiality is defined or described differently in the applicable criteria, include such definition or description;
   3.              The practitioner exercises professional judgement and maintains professional scepticism throughout the engagement;
   4.              The practitioner performs risk assessment procedures, including obtaining:
      1.                    For limited assurance: an understanding of internal controls relevant to the engagement to identify and assess the risks of material misstatement, whether due to fraud or error, at the disclosure level, but not for the purpose of providing a conclusion on the effectiveness of the entity’s internal control. If the limited assurance report includes a conclusion on the effectiveness of internal control, the practitioner shall omit the phrase that the practitioner’s consideration of internal control is not for the purpose of providing a conclusion on the effectiveness of the entity’s internal control; or
      2.                    For reasonable assurance: an understanding of internal controls relevant to the engagement, to identify and assess the risks of material misstatement, whether due to fraud or error, at the assertion level for the disclosures, but not for the purpose of expressing an opinion on the effectiveness of the entity’s internal controls. If the reasonable assurance report includes an opinion on the effectiveness of internal control, the practitioner shall omit the phrase that the practitioner’s consideration of internal control is not for the purpose of expressing an opinion on the effectiveness of the entity’s internal control;
   5.                 The practitioner designs and performs procedures:
      1.                    For limited assurance: responsive to the assessed risks of material misstatement at the disclosure level; or
      2.                    For reasonable assurance: responsive to the assessed risks of material misstatement at the assertion level for the disclosures;
   6.              The risk of not detecting a material misstatement due to fraud is higher than for one due to error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations, or the override of internal controls.
5.                  For limited assurance, a section, with the heading "Summary of Work Performed," that contains an informative summary of the work performed as a basis for the practitioner’s conclusion. This section shall describe the nature, timing and extent of procedures performed sufficiently to enable users to understand the limited assurance the practitioner has obtained. (Ref: Para. A561–A565L)
6.                  The practitioner’s signature.
7.                 The location in the jurisdiction where the engagement leader practices.
8.                  The date of the assurance report. The assurance report shall be dated no earlier than the date on which: (Ref: Para. A566)
   1.                  The practitioner has obtained the evidence on which the practitioner’s conclusion is based, including evidence that those with the recognised authority have asserted that they have taken responsibility for the sustainability information; and
   2.                When an engagement quality review is required in accordance with ASQM 1 or the firm’s policies or procedures, the engagement quality review is complete.

Name of the Engagement Leader in the Assurance Report

1.            When the assurance report on sustainability information is for a listed entity, the name of the engagement leader shall be included, unless, in rare circumstances, such disclosure is reasonably expected to lead to a significant personal security threat. In the rare circumstances that the practitioner intends not to include the name of the engagement leader in the assurance report, the practitioner shall discuss this intention with those charged with governance to inform them of the practitioner’s assessment of the likelihood and severity of a significant personal security threat. (Ref: Para. A570–A572)

Reference to a Practitioner’s Expert in the Assurance Report

1.            If the practitioner refers to the work of a practitioner’s expert in the assurance report, the wording of that report shall not identify the expert, unless required by law or regulation, or otherwise imply that the practitioner’s responsibility for the conclusion expressed in that report is reduced because of the involvement of that expert. (Ref: Para. A99, A573–A575)

Other Reporting Responsibilities

1.            If the practitioner addresses other reporting responsibilities in the assurance report on the sustainability information that are in addition to the practitioner’s responsibilities under this ASSA, these other reporting responsibilities shall be addressed in a separate section in the assurance report with a heading “Report on Other Legal and Regulatory Requirements” or otherwise as appropriate to the content of the section. If these other reporting responsibilities address the same report elements as those presented under the reporting responsibilities required by this ASSA, the other reporting responsibilities may be presented in the same section as the related report elements required by this ASSA. (Ref: Para. A576–A577)
2.            If other reporting responsibilities are presented in the same section as the related report elements required by this ASSA, the practitioner’s report shall clearly differentiate the other reporting responsibilities from the reporting that is required by this ASSA. (Ref: Para. A578)
3.            If the assurance report contains a separate section that addresses other reporting responsibilities, the requirements of paragraph 190 shall be included under a section with a heading “[Limited, Reasonable, or Limited and Reasonable] Assurance Report on the Sustainability Information.” The “Report on Other Legal and Regulatory Requirements” shall follow the “[Limited, Reasonable, or Limited and Reasonable] Assurance Report on the Sustainability Information.” (Ref: Para. A578)
4.            If the practitioner is required by law or regulation to use a specific layout or wording of the assurance report, the assurance report shall refer to this ASSA only if the assurance report includes, at a minimum, each of the elements identified in paragraphs 190 and 191.

Engagements Conducted in Accordance with Both ASSA 5000 and Other Assurance Standards

1.            A practitioner may be required to conduct an assurance engagement in accordance with the assurance standards of a specific jurisdiction (the “other assurance standards”), and has additionally complied with this ASSA in the conduct of the engagement. If this is the case, the assurance report may refer to this ASSA in addition to the other assurance standards, but the practitioner shall do so only if:
   1.                 There is no conflict between the requirements in the other assurance standards and those in this ASSA that would lead the practitioner:
      1.                  to reach a different conclusion, or
      2.                not to include an Emphasis of Matter paragraph or Other Matter paragraph that, in the particular circumstances, is required by this ASSA; and
   2.                 The assurance report includes, at a minimum, each of the elements set out in paragraphs 190 and 191 when the practitioner uses the layout or wording specified by the other assurance standards. The assurance report shall identify such other assurance standards, including the jurisdiction of origin of the other assurance standards.

Unmodified Conclusion  

Emphasis of Matter Paragraph and Other Matter Paragraph

1.            If the practitioner considers it necessary to: (Ref: Para. A579–A582)
   1.                 Draw intended users’ attention to a matter presented or disclosed in the sustainability information that, in the practitioner’s judgement, is of such importance that it is fundamental to intended users’ understanding of that information (an Emphasis of Matter paragraph); or
   2.                 Communicate a matter other than those that are presented or disclosed in the sustainability information that, in the practitioner’s judgement, is relevant to intended users’ understanding of the engagement, the practitioner’s responsibilities or the assurance report (an Other Matter paragraph); and

this is not prohibited by law or regulation, the practitioner shall do so in a paragraph in the assurance report, with an appropriate heading, that clearly indicates the practitioner’s conclusion is not modified in respect of the matter.

1.            If the applicable criteria are designed for a specific purpose, the practitioner shall include an Emphasis of Matter paragraph that alerts readers to this fact, and that, as a result, the sustainability information may not be suitable for another purpose. (Ref: Para. A583–A584)

Other Information

1.            If the practitioner has obtained the other information by the date of the assurance report, the assurance report shall include a separate section in accordance with paragraph 190(e), except when the practitioner disclaims a conclusion, in which case an “Other Information” section is not included. (Ref: Para. A585)
2.            When the assurance report is required to include an Other Information section in accordance with paragraph 201, this section shall include:
   1.                 A statement that management or those charged with governance, as appropriate, is responsible for the other information;
   2.                 An identification of other information obtained by the practitioner prior to the date of the assurance report;
   3.                 A statement that the practitioner’s conclusion does not cover the other information and, accordingly, that the practitioner does not provide a conclusion thereon; (Ref: Para. A586)
   4.                 A description of the practitioner’s responsibilities relating to reading, considering, and reporting on other information as required by this ASSA; and
   5.                 Either:
      1.                  A statement that the practitioner has nothing to report with respect to the other information; or
      2.                If the practitioner has concluded that there is an uncorrected material misstatement of the other information, a statement that describes the uncorrected material misstatement of the other information.

Modified Conclusion

1.            The practitioner shall express a modified conclusion in the following circumstances:
   1.                 When, in the practitioner’s professional judgement, a scope limitation exists, and the effect of the matter could be material. In such cases, the practitioner shall express a qualified conclusion or a disclaimer of conclusion. (Ref: Para. A587, A593L–A595)
   2.                 When, in the practitioner’s professional judgement, the sustainability information is materially misstated. In such cases, the practitioner shall express a qualified conclusion or adverse conclusion. (Ref: Para. A588–A590, A593L–A595)
2.            The practitioner shall express a qualified conclusion when, in the practitioner’s professional judgement, the effects, or possible effects, of a matter are not so material and pervasive as to require an adverse conclusion or a disclaimer of conclusion. A qualified conclusion shall be expressed as being “except for” the effects, or possible effects, of the matter to which the qualification relates. (Ref: Para. A591–A594R)
3.            If the practitioner expresses a modified conclusion because of a scope limitation, but is also aware of a matter(s) that causes the sustainability information to be materially misstated, the practitioner shall include in the assurance report a clear description of both the scope limitation and the matter(s) that causes that the sustainability information to be materially misstated.
4.            If a statement made by management, or those charged with governance, as appropriate, in the sustainability information has identified and properly described that the sustainability information is materially misstated, the practitioner shall either:
   1.                 Express a qualified conclusion or adverse conclusion phrased in terms of the sustainability information and the applicable criteria; or
   2.                 If specifically required by the terms of the engagement to phrase the conclusion in terms of a statement made by the appropriate party(ies), express an unqualified conclusion, but include an Emphasis of Matter paragraph in the assurance report referring to the statement made by the appropriate party(ies), that identifies and properly describes that the sustainability information is materially misstated.

Comparative Information

1.            The practitioner shall determine whether the applicable criteria (or law or regulation) require comparative information to be included in the sustainability information and, if so, whether that comparative information is appropriately presented. (Ref: Para. A596)
2.            In determining whether the comparative information is appropriately presented, the practitioner shall evaluate whether: (Ref: Para. A597–A598)
   1.                 The comparative information is consistent with the disclosures presented in the prior period and, if not, any inconsistencies are addressed in accordance with the applicable criteria; and
   2.                 The criteria for measurement or evaluation of the sustainability information reflected in the comparative information are consistent with those applied in the current period or, if there have been changes, whether they have been properly applied and adequately disclosed.
3.            If the comparative information is not referred to in the practitioner’s assurance conclusion and was not subject to an assurance engagement in the prior period, the practitioner shall state that fact in an Other Matter paragraph. Such a statement does not, however, relieve the practitioner of the requirements in paragraphs 207–208. (Ref: Para. A599–A600)
4.            If the comparative information is not referred to in the practitioner’s conclusion and was subject to an assurance engagement in the prior period, the practitioner shall state in an Other Matter paragraph: (Ref: Para. A599–A600)
   1.                 If the assurance engagement for the prior period had a different level of assurance or a different engagement scope than the current period, that fact and what those differences were; or
   2.                 If the assurance engagement for the prior period was conducted by a predecessor practitioner:
      1.                  That fact;
      2.                The type of conclusion provided by the predecessor practitioner;
      3.              If the conclusion was modified, the reasons for any modification; and
      4.              The date of that report.
5.            Irrespective of whether the practitioner’s conclusion refers to the comparative information, if the practitioner becomes aware that there may be a material misstatement of the comparative information presented, the practitioner shall: (Ref: Para. A601)
   1.                 Discuss the matter with management and perform procedures appropriate in the circumstances;
   2.                 Consider the effect on the assurance report; and
   3.                 If the comparative information presented contains a material misstatement, and the comparative information has not been restated:
      1.                  When the practitioner’s conclusion refers to the comparative information, the practitioner shall express a qualified conclusion or an adverse conclusion in the assurance report; or
      2.                When the practitioner’s conclusion does not refer to the comparative information, the practitioner shall include an Other Matter paragraph in the assurance report describing the circumstances affecting the comparative information.

Documentation

Matters Arising After the Date of the Assurance Report

1.            If, in exceptional circumstances, the practitioner performs new or additional procedures or draws new conclusions after the date of the assurance report, the practitioner shall document: (Ref: Para. A602)
   1.                 The circumstances encountered;
   2.                 The new or additional procedures performed, evidence obtained, and conclusions reached, and their effect on the assurance report; and
   3.                 When and by whom the resulting changes to engagement documentation were made and reviewed.

* * *

Application and Other Explanatory Material

Introduction

Sustainability Information (Ref: Para. 2–5)

1.              Sustainability information is often intended to give insight into sustainability-related risks and opportunities for users to understand and evaluate the impacts of sustainability matters on the entity or the entity’s actual or potential impacts, positive or negative, on the environment, society or economy.
2.              The framework criteria determine the principles and concepts regarding the measurement or evaluation of sustainability matters.  Although the framework may not specify how to measure or evaluate all sustainability matters, it ordinarily embodies sufficient broad principles that can serve as a basis for the entity to select and apply reporting policies that are consistent with the underlying concepts in, and meet the objectives of, the requirements of the framework.
3.              The entity’s process to identify sustainability information to be reported, including the identification and selection of the sustainability matters and the reporting boundary, may be required by the sustainability reporting framework or entity-developed criteria. Such a process may be referred to as the entity’s “materiality assessment,” or “materiality process,” among other terms, as the process involves the application of materiality in identifying which information relevant to the information needs of intended users is material for the purposes of reporting. Appendix 2 illustrates how the entity’s process to identify sustainability information to be reported is considered by the practitioner throughout the engagement.
4.              As described in paragraph 80, in connection with the acceptance and continuance of the assurance engagement, the practitioner is required to obtain a preliminary knowledge about the sustainability information to be reported, and whether the scope of the engagement encompasses all or part of that sustainability information.

Premises in this ASSA (Ref: Para. 6–7)

1.              Law, regulation or professional requirements in a jurisdiction may specify relevant ethical requirements or requirements relating to quality management to be applied in the conduct of assurance engagements, and may provide guidance about what constitutes “at least as demanding” as the Code regarding relevant ethical requirements for assurance engagements, and ASQM 1 regarding a firm’s responsibility for its system of quality management.

Ethical Requirements (Ref: Para. 6(a), 7)

1.              As explained in paragraph A58, the Code sets out the fundamental principles of ethics that establish the standards of behaviour expected of an assurance practitioner and establishes the Australian Independence Standards. The fundamental principles are integrity, objectivity, professional competence and due care, confidentiality, and professional behaviour. Paragraph A59 describes the conceptual framework in the Code that an assurance practitioner is required to apply when addressing threats to compliance with the fundamental principles. Paragraphs A60–A61 describe matters that may give rise to potential threats to compliance and that may affect or influence the practitioner’s independence.
2.              Paragraph A62 explains that professional requirements, or requirements in law or regulation, addressing compliance with relevant ethical requirements are at least as demanding as the provisions of the Code related to sustainability assurance engagements when they address the matters referred to in paragraphs A58–A61 and impose obligations that achieve the aims of the requirements set out in the Code related to such engagements.

Quality Management (Ref: Para. 6(b), 7)

1.              As explained in paragraph A68, this ASSA has been written in the context of a range of measures taken to support the quality of assurance engagements. Such measures include a system of quality management implemented across the firm.
2.              Paragraph A69 explains the responsibilities of the firm to design, implement and operate a system of quality management for assurance engagements, and paragraph A70 describes the components addressed by such a system that is designed in accordance with the requirements of ASQM 1.
3.          As explained in paragraph A73, professional requirements, or requirements in law or regulation that deal with the firm’s responsibilities to design, implement, and operate a system of quality management are at least as demanding as ASQM 1 when they address all the matters referred to in paragraphs A69–A71 and impose obligations on the firm that achieve the aims of the objectives and requirements of ASQM 1.
4.          In accordance with ASQM 1, the objective of the firm is to design, implement and operate a system of quality management that provides the firm with reasonable assurance that:
   1.                 The firm and its personnel fulfill their responsibilities in accordance with professional standards and applicable legal and regulatory requirements, and conduct engagements in accordance with such standards and requirements; and
   2.                 Engagement reports issued by the firm or engagement leaders are appropriate in the circumstances.

Scope of this ASSA

Types and Presentation of Sustainability Information (Ref: Para. 8)

1.          The sustainability information presented by an entity may be limited to certain matters, such as selected metrics, targets or key performance indicators. Alternatively, the sustainability information may cover many different aspects of topics as required by the sustainability reporting framework or by law or regulation, or that the entity chooses to present voluntarily.
2.          Sustainability information may be presented in different ways, for example, in a separate sustainability report issued by the entity, as part of the entity’s annual report (e.g., a separately identified report within the annual report, as part of the management report or management commentary), in an integrated report, or through some other reporting mechanism. Depending on the applicable criteria, the sustainability information may be for a single entity, or may include information for entities that are part of a group or other entities in the reporting entity’s value chain.
3.          In some circumstances, the sustainability reporting framework may permit sustainability information to be incorporated by reference from other sources, such as the audited financial report or another section of a management report (i.e., a section other than that containing the sustainability information required to be reported). The information incorporated by reference may have been subject to an audit or an assurance engagement. If such information is within the scope of the sustainability assurance engagement, the practitioner responsible for the sustainability assurance engagement may intend to obtain evidence from the work performed by the financial statement auditor or another assurance practitioner. In these circumstances, the requirements in this ASSA addressing using the work of another practitioner apply, including the requirement to communicate, to the extent necessary in the circumstances, about the findings from another practitioner’s work.

Reasonable and Limited Assurance Engagements (Ref: Para. 9)

1.          When the disclosures relate to a number of aspects of topics, separate conclusions may be provided on each aspect. Each conclusion is expressed in the form that is appropriate to either a reasonable assurance engagement or a limited assurance engagement. References in the ASSAs to the conclusion in the assurance report include each conclusion when separate conclusions are provided.

Definitions (Ref: Para. 18)

Assertions

A16R.  Assertions are used by practitioners to consider the different types of potential misstatements that may occur when identifying and assessing, and responding to, the risks of material misstatement in a reasonable assurance engagement. Examples of assertions are provided in paragraph A415R.

Component

1.           
2.          The framework criteria may specify that the sustainability information to be reported should be for the same reporting entity as the related financial report (see also paragraph A35). For purposes of the ASSAs, components that include entities or business units required to be included in the reporting entity’s group financial report (e.g., subsidiaries of a parent entity) are referred to as group components. The framework criteria may also require the sustainability information to be extended to include information from other entities that are part of the reporting entity’s upstream or downstream value chain. For purposes of the ASSAs, components that include such entities are referred to as value chain components.

Component Practitioner

1.          A component practitioner may comprise individuals from a network firm, a firm that is not a network firm, or another office within the practitioner’s firm.
2.          In limited circumstances, the practitioner may be able to be sufficiently and appropriately involved in the work of another firm at a value chain component. For example, the reporting entity may have a direct business relationship with a supplier that allows management to arrange for the practitioner to obtain access to information at that entity or access to the firm that has performed work on that information. In those circumstances, if the practitioner intends to use such work and is able to be sufficiently and appropriately involved in the work, the other firm is a component practitioner for purposes of the ASSAs.

Criteria

1.          The criteria, particularly framework criteria, may include guidance about the sustainability matters (including the topics and aspects of topics) to be reported. The criteria also may establish how those sustainability matters are to be measured or evaluated, and how they are to be presented or disclosed.

Disclosure(s)

1.          The term “disclosure(s)” is used in this ASSA in the context of sustainability assurance engagements and refers to sustainability information about an aspect of a topic. Accordingly, it is not intended to have the same meaning as “financial statement disclosures” as defined or described in financial reporting frameworks.
2.          Appendix 1 explains the relationship between sustainability matters, sustainability information and the related disclosures. Disclosure(s) may include quantitative or qualitative information and can vary in form and length. Management’s disclosures provide a starting point in considering whether and how certain disclosures may be combined by the practitioner for the purpose of planning and performing the engagement (see also paragraphs A285–A287).

Engagement Leader

1.          The individual appointed as the engagement leader may be a partner or another senior staff member in the firm (e.g., a director or principal). Whether the individual is permitted to be an engagement leader in accordance with this ASSA depends on how the firm assigns responsibilities, and whether law, regulation or professional requirements include requirements that specify who may be permitted to accept responsibility for the engagement.
2.          The term engagement leader in this ASSA is the equivalent of “engagement partner” in ASQM 1.

Engagement Risk

1.          Engagement risk does not refer to, or include, the practitioner’s business risks, such as loss from litigation, adverse publicity, or other events arising in connection with particular sustainability matters.
2.          In general, engagement risk can be represented by the following components:
   1.                 Risks that the practitioner does not directly influence, which consist of:
      1.                  The susceptibility of the sustainability information to a material misstatement before consideration of any related controls applied by the entity (inherent risk); and
      2.                The risk that a material misstatement that occurs in the sustainability information will not be prevented, or detected and corrected, on a timely basis by the entity’s internal control (control risk); and
   2.                 The risk that the practitioner does directly influence, which is the risk that the procedures performed by the practitioner will not detect a material misstatement (detection risk).

A27R. Reducing engagement risk to zero is very rarely attainable or cost-beneficial. Therefore, reasonable assurance is less than absolute assurance due to factors such as the following:

• The use of selective testing.
• The inherent limitations of internal control.
• The fact that much of the evidence available to the practitioner is persuasive rather than conclusive.
• The use of professional judgement in gathering and evaluating evidence and forming conclusions based on that evidence.
• In some cases, the characteristics of the sustainability matters (e.g., forward-looking information).

Engagement Team

1.           
2.          The engagement team includes personnel, which includes any internal experts, and, if applicable, component practitioners. Another practitioner is not part of the engagement team.
3.          [Deleted by the AUASB.]

Aus A29.1 Internal auditors who provide direct assistance refers to the use of internal auditors to perform procedures under the direction, supervision and review of the practitioner. Although they may perform procedures similar to those performed by the practitioner, such internal auditors are not independent of the entity as is required of the practitioner. They are therefore not members of the engagement team. In Australia, the practitioners is prohibited from using internal auditors to provide direct assistance.

Entity

1.          An example of an identifiable portion of a legal or economic entity is a single factory or other form of facility, such as a landfill site.

Firm

1.          The legal nature of the organisation performing the assurance engagement may take many forms and may not be described as a firm.  

Fraud

1.          Although some form of management bias is inherent in subjective decisions relating to sustainability information, when there is intention to mislead, management bias is fraudulent in nature.
2.          Paragraphs A323, A473 and A479 provide examples of matters related to material misstatements due to fraud or management bias in sustainability information, examples of where or how misstatements in sustainability information may arise and examples of misstatements due to fraud in sustainability information, respectively.

Group

1.          A single legal entity organised with branches or divisions is also a group for purposes of this ASSA if the sustainability information for those branches and divisions is included in the single legal entity’s sustainability information through an aggregation process.

Group Sustainability Information

1.          The framework criteria may specify that the sustainability information to be reported should be for the same reporting entity as the related financial report. For example, if consolidated financial report are required to be prepared in accordance with the applicable financial reporting framework, then the sustainability information would include information for the same entities or business units included in the consolidated financial report. The criteria may also require the sustainability information to be extended to include information from other entities that are part of the upstream or downstream value chain. Such sustainability information, including information from the value chain, is referred to as “group sustainability information” in the ASSAs.

Intended Users

1.          Examples of intended users include shareholders, investors, lenders and other creditors who may use sustainability information to make resource allocation decisions. Other intended users who may be interested in the sustainability information reported by the organisation include consumers, taxpayers, employees, competitors, prudential authorities, central banks and bodies in charge of financial stability oversight, those granting public contracts, partners, suppliers, community, Indigenous Peoples, government, regulators, and interest groups.
2.          In some cases, there may be intended users other than those to whom the assurance report is addressed. The practitioner may not be able to identify all those who will read the assurance report, particularly when a large number of people have access to it. In such cases, particularly when possible users are likely to have a broad range of interests in the sustainability matters, intended users may be limited to major stakeholders with significant and common interests. Intended users may be identified in different ways, for example, by agreement between the practitioner and management or those charged with governance, or by law or regulation.
3.          In some cases, specific users (for example, lenders) may request the appropriate party(ies) to arrange for an assurance engagement to be performed on sustainability information that has been prepared using criteria that are designed for a specific purpose. When engagements use criteria that are designed for a specific purpose, paragraph 200 requires a statement alerting readers to this fact. In addition, the practitioner may consider it appropriate to indicate that the assurance report is intended solely for specific users. Depending on the engagement circumstances, this may be achieved by restricting the distribution or use of the assurance report (see paragraph A584).

Partner

1.          As noted in paragraph A31, the entity performing the assurance engagement may not be described as a firm. Therefore, the individual with authority to bind the organisation with respect to the performance of the engagement may not carry the title of partner.

Reporting Boundary

1.          In some cases, framework criteria may specify the reporting boundary. In other circumstances, the reporting boundary may be determined by the entity, in which case the reporting boundary will be part of the entity-developed criteria. The reporting boundary may vary for different topics or aspects of topics (e.g., some key performance indicators may have different boundaries from other key performance indicators because of the nature of the sustainability matters).
2.          Although the entity’s sustainability information and financial report may relate to the same reporting entity, the reporting boundary for sustainability information may differ from the boundary for purposes of preparing financial report. For example, the reporting boundary for sustainability information may include activities, operations, relationships, or resources up and down the entity’s value chain. An entity’s supply chain is part of the value chain.

Substantive Procedures

1.          Analytical procedures performed to respond to an assessed risk of material misstatement are substantive in nature and therefore this ASSA requires the practitioner to develop an expectation as the basis for evaluating the results of those procedures (see paragraphs 143L and 143R). Analytical procedures may also be used as risk assessment procedures to help identify inconsistencies, unusual events or conditions, and amounts, ratios, and trends that indicate matters that may have implications for the engagement. Unusual or unexpected relationships that are identified may assist the practitioner in identifying risks of material misstatement, including risks of material misstatement due to fraud.

Sustainability Information

1.          As explained in paragraph 2, sustainability information is information about sustainability matters and may cover a number of topics and aspects of those topics. Paragraph 2 also explains that law or regulation or sustainability reporting frameworks may describe sustainability matters, topics or aspects of topics in different ways. Examples of topics and aspects of topics include the following:

1.          As explained in paragraph 5, the scope of the assurance engagement may not extend to the entirety of the sustainability information reported. Therefore, for purposes of the ASSAs, the term “sustainability information” is to be read as the information that is subject to assurance. Sustainability information not subject to the assurance engagement that is included in a document or documents containing the sustainability information subject to the assurance engagement and the assurance report thereon is other information.

Sustainability Matters

1.          Law or regulation or sustainability reporting frameworks may define or describe sustainability matters in different ways. Depending on the criteria, sustainability matters may address:

• The impacts on the entity’s strategy, business model or performance;
• The impacts of the entity’s activities, products and services on the environment, society or economy; or
• The entity’s sustainability policies, plans, goals or targets.

1.          In addition to impacts, the criteria may also refer to risks and opportunities (e.g., how sustainability-related risks and opportunities could reasonably be expected to affect the entity’s prospects) or dependencies (e.g., resources and relationships throughout the entity’s value chain that may affect the entity’s strategy or business model).

Conduct of an Assurance Engagement in Accordance with the ASSAs

Complying with Standards that Are Relevant to the Engagement (Ref: Para. 19–20)

1.          In some cases, another ASSA is also relevant to the engagement. Another ASSA is relevant to the engagement when that ASSA is in effect, the subject matter of the ASSA is relevant to the engagement, and the circumstances addressed by the ASSA exist.
2.          The Australian Auditing Standards (ASAs) and Australian Standards on Review Engagements (ASREs) have been written for audits and reviews of historical financial information, respectively, and do not apply to other assurance engagements. They may, however, provide guidance in relation to the engagement process for practitioners undertaking a sustainability assurance engagement in accordance with this ASSA.

Text of an ASSA (Ref: Para. 21)

1.          ASSAs contain the objectives of the practitioner in following the ASSA, and requirements designed to enable the practitioner to meet those objectives. In addition, they contain related guidance in the form of application and other explanatory material, introductory material that provides context relevant to a proper understanding of the ASSA, and definitions.
2.          The objectives in an ASSA provide the context in which the requirements of the ASSA are set, and are intended to assist in:
   1.                 Understanding what is to be accomplished; and
   2.                 Deciding whether more needs to be done to achieve the objectives.

The proper application of the requirements of an ASSA by the practitioner is expected to provide a sufficient basis for the practitioner’s achievement of the objectives. However, because the circumstances of assurance engagements vary widely, and all such circumstances cannot be anticipated in the ASSA, the practitioner is responsible for determining the procedures necessary to fulfill the requirements of relevant ASSAs, and to achieve the objectives stated therein. In the circumstances of an engagement, there may be particular matters that require the practitioner to perform procedures in addition to those required by relevant ASSAs to meet the objectives specified in those ASSAs.

1.          The requirements of ASSAs are expressed as “shall.”
2.          Where necessary, the application and other explanatory material provides further explanation of the requirements and guidance for carrying them out. In particular, it may:

• Explain more precisely what a requirement means or is intended to cover.
• Include examples that may be appropriate in the circumstances.

While such guidance does not in itself impose a requirement, it is relevant to the proper application of the requirements. The application and other explanatory material may also provide background information on matters addressed in an ASSA. Where appropriate, additional considerations specific to public sector entities or smaller or less complex entities are included within the application and other explanatory material. These additional considerations assist in the application of the requirements in the ASSAs. They do not, however, limit or reduce the responsibility of the practitioner to apply and comply with the requirements in an ASSA.

1.          Definitions are provided in an ASSA to assist in the consistent application and interpretation of the ASSA and are not intended to override definitions that may be established for other purposes, whether by laws, regulations or otherwise.
2.          Appendices form part of the application and other explanatory material. The purpose and intended use of an appendix are explained in the body of the related ASSA or within the title and introduction of the appendix itself.

Complying with Relevant Requirements (Ref: Para. 22–23)

1.          Although some procedures are required only for reasonable assurance engagements, they may nonetheless be appropriate in some limited assurance engagements.
2.          The requirements of this ASSA and any other relevant ASSAs are designed to enable the practitioner to achieve the objectives specified in the ASSA, and thereby the overall objectives of the practitioner. Accordingly, other than in exceptional circumstances, the practitioner is required to comply with each requirement that is relevant in the circumstances of the assurance engagement.

Documentation of a Departure from a Relevant Requirement (Ref: Para. 24)

1.          The engagement documentation requirements apply only to requirements that are relevant in the circumstances. A requirement is not relevant only in the cases when the requirement is conditional and the condition does not exist (for example, the requirement to modify the practitioner’s conclusion when there is an inability to obtain sufficient appropriate evidence, and there is no such inability).

Acceptance and Continuance of the Assurance Engagement

Relevant Ethical Requirements, Including Those Related to Independence (Ref: Para. 26(a), 34–37)

1.          The Code sets out the fundamental principles of ethics that establish the standards of behaviour expected of an assurance practitioner and establishes the Australian Independence Standards. The fundamental principles are integrity, objectivity, professional competence and due care, confidentiality and professional behaviour. The Code also specifies the required approach for a professional accountant to comply with the fundamental principles and, when applicable, the Australian Independence Standards. Law or regulation in a jurisdiction may also contain provisions addressing ethical requirements, including independence, such as privacy laws affecting the confidentiality of information.
2.          The Code provides a conceptual framework which an assurance practitioner is required to apply when addressing threats to compliance with the fundamental principles, including:
   1.                 Identifying threats to compliance with the fundamental principles. Threats fall into one or more of the following categories:
      1.                  Self-interest;
      2.                Self-review;
      3.              Advocacy;
      4.              Familiarity; and
      5.                 Intimidation;
   2.                 Evaluating whether the threats identified are at an acceptable level; and
   3.                 If the identified threats to compliance with the fundamental principles are not at an acceptable level, addressing them by eliminating the circumstances that create the threats, applying safeguards to reduce threats to an acceptable level, or withdrawing from the engagement, where withdrawal is possible under applicable law or regulation.
3.          The Code sets out requirements and application material on various topics that may give rise to potential threats to compliance, including:

• Conflicts of interest.
• Professional appointments.
• Second opinions.
• Fees and other types of remuneration.
• Inducements, including gifts and hospitality.
• Custody of client assets.
• Responding to non-compliance with laws and regulations.

1.          The Code defines independence as comprising both independence of mind and independence in appearance. Independence safeguards the ability to form an assurance conclusion without being affected by influences that might compromise that conclusion. Independence enhances the ability to act with integrity, to be objective and to maintain an attitude of professional scepticism. The Australian Independence Standards in the Code address various matters that may affect or influence the practitioner’s independence, including:

• Fees.
• Gifts and hospitality.
• Actual or threatened litigation.
• Financial interests.
• Loans and guarantees.
• Business relationships.
• Family and personal relationships.
• Recent service with an assurance client.
• Serving as a director or officer of an assurance client.
• Employment with an assurance client.
• Long association of personnel with an assurance client.
• Provision of non-assurance services to an assurance client.

1.          Professional requirements, or requirements in law or regulation, addressing compliance with relevant ethical requirements are at least as demanding as the provisions of the Code related to sustainability assurance engagements when they address all the matters referred to in paragraphs A58–A61 and impose obligations that achieve the aims of the requirements set out in the Code related to such engagements.
2.          An appropriate authority could be a national standard setter, regulator, or oversight body with responsibility for audit, assurance or related relevant ethical requirements, or a designated accreditation organisation recognised by a public authority.

Considerations Specific to Public Sector Entities (Ref: Para. 26(a), 34)

1.          Statutory measures may provide safeguards for the independence of public sector practitioners. However, public sector practitioners or firms carrying out public sector assurance engagements may, depending on the terms of the mandate in a particular jurisdiction, need to adapt their approach to promote compliance with paragraph 34. This may include, where the public sector mandate does not permit withdrawal from the engagement, disclosure through a public report of circumstances that have arisen that would, if they were in the private sector, lead the practitioner to withdraw.

Engagement Leader Responsibilities for Acceptance and Continuance (Ref: Para. 28)

1.          Under ASQM 1, for acceptance and continuance decisions, the firm is required to make judgements about the firm’s ability to perform the engagement in accordance with professional requirements and applicable legal and regulatory requirements. The engagement leader may use the information considered by the firm in this regard in determining whether the conclusions reached regarding the acceptance and continuance of client relationships and engagements are appropriate. If the engagement leader has concerns regarding the appropriateness of the conclusions reached, the engagement leader may discuss the basis for those conclusions with those involved in the acceptance and continuance process.
2.          If the engagement leader is directly involved throughout the firm’s acceptance and continuance process, the engagement leader will be aware of the information obtained or used by the firm in reaching the related conclusions. Such direct involvement may also provide a basis for the engagement leader’s determination that the firm’s policies or procedures have been followed and that the conclusions reached are appropriate.
3.          When the firm is obligated by law or regulation to accept or continue an assurance engagement, the engagement leader may take into account information obtained by the firm about the nature and circumstances of the engagement.

Firm-level Quality Management (Ref: Para. 30)

1.          This ASSA has been written in the context of a range of measures taken to support the quality of sustainability assurance engagements. Such measures include:

• Competency requirements, such as education and experience, and ongoing continuing professional development as well as life-long learning requirements.
• A system of quality management implemented across the firm, i.e., ASQM 1, or professional requirements, or requirements in law or regulation, that are at least as demanding.
• When applicable, in accordance with ASQM 1, performance of engagement quality reviews in accordance with ASQM 2. [3]
• A comprehensive set of ethical requirements, including detailed independence requirements, founded on fundamental principles of integrity, objectivity, professional competence and due care, confidentiality and professional behaviour.

1.          ASQM 1 deals with the firm’s responsibilities to design, implement and operate a system of quality management for assurance engagements. It sets out the responsibilities of the firm for establishing quality objectives, identifying and assessing risks to the achievement of the quality objectives, and designing and implementing responses to address such risks, including certain specified responses. The specified responses in ASQM 1 include the firm’s responsibility to establish policies or procedures addressing engagements that are required to be subject to engagement quality reviews. ASQM 2 deals with the appointment and eligibility of the engagement quality reviewer, and the performance and documentation of the engagement quality review.
2.          A system of quality management addresses the following eight components:
   1.                 The firm’s risk assessment process;
   2.                 Governance and leadership;
   3.                 Relevant ethical requirements;
   4.                 Acceptance and continuance of client relationships and specific engagements;
   5.                 Engagement performance;
   6.                  Resources;
   7.                 Information and communication; and
   8.                 The monitoring and remediation process.

Firms or legislative or other requirements may use different terminology or frameworks to describe the components of the system of quality management.

1.          A firm’s system of quality management includes establishing a monitoring and remediation process designed to:

• Provide the firm with relevant, reliable and timely information about the design, implementation, and operation of the system of quality management.
• Take appropriate actions to respond to identified deficiencies such that deficiencies are remediated by the firm on a timely basis.

1.          Ordinarily, the engagement team may depend on the firm’s system of quality management unless:

• The engagement team’s understanding or practical experience indicates that the firm’s policies or procedures will not effectively address the nature and circumstances of the engagement; or
• Information provided by the firm or other parties about the effectiveness of such policies or procedures suggests otherwise.

For example, the engagement team may depend on the firm’s system of quality management in relation to:

• Competence and capabilities of personnel through their recruitment and formal training.
• Independence through the accumulation and communication of relevant independence information.
• Maintenance of client relationships through the firm’s policies or procedures for acceptance and continuance of client relationships and assurance engagements.
• Adherence to regulatory and legal requirements through the firm’s monitoring and remediation process.

1.          Professional requirements, or requirements in law or regulation, that deal with the firm’s responsibilities to design, implement, and operate a system of quality management are at least as demanding as ASQM 1 when they address all the matters referred to in paragraphs A69–A71 and impose obligations on the firm that achieve the aims of the objectives and requirements of ASQM 1.
2.          An appropriate authority could be a national standard setter, regulator, or oversight body with responsibility for audit, assurance or related relevant ethical requirements, or a designated accreditation organisation recognised by a public authority.

Engagement-level Quality Management

Overall Responsibility for Managing and Achieving Quality (Ref: Para. 31–32)

1.          Taking overall responsibility for managing and achieving quality on the engagement and being sufficiently and appropriately involved throughout the engagement may be demonstrated by the engagement leader in various ways, including:

• Involvement in the acceptance and continuance process to be able to determine that the firm’s policies or procedures for the acceptance and continuance of client relationships and assurance engagements have been followed.
• The engagement being planned and performed (including appropriate direction and supervision of engagement team members) in accordance with professional standards or requirements and applicable legal and regulatory requirements.
• Reviews being performed in accordance with the firm’s policies or procedures and reviewing the engagement documentation on or before the date of the assurance report.
• Appropriate engagement documentation being maintained to provide evidence of achievement of the practitioner’s objectives, and that the engagement was performed in accordance with this ASSA and relevant legal and regulatory requirements.
• Appropriate consultation being undertaken by the engagement team on difficult or contentious matters.

1.          The engagement leader remains ultimately responsible, and therefore accountable, for compliance with the requirements of this ASSA. The term “the engagement leader shall take responsibility for…” is used for those requirements that the engagement leader is permitted to assign the design or performance of procedures, tasks or actions to appropriately skilled or suitably experienced members of the engagement team. For requirements in this ASSA that state “the engagement leader shall…”, this ASSA expressly intends that the requirement or responsibility be fulfilled by the engagement leader. In such circumstances, the engagement leader may obtain information from the firm or other members of the engagement team in fulfilling the requirement.
2.          ASQM 1 requires the firm to establish quality objectives that address the firm’s governance and leadership that supports the design, implementation and operation of the system of quality management. The engagement leader’s responsibility for managing and achieving quality is supported by a firm culture that demonstrates a commitment to quality. A culture that demonstrates a commitment to quality is further shaped and reinforced by the engagement team members as they demonstrate expected behaviours when performing the engagement.
3.          The actions of the engagement leader, and appropriate messages to the other members of the engagement team, emphasise the fact that quality is essential in performing an assurance engagement, and the importance to the quality of the assurance engagement of:
   1.                 Performing work that complies with professional standards and relevant legal and regulatory requirements.
   2.                 Complying with the firm’s policies or procedures as applicable.
   3.                 Issuing a report for the engagement that is appropriate in the circumstances.
   4.                 The engagement team’s ability to raise concerns without fear of reprisals.
4.          Being sufficiently and appropriately involved throughout the engagement when procedures, tasks or actions have been assigned to other members of the engagement team may be demonstrated by the engagement leader in different ways, including:

• Informing assignees about the nature of their responsibilities and authority, the scope of the work being assigned and the objectives thereof; and to provide any other necessary instructions and relevant information.
• Direction and supervision of the assignees.
• Review of the assignees’ work to evaluate the conclusions reached, in addition to the requirements in paragraphs 46–49.

Application of Firm Policies or Procedures by Members of the Engagement Team (Ref: Para. 32)

1.          Within the context of the firm’s system of quality management, engagement team members from the firm are responsible for implementing the firm’s policies or procedures that are applicable to the engagement. As engagement team members from another firm are neither partners nor staff of the engagement leader’s firm, they may not be subject to the firm’s system of quality management or the firm’s policies or procedures. Further, the policies or procedures of another firm may not be similar to that of the engagement leader’s firm. For example, policies or procedures regarding direction, supervision and review may be different, particularly when the other firm is in a jurisdiction with a different legal system, language or culture than that of the engagement leader’s firm. Accordingly, if the engagement team includes individuals from another firm, different actions may need to be taken by the firm or the engagement leader to implement the firm’s policies or procedures in respect of the work of those individuals. For example, individuals who are not personnel may not be able to complete independence declarations directly on the firm’s independence systems. The firm’s policies or procedures may state that such individuals can provide evidence of their independence in other ways, such as written confirmation.

Characteristics of the Engagement Leader (Ref: Para. 33)

1.          ASQM 1 requires the firm to establish quality objectives that engagement team members are assigned to each engagement, including an engagement leader, who have appropriate competence and capabilities to consistently perform quality engagements.
2.          Sufficient sustainability competence provides the engagement leader with the ability to:

• Ask appropriate questions of a practitioner’s expert and evaluate whether the answers are judged to be reasonable in the engagement circumstances;
• Evaluate a practitioner’s expert’s work and, to the extent necessary, integrate it with the work of the engagement team as a whole; and
• Take responsibility for the conclusions reached on the engagement.

1.          What constitutes sufficient sustainability competence depends on the engagement circumstances and differs from engagement to engagement. Whether the engagement leader has sufficient sustainability competence in order to accept responsibility for the conclusions reached on the engagement is a matter of professional judgement, and may involve consideration of factors such as:

• The judgement involved in evaluating whether the criteria that the practitioner expects to be applied in the preparation of the sustainability information are suitable for the engagement circumstances.
• The judgement involved in determining whether the sustainability information in the scope of the assurance engagement is appropriate.
• The nature and complexity of the sustainability matters.
• The extent to which the sustainability matters are capable of precise measurement or whether there is a high degree of measurement uncertainty that may need significant knowledge and judgement.
• The engagement leader’s and engagement team’s competence and previous experience in relation to sustainability matters.

Relevant Ethical Requirements, Including Those Related to Independence

Engagement Leader Responsibilities for Relevant Ethical Requirements (Ref: Para. 35–37)

1.          Open and robust communication between the members of the engagement team about relevant ethical requirements may also assist in:

• Drawing the attention of engagement team members to relevant ethical requirements that may be of particular significance to the assurance engagement; and
• Keeping the engagement leader informed about matters relevant to the engagement team’s understanding and fulfillment of relevant ethical requirements and the firm’s related policies or procedures.

1.          In accordance with ASQM 1, the firm’s responses to address the quality risks in relation to relevant ethical requirements, including those related to independence for engagement team members, include policies or procedures for identifying, evaluating and addressing threats to compliance with the relevant ethical requirements.
2.          Appropriate actions the firm may take to address threats to compliance with relevant ethical requirements may include, for example:

• Following the firm’s policies or procedures regarding breaches of relevant ethical requirements, including communicating to or consulting with the appropriate individuals so that appropriate action can be taken, including as applicable, disciplinary action(s).
• Communicating with those charged with governance.
• Communicating with regulatory authorities or professional bodies. In some circumstances, communication with regulatory authorities may be required by law or regulation.
• Seeking legal advice.
• Withdrawing from the assurance engagement, when withdrawal is possible under applicable law or regulation.

Assurance Skills and Techniques, Professional Scepticism and Professional Judgement 

Professional Scepticism (Ref: Para. 39)

1.          Professional scepticism is an attitude that includes being alert to, for example:

• Evidence that is inconsistent with other evidence obtained.
• Information that calls into question the reliability of responses to enquiries or information intended to be used as evidence.
• Circumstances that suggest the need for procedures in addition to those required by relevant ASSAs.
• Conditions that may indicate likely misstatement.
• Conditions that may indicate possible fraud.

1.          Professional scepticism is necessary for the critical assessment of evidence. This includes questioning inconsistent evidence and the reliability of responses to enquiries and information intended to be used as evidence. It also includes consideration of the sufficiency and appropriateness of evidence obtained in the light of the circumstances. Maintaining professional scepticism throughout the engagement is necessary if the practitioner is, for example, to reduce the risks of:

• Overlooking unusual circumstances.
• Over-generalising when drawing conclusions from observations. 
• Using inappropriate assumptions in determining the nature, timing and extent of the procedures, and evaluating the results thereof.

1.          Unless the engagement involves assurance about whether documents are genuine, the practitioner may accept records and documents as genuine unless the practitioner has reason to believe the contrary. Nevertheless, the practitioner is required by paragraph 90 to consider the reliability of information intended to be used as evidence.
2.          The practitioner cannot be expected to disregard past experience of the honesty and integrity of those who provide evidence. Nevertheless, a belief that those who provide evidence are honest and have integrity does not relieve the practitioner of the need to maintain professional scepticism.
3.          Impediments to the exercise of professional scepticism at the engagement level may include, but are not limited to:

• Budget constraints, which may discourage the use of sufficiently experienced or technically qualified resources, including experts, when needed.
• Tight deadlines, which may negatively affect the behaviour of those who perform the work as well as those who direct, supervise and review that work.
• Lack of cooperation or undue pressures imposed by management, which may negatively affect the engagement team’s ability to resolve complex or contentious issues.
• Insufficient understanding of the entity and its environment, its system of internal control and the applicable criteria.
• Difficulties in obtaining access to records, facilities, certain employees, customers, vendors or others, which may cause the engagement team to bias the selection of sources of evidence and seek evidence from sources that are more easily accessible.
• Overreliance on automated tools and techniques, which may result in the engagement team not critically assessing evidence.
• Circumstances when there is no one generally accepted way in which to measure or evaluate the sustainability matters and report the sustainability information, which may result in practitioners being less willing to question management’s approach.
• Complexity of the engagement. The larger, more complex and more diverse the entity (e.g., the greater its geographical spread, and the more dependent it is on a long and diverse supply chain), the more challenging it may be to understand and evaluate:
  • Whether the sustainability matters are appropriate in the engagement circumstances; and
  • How much prominence should be given to each disclosure in the context of the sustainability information as a whole.

1.          Possible actions that the engagement team may take to mitigate impediments to the exercise of professional scepticism at the engagement level may include:

• Remaining alert to changes in the nature or circumstances of the engagement that necessitate requesting additional or different resources for the engagement.
• Explicitly alerting the engagement team to instances or situations when vulnerability to unconscious or conscious biases may be greater (e.g., areas involving greater judgement).
• Changing the composition of the engagement team, for example, requesting that more experienced individuals with greater skills or knowledge or specific expertise are assigned to the engagement.
• Involving more experienced members of the engagement team in more complex areas of the engagement or when dealing with members of management who are difficult or challenging to interact with.
• Involving members of the engagement team with specialised skills and knowledge or a practitioner’s expert to assist the engagement team with complex or subjective areas of the engagement.
• Involving appropriate resources to perform procedures to obtain evidence about sustainability information related to group components and value chain components.
• Modifying the nature, timing and extent of direction, supervision or review, for example, by more in-person oversight on a more frequent basis or more in-depth reviews of certain working papers.
• Communicating with those charged with governance when management imposes undue pressure or the engagement team experiences difficulties in obtaining access to records, facilities, certain employees, customers, vendors or others from whom evidence may be sought.

Professional Judgement (Ref: Para. 40)

1.          Professional judgement is essential to the proper conduct of an assurance engagement. This is because interpretation of relevant ethical requirements and the ASSAs, and the informed decisions required throughout the engagement, cannot be made without the application of relevant training, knowledge, and experience to the facts and circumstances. Professional judgement is necessary in particular regarding decisions about:

• The presence of the preconditions for an assurance engagement.
• Materiality and engagement risk.
• The nature, timing and extent of procedures used to meet the requirements of this ASSA and any other relevant ASSAs and to obtain evidence, including where, and to what extent, it is necessary to perform procedures at entities across the entity’s value chain.
• Evaluating whether sufficient appropriate evidence has been obtained, and whether more needs to be done to achieve the objectives of this ASSA and any other relevant ASSAs. In particular, in the case of a limited assurance engagement, professional judgement is required in evaluating whether a meaningful level of assurance has been obtained.
• The appropriate conclusions to draw based on the evidence obtained.
• The actions to take in exercising professional scepticism.
• Whether the engagement leader’s involvement throughout the engagement has been sufficient and appropriate such that the engagement leader has the basis for determining whether the significant judgements made, and the conclusions reached, are appropriate given the nature and circumstances of the engagement.

1.          The distinguishing feature of the professional judgement expected of a practitioner is that it is exercised by a practitioner whose training, knowledge and experience have assisted in developing the necessary competencies to achieve reasonable judgements.
2.          The exercise of professional judgement is based on the facts and circumstances that are known by the practitioner. It needs to be exercised throughout the engagement and be appropriately documented. Professional judgement can be evaluated based on whether the judgement reached reflects a competent application of assurance and measurement or evaluation principles and is appropriate in the light of, and consistent with, the facts and circumstances that were known to the practitioner up to the date of the practitioner’s assurance report. Professional judgement is not to be used as the justification for decisions that are not otherwise supported by the facts and circumstances of the engagement or sufficient appropriate evidence.

Engagement Resources (Ref: Para. 41)

1.          Resources include human, technological and intellectual resources. Human resources include members of the engagement team and, when applicable, a practitioner’s external expert. Technological resources include technological tools that may allow the practitioner to manage the engagement more effectively and efficiently. Intellectual resources include, for example, assurance methodologies, implementation tools, assurance guides, model programs, templates, checklists or forms.
2.          In determining whether sufficient and appropriate resources to perform the engagement have been assigned or made available to the engagement team, the engagement leader ordinarily may depend on the firm’s related policies or procedures (including resources). For example, based on information communicated by the firm, the engagement leader may be able to depend on the firm’s technological development, implementation and maintenance programs when using firm-approved technology to perform procedures.

Competence and Capabilities of the Engagement Team (Ref: Para. 42)

1.          When determining that the engagement team has the appropriate sustainability competence and competence and capabilities in assurance skills and techniques, the engagement leader may take into consideration such matters as the team’s:

• Understanding of, and practical experience with, sustainability assurance engagements of a similar nature and complexity through appropriate training and participation.
• Understanding of professional requirements and applicable legal and regulatory requirements applicable to the engagement.
• Expertise in the sustainability matters relevant to the engagement.
• Expertise in IT used by the entity or automated tools or techniques that are to be used by the engagement team in planning and performing the engagement.
• Knowledge of relevant industries in which the entity operates.
• Knowledge of laws, regulations or business practices relevant to the entity’s operations in a particular jurisdiction.
• Ability to exercise professional scepticism and professional judgement.
• Understanding of the firm’s policies or procedures.

1.          Sustainability assurance engagements may relate to a wide range of sustainability matters that require specialised skills and knowledge beyond those possessed by the engagement leader and other members of the engagement team and for which the work of a practitioner’s expert is used. A practitioner’s expert may be either a practitioner’s internal expert (who is a member of the engagement team), or a practitioner’s external expert.  A practitioner’s internal expert may be a partner or staff (i.e., personnel), including temporary staff, of the practitioner’s firm or a network firm. A practitioner’s expert may be needed to assist the practitioner in one or more areas.

1.       Considerations when deciding whether to use a practitioner’s expert may include:

• Whether management has used a management’s expert in preparing the sustainability information (see paragraph A101).
• The nature and significance of the sustainability information, including its complexity.
• The assessed risks of material misstatement.
• The expected nature of procedures to respond to identified risks, including the practitioner’s knowledge of and experience with the work of experts in relation to such matters, and the availability of alternative sources of evidence.

1.       When management has used a management’s expert in preparing the sustainability information, the practitioner’s decision on whether to use a practitioner’s expert may also be influenced by such factors as:

• The nature, scope and objectives of the management’s expert’s work.
• Whether the management’s expert is employed by the entity, or is a party engaged by it to provide relevant services.
• The extent to which management can exercise control or influence over the work of the management’s expert.
• The management’s expert’s competence and capabilities.
• Whether the management’s expert is subject to technical performance standards or other professional or industry requirements.
• Any controls within the entity over the management’s expert’s work.

1.       The more complex the engagement, including its geographical spread and the extent to which information is derived from the entity’s value chain, the more necessary it may be to consider how the work of a practitioner’s expert or another practitioner is to be integrated across the engagement.

Sufficient and Appropriate Involvement in the Work of a Firm Other than the Practitioner’s Firm (Ref: Para. 43)

1.       Paragraph 31 requires the engagement leader to be sufficiently and appropriately involved throughout the engagement. Paragraphs A75 and A79 provide examples of ways in which the engagement leader may demonstrate sufficient and appropriate involvement in the engagement. When the practitioner intends to obtain evidence from using work that has been performed, or will be performed, by a firm other than the practitioner’s firm, these examples may assist the engagement leader in determining whether it is possible for the engagement leader to be sufficiently and appropriately involved in that work.
2.       When work is performed in relation to sustainability information of a group component, there is a presumption that the practitioner would ordinarily be sufficiently and appropriately involved in that work.
3.       In certain circumstances, the practitioner may become aware that a separate engagement on sustainability information for a group component has been performed by a firm (including another office of the practitioner’s firm or a network firm). For example, that firm may have performed a separate assurance engagement on greenhouse gas emissions of a subsidiary that are included in the group sustainability information. Although the practitioner is unable to be involved because the separate engagement has already been completed, the practitioner may still intend to obtain evidence from using the work of that other firm for the group sustainability assurance engagement. In these circumstances, the requirements in paragraphs 50–55 would apply, including determining whether the evidence obtained from that other practitioner’s work is adequate for the practitioner’s purposes. If a similar separate engagement is expected to be performed in subsequent years relating to that group component, the practitioner would be able to consider it in developing the overall strategy and engagement plan for the group engagement, including the involvement of that other firm as a component practitioner (see paragraph 96).
4.       An inability to be sufficiently and appropriately involved in the work of a firm other than the practitioner’s firm may arise because the work has already been performed, the practitioner’s access to the work of that firm is restricted by law or regulation, or the work relates to a value chain component and neither the entity’s management nor the practitioner have any rights of access to that other firm’s work. Similarly, if the extent of the engagement leader’s involvement does not provide the basis for determining that the significant judgements made and the conclusions reached in relation to the work of a firm other than the practitioner’s firm are appropriate, the engagement leader is ordinarily not able to conclude that they can be sufficiently and appropriately involved. The engagement leader may also take account of firm policies or procedures in making the determination in accordance with paragraph 43.

Insufficient or Inappropriate Resources Assigned or Made Available (Ref: Para. 44)

1.       The engagement leader’s determination that the resources assigned or made available are insufficient or inappropriate in the circumstances of the engagement, and the appropriate actions to take, are matters of professional judgement. For example, if an assurance software program provided by the firm has not incorporated new or revised procedures related to sustainability disclosures required by new or revised framework criteria, timely communication of such information to the firm enables the firm to take steps to update and reissue the software promptly or to provide an alternative resource that enables the engagement team to comply with the new regulation in the performance of the engagement.
2.       For a group sustainability assurance engagement, the engagement leader’s determination about whether the resources assigned or made available are sufficient and appropriate may include considering whether there is a need to involve component practitioners with knowledge and experience of the laws, regulations, language or culture in certain jurisdictions.
3.       If the resources assigned or made available are insufficient or inappropriate in the circumstances of the engagement and additional or alternative resources have not been made available, appropriate actions may include:

• Changing the planned approach to the nature, timing and extent of direction, supervision and review (see also paragraph 47).
• Discussing an extension to the entity’s reporting deadlines with management or those charged with governance, when an extension is possible under applicable law or regulation.
• Following the firm’s policies or procedures for resolving differences of opinion if the engagement leader does not obtain the necessary resources for the engagement.
• Following the firm’s policies or procedures for withdrawing from the engagement, when withdrawal is possible under applicable law or regulation.

Using the Resources Assigned or Made Available (Ref: Para. 45)

1.       The firm’s policies or procedures may include required considerations or responsibilities for the engagement team when using firm-approved technological tools to perform procedures and may require the involvement of individuals with specialised skills or expertise in evaluating or analysing the output. The engagement team may be required, in accordance with the firm’s policies or procedures, to use the firm’s assurance methodology and specific tools and guidance. The engagement team may also consider whether the use of other intellectual resources is appropriate and relevant based on the nature and circumstances of the engagement, for example, an industry-specific assurance methodology or related guides and performance aids.

Direction, Supervision and Review

Engagement Leader’s Responsibility for Direction, Supervision and Review (Ref: Para. 46)

1.       ASQM 1 requires that direction, supervision and review is planned and performed on the basis that the work performed by less experienced engagement team members is directed, supervised and reviewed by more experienced engagement team members.
2.       Direction and supervision of the engagement team and the review of their work are firm-level responses that are implemented at the engagement level, of which the nature, timing and extent may be further tailored by the engagement leader in managing the quality of the engagement. Accordingly, the approach to direction, supervision and review will vary from one engagement to the next, taking into account the nature and circumstances of the engagement. The approach will ordinarily include a combination of addressing the firm’s policies or procedures and engagement specific responses.
3.       When an engagement is not carried out entirely by the engagement leader, or when the nature and circumstances of the engagement are more complex (e.g., when there are members of the engagement team spread across multiple jurisdictions), it may be necessary for the engagement leader to assign direction, supervision, and review to other members of the engagement team. However, as part of the engagement leader’s overall responsibility for managing and achieving quality on the engagement and to be sufficiently and appropriately involved, the engagement leader is required to determine that the nature, timing and extent of direction, supervision and review is undertaken in accordance with paragraph 47. In such circumstances, personnel or members of the engagement team may provide information to the engagement leader to enable the engagement leader to make the determination required by paragraph 47.

Direction

1.       Direction of the engagement team may involve informing the members of the engagement team of their responsibilities, such as:

• Contributing to the management and achievement of quality at the engagement level through their personal conduct, communication and actions.
• Maintaining a questioning mind and being aware of unconscious or conscious biases in exercising professional scepticism when gathering and evaluating evidence.
• Addressing threats to the achievement of quality, and the engagement team’s expected response. For example, budget constraints or resource constraints should not result in the engagement team members modifying planned procedures or failing to perform planned procedures.
• Fulfilling relevant ethical requirements.
• Understanding the objectives of the work to be performed and the detailed instructions regarding the nature, timing and extent of planned assurance procedures.
• The responsibilities of respective engagement team members to perform procedures, and of more experienced engagement team members to direct, supervise and review the work of less experienced engagement team members.

Supervision

1.       Supervision may include matters such as:

• Tracking the progress of the engagement, which includes monitoring:
  • The progress against the engagement plan;
  • Whether the objective of work performed has been achieved; and
  • The ongoing adequacy of assigned resources.
• Taking appropriate action to address issues arising during the engagement, including for example, reassigning planned procedures to more experienced engagement team members when issues are more complex than initially anticipated.
• Identifying matters for consultation or consideration by more experienced engagement team members during the engagement.
• Providing coaching and on-the-job training to help engagement team members develop skills or competencies.
• Creating an environment where engagement team members raise concerns without fear of reprisals.

Review

1.       Review of the engagement team’s work consists of consideration of whether, for example:

• The work has been performed in accordance with the firm’s policies or procedures, professional requirements and applicable legal and regulatory requirements.
• Significant matters have been raised for further consideration.
• Appropriate consultations have taken place and the resulting conclusions have been documented and implemented.
• There is a need to revise the nature, timing and extent of work performed.
• The work performed supports the conclusions reached and is appropriately documented.
• The evidence obtained is sufficient and appropriate to provide a basis for the practitioner’s conclusion.
• The objectives of the procedures have been achieved.

Determining the Nature, Timing and Extent of Direction, Supervision and Review (Ref: Para. 47)

1.       The approach to the direction and supervision of the members of the engagement team and the review of their work provides support for the engagement leader in fulfilling the requirements of this ASSA, and in concluding that the engagement leader has been sufficiently and appropriately involved throughout the engagement in accordance with paragraph 186(d)(i).
2.       The approach to direction, supervision and review may be tailored depending on, for example:

• The engagement team member’s previous experience with the entity and the subject matter.
• The complexity of the engagement.
• The assessed risks of material misstatement.
• The competence and capabilities of the individual engagement team members performing the work.
• The manner in which the reviews of the work performed are expected to take place (remote or in-person).
• The structure of the engagement team and the location of engagement team members.
• Whether engagement team members are from the practitioner’s firm, a network firm, or a firm that is not a network firm.

Review of Engagement Documentation (Ref: Para. 48)

1.       Timely review of engagement documentation by the engagement leader at appropriate stages throughout the engagement enables significant matters to be resolved to the engagement leader’s satisfaction on or before the date of the practitioner’s report. The engagement leader need not review all engagement documentation.
2.       The engagement leader exercises professional judgement in identifying significant judgements made by the engagement team. The firm’s policies or procedures may specify certain matters that are commonly expected to be significant judgements. Significant judgements may include matters related to planning and performing the engagement, as well as the conclusions reached by the engagement team.

1.       The engagement leader exercises professional judgement in determining other matters to review, for example based on:

• The nature and circumstances of the engagement.
• Which engagement team member performed the work.
• Matters relating to recent inspection findings.
• The requirements of the firm’s policies or procedures.

Review of Formal Written Communications (Ref: Para. 49)

1.       The engagement leader uses professional judgement in determining which written communications to review, taking into account the nature and circumstances of the engagement. For example, it may not be necessary for the engagement leader to review communications between the engagement team and management in the ordinary course of the engagement.

Using the Work of Others

Using the Work of Another Practitioner (Ref: Para. 50–55)

1.       Using the work of another practitioner may include using work that has already been completed, or that is yet to be performed but will be completed prior to completion of the practitioner’s engagement. Such work may specifically relate to sustainability matters or may be other assurance or non-assurance work that, in the practitioner’s judgement, is relevant to the sustainability assurance engagement. The practitioner exercises professional judgement in determining whether the work of another practitioner is relevant to, and is appropriate for purposes of the practitioner’s engagement, and the extent to which such work can be used in the circumstances. The extent of the practitioner’s procedures to evaluate the work of another practitioner in accordance with paragraph 50 is influenced by:

• The overall significance of the work to the practitioner’s engagement. For example, the greater the significance to the overall sustainability information of the disclosures for which the practitioner intends to obtain evidence from using the work of another practitioner, the more extensive the practitioner’s procedures are likely to be, including communication with another practitioner and determining whether it is necessary to review additional documentation of the work of that practitioner in accordance with paragraph 54;
• The ability of the practitioner to obtain access to another practitioner and their work. For example, when the work of another practitioner relates to information from a value chain component, neither the reporting entity’s management nor the practitioner may have rights of access to that other firm or its work. Paragraph A135 explains circumstances in which a limitation on scope may arise in relation to using the work of another practitioner; and
• Whether a one-to-many report of another practitioner is available (see paragraph 51).

1.       The guidance in paragraphs A136–A151 for using the work of a practitioner’s expert may also be helpful when obtaining evidence from using the work of another practitioner, in particular, the considerations described in paragraphs A137 and A151.

Complying with relevant ethical requirements that apply to using the work of another practitioner (Ref: Para. 50(a))

1.       Relevant ethical requirements may include provisions addressing the fulfillment of the practitioner’s ethical responsibilities related to using the work of another practitioner. These responsibilities may vary depending on whether the work performed by another practitioner is assurance or non-assurance work.  
2.       Whether an engagement performed by another practitioner is an assurance engagement depends on the circumstances. Considerations that may be relevant in distinguishing an assurance engagement from a non-assurance engagement include:

• The nature of the engagement. For example, agreed-upon procedures engagements performed in accordance with Standard on Related Services 4400[4] and consulting (or advisory) engagements are not assurance engagements.
• The nature of the procedures performed on the engagement. For example, a validation or verification engagement may be an assurance engagement if it is performed in accordance with recognised standards that enable the practitioner to design and perform procedures aimed at gathering sufficient appropriate evidence to support an assurance conclusion.
• The wording of the report of another practitioner. For example, the report for an assurance engagement includes the practitioner’s opinion, conclusion or other form of assurance statement based on the procedures performed and evidence obtained. Reports that only provide the practitioner’s findings would not be considered assurance engagements.

Evaluating the competence and capabilities of another practitioner (Ref: Para. 50(b))

1.       Determining whether another practitioner has the appropriate competence and capabilities is a matter of professional judgement and is influenced by the nature and circumstances of another practitioner’s work. The sources described in paragraph A141 related to the work of a practitioner’s expert may also be relevant when evaluating the competence and capabilities of another practitioner. Other factors that may be relevant include the consistency or similarity of laws and regulations, language and culture. When another practitioner is another firm within the same network as the practitioner’s firm and is subject to common network requirements or uses common network services, the practitioner may be able to depend on such network requirements, for example, those addressing professional training or recruitment, or that require the use of common systems, policies, methodologies and related implementation tools.

Evaluating the nature, scope and objectives of another practitioner’s work (Ref: Para. 50(c))

1.       Evaluating whether the nature, scope and objectives of another practitioner’s work are appropriate for the practitioner’s purposes may include obtaining an understanding of:

• The nature of the engagement performed by another practitioner, including whether it is a limited or reasonable assurance engagement, and whether that engagement exhibits a rational purpose;
• The applicable criteria relevant to that assurance engagement;
• The scope of the engagement;
• Whether the work performed was undertaken in accordance with recognised standards;
• Whether the work performed includes tests of controls, substantive procedures or both; and
• Whether the work performed has been supported by firm-level policies or procedures designed to address quality management.

Obtaining and evaluating a one-to-many report (Ref: Para. 51–52)

1.       The practitioner’s evaluation of the work of another practitioner may include obtaining and evaluating a one-to-many report as described in paragraph 51. Such a report may identify assurance procedures and the results of those procedures, including exceptions, and other related information that could affect the practitioner’s conclusions. Exceptions noted by another practitioner, or a modified conclusion, in such a report does not automatically mean that the report will not be useful for the assurance engagement on the reporting entity’s sustainability information. Rather, the exceptions, or the matter giving rise to a modified conclusion, in the one-to-many report are considered in the context of the significance to users of the reported information. In considering the exceptions or matters giving rise to a modified conclusion, the practitioner may seek to discuss such matters with that other practitioner, if possible in the circumstances. Such communication is dependent upon the reporting entity contacting the value chain entity, and obtaining that entity’s approval for the communication to take place.
2.       Depending on the nature of the information that is the subject of the one-to-many report, or other relevant assurance report of another practitioner, that report may identify complementary user entity controls that, if relevant to the user entity, may need to be designed and implemented by the user entity to have an appropriate basis for using the information obtained in preparing the sustainability information.
3.       The practitioner may determine that the one-to-many report does not provide sufficient appropriate evidence (e.g., the description of the procedures performed and results thereof may not provide sufficient evidence for the practitioner’s purposes). In such circumstances, the practitioner may consider whether it is practicable to supplement the understanding of another practitioner’s procedures and conclusions by communicating with that practitioner. If not practicable in the circumstances, the practitioner may need to perform other procedures to obtain sufficient appropriate evidence about the information from that value chain entity.

Communications with another practitioner (Ref: Para. 53)

1.       Relevant matters that the engagement team may request another practitioner to communicate include:

• Whether the other practitioner has complied with ethical requirements that are relevant to the engagement, including independence for an assurance engagement.
• Information about instances of non-compliance with laws and regulations that could give rise to a material misstatement of the sustainability information.
• A list of uncorrected misstatements identified by another practitioner during the engagement that are not clearly trivial.
• Indicators of possible bias in the preparation of relevant information.
• Description of any deficiencies in internal control identified by the other practitioner during the engagement.
• Other significant matters that another practitioner has communicated or expects to communicate to the entity, including fraud or suspected fraud.
• Any other matters that may be relevant to the sustainability information, or that another practitioner wishes to draw to the attention of the engagement team, including exceptions noted in any written representations that another practitioner requested from the component entity.
• The other practitioner’s overall findings, conclusion or opinion.

1.       If the practitioner determines that another practitioner’s communications are not adequate for the practitioner’s purposes, the practitioner may consider whether, for example:

• Further information can be obtained from another practitioner (e.g., through further discussions or meetings);
• Review of additional documentation of another practitioner may provide the practitioner with further information; or
• There are any concerns about another practitioner’s competence or capabilities.

Reviewing additional documentation of work performed by another practitioner (Ref: Para. 54)

1.       Determining whether to review additional documentation of another practitioner may include consideration of:

• The nature, timing and extent of the work performed by another practitioner;
• The competence and capabilities of another practitioner; and
• The significant judgements made by, and the findings or conclusions of, another practitioner about matters that are material to the sustainability information.

Evidence obtained from work of another practitioner inadequate for practitioner’s purposes (Ref: Para. 55)

1.       A scope limitation exists when the practitioner is unable to:

• Obtain evidence from the work of another practitioner that is adequate for the practitioner’s purposes; and
• Obtain, through alternative means, sufficient appropriate evidence over the disclosures for which the practitioner intended to use the work of another practitioner as evidence.

In such circumstances, the practitioner considers the implications for the engagement and the assurance report in accordance with paragraph 185.

Using the Work of a Practitioner’s Expert (Ref: Para. 56–57)

1.       The practitioner has sole responsibility for the assurance conclusion expressed, and that responsibility is not reduced by the practitioner’s use of the work of a practitioner’s expert. Nonetheless, if the practitioner using the work of a practitioner’s expert, having followed this ASSA, concludes that the work of that expert is adequate for the practitioner’s purposes, the practitioner may accept that expert’s findings or conclusions in the expert’s field as appropriate evidence.
2.       The nature, timing and extent of procedures to fulfill the requirement in paragraphs 56–57 will vary depending on the circumstances. Relevant considerations may include:

• The significance of the practitioner’s expert’s work in the context of the engagement (see also paragraph A140).
• The nature of the disclosure(s) to which that expert’s work relates.
• The assessed risks of material misstatement of the sustainability information to which that expert’s work relates.
• The practitioner’s knowledge of and experience with previous work performed by that expert.

1.       Agreement on the respective roles and responsibilities of the practitioner and the practitioner’s expert may also include agreement about access to, and retention of, each other’s engagement documentation. A practitioner’s internal expert is a member of the engagement team and therefore that expert’s working papers form part of the engagement documentation.
2.       Effective two-way communication facilitates the proper integration of the nature, timing and extent of the practitioner’s expert’s procedures with other work on the assurance engagement, and appropriate modification of the practitioner’s expert’s objectives during the course of the engagement. Identification of specific partners or staff who will liaise with the practitioner’s expert, and procedures for communication between that expert and the entity, assists timely and effective communication, particularly on larger engagements.
3.       When the work of a practitioner’s expert is to be used, it may be appropriate to perform some of the procedures required by paragraph 56 at the engagement acceptance or continuance stage. This is particularly so when the work of the practitioner’s expert will be fully integrated with the work of other assurance personnel and when the work of the practitioner’s expert is to be used in the early stages of the engagement, for example, during initial planning and risk assessment procedures.

Evaluating the competence, capabilities and objectivity of a practitioner’s expert (Ref: Para. 56(a))

1.       The competence, capabilities and objectivity of a practitioner’s expert are factors that significantly affect whether the work of the practitioner’s expert will be adequate for the practitioner’s purposes. Information regarding the competence, capabilities and objectivity of a practitioner’s expert may come from a variety of sources.

1.       A practitioner’s internal expert that is a partner or staff of a network firm is subject to the firm’s policies or procedures for network requirements and network services established as part of the firm’s system of quality management. In some instances, the practitioner’s internal expert of a network firm may be subject to common quality management policies or procedures as the practitioner’s firm, given that they are part of the same network.
2.       Quality management at the engagement level is supported by the firm’s system of quality management and informed by the specific nature and circumstances of the engagement. The practitioner may be able to depend on the firm’s related policies or procedures regarding the evaluation of the adequacy of an internal expert’s work. For example, the firm’s training programs may provide internal experts with an appropriate understanding of the interrelationship of their expertise with the assurance process. Reliance on such training may affect the nature, timing and extent of the practitioner’s procedures to evaluate the adequacy of the practitioner’s internal expert’s work.
3.       ASQM 1 requires the firm to have policies or procedures to address quality risks arising from the use of resources from a service provider, which includes the use of an external expert. A practitioner’s external expert is not a member of the engagement team and may not be subject to the firm’s policies or procedures under its system of quality management.

Evaluating the competence, capabilities and objectivity of a practitioner’s external expert (Ref: Para. 56(a)–(b))

1.       Relevant ethical requirements applicable to the practitioner when using the work of a practitioner’s external expert may include provisions addressing the fulfillment of the practitioner’s ethical responsibilities related to evaluating whether an external expert has the necessary competence, capabilities and objectivity for the practitioner’s purposes. Such provisions may prohibit the practitioner from using the work of a practitioner’s external expert if the practitioner:
   1.                 Is unable to determine whether the external expert has the necessary competence or capabilities, or is objective;
   2.                 Has determined that the external expert does not have the necessary competence or capabilities; or
   3.                 Has determined that it is not possible to eliminate circumstances that create threats to the expert’s objectivity, or apply safeguards to reduce such threats to an acceptable level.
2.       The evaluation of whether the threats to objectivity are at an acceptable level may depend upon the role of the practitioner’s external expert and the significance of the expert’s work in the context of the engagement. In some cases, it may not be possible to eliminate circumstances that create threats or apply safeguards to reduce threats to an acceptable level, for example, if a proposed practitioner’s external expert is an individual who has played a significant role in preparing the sustainability information.
3.       When evaluating the objectivity of a practitioner’s external expert, it may be relevant to:

• Enquire also of the appropriate party(ies) about any known interests or relationships that the appropriate party(ies) has with the expert that may affect that expert’s objectivity.
• Discuss with that expert any applicable safeguards, including any professional requirements that apply to that expert, and evaluate whether the safeguards are adequate to reduce threats to an acceptable level. Interests and relationships that may be relevant to discuss with the expert include:
  • Financial interests.
  • Business and personal relationships.
  • Provision of other services by that expert.

In some cases, it may also be appropriate for the practitioner to obtain a written representation from the practitioner’s external expert about any interests or relationships with the entity or engaging party of which that expert is aware.

Understanding the field of expertise of a practitioner’s expert (Ref: Para. 56(c))

1.       Having a sufficient understanding of the field of expertise of the practitioner’s expert enables the practitioner to:
   1.                 Agree with the practitioner’s expert on the nature, scope (including, when applicable, the materiality for quantitative disclosures to be applied or other considerations of materiality for qualitative disclosures) and objectives of that expert’s work for the practitioner’s purposes; 
   2.                 Understand what assumptions, data and methods, including models as applicable, are used by the practitioner’s expert, and whether they are generally accepted within that expert’s field and appropriate in the circumstances of the engagement; and
   3.                 Evaluate the adequacy of that expert’s work for the practitioner’s purposes.

Agreement with the practitioner’s expert (Ref: Para. 56(c)–(d))

1.       The nature, scope and objectives of the practitioner’s expert’s work may vary considerably with the circumstances, as may the respective roles and responsibilities of the practitioner and the practitioner’s expert, and the nature, timing and extent of communication between the practitioner and the practitioner’s expert. It is therefore required that these matters are agreed between the practitioner and the practitioner’s expert regardless of whether the expert is a practitioner’s external expert or a practitioner’s internal expert.
2.       The matters noted in paragraph A137 may affect the level of detail and formality of the agreement between the practitioner and the practitioner’s expert, including whether it is appropriate that the agreement be in writing. For example, the following factors may suggest the need for more a detailed agreement than would otherwise be the case, or for the agreement to be set out in writing:

• The practitioner’s expert will have access to sensitive or confidential entity information.
• The respective roles or responsibilities of the practitioner and the practitioner’s expert are different from those normally expected.
• Multi-jurisdictional legal or regulatory requirements apply.
• The matter to which the practitioner’s expert’s work relates is highly complex.
• The practitioner has not previously used work performed by that expert.
• The greater the extent of the practitioner’s expert’s work, and its significance in the context of the engagement.  

Evaluating the adequacy of the practitioner’s expert’s work (Ref: Para. 57)

1.       Procedures to evaluate the adequacy of the practitioner’s expert’s work for the practitioner’s purposes may include:

• Enquiries of the practitioner’s expert.
• Reviewing the practitioner’s expert’s working papers and reports.
• Corroborative procedures, such as:
  • Observing the practitioner’s expert’s work;
  • Examining published data, such as statistical reports from reputable, authoritative sources;
  • Confirming relevant matters with third parties;
  • Performing detailed analytical procedures; and
  • Reperforming calculations.
• Discussion with another expert with relevant expertise when, for example, the findings or conclusions of the practitioner’s expert are not consistent with other evidence obtained by the practitioner.
• Discussing the practitioner’s expert’s report with management.

Using the Work of the Internal Audit Function (Ref: Para. 59)

1.       In determining whether the work of the internal audit function can be used for purposes of the engagement, a first consideration is whether the planned nature and scope of the work of the internal audit function that has been performed, or is planned to be performed, is relevant to the practitioner’s approach to the engagement.
2.       The extent to which the internal audit function’s organisational status and relevant policies and procedures support the objectivity of the internal auditors and the level of competence of the function are particularly important in determining whether to use and, if so, the nature and extent of the use of the work of the function that is appropriate in the circumstances.
3.       Factors that may affect the practitioner’s evaluation of whether the internal audit function applies a systematic and disciplined approach include the following:

• The existence, adequacy and use of documented internal audit procedures or guidance covering such areas as risk assessments, work programs, documentation and reporting, the nature and extent of which is commensurate with the size and circumstances of an entity.
• Whether the internal audit function has appropriate quality control policies and procedures, for example, policies and procedures that would be applicable to an internal audit function (such as those relating to leadership, human resources and engagement performance) or quality control requirements in standards set by the relevant professional bodies for internal auditors. Such bodies may also establish other appropriate requirements such as conducting periodic external quality assessments.

Communications Among Those Involved in the Engagement (Ref: Para. 60)

1.       Clear and timely communication about responsibilities, along with clear direction about the nature, timing and extent of the work to be performed, and the matters expected to be communicated to the practitioner, helps establish the basis for effective two-way communication. Effective two-way communication also helps to set expectations for work performed at various locations (e.g., by component practitioners) and facilitates the practitioner’s direction, supervision and review of that work. Such communication also provides an opportunity for the engagement leader to reinforce the need to exercise professional scepticism in performing the work.
2.       Other factors that may also contribute to effective two-way communication include:

• Clarity of any instructions issued (e.g., to a component practitioner).
• A mutual understanding of relevant issues and the expected actions arising from the communication process.
• The form of communications. For example, matters that need timely attention may be more appropriately discussed in a meeting rather than by exchanging emails.
• A mutual understanding between the practitioner and component practitioner about which individuals have responsibility for managing communications regarding particular matters.
• The process for reporting back to the practitioner on the results of the work performed or significant issues encountered in performing the work.

1.       The communications depend on the facts and circumstances of the engagement, including, for example, the nature and extent of involvement of component practitioners and the degree to which the practitioner and component practitioners are subject to common systems of quality management, or the involvement of a practitioner’s external expert.
2.       The form of the communications may be affected by such factors as:

• The significance, complexity or urgency of the matter.
• Whether the matter has been or is expected to be communicated to the entity’s management or those charged with governance.

1.       The appropriate timing of communications will vary with the circumstances of the engagement. Relevant circumstances may include the nature, timing and extent of work to be performed by others. For example, communications regarding planning matters may often be made early in the engagement and, for an initial sustainability assurance engagement, may be made as part of agreeing the terms of the engagement.

Monitoring and Remediation (Ref: Para. 63)

1.       In considering information communicated by the firm through its monitoring and remediation process and how it may affect the engagement, the engagement leader may consider the remedial actions designed and implemented by the firm to address identified deficiencies and, to the extent relevant to the nature and circumstances of the engagement, communicate accordingly to the engagement team. The engagement leader may also determine whether additional remedial actions are needed at the engagement level. For example, the engagement leader may determine that:

• A practitioner’s expert is needed; or
• The nature, timing and extent of direction, supervision and review needs to be enhanced in an area of the engagement where deficiencies have been identified.

If an identified deficiency does not affect the quality of the engagement (e.g., if it relates to a technological resource that the engagement team did not use) then no further action may be needed.

1.       A deficiency in the firm’s system of quality management does not necessarily indicate that an assurance engagement was not performed in accordance with professional standards and applicable legal and regulatory requirements, or that the practitioner’s report was not appropriate.

Fraud and Non-Compliance with Laws and Regulations

Fraud (Ref: Para. 64)

1.       Maintaining professional scepticism requires an ongoing questioning of whether the information and evidence obtained suggests that a material misstatement due to fraud may exist. It includes considering the reliability of the information intended to be used as evidence and the controls over its preparation and maintenance where relevant. Due to the characteristics of fraud, the practitioner’s professional scepticism is particularly important when considering material misstatement due to fraud, which may include omission of information or deliberate bias. Paragraph A323 provides examples of material misstatements due to fraud in sustainability information. Paragraphs 128L, 128R and 129–131 address the practitioner’s required responses to fraud or suspected fraud.

Non-Compliance with Laws and Regulations (Ref: Para. 67)

1.       Relevant ethical requirements may include a requirement to report identified or suspected non-compliance with laws and regulations to an appropriate level of management or those charged with governance. In some jurisdictions, law or regulation may restrict the practitioner’s communication of certain matters with the responsible party, management or those charged with governance. Law or regulation may specifically prohibit a communication, or other action, that might prejudice an investigation by an appropriate authority into an actual, or suspected, illegal act, including alerting the entity. In these circumstances, the issues considered by the practitioner may be complex and the practitioner may consider it appropriate to obtain legal advice.
2.       The reporting of identified or suspected non-compliance with laws and regulations in accordance with law, regulation or relevant ethical requirements may include non-compliance with laws and regulations that the practitioner comes across or is made aware of when performing the engagement, but which may not affect the sustainability information. Under this ASSA, the practitioner is not expected to have a level of understanding of laws and regulations beyond those affecting the sustainability information. However, law, regulation or relevant ethical requirements may expect the practitioner to apply knowledge, professional judgement and expertise in responding to such non-compliance. Whether an act constitutes actual non-compliance is ultimately a matter to be determined by a court or other appropriate adjudicative body.
3.       In some circumstances, the reporting of identified or suspected non-compliance with laws and regulations to an appropriate authority outside the entity may be precluded by the practitioner’s duty of confidentiality under law, regulation, or relevant ethical requirements. In other cases, reporting identified or suspected non-compliance to an appropriate authority outside the entity would not be considered a breach of the duty of confidentiality under the relevant ethical requirements.

Communication with Management and Those Charged with Governance (Ref: Para. 68)

1.       In addition to those matters specifically required to be communicated in accordance with this ASSA, significant matters that the practitioner may consider merit the attention of management or those charged with governance, as appropriate, may include:

• Identified deficiencies in internal control.
• Management bias in the preparation of the sustainability information.
• Material misstatements of the sustainability information or other information that management has refused to correct.
• Reporting policies that are not appropriate or that are inconsistent with the applicable criteria or criteria used in the relevant industry.
• Circumstances that affect the form and content of the assurance report, if any.
• Matters relating to estimates, forward-looking information, and inherent uncertainties, and related disclosures.
• Significant matters discussed or subject to correspondence with management (see also paragraph A167).
• Significant difficulties encountered during the engagement (see also paragraph A168).

1.       Significant matters discussed, or subject to correspondence with management, may include such matters as:

• Significant events or transactions that occurred during the year.
• Concerns about management’s use of work of an expert or information obtained from external sources.
• Significant matters on which there was disagreement with management.

1.       Significant difficulties encountered during the engagement may include such matters as:

• Significant delays by management, the unavailability of entity personnel, or an unwillingness by management to provide information necessary for the practitioner to perform procedures.
• An unreasonably brief time within which to complete the engagement.
• Extensive unexpected effort required to obtain sufficient appropriate evidence.
• The unavailability of expected information.
• Restrictions imposed on the practitioner by management.

In some circumstances, such difficulties may constitute a scope limitation that leads to a modification of the practitioner’s assurance conclusion.

1.       In addition to communicating with management or those charged with governance, the practitioner may be permitted or required to communicate about certain matters with other relevant parties, such as regulators or prudential supervisors. Such communication may be appropriate throughout the engagement or at particular stages, such as when the practitioner identifies matters that are required to be reported to the regulator or when finalising the assurance report.

Considerations Specific to Public Sector Entities

1.       A public sector practitioner may be obliged to report on identified or suspected non-compliance with laws and regulations to the legislature or other governing body or to report them in the practitioner’s report.

Documentation

Overarching Documentation Requirements

Form, Content and Extent of Engagement Documentation (Ref: Para. 69–71)

1.       A practitioner experienced in sustainability assurance refers to an individual (whether internal or external to the firm) who has practical experience in sustainability assurance, and a reasonable understanding of:
   1.                 Assurance processes;
   2.                 ASSAs and applicable legal and regulatory requirements;
   3.                 The business environment in which the entity operates; and
   4.                 Assurance and sustainability reporting matters relevant to the entity’s industry.
2.       Preparing sufficient and appropriate engagement documentation on a timely basis helps to enhance the quality of the assurance engagement and facilitates the effective review and evaluation of the evidence obtained and conclusions reached before the practitioner’s report is finalised. Engagement documentation prepared after the assurance engagement work has been performed is likely to be less accurate than documentation prepared at the time such work is performed.
3.       The form, content and extent of engagement documentation depend on factors such as:

• The size and complexity of the entity.
• The scope of the assurance engagement and nature of the procedures to be performed. For example, the extent of engagement documentation would ordinarily be less:
  • For a limited assurance engagement compared to a reasonable assurance engagement.
  • When the scope of the assurance engagement includes only certain parts, rather than all, of the sustainability information.
• The assessed risks of material misstatement.
• The significance of the evidence obtained.
• The nature and extent of exceptions identified.
• The need to document a conclusion or the basis for a conclusion not self-evident from the engagement documentation of the work performed or evidence obtained.
• The assurance methodology and tools used.

1.       Judging the significance of a matter requires an objective analysis of the facts and circumstances. Examples of significant matters include:

• Matters that give rise to risks of material misstatement that are assessed higher on the spectrum of risk.
• Results of procedures indicating that the sustainability information could be materially misstated or, in a reasonable assurance engagement, a need to revise the practitioner’s previous assessment of the risks of material misstatement and the practitioner’s responses to those risks.
• Circumstances that cause the practitioner significant difficulty in applying necessary procedures.
• Findings that could result in a modification to the assurance conclusion or the inclusion of an Emphasis of Matter paragraph in the assurance report.

1.       An important factor in determining the form, content and extent of engagement documentation of significant matters is the extent of professional judgement exercised in performing the work and evaluating the results. Engagement documentation of the professional judgements made, when significant, serves to explain the practitioner’s conclusions and to reinforce the quality of the judgement.
2.       Circumstances in which it is appropriate to prepare engagement documentation relating to the use of professional judgement, include matters and judgements that are significant to:

• The rationale for the practitioner’s conclusion when a requirement provides that the practitioner “shall consider” certain information or factors, and that consideration is significant in the context of the particular engagement.
• The basis for the practitioner’s conclusion on the reasonableness of judgements (for example, the reasonableness of significant estimates).
• The basis for the practitioner’s conclusions about the authenticity of a document when further investigation is undertaken in response to conditions identified during the assurance engagement that caused the practitioner to believe that the document may not be authentic.

1.       It is neither necessary nor practical to document every matter considered, or professional judgement made, during an engagement. Further, it is unnecessary for the practitioner to document separately (e.g., through a checklist) compliance with matters for which compliance is demonstrated by documents included within the assurance engagement file.
2.       The requirement to document who reviewed the work performed does not imply a need for each specific working paper to include evidence of review. The requirement, however, means documenting what work was reviewed, who reviewed such work, and when it was reviewed.
3.       Documentation of discussions of significant matters with management, those charged with governance, and others is not limited to records prepared by the practitioner, but may include other appropriate records such as minutes of meetings prepared by the entity’s personnel and agreed by the practitioner. Others with whom the practitioner may discuss significant matters may include other personnel within the entity, and external parties, such as persons providing professional advice to the entity.

Assembly of the Final Engagement File (Ref: Para. 72)

1.       ASQM 1 requires firms to establish a quality objective that addresses the assembly of engagement documentation on a timely basis after the date of the engagement report. An appropriate time limit within which to complete the assembly of the final engagement file is ordinarily not more than 60 days after the date of the assurance report.
2.       The completion of the assembly of the final engagement file after the date of the assurance report is an administrative process that does not involve the performance of new procedures or the drawing of new conclusions. Changes may, however, be made to the engagement documentation during the final assembly process if they are administrative in nature. Examples of such changes include:

• Deleting or discarding superseded documentation.
• Sorting, collating and cross-referencing working papers.
• Signing off on completion checklists relating to the file assembly process.
• Documenting evidence that the practitioner has obtained, discussed and agreed with the relevant members of the engagement team before the date of the assurance report.

1.       ASQM 1 requires firms to establish a quality objective that addresses the maintenance and retention of engagement documentation to meet the needs of the firm and comply with law, regulation, relevant ethical requirements, or professional standards. The retention period for assurance engagements ordinarily is no shorter than five years from the date of the assurance report.

Documentation Related to Quality Management (Ref: Para. 74)

1.       When dealing with circumstances that may pose risks to achieving quality on the engagement, the exercise of professional scepticism, and the engagement documentation of the practitioner’s consideration thereof, may be important. For example, if the engagement leader obtains information that may have caused the firm to decline the engagement (see paragraph 29), the engagement documentation may include explanations of how the engagement team dealt with the circumstance.

Preconditions for an Assurance Engagement

Establishing Whether the Preconditions Are Present

Obtaining a Preliminary Knowledge of the Engagement Circumstances (Ref: Para. 75–76)

1.       In order to establish whether the preconditions are present, the practitioner applies the preliminary knowledge obtained of the engagement circumstances (see the definition in paragraph 18) and holds discussions with the appropriate party(ies) in accordance with paragraph 76. The practitioner uses professional judgement to determine the nature and extent of the preliminary knowledge. The preliminary knowledge that the practitioner obtains ordinarily differs in nature, and is less in extent, than the understanding obtained when performing the engagement.

Obtaining a Preliminary Knowledge of the Scope of the Proposed Assurance Engagement (Ref: Para. 75(b))

1.       The scope of the assurance engagement may extend to all of the sustainability information to be reported by the entity (e.g., the entity’s sustainability report), or only part of it (e.g., it may be limited to specific disclosures such as assurance on key performance indicators for product recycling rates). Also, the scope of the proposed assurance engagement may encompass the reporting boundary covered by the sustainability information to be reported, or only certain jurisdictions, entities, operations or facilities within the reporting boundary. The reporting boundary within the scope of the assurance engagement may be established by law, regulation or professional requirements, or it may be determined by the appropriate party(ies).

Considerations Specific to Public Sector Entities (Ref: Para. 76)

1.       In the absence of indications to the contrary, in a public sector environment some of the preconditions for an assurance engagement may be presumed to be present, for example:
   1.                 The roles and responsibilities of public sector entity management, or those charged with governance, when appropriate, may be presumed to be suitable in the circumstances, because they are generally set out in legislation;
   2.                 A rational purpose is generally exhibited because the engagement is set out in legislation; and
   3.                 The practitioner’s conclusion, in a form appropriate for the engagement, is generally required by legislation to be contained in a written report.

Considering Whether the Entity Has a Process to Identify Sustainability Information to Be Reported (Ref: Para. 76(a), Appendix 2)

1.       An assurance engagement is conducted in accordance with this ASSA on the basis that management and, where appropriate, those charged with governance, have acknowledged and understand that they have responsibility for:

• The preparation of the sustainability information in accordance with the applicable criteria; and
• For designing, implementing and maintaining a system of internal control that management and, where appropriate, those charged with governance, determine is necessary to enable the preparation of the sustainability information in accordance with the applicable criteria (see paragraph 85).

The entity’s information system and communication relevant to the preparation of the sustainability information ordinarily includes the entity’s process to identify sustainability information to be reported. In the absence of such a process it may be difficult to establish whether management or those charged with governance, as appropriate, have a reasonable basis for the sustainability information.

Suitability of the Roles and Responsibilities (Ref: Para. 76(b))

1.       The three parties for an assurance engagement are:
   1.                 The engaging party;
   2.                 The practitioner; and
   3.                 The intended users.
2.       If the engagement does not have at least three parties, it is unable to satisfy all of the elements of an assurance engagement under the  Framework for Assurance Engagements. The practitioner’s responses may include:

• Asking the engaging party to change the terms of engagement to reflect a three-party relationship;
• Conducting the engagement as a consulting engagement;
• Performing an agreed-upon procedures engagement; or
• Declining the engagement.

Reasonable Basis for the Sustainability Information (Ref: Para. 76(b))

1.       In evaluating whether management or those charged with governance, as appropriate, have a reasonable basis for the sustainability information, the practitioner may consider whether the entity has a process, including controls, to enable the preparation of the sustainability information that is free from material misstatement. What constitutes a reasonable basis will depend on the nature of the sustainability matters addressed by the sustainability information and other engagement circumstances.
2.       If the practitioner becomes aware that there are deficiencies in the entity’s process to prepare the sustainability information that is not within the proposed scope of the assurance engagement and is therefore other information, this may indicate that management or those charged with governance, as appropriate, does not have a reasonable basis for reporting such information. In these circumstances, the implications of the requirements in this standard for other information (see paragraphs 173–176) will have an impact on the practitioner’s acceptance of the proposed engagement.

Appropriate Sustainability Matters (Ref: Para. 77)

1.       Whether the sustainability matters within the scope of the engagement are appropriate is not affected by the level of assurance, that is, if a sustainability matter is not appropriate for a reasonable assurance engagement, it is also not appropriate for a limited assurance engagement, and vice versa. Therefore, inappropriate sustainability matters for a reasonable assurance engagement cannot be overcome by changing the engagement to a limited assurance engagement.
2.       In evaluating whether the sustainability matters are appropriate, and whether the sustainability information can be subject to procedures for obtaining sufficient appropriate evidence, the practitioner may consider matters such as the characteristics of the sustainability matters (i.e., the degree to which they are qualitative versus quantitative, factual versus judgemental, historical versus forward-looking, and relate to a point in time or cover a period) and the reporting boundary.

Suitability and Availability of Criteria (Ref: Para. 78, 107)

Suitable criteria for only some of the sustainability matters (Ref: Para. 78(a))

1.       If suitable criteria are unavailable for some of the sustainability information subject to the assurance engagement, but the practitioner can identify one or more disclosures for which the criteria are suitable, then an assurance engagement may be performed with respect to those disclosures.

Sources of the criteria (Ref: Para. 78(b))

1.       Criteria may be:
   1.                 Framework criteria, that is:
      1.                  Embodied in law or regulation;
      2.                Established for use by certain types of entities by an organisation(s) that is authorised or recognised to promulgate standards for reporting sustainability information that follow a transparent due process involving deliberation and consideration of the views of a wide range of stakeholders;
      3.              Developed collectively by a group that does not follow a transparent due process;
      4.              Published in scholarly journals or books; or
      5.                 Developed for sale on a proprietary basis;
   2.                 Entity-developed criteria; or
   3.                 A combination of framework criteria and entity-developed criteria.
2.       When criteria are selected from multiple frameworks or entity-developed criteria are to be used, the practitioner’s evaluation of the suitability of the criteria may be more extensive and the practitioner may need to consider subjectivity or opportunity for management bias in selecting or developing the criteria.
3.       Framework criteria that are embodied in law or regulation or are established by an authorised or recognised organisation that follows a transparent due process may be presumed to be suitable in the absence of indications to the contrary. The entity may select and apply reporting policies to apply the framework criteria as described in paragraph A2.
4.       There may be circumstances when the framework criteria are not suitable on their own and may need to be supplemented by additional framework or entity-developed criteria in order to:

• Be sufficiently prescriptive about the scope of the sustainability matters to be addressed in the sustainability information.
• Address the entity’s industry or jurisdictions in which the entity operates, or other factors pertinent to the sustainability information to be reported.
• Avoid vague descriptions of expectations or judgements.

Characteristics of suitable criteria (Ref: Para. 78(c), 107)

1.       Suitable criteria are required for reasonably consistent measurement or evaluation of the sustainability matters within the context of professional judgement. Without the frame of reference provided by suitable criteria, any conclusion is open to individual interpretation and misunderstanding. The suitability of criteria is context-sensitive, that is, it is determined in the context of the engagement circumstances. Even for the same sustainability matters there may be different criteria that will yield a different outcome. Suitable criteria exhibit the following characteristics:
   1.                 Relevance: Relevant criteria result in sustainability information that assists decision-making by the intended users;
   2.                 Completeness: Criteria are complete when sustainability information prepared in accordance with them does not omit relevant factors that could reasonably be expected to affect decisions of intended users made on the basis of that sustainability information. Complete criteria include, where relevant, benchmarks for presentation and disclosure;
   3.                 Reliability: Reliable criteria allow reasonably consistent measurement or evaluation of the sustainability matters, when used in similar circumstances by different practitioners;
   4.                 Neutrality: Neutral criteria result in sustainability information that is free from bias as appropriate in the engagement circumstances; and
   5.                 Understandability: Understandable criteria result in sustainability information that can be understood by the intended users.
2.       The relative importance of each characteristic of the criteria to a particular engagement is a matter of professional judgement. 
3.       If the criteria are unsuitable, this cannot be overcome by changing the level of assurance. That is, if criteria are unsuitable for a reasonable assurance engagement, they are also unsuitable for a limited assurance engagement, and vice versa.

Availability of the criteria to users (Ref: Para. 78(d))

1.       Criteria being available allows the intended users to understand how sustainability matters have been measured or evaluated. The intended users are unlikely to be able to base decisions on the sustainability information without access to both the framework criteria and any entity-developed criteria supplementing the framework criteria. In determining whether the criteria are available to the intended users, the practitioner may consider whether they will be available in writing, with sufficient detail, sufficiently clear, and including identification of the version of the criteria applied. Criteria may be made available:
   1.                 Publicly, for example, in published framework criteria or a general-purpose framework that is readily available, such as on a website.
   2.                 Through inclusion in the sustainability information, in particular for entity-developed criteria.
   3.                 By general understanding, for example, the criterion for measuring time in hours and minutes.

Ability to Obtain Evidence Needed (Ref: Para. 79(a))

1.       In determining whether the evidence needed to support the practitioner’s conclusion can be expected to be obtained, the practitioner may consider:
   1.                 The characteristics of the sustainability matters and the potential sources of evidence; and
   2.                 Whether evidence is not available due to the engagement circumstances, even though the evidence could reasonably be expected to exist.
2.       Examples of the nature and availability of evidence that may impact the practitioner’s ability to obtain evidence, include:

• The timing of the practitioner’s appointment, the entity’s document retention policy, inadequate information systems, or a restriction imposed by the appropriate party(ies).
• The nature of the relationship between the appropriate party(ies) affecting the practitioner’s ability to access records, documentation, and other information the practitioner may require as evidence to complete the engagement.
• Evidence located at organisations not controlled by the entity, such as entities within the value chain but outside of the reporting entity’s control. In such cases, the practitioner may determine whether the entity has contractual arrangements with those organisations to provide access to persons or information, or to provide independent assurance reports on relevant internal controls or the measurement or evaluation of relevant sustainability matters, or whether the entity has plans to put such arrangements in place.

1.       In some circumstances, the practitioner may conclude that, due to the condition and reliability of an entity’s records, it is unlikely that sufficient appropriate evidence will be available to support an unmodified conclusion on the sustainability information. This may occur, for example, when the entity has little experience with the preparation of sustainability information. In such circumstances, it may be more appropriate for the sustainability information to be subject to an agreed-upon procedures engagement or a consulting engagement in preparation for an assurance engagement in a later period. However, such engagements can give rise to potential threats to the practitioner’s independence in performing an assurance engagement at a later date.

A206L. The evidence that the practitioner obtains in a limited assurance engagement is more limited than in a reasonable assurance engagement. However, the need for availability and accessibility to evidence is the same regardless of the level of assurance, as the practitioner may be required, in accordance with paragraph 148L, to design and perform additional procedures to obtain further evidence in a limited assurance engagement if the practitioner becomes aware of a matter that causes the practitioner to believe the sustainability information may be materially misstated (see paragraph A232).

Rational Purpose (Ref: Para. 80)

1.        
2.       If the assurance engagement is required by law or regulation, the practitioner may presume, in the absence of indications to the contrary, that the engagement has a rational purpose.
3.       Other matters the practitioner may consider in evaluating whether the engagement has a rational purpose, include whether:

• When the engagement is a combined reasonable and limited assurance engagement, there is sufficient justification for the different levels of assurance.
• Management and those charged with governance, if different from the engaging party, have consented to the reporting of the sustainability information.
• When the criteria were selected or developed by the entity, how the intended users were identified in selecting the criteria.
• The degree of judgement and scope for bias in applying the criteria.
• There are any significant limitations on the scope of the practitioner’s work.
• The engaging party intends to associate the practitioner’s name with the sustainability matters or the sustainability information in an inappropriate manner. 

Meaningful level of assurance in a limited assurance engagement (Ref: Para. 80(a))

A209L. The level of assurance the practitioner plans to obtain is not ordinarily susceptible to quantification. Whether the level of assurance is meaningful is a matter of professional judgement for the practitioner to determine in the circumstances of the engagement. In a limited assurance engagement, the procedures performed vary in nature and timing from, and are less in extent than for, a reasonable assurance engagement, but are, nonetheless, planned to obtain a level of assurance that is meaningful. To be meaningful the level of assurance obtained by the practitioner is likely to enhance the intended users’ confidence about the sustainability information to a degree that is clearly more than inconsequential.

A210L. Across the range of all limited assurance engagements, what is meaningful assurance can vary from just above assurance that is likely to enhance the intended users’ confidence about the sustainability information to a degree that is clearly more than inconsequential to just below reasonable assurance. What is meaningful in a particular engagement represents a judgement within that range that depends on the engagement circumstances, including the information needs of intended users as a group, the criteria, and the sustainability matters of the engagement.

A211L. Some of the factors that may be relevant in determining what constitutes meaningful assurance in a specific engagement include:

• The characteristics of the sustainability matters and the applicable criteria.
• Instructions or other indications from the appropriate party(ies) about the nature of the assurance. For example, the terms of the engagement may stipulate particular procedures that the appropriate party(ies) considers necessary or particular aspects the appropriate party(ies) would like the practitioner to focus on within the sustainability information that is within the scope of the assurance engagement. However, the practitioner may consider that other procedures are required to obtain sufficient appropriate evidence to obtain meaningful assurance.
• Generally accepted practice with respect to assurance engagements for sustainability information.
• The information needs of intended users as a group. Generally, the greater the consequence to intended users of receiving an inappropriate conclusion when the sustainability information is materially misstated, the greater the assurance that would be needed in order to be meaningful to them. For example, in some cases, the consequence to intended users of receiving an inappropriate conclusion may be so great that a reasonable assurance engagement is needed for the practitioner to obtain assurance that is meaningful in the circumstances.
• The expectation by intended users that the practitioner will form the limited assurance conclusion on the sustainability information within a short timeframe and at a low cost.

Appropriateness of the scope of the assurance engagement (Ref: Para. 80(c))

1.        
2.        
3.        
4.       The practitioner's determination of the appropriateness of the scope of the assurance engagement ordinarily involves the consideration of the results of the practitioner’s evaluation or determination, as applicable, of the characteristics in paragraph 78(c).
5.       If the scope of the assurance engagement includes only part of the sustainability information being reported by the entity (e.g., in reporting labour practices, the entity only requires assurance over occupational health and safety disclosures), the practitioner may consider whether the reasons for the scope of the engagement are appropriate.
6.       The entity may not have a reasonable basis for all of the disclosures in the sustainability information, such as when the entity’s processes to prepare some or all of the sustainability information are at an early stage of development. In such cases, if permitted by the applicable criteria, it may be possible to include only those areas of the sustainability information where the processes are more developed within the scope of the assurance engagement, because the preconditions have been met for those areas.
7.       In jurisdictions in which law or regulation does not require assurance on sustainability information, and in particular for sustainability information that is reported voluntarily, there may be legitimate reasons for not including all of the sustainability information being reported by the entity within the scope of an assurance engagement. In determining whether the sustainability information within the scope of the engagement is appropriate, the practitioner may consider:
   1.                 Whether the sustainability information within the scope of the assurance engagement is likely to meet the information needs of intended users; and
   2.                 How the sustainability information will be presented and whether intended users may misinterpret what has, and has not, been subject to the assurance engagement.

1.       The practitioner’s evaluation of the suitability of the criteria may include consideration of criteria for the preparation of any other part(s) of the sustainability information not within the scope of the assurance engagement. This may enable the practitioner to consider matters such as:

• Whether there may be omissions of relevant parts of the sustainability information from the sustainability information within the scope of the assurance engagement, and whether such omissions call into question the rational purpose of the engagement; and
• Whether and how the sustainability information is used in the preparer’s own decision-making processes, for example:
  • If information relating to an entity’s decisions is important to its stakeholders, then it may be reasonable to expect that the entity would be using that information in its own decision-making.
  • If the entity is using the information in its decision-making, then it may be reasonable to expect that a user may be interested in that information.
  • If the information is not used for the entity’s own decision-making, that may raise a question as to why the information is being reported, and whether there may be bias in selecting only sustainability information that are easily subject to an assurance engagement or that present the entity in a positive way.

Preconditions Not Present After Acceptance (Ref: Para. 82–83)

1.       If the practitioner discovers after accepting the engagement that one or more of the preconditions in paragraph 76 are not present, but continues the engagement, the assurance report may address the matter. For example:

• When, in the practitioner’s professional judgement the intended users are likely to be misled, since either the applicable criteria are unsuitable, or the sustainability matters are inappropriate, a qualified conclusion or adverse conclusion may be appropriate, depending on how material and pervasive the matter is.
• A qualified conclusion or a disclaimer of conclusion may be appropriate in other circumstances depending on, in the practitioner’s professional judgement, the materiality and pervasiveness of the matter.

Terms of the Assurance Engagement

Agreeing the Terms of the Assurance Engagement (Ref: Para. 85)

1.       It is in the interests of both the engaging party and the practitioner for the practitioner to communicate in writing the agreed terms of the engagement before the commencement of the engagement to help avoid misunderstandings. The form and content of the written agreement or contract will vary depending on the engagement circumstances. For example, if law or regulation prescribes in sufficient detail the terms of the engagement, the practitioner need not record them in a written agreement, except for the fact that such law or regulation applies and that the appropriate party(ies) acknowledges and understands its responsibilities under such law or regulation.
2.       When agreeing the terms of engagement, unless restricted by law or regulation, the practitioner may request agreement from management or those charged with governance to provide information or access to persons, such as:

• Access to other practitioners providing audit or assurance reports on part or parts of the other information (e.g., the auditor of the financial report of the entity if the other information includes the financial report).
• Authority to obtain information relevant to the assurance engagement on the sustainability information from the other practitioners.
• Authority to share information requested by the financial statement auditor relevant to the audit or review of the financial report.
• Authority to communicate findings with other practitioners, as appropriate.

1.       In describing the practitioner’s responsibilities in the terms of engagement, the practitioner may consider the responsibilities required to be included in the assurance report in accordance with paragraph 190(h).
2.       Law or regulation, particularly in the public sector, may mandate the appointment of a practitioner and set out specific powers, such as the power to access an appropriate party(ies)’s records and other information, and responsibilities, such as requiring the practitioner to report directly to a minister, the legislature or the public if an appropriate party(ies) attempts to limit the scope of the engagement.

Changing the Terms of the Assurance Engagement (Ref: Para. 87)

1.       Examples of when the appropriate party(ies) may request a change to the terms of the assurance engagement and there may not be reasonable justification for doing so include:
   1.                 The change is to limited assurance from reasonable assurance because of an inability to obtain sufficient appropriate evidence; or
   2.                 The change is to remove sustainability information from the scope of the assurance engagement to avoid a modification of the assurance conclusion.
2.       A change in circumstances that affects the intended users’ needs, or a misunderstanding concerning the nature of the engagement, may justify a request for a change in the engagement, for example, from an assurance engagement to a non-assurance engagement, or from a reasonable assurance engagement to a limited assurance engagement.

Evidence 

Designing and Performing Procedures to Obtain Sufficient Appropriate Evidence (Ref: Para. 89)

1.       Evidence is necessary to support the practitioner’s conclusion and assurance report. It is cumulative in nature and is primarily obtained from procedures performed during the course of the engagement. It may, however, also include information obtained from other sources, such as previous engagements (provided the practitioner has determined whether changes have occurred since the previous engagement that may affect the relevance of the information to the current engagement), a firm’s policies or procedures for acceptance and continuance of client relationships and assurance engagements, or the work of another practitioner. Evidence comprises information that supports or corroborates disclosures, and any information that contradicts disclosures.
2.       The practitioner obtains evidence by designing and performing procedures, including risk assessment procedures and further procedures, to comply with this ASSA. The nature of a procedure refers to its purpose and its type. Types of procedures include enquiries, inspection, observation, confirmation, recalculation, reperformance and analytical procedures.

Designing and Performing Procedures in a Manner that Is Not Biased (Ref: Para. 89(a))

1.       Unconscious or conscious biases may affect the engagement team’s professional judgements in designing and performing procedures, which may impede the exercise of professional scepticism. An awareness of such biases when designing and performing procedures may help to mitigate impediments to the practitioner’s exercise of professional scepticism in critically assessing evidence and determining whether sufficient appropriate evidence has been obtained. Such awareness may also enable the practitioner to design and perform procedures that seek to avoid:

• Placing more weight on evidence that corroborates disclosures than evidence that contradicts or casts doubt on such disclosures (confirmation bias).
• Using an initial piece of information or evidence as an anchor against which subsequent information or evidence is assessed (anchoring bias).
• Placing more weight on information that immediately comes to mind or uses information from sources that are more readily available or accessible (availability bias).
• Placing weight or undue reliance on output from automated systems or information in digital format, or assuming it is relevant and reliable, without performing appropriate procedures (automation bias).
• Placing undue reliance on information prepared by an expert or another practitioner, or assuming the information is relevant and reliable, without performing appropriate procedures (authority bias).

1.       Obtaining evidence in an unbiased manner may involve obtaining information from multiple sources (see also paragraphs A255–A257).

Procedures that Are Appropriate in the Circumstances (Ref: Para. 89(b))

1.       Procedures are appropriate in the circumstances when the nature, timing and extent of such procedures are designed, performed and executed in a manner that achieves the intended purpose of the procedures. The purpose of performing a procedure may be related to risk assessment procedures, further procedures or another procedure to comply with this ASSA. For example, the purpose may be to obtain evidence about whether an event has occurred or whether the disclosures are complete. 
2.       In designing and performing procedures that are appropriate in the circumstances to provide evidence to meet the intended purpose of those procedures, the practitioner’s considerations may include whether information intended to be used as evidence:

• Is expected to be available in digital, written or oral form, related to a point in time or for a period, and is to be obtained from internal or external sources.
• Is needed across multiple disclosures and how that affects the nature, timing and extent of evidence needed. For example, the nature and availability of appropriate evidence may vary based on whether the disclosures relate to an entity’s processes, governance, controls or key performance indicators, and the characteristics of the disclosures, such as whether they are quantitative, qualitative, historical or forward-looking (see also paragraphs A240–A244).
• Relates to disclosures that include information from the entity’s value chain, and how that may affect the ability to obtain sufficient appropriate evidence.
• Will need to be obtained across multiple locations or jurisdictions (e.g., for a group sustainability assurance engagement).
• Relates to disclosures that are factual, judgemental or subject to estimation uncertainty.

1.       In designing and performing procedures, the appropriateness of an approach or technique in selecting items for testing depends on several factors, such as:

• The nature of the sustainability matters or population to be tested.
• The intended purpose of the procedure.
• How the procedure is designed.
• Whether the practitioner is performing the procedure manually or using automated tools and techniques.
• The matters described in paragraph A230 relating to information intended to be used as evidence.
• The persuasiveness of evidence that is needed in the circumstances.

Sufficiency and Appropriateness of Evidence (Ref: Para. 89(b))

1.       The practitioner is required to obtain sufficient appropriate evidence to provide a basis for the assurance conclusion. The sufficiency and appropriateness of evidence are interrelated and together affect the persuasiveness of evidence. In both limited and reasonable assurance engagements, the collective persuasiveness of the evidence obtained establishes the level of assurance obtained. The practitioner aims to obtain evidence that is collectively persuasive to respond to risk considerations. Ordinarily, evidence will be persuasive rather than conclusive. As explained in paragraph A206L, the evidence that the practitioner obtains in a limited assurance engagement is more limited than in a reasonable assurance engagement. However, if the practitioner becomes aware in a limited assurance engagement of a matter(s) that causes the practitioner to believe that the sustainability information may be materially misstated, the practitioner is required to design and perform additional procedures to obtain further evidence. 
2.       Sufficiency is the measure of the quantity of evidence. Sufficiency is also affected by the quality of evidence (the higher the quality, the less may be required). Obtaining more evidence, however, may not compensate for its poor quality.

A234R. For reasonable assurance engagements, the quantity of evidence needed is affected by the nature and number of disclosures and the assessment of the risks of material misstatement at the assertion level for those disclosures (the higher the assessed risks, the more evidence is likely to be required).

A235L. For limited assurance engagements, the quantity of evidence needed is affected by the nature and number of disclosures and the assessment of the risks of material misstatement at the disclosure level. As explained in paragraph A209L, the procedures in a limited assurance engagement vary in nature and timing and are lesser in extent than for a reasonable assurance engagement but are, nonetheless, planned to obtain a level of assurance that is meaningful. The sufficiency of evidence is evaluated in that context.

1.        
2.        
3.       The appropriateness of evidence refers to its quality. The quality of evidence depends on the relevance and reliability of the information intended to be used as evidence as well as the effectiveness of the design of the assurance procedures and the practitioner’s application of those procedures. Information that is more relevant and reliable ordinarily is of a higher quality and, therefore, may provide more persuasive evidence. If the evidence is more persuasive, the practitioner may determine that the evidence is sufficient in providing support for the practitioner’s conclusions. Alternatively, when evidence is less persuasive, the practitioner may determine that additional evidence is needed. However, increasing the quantity of evidence by performing the same type of procedures may not provide more persuasive evidence in all circumstances.
4.       The practitioner uses professional judgement and exercises professional scepticism in evaluating the sufficiency and appropriateness of evidence to support the assurance conclusion.
5.       Factors that affect the evidence that may be available in the circumstances, in terms of quantity or quality, and therefore impact its sufficiency or appropriateness, include the following:

• The characteristics of the sustainability matters or disclosures. For example, less objective evidence might be expected when the disclosures are forward-looking rather than historical.
• Whether the source of the information used to prepare the disclosures is accessible. For example, if the criteria require the sustainability information to include information from value chain entities outside of the entity’s control, there may be limitations on access to such information or to the work of another practitioner that may have provided an assurance report on such information. Such limitations may also affect the practitioner’s evaluation of the relevance and reliability of this information intended to be used as evidence (see also paragraphs A236 and A252).
• Other circumstances, such as when evidence that could reasonably be expected to exist is not available because of factors such as those described in paragraph A204.

1.       The procedures designed and performed by the practitioner may also affect the persuasiveness of the evidence obtained. For example, in a reasonable assurance engagement, evaluating the design and implementation of controls relating to processes in the entity’s information system that support the preparation of the sustainability information, or external confirmation procedures to obtain evidence about information used by management in preparing the sustainability information, may provide more persuasive evidence than enquiry of management. In a reasonable assurance engagement, enquiry alone ordinarily does not provide sufficient appropriate evidence.

Qualitative Information (Ref: Para. 89(b))

1.       Some qualitative disclosures may be factual and directly observable or otherwise able to be subject to further procedures to gather evidence. However, some qualitative disclosures may be inherently judgemental, not directly observable and may be susceptible to management bias. The practitioner may need to exercise significant professional judgement in evaluating what constitutes sufficient appropriate evidence in these circumstances.
2.       The entity’s information system, including internal controls, may be different for quantitative and qualitative information. This may have implications for the practitioner’s planned procedures, the ability to obtain the evidence needed about qualitative sustainability information, and the assurance conclusion. For example, when designing and performing procedures for qualitative sustainability information, the practitioner may consider:

• Whether, in the case of a reasonable assurance engagement, substantive procedures alone will provide sufficient appropriate evidence. If not, the practitioner may need to perform tests of controls over the integrity of data, or other controls within the entity’s information system that support the preparation of the qualitative information.
• The source of the information intended to be used as evidence, how such information has been captured and processed by the entity’s information system, and how this may affect the reliability of the information. For example, information may be captured directly into the entity’s information system on a real-time basis without supporting documentation or may be obtained through informal communication.

Forward-looking Information (Ref: Para. 89(b))

1.       Forward-looking information, by its nature, is predictive and may be expressed in both quantitative and qualitative terms. Information about future conditions or outcomes relate to events and actions that have not yet occurred and may not occur, or that have occurred but are still evolving in unpredictable ways. For example, this information may include forecasts or projections, and may relate to the entity’s intentions or strategy, future risks and opportunities. While forward-looking information may result from applying criteria to the sustainability matters, the sustainability matters (a future event, occurrence or action) may be subject to greater uncertainty, and ordinarily able to be evaluated with less precision than historical matters. Uncertainty and the need for judgement are also likely to increase the further into the future the period to which the disclosures relate. Unlike historical information, it is not possible for the practitioner to determine whether the results or outcomes forecasted or projected have been or will be achieved or realised. The practitioner may obtain evidence about whether the forward-looking information has been prepared in accordance with the applicable criteria on the basis of the assumptions used by the entity, and:
   1.                 In the case of forecasts, whether the assumptions used provide a reasonable basis for preparing the sustainability information; or
   2.                 In the case of projections that use hypothetical assumptions, whether such assumptions are consistent with the purpose of the information.
2.       Evidence may be available to support the assumptions on which the forward-looking sustainability information is based, but such evidence itself may also be forward-looking and, therefore, speculative in nature. Accordingly, the practitioner may need to exercise significant professional judgement in determining whether the evidence is sufficient and appropriate.  In some circumstances, the evidence available may support a range of possible outcomes with the disclosure falling within that range. The practitioner’s evaluation of whether the disclosures are reasonable based on the evidence obtained is further addressed in paragraph 179.
3.       The nature and availability of evidence for forward-looking information, and what constitutes sufficient appropriate evidence, will likely vary by topics, aspects of topics and disclosures, and the practitioner’s consideration of potential material misstatements. For example:

• When disclosures relate to future strategy, a target, or other intentions of an entity, the practitioner may focus evidence-gathering activities on whether management or those charged with governance have an intention to follow that strategy, the target or intention exists, or there is a reasonable basis for the intended strategy or target (e.g., the practitioner may obtain evidence to support that the entity has the ability to carry out its intent, or is implementing controls over source data and the assumptions on which the strategy is based).
• When disclosures relate to future risks and opportunities, the practitioner may focus evidence-gathering activities on information available from the entity’s risk register or records of discussions of those charged with governance if the entity’s controls over the maintenance of the risk register and the minuting of discussions provide a reasonable basis for using these sources as evidence. In a reasonable assurance engagement, the practitioner may need to consider obtaining evidence about the effectiveness of the entity’s controls.

Information Intended to Be Used as Evidence

Evaluating the Relevance and Reliability of Information Intended to Be Used as Evidence (Ref: Para. 90)

1.       In planning and performing a sustainability assurance engagement, the practitioner may obtain information from a variety of sources and in different forms. Such information ordinarily is expected to result in evidence to support the conclusions that form the basis for the practitioner’s assurance conclusion and report. However, such information can become evidence only after procedures are applied to it, including procedures to evaluate its relevance and reliability. For purposes of this ASSA, this information is referred to as “information intended to be used as evidence.”
2.       Factors that may influence the nature, timing and extent of procedures to evaluate the relevance and reliability of information intended to be used as evidence, include:
   1.                 The source of the information (see paragraphs A255–A257); and
   2.                 The attributes of relevance and reliability of the information that are considered applicable in the circumstances (see paragraphs A258–A263).
3.       In some circumstances, the procedures to evaluate relevance and reliability may be straightforward (e.g., comparing information used by management to information published by a national government body). In other circumstances, procedures, including tests of controls, may be performed to evaluate the reliability of information (e.g., the accuracy and completeness of information generated internally from the entity’s information system).
4.       Evidence from performing other procedures in accordance with this ASSA also may assist the practitioner in evaluating the relevance and reliability of information intended to be used as evidence. For example, evidence obtained from:

• The practitioner’s understanding of the entity and its environment, the applicable criteria and the entity’s system of internal control.
• Tests of controls over the preparation and maintenance of the information.
• Procedures performed when using the work of a practitioner’s expert.

Form, availability, accessibility and understandability of information

1.       The form, availability, accessibility and understandability of the information intended to be used as evidence may affect:
   1.                 The design and performance of the procedures in which the information will be used; and
   2.                 The practitioner’s evaluation of the relevance and reliability of the information.

For example, information may only be available in digital form on a continuous basis. In such circumstances, the practitioner may use automated tools and techniques that are designed to operate on a real-time basis to evaluate the relevance and reliability of the information.

1.       The practitioner may receive information intended to be used as evidence in many forms, ranging from information generated from highly complex automated systems to information manually prepared by management and others within the entity. The practitioner may have an expectation of the form in which information intended to be used as evidence will be received. Remaining alert for information intended to be used as evidence that is received in a form different from the expected form may assist the practitioner in mitigating unconscious biases that may impede the practitioner’s exercise of professional scepticism. In addition, receiving information in a form different from that expected may also be relevant to the practitioner’s evaluation of the reliability of that information.
2.       Information intended to be used as evidence may exist, but access to such information may be restricted, for example, due to restrictions imposed by law or regulation or the source providing the information (e.g., due to hospital patient confidentiality), or due to war, civil unrest or outbreaks of disease. In some cases, the practitioner may be able to overcome restrictions on access to information. In particular, the practitioner may request management or those charged with governance of the entity to assist in requesting information from a source when contractual obligations exist between an information source and the entity. For example, this may be possible when the reporting entity has a direct business relationship with a value chain entity, such as a large supplier or customer. The practitioner may also consider whether it is possible to visit a location to inspect information that is available but cannot be transferred outside of a jurisdiction.
3.       As explained in paragraph A238, there may be limitations on management’s ability to obtain information from value chain entities outside of the entity’s control. In these circumstances, the applicable criteria may provide certain relief provisions for management (e.g., the ability to develop estimates using sector-average data after making reasonable efforts to obtain the information). Regardless of any limitations on management’s ability to obtain information from such value chain entities, the practitioner is required to obtain sufficient appropriate evidence about the value chain information reported by management. Paragraph A290 describes procedures that may be considered by the practitioner in these circumstances, including testing management’s process for obtaining such information.
4.       The practitioner may be unable to obtain sufficient appropriate evidence if the practitioner determines that it is not practicable to obtain information intended to be used as evidence or does not have a sufficient basis to evaluate the relevance and reliability of information (e.g., from an external source). In some circumstances, the practitioner may be able to obtain sufficient appropriate evidence through alternative procedures. An inability to obtain sufficient appropriate evidence requires the practitioner to express a qualified conclusion or disclaim a conclusion on the sustainability information, or withdraw from the engagement if withdrawal is possible under applicable law or regulation, in accordance with paragraph 185.
5.       In some circumstances, specialised skills or knowledge may be needed to understand or interpret the information intended to be used as evidence, for example, emissions data from downstream or upstream entities, water quality or biodiversity measurements. Accordingly, the practitioner may consider using a practitioner’s expert to assist in understanding or interpreting the information intended to be used as evidence if the engagement team does not have the appropriate competence and capabilities to do so.

Sources of information

1.       Information intended to be used as evidence may come from internal sources or external sources and may affect the availability, accessibility and understandability of the information intended to be used as evidence. For example, information may come from:

• The entity’s records, management or other sources internal to the entity.
• Other entities within the entity’s control.
• Entities in the value chain. For value chain information, the framework criteria may recognise that management’s ability to access information directly from value chain entities outside of the entity’s control may be limited, and therefore may include provisions that take into account the impact of such limitations on the responsibilities of management. For example, the framework criteria may permit management to use reasonable and supportable information (e.g., publicly available sector-average data) when management is unable to obtain information from the value chain entity after making reasonable efforts to do so. See also paragraphs A289–A290 regarding the impact on the practitioner's work.
• A management’s expert.
• A practitioner’s expert.
• Independent sources external to the entity, other than a management’s or practitioner’s expert, that provide information, such as the entity’s legal counsel, customers, suppliers, governmental agencies, bank, or general data providers (e.g., entities providing macro-economic, industry or social data).
• A service organisation.
• Another practitioner, which may include a practitioner engaged by an entity to provide a one-to-many report (see paragraph A291).

1.       The practitioner is not required to perform an exhaustive search to identify all possible sources of information to be used as evidence. The practitioner’s understanding of the entity and its environment, the applicable criteria and the entity's system of internal control may assist the practitioner in identifying appropriate sources of information.
2.       The practitioner ordinarily obtains more assurance from consistent evidence obtained from different sources or of a different nature than from items of evidence considered individually. In addition, obtaining information intended to be used as evidence from different sources or of a different nature may indicate that an individual item of information intended to be used as evidence is not reliable. For example, corroborative information obtained from a source independent of the entity may increase the assurance the practitioner obtains from a representation from management. Conversely, when evidence obtained from one source is inconsistent with that obtained from another, the practitioner determines what additional procedures are necessary to resolve the inconsistency. 

Attributes of relevance and reliability of information

1.       The quality of evidence depends on the relevance and reliability of the information upon which it is based. Whether, and the degree to which, certain attributes of relevant and reliable information are considered applicable in the circumstances is a matter of professional judgement.

Relevance

1.       The principal attribute of the relevance of information intended to be used as evidence deals with the logical connection with, or bearing upon, the purpose of the procedure, including, in a reasonable assurance engagement, the assertion being tested. The degree to which the information relates to meeting the purpose of the procedure may also be a consideration.

Reliability

1.       The reliability of information intended to be used as evidence deals with the degree to which the practitioner may depend on such information. Common attributes that may be applicable when considering the degree to which information intended to be used as evidence is reliable may include whether the information is: 
   1.                 Accurate (free from error).
   2.                 Complete (reflecting all applicable events, conditions and circumstances).
   3.                 Authentic (genuine, authorised and not inappropriately altered).
   4.                 Free from bias (whether intentional or unintentional).
   5.                 Credible (generated by a competent, capable and trustworthy source).

Factors that affect the practitioner’s professional judgement regarding the attributes of relevance and reliability

1.       Factors that may affect the practitioner’s professional judgement about the relevance and reliability of information intended to be used as evidence, including which attributes of reliability may be applicable in the circumstances, include:

• The disclosures and, for reasonable assurance engagements, the assertions, for which the information will be used as evidence. Information may be relevant to multiple disclosures. Some information may be relevant for certain assertions but not others. 
• The period of time to which the information relates.
• The controls over the preparation and maintenance of the information.
• The practitioner’s assessment of the risks of material misstatement at the disclosure level (in a limited assurance engagement) or at the assertion level for the disclosures (in a reasonable assurance engagement).
• The intended purpose of the procedure in which the information will be used.
• The level of detail of the information needed given the intended purpose of the procedure. For example, information related to key performance indicators used by management may not be precise enough to detect material misstatements at the assertion level and therefore may not, in a reasonable assurance engagement, be appropriate for use by the practitioner in performing further procedures.
• The level of precision within the applicable criteria regarding what is to be reported and how it is to be measured or evaluated. For example, when the applicable criteria require more granular quantitative disclosures, the practitioner may consider the attributes of accuracy and completeness to be important.
• The source of the information. For example, accuracy and completeness ordinarily will be applicable attributes for information generated internally from the entity’s information system (such as when performing further procedures). For information obtained from a source external to the entity, the practitioner may be more focused on other attributes of reliability, including the credibility of the source providing the information.
• The ability of the reporting entity to influence information obtained from external sources with whom they have relationships.
• Evidence of general market acceptance by users of the relevance and reliability of information from an external source, including tolerance for less precise information, for example, when that information is inherently subjective.

1.       The reliability of information, in particular the attributes of accuracy, completeness and authenticity, when deemed to be applicable in the circumstances, may also be affected by whether the integrity of the information has been maintained through all stages of processing through the entity’s information systems. For example, an entity’s information system may include general information technology controls to safeguard and maintain the integrity of the sustainability information.
2.       The source of the information intended to be used as evidence may affect the nature and extent of the practitioner’s evaluation of the relevance and reliability of the information. It may also affect how the practitioner responds to matters such as doubts about the reliability of the information, or inconsistencies in evidence. For example, if the information comes from a highly reputable external source, such as an authorised jurisdictional environmental agency, the practitioner’s work effort in considering the reliability of the information may not be extensive.

Information Produced by the Entity (Ref: Para. 91)

1.       In order for the practitioner to obtain reliable evidence, information produced by the entity that is used for performing procedures needs to be sufficiently complete and accurate. Obtaining evidence about the accuracy and completeness of such information may be performed concurrently with the actual procedure applied to the information when obtaining such evidence is an integral part of the procedure itself. In other situations, the practitioner may have obtained evidence of the accuracy and completeness of such information by testing controls over the preparation and maintenance of the information. In some situations, however, the practitioner may determine that additional procedures are needed.
2.       In some cases, the practitioner may intend to use information produced by the entity for other purposes. For example, the practitioner may intend to use the entity’s production numbers for the purpose of analytical procedures for water or energy consumption, or to use the entity’s information produced for monitoring activities, such as reports of the internal audit function. In such cases, the appropriateness of the evidence obtained is affected by whether the information is sufficiently precise or detailed for the practitioner’s purposes. For example, performance measures used by management may not be precise enough to detect material misstatements.

Work Performed by a Management’s Expert (Ref: Para. 92)

1.       When evaluating the relevance and reliability of information intended to be used as evidence prepared by a management’s expert:
   1.                 The competence and capabilities of that expert may inform the practitioner’s consideration of the attribute of credibility. The credibility of the source providing the information affects the degree to which information intended to be used as evidence is reliable; and
   2.                 The objectivity of that expert may inform the practitioner’s consideration of the attribute of bias. A broad range of circumstances may influence the professional judgements of the management’s expert, which may threaten the management expert’s objectivity, for example, self-interest threats, advocacy threats, familiarity threats, self-review threats and intimidation threats. Bias in the information intended to be used as evidence also affects the degree to which information is reliable. In some cases, information prepared by a management’s expert may be subject to bias, as management may have an influence on the professional judgements of the management’s expert. 

Competence and Capabilities of the Management’s Expert (Ref: Para. 92(a))

1.       Competence relates to the nature and level of expertise of the management’s expert. Factors that may affect whether the management’s expert has the appropriate competence include:

• Whether the expert’s work is subject to technical performance standards or other professional or industry requirements, for example, ethical standards and other membership requirements of a professional body or industry association, accreditation standards of a licensing body, or requirements imposed by law or regulation.
• The matter for which the management expert’s work will be used, and whether they have the appropriate level of expertise applicable to the matter, including expertise in a particular area of specialty.
• The management’s expert’s competence with respect to relevant sustainability matters, for example, knowledge of assumptions and methods, including models when applicable, that are consistent with the applicable criteria.

1.       Capabilities relates to the ability of the management’s expert to exercise the competence in the circumstances. Factors that may influence capabilities may include geographic location, and the availability of time and resources.

Obtain an Understanding of the Work Performed by the Management’s Expert (Ref: Para. 92(b))

1.       Matters relevant to the practitioner’s understanding of the work performed by the management’s expert may include:

• The relevant field of expertise.
• The nature, scope and objectives of the management’s expert’s work.
• Whether there are professional or other standards, and regulatory or legal requirements that apply in preparing the information.
• How the information has been prepared by the management’s expert, including:
  • The assumptions and methods used by the management’s expert, and whether they are generally accepted within that expert’s field and appropriate in the context of the applicable criteria and the sustainability matters;
  • The underlying information used by the management’s expert; and
  • The relevance and reasonableness of that expert’s findings or conclusions, and their consistency with other evidence.

Obtain an Understanding of How the Information Prepared by the Management’s Expert Has Been Used by Management in the Preparation of the Sustainability Information (Ref: Para. 92(c))

1.       Obtaining an understanding about how the information prepared by a management’s expert has been used by management in the preparation of the sustainability information may include understanding:
   1.                 How management has considered the appropriateness of the information prepared by the management’s expert; and
   2.                 The modifications made by management to the information prepared by the management’s expert.
2.       This understanding may assist the practitioner in:
   1.                 Evaluating the relevance and reliability of the information intended to be used as evidence; and
   2.                 Understanding whether the expert’s findings or conclusions have been appropriately reflected in the sustainability information. For example, in some circumstances, management may need to modify the information prepared by the management’s expert, such as when the information provided is too general and requires adjustment to reflect the circumstances unique to the entity. Management’s adjustments may give rise to bias, or management may not have the appropriate competence and capabilities to adapt or adjust the information, which may cause the information to be inaccurate, incomplete or lack credibility.

Evaluating the Appropriateness of the Management’s Expert’s Work (Ref: Para. 92(d))

1.       Considerations when evaluating the appropriateness of the management’s expert’s work as evidence may include:

• The relevance and reasonableness of that expert’s findings or conclusions, their consistency with other evidence, and whether they have been appropriately reflected in the sustainability information;
• If that expert’s work involves use of significant assumptions and methods, the relevance and reasonableness of those assumptions and methods; and
• If that expert’s work involves significant use of source data, the relevance and reliability of that source data.

Doubts About the Relevance and Reliability of Information Intended to Be Used as Evidence (Ref: Para. 93–94)

1.       Unless the practitioner has reason to believe the contrary, the practitioner may accept records and documents as genuine.  When the practitioner identifies conditions that cause the practitioner to believe that a document may not be authentic or that terms in a document have been modified but not disclosed to the practitioner, possible procedures to investigate further may include:
   1.                 Confirming directly with the third party.
   2.                 Using the work of an expert to evaluate the document’s authenticity.
2.       Factors or circumstances that may give rise to doubts about the reliability of information intended to be used as evidence include:

• An inability to evaluate the relevance and reliability of the information, including, for example, whether the information is authentic.
• Misstatements identified during the assurance engagement.
• Deficiencies in internal control identified by the practitioner.
• When procedures performed on a population result in a higher rate of deviation than expected.
• When information intended to be used as evidence is inconsistent with other information or evidence.

1.       The relevance of information intended to be used as evidence may be affected by the period of time to which the information relates. For example, the relevance of such information may change based on the passage of time or due to events or conditions, such as the identification of new information. Such circumstances may occur when the practitioner identifies information from an alternative or more credible source which negates, or causes doubt about, the relevance of the initial information intended to be used as evidence.
2.       In cases of doubt about the reliability of information or indications of possible fraud, this ASSA requires the practitioner to investigate further and determine what modifications or additions to procedures are necessary to resolve the matter. Doubts about the reliability of information from management may indicate a risk of fraud.

Planning

Overall Strategy and Engagement Plan (Ref: Para. 95)

Planning Activities

1.       Adequate planning helps to:

• Devote appropriate attention to important areas of the engagement;
• Identify potential problems on a timely basis and properly organise and manage the engagement in order for it to be performed in an effective and efficient manner;
• Properly assign work to engagement team members, and facilitate the direction and supervision of engagement team members and the review of their work; and
• When applicable, co-ordinate work done by other practitioners and experts.

1.       Planning involves the engagement leader, other key members of the engagement team, and any key practitioner’s external experts developing:
   1.                 An overall strategy for the scope, timing and direction of the assurance engagement; and
   2.                 An engagement plan, consisting of a detailed approach for the nature, timing and extent of procedures to be performed, and the reasons for selecting them.
2.       The nature and extent of planning activities will vary with the engagement circumstances. Examples of matters that may be considered include:

• The characteristics of the entity and its activities.
• Whether the engagement is a limited assurance engagement, reasonable assurance engagement or a combined limited and reasonable assurance engagement.
• The nature of the sustainability matters.
• Whether there are sustainability matters that may also relate to matters disclosed in the entity’s financial report and, if so, whether communication with the auditor of the financial report, if not prohibited by law or regulation, may be useful for planning the assurance engagement (e.g., to inform each other about common sustainability matters that may be susceptible to risks of misstatement, or to discuss other matters that may be identified during the course of the respective engagements). If such matters are identified, communication between the practitioner and the auditor of the financial report may take place at appropriate times throughout the assurance engagement. In some cases, authorisation from management may be needed to share the entity’s information with the auditor of the financial report.
• The expected timing and the nature of the communications required with management or those charged with governance.
• The reporting boundary.
• The practitioner’s understanding of the entity and its environment, including the risks that the disclosures may be materially misstated due to error or fraud.
• The intended users and their information needs.
• The nature, timing and extent of resources necessary to perform the engagement, such as expertise required, including the nature and extent of the involvement of experts.
• If the entity has an internal audit function, the impact on the engagement.

1.       Information obtained in the acceptance and continuance process may assist the engagement leader in planning and performing the engagement. Such information may include:

• Information about the size, complexity and nature of the entity, including the industry in which it operates and the applicable criteria.
• The entity's timetable for reporting.
• If the assurance engagement relates to a group, the nature and extent of the control relationships between the entity and other entities within the group.
• Relevant knowledge gained on other engagements performed by the engagement team for the entity.
• Whether there have been changes in the entity or in the industry in which the entity operates since the previous assurance engagement that may affect the nature of resources required, as well as the manner in which the work of the engagement team will be directed, supervised and reviewed.

1.       The practitioner may decide to discuss elements of planning with the entity when obtaining a preliminary knowledge of the engagement circumstances, determining the scope of the engagement or to facilitate the conduct and management of the engagement (e.g., to co-ordinate some of the planned procedures with the work of the entity’s personnel). Although these discussions often occur, the approach to the engagement remains the practitioner’s responsibility. When discussing the approach to the engagement, care is needed in order not to compromise the effectiveness of the engagement. For example, discussing the nature and timing of detailed procedures with the entity may compromise the effectiveness of the engagement by making the procedures too predictable.
2.       Planning is not a discrete phase, but rather a continual and iterative process throughout the engagement. As a result of unexpected events, changes in conditions, or evidence obtained, the practitioner may revise the approach to the engagement, and thereby the resulting planned nature, timing and extent of procedures.

Scalability

1.       In less complex engagements, the entire engagement may be conducted by the engagement leader (who may be a sole practitioner) or a very small engagement team. With a smaller team, co-ordination of, and communication between, team members is easier. Establishing the approach to the engagement in such cases need not be a complex or time-consuming exercise; it varies according to the size of the entity, the complexity of the engagement, including the sustainability matters and applicable criteria, the scope of the assurance engagement, and the size of the engagement team. For example, in the case of a recurring engagement, a brief memorandum prepared at the completion of the previous engagement, based on a review of the working papers and highlighting issues identified in the engagement just completed, updated in the current period based on discussions with appropriate parties, may be appropriate as the engagement strategy for the current engagement.

Nature, Timing and Extent of Planned Procedures

1.       The practitioner uses professional judgement in identifying the appropriate approach to planning and performing assurance procedures to obtain sufficient appropriate evidence. Understanding how the entity disaggregates or aggregates the sustainability information for purposes of reporting may assist the practitioner in planning the engagement. Matters that may be relevant in this regard include: 

• The information needs of intended users (e.g., intended users may place more significance on information about certain sustainability topics, or aspects of topics, than others). 
• Whether the applicable criteria address how the sustainability information should be presented, and how the entity has applied such criteria. Applicable criteria do not always specify in detail the required level of aggregation or disaggregation. They may, however, include principles for determining an appropriate level of aggregation or disaggregation in particular circumstances. For example, the applicable criteria may require the entity to report operational sites situated in areas of high biodiversity value by geographical location only. In other circumstances, the applicable criteria may require that information be disaggregated further to operational size and relative vicinity.
• The entity’s reporting policies regarding preparation of the sustainability information, including its policies for classification and presentation of the sustainability information.
• Whether the disclosures pertain to one or more entities within the reporting boundary, and whether such entities are within or outside the reporting entity’s control.
• The extent to which the sustainability information:
  • Is processed using common information systems and controls; and
  • Has a common unit of measure. 
• How sustainability information is communicated internally to management or those charged with governance.
• Whether the disclosures relate to similar or interconnected topics, aspects of the topics, or characteristics (see also paragraphs A286–A287).
• How the entity’s industry peers present the sustainability information.

1.       The practitioner may decide that the way management has aggregated or disaggregated the sustainability information for purposes of presentation is the most appropriate approach for the engagement. However, the practitioner may decide that there are other logical ways of grouping the sustainability information for purposes of planning and performing the engagement.
2.       In addition to the factors in paragraph A284, preliminary expectations about the risks of material misstatement may also be relevant to the practitioner’s decision about grouping the sustainability information. For example, if misstatements were identified in the information for certain topics or aspects of topics in previous assurance engagements, the practitioner may decide that the information for those topics or aspects of topics needs to be considered separately.
3.       The practitioner’s decision about grouping the entity’s disclosures for purposes of planning and performing the engagement, and the manner in which it is done, involves professional judgement. Given the diverse nature of sustainability information, some topics and aspects of topics are more capable of being grouped than others. In addition, care is needed when grouping disclosures so that risks of material misstatement are identified and responded to appropriately.

Overall Engagement Strategy and Engagement Plan for Group Sustainability Assurance Engagements

Sustainability Information on Which Assurance Work Will Be Performed (Ref: Para. 96(a))

1.       For a group sustainability assurance engagement, the determination of the information on which assurance work will be performed is a matter of professional judgement depending on the source of the information (i.e., the entities or business units to which the information relates). Matters that may influence the practitioner’s determination include, for example:

• The nature and extent of disaggregation of the sustainability information. The matters described in paragraph A284 may be helpful in this regard.
• Whether there are specific locations at which procedures may need to be performed to obtain sufficient appropriate evidence for sustainability information that is important to intended users (e.g., if information about occupational health and safety is of particular importance to users and such information is confined to one or two entities or business units).
• The nature and extent of misstatements or control deficiencies identified at entities in prior sustainability assurance engagements.

Resources Needed to Perform the Engagement (Ref: Para. 96(b))

1.       Matters that may influence the practitioner’s determination of the resources needed to perform a group sustainability assurance engagement, including component practitioner(s), include, for example:

• Whether sufficient appropriate evidence is expected to be available from records held by group management, taking into account:
  • The practitioner’s understanding of the entity and its environment.
  • The entity’s system of internal control, including the information system, and its degree of centralisation. For example, the need to involve a component practitioner may be greater when the system of internal control is decentralised.
• Whether the practitioner is aware of work that has been performed, or will be performed, on sustainability information that has been aggregated from other entities within the entity’s control.
• The geographic dispersion of the entities or business units from which information is aggregated.
• Management’s process for obtaining information from the value chain. In some circumstances, the criteria may permit management to estimate the information to be reported by using sector-average data and other proxies if management is unable to obtain the information after making reasonable efforts to do so.
• Access arrangements, or any restrictions on access to information. For example, using the work of a component practitioner may be necessary if the practitioner’s access to information from an entity in a particular jurisdiction is restricted.
• The knowledge and experience of the engagement team. For example, a component practitioner may have greater experience and a more in-depth knowledge than the practitioner about laws or regulations, business practices, language and culture.
• Previous experience of using the work of component practitioner(s).

1.       In determining the nature and extent of evidence to be obtained in relation to sustainability information from group components or value chain components, the following procedures may be considered by the practitioner:

• Inspecting records and documents held by the group: The reliability of this evidence is determined by the nature and extent of the records and supporting documentation retained by the entity. In some cases, the group may not maintain independent detailed records or documentation of specific sustainability matters relating to group components, and in most cases will not do so with respect to value chain components.
• Inspecting records and documents at the component: The practitioner’s access to the records of a component may be established as part of the contractual or other arrangements between the group and the component. This is more likely to be the case for group components.
• Testing management’s process for obtaining information from value chain components: Due to the limitations that may exist in obtaining information from the value chain, the practitioner’s procedures may in some cases be limited to evaluating whether management has complied with the requirements of the criteria, and testing the reasonableness of such information. The practitioner may also seek to obtain evidence from the work of another practitioner if work has been performed on that information. Regardless of any limitations that may exist in obtaining information from the value chain, the practitioner is required to obtain sufficient appropriate evidence. See also paragraphs A252–A253.
• Obtaining confirmations of sustainability information from the component:
  • If the group maintains independent records of sustainability information, confirmation from the component corroborating information in the group entity’s records may constitute reliable evidence.
  • If the group does not maintain independent records, information obtained in confirmations from the component is merely a statement of what is reflected in the records maintained by the component. Therefore, such confirmations do not, taken alone, constitute sufficient appropriate evidence. In these circumstances, the practitioner may consider whether an alternative source of independent evidence can be identified.
• Performing analytical procedures on the records maintained by the group or on the information received from the component: the effectiveness of analytical procedures is likely to vary by disclosure or assertion and will be affected by the extent and detail of information available.

Whether to Obtain Evidence from the Work Performed by Another Practitioner(s) (Ref: Para. 96(c))

1.       If the practitioner plans to use a one-to-many report of another practitioner as evidence, paragraph 51 requires the practitioner to evaluate whether the description of the procedures performed and the results thereof are appropriate for the practitioner’s purposes. However, the use of such a report does not alter the practitioner’s responsibility to obtain sufficient appropriate evidence to provide a reasonable basis to support the practitioner’s assurance conclusion on the sustainability information of the group.

Materiality (Ref: Para. 98–100)

1.       The practitioner’s consideration or determination of materiality, as applicable, is relevant when performing risk assessment procedures, determining the nature, timing and extent of further procedures, and evaluating whether the sustainability information is free from material misstatement.
2.       Considering materiality for qualitative disclosures involves the practitioner actively reflecting upon factors that may lead to potential material misstatements (see paragraph A300).
3.       In considering or determining materiality, the practitioner considers disclosures that may be important to intended users. The practitioner’s risk assessment procedures are designed and performed to identify and assess risks of material misstatement at the disclosure level (for limited assurance) or at the assertion level for the disclosures (for reasonable assurance). Therefore, judgements about materiality and the nature and likelihood of potential misstatements are relevant to the practitioner’s approach, including the way in which the sustainability information is grouped for planning and performing the engagement, as explained in paragraphs A284-A287.
4.       Professional judgements about materiality are made in light of surrounding circumstances, but are not affected by the level of assurance. That is, for the same intended users and purpose, materiality for a reasonable assurance engagement is the same as for a limited assurance engagement because materiality is based on the information needs of intended users.
5.       The framework criteria may include a discussion of the concept of materiality that provides a frame of reference for consideration or determination of materiality by the practitioner. In the absence of materiality being addressed in the framework criteria, the following principles may be applied:
   1.                 Judgements about matters that are material to intended users of the sustainability information are based on a consideration of the common information needs of intended users as a group. 
   2.                 Misstatements, including omissions, are considered material if they, individually or in the aggregate, could reasonably be expected to influence decisions of intended users taken on the basis of the sustainability information.
6.       Materiality is a matter of professional judgement and is affected by the practitioner’s perception of the common information needs of intended users as a group. In this context, it is reasonable for the practitioner to assume that intended users:
   1.                 Have a reasonable knowledge of the sustainability matters, and a willingness to study the sustainability information with reasonable diligence;
   2.                 Understand that the sustainability information is prepared and assured to appropriate levels of materiality and have an understanding of any materiality concepts included in the applicable criteria;
   3.                 Understand any inherent uncertainties involved in measuring or evaluating the sustainability matters; and
   4.                 Make reasonable decisions on the basis of the sustainability information.

Unless the engagement has been designed to meet the particular information needs of specific users, the possible effect of misstatements on specific users, whose information needs may vary widely, is not ordinarily considered.

1.       Materiality relates to the sustainability information within the scope of the assurance engagement. Therefore, when the engagement covers some, but not all, of the sustainability information, materiality is considered in relation to only the sustainability information that is within the scope of the assurance engagement.
2.       Not all disclosures involve the same materiality considerations. Ordinarily, materiality is considered or determined for different disclosures. For different disclosures, the same intended users may have different information needs, a different tolerance for misstatement, or the disclosures may be expressed using different units of measure. Considering qualitative factors may help the practitioner to identify disclosures that may be more significant to the intended users. For example, intended users may place more importance on information about food or drug safety than they do on information about the recycling of non-hazardous waste because the consequences of poor safety standards in food or drug production are likely to be more serious to human health than those for not recycling non-hazardous waste. They may, therefore, have a lower tolerance for misstatement of information about food or drug safety than about recycling of non-hazardous waste.

Qualitative Factors (Ref: Para. 98(a))

1.       Examples of factors that may be relevant to the practitioner’s consideration of materiality for qualitative disclosures include:

• The number of persons or entities affected by, and the severity of the effect of, the sustainability matter. For example, a hazardous waste spill may impact a small number of people, but the effect of that spill could lead to serious adverse consequences to the environment.
• The interaction between, and relative importance of, multiple topics and aspects of the topics.
• The form of the presentation of the sustainability information when the applicable criteria allow for variations in the presentation.
• The nature of a potential misstatement and when it would be considered material, for example, the nature of observed deviations from a control when the sustainability information is a statement that a process exists, or the control is effective.
• Whether a potential misstatement could affect compliance with law or regulation, including whether there is an incentive or pressure on management to achieve an expected target or outcome. For example, a practitioner may consider a potential misstatement to be material if it affected a threshold at which a carbon tax would be payable by the entity.
• Whether a potential misstatement would be significant based on the practitioner’s understanding of known previous communications to the intended users on matters relevant to their information needs, for example, in relation to the expected outcome of goals or targets, the degree to which a potential misstatement would impact the entity achieving the goal or target.
• When the sustainability matter relates to a governmental program or public sector entity, whether a particular aspect of the program or entity is significant with regard to the nature, visibility and sensitivity of the program or entity.
• If the applicable criteria include the concept of due diligence regarding impacts, the nature and extent of those impacts. For example, a practitioner may consider whether the entity’s disclosures omitted or distorted the actions taken to prevent or mitigate negative impacts or ignored additional negative impacts, or the entity’s actions to prevent or mitigate negative impacts were not effective.
• For narrative disclosures, whether the level of detail of the description or the overall tone of the words used to describe the matter, may give a misleading picture to users of the sustainability information.
• How the presentation of the information influences users’ perception of the information. For example, when management presents the disclosures in the form of graphs, diagrams or images, materiality considerations may include whether using different scales for the x- and y-axes of a graph may be potentially misleading.

Considerations for Materiality for Quantitative Disclosures (Ref: Para. 98(b))

1.       Quantitative factors relate to the magnitude of misstatements relative to the disclosures, if any, that are:
   1.                 Expressed numerically; or
   2.                 Otherwise related to numerical values (e.g., the number of observed deviations from a control may be a relevant quantitative factor when the sustainability information is a statement that the control is effective).
2.       Qualitative factors may also be relevant when determining materiality for quantitative disclosures. Example of qualitative factors are provided in paragraph A300.
3.       For disclosures that are quantitative (e.g., a key performance indicator expressed in numerical terms), materiality may be determined by applying a percentage to the reported metric, or to a chosen benchmark related to the disclosure.

1.       Factors that may affect the identification of an appropriate benchmark and percentage include:
   1.                 The elements of the disclosure. For example, if there is an element that is likely to be the focus of intended users, it may be the appropriate benchmark.
   2.                 The relative volatility of the benchmark. For example, if the benchmark varies significantly from period to period, it may be appropriate to set materiality relative to the lower end of the fluctuation range even if the current period is higher.
   3.                 The requirements of the applicable criteria. If the applicable criteria specify a percentage threshold for materiality, this may provide a frame of reference to the practitioner in determining materiality for the disclosure. 
2.       The applicable criteria may require disclosures of historical cost financial information. For example, topics reported may include community investment, training expenditures, or taxes by jurisdiction. These may also be reported in the entity’s financial report. The practitioner, or another practitioner, may be engaged to audit those financial report (see also paragraph A14). The materiality used for these aspects of the disclosures need not be the same as the materiality used in the audit of the entity’s financial report.

When the Entity Is Required to Apply Both Financial Materiality and Impact Materiality (Ref: Para.  99)

1.       If double materiality, as described in paragraph A337 is required to be applied by the reporting framework or entity-developed criteria, paragraph 99 requires the practitioner to take into account both financial materiality and impact materiality perspectives when considering or determining materiality for purposes of planning and performing procedures and determining whether identified misstatements are material, so that:
   1.                 For quantitative disclosures, ordinarily the lower level of materiality for financial or impact materiality would be used; and
   2.                 For qualitative disclosures, when applying the factors in paragraph A300 and other misstatement considerations in paragraphs A491–A493, ordinarily the greater level of detail needed in the materiality for financial or impact materiality would be used.

Performance Materiality (Ref: Para. 100)

1.       Performance materiality may be used during different stages of the assurance engagement. For example, performance materiality may be useful to help identify and assess risks of material misstatement at the disclosures level (in a limited assurance engagement), or to help identify and assess risks of material misstatement at the assertion level for disclosures (in a reasonable assurance engagement) and to determine the nature, timing and extent of further procedures.
2.       For quantitative disclosures, planning the engagement solely to detect individually material misstatements overlooks aggregation risk, which is the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality. Aggregation risk arises because the sustainability information may be disaggregated, and the practitioner may be designing and performing assurance procedures separately on that disaggregated information. It may therefore be appropriate when planning the nature, timing and extent of procedures for the practitioner to:
   1.                 Determine performance materiality for quantitative disclosures to reduce aggregation risk to an appropriately low level; and
   2.                 Consider what types of errors or omissions would potentially constitute a material misstatement when aggregated with other misstatements.
3.       The determination of performance materiality is not a simple mechanical calculation and involves the exercise of professional judgement. It is affected by the practitioner’s understanding of the entity that is updated during the performance of the risk assessment procedures. Factors the practitioner may take into account in setting performance materiality include the following:

• The extent of disaggregation of the disclosures. For example, in a group engagement, as the extent of disaggregation across components increases, a lower performance materiality ordinarily would be appropriate to address aggregation risk. The relative significance of the component to the reporting entity may affect the extent of disaggregation (e.g., if a single component represents a large portion of the reporting entity, there likely may be less disaggregation across components).
• Expectations about the nature, frequency and magnitude of misstatements of the disaggregated disclosures, including those identified in previous engagements.

1.       In some cases, risk assessment or further procedures may be performed by the practitioner on a quantitative disclosure as a single population (i.e., not disaggregated). In such cases, performance materiality used for purposes of performing these procedures is the same as materiality.
2.       Performance materiality does not address misstatements that would be material solely due to qualitative factors that affect their significance. However, designing procedures to increase the likelihood of the identification of misstatements that are material solely because of qualitative factors, to the extent it is possible to do so, may also assist the practitioner in addressing aggregation risk.

Revision of Materiality as the Engagement Progresses (Ref: Para. 101)

1.       Materiality may be revised as a result of a change in circumstances during the assurance engagement (for example, the disposal of a major part of the entity’s business), new information, or a change in the practitioner’s understanding of the entity and its operations as a result of performing procedures. For example, it may become apparent during the engagement that the percentage of significant product categories for which customer health and safety impacts are assessed for improvement is likely to be substantially different from that expected during planning. If during the engagement the practitioner concludes that a different materiality is appropriate, it may also be necessary to revise performance materiality or the nature, timing and extent of further procedures.

Risk Assessment Procedures

Designing and Performing Risk Assessment Procedures (Ref: Para. 103L–105)

1.       Risk assessment procedures are part of an iterative and dynamic process. Initial expectations may be developed about risks of material misstatement, which may be further refined as the practitioner progresses through the engagement, or if new information is obtained. Risk assessment procedures by themselves do not provide sufficient appropriate evidence on which to base the assurance conclusion.
2.       The nature and extent of risk assessment procedures will vary based on whether it is a limited or reasonable assurance engagement, the nature and circumstances of the entity (e.g., the formality of the entity’s policies or procedures, and processes and systems), the nature and complexity of the sustainability matters and the characteristics of the events or conditions that could give rise to material misstatements. The practitioner uses professional judgement to determine the nature and extent of the risk assessment procedures to be performed to meet the requirements of this ASSA as appropriate to the level of assurance to be obtained. The depth of understanding that is required by the practitioner is less than that possessed by management in managing the entity and is less for a limited assurance engagement than for a reasonable assurance engagement.
3.       The type of risk assessment procedures performed by the practitioner may include the following:
   1.                 Enquiries of management, of appropriate individuals within the internal audit function (if the function exists), and of others within the entity who, in the practitioner’s judgement, may have information that is likely to assist in identifying and assessing risks of material misstatement, whether due to fraud or error;
   2.                 Analytical procedures; and
   3.                 Observation and inspection.
4.       Information obtained by the practitioner through enquiries may provide important evidence (e.g., to support the required understanding of the entity and its environment and the components of the entity’s system of internal control); however, for a reasonable assurance engagement, enquiry alone ordinarily is not sufficient to identify and assess risks of material misstatement at the assertion level.
5.       Designing and performing risk assessment procedures may involve obtaining evidence from multiple sources including: 
   1.                 Interactions with management, those charged with governance, and other key entity personnel, which may include personnel within the entity who work in functions relevant to the sustainability information (such as Human Resources) or internal auditors.
   2.                 Certain external parties such as regulators, whether obtained directly or indirectly.
   3.                 Publicly available information about the entity and its industry, for example, entity-issued press releases, materials for analysts or investor group meetings, analysts’ reports, or information about sustainability matters.
6.       The practitioner may perform further procedures concurrently with risk assessment procedures when it is efficient to do so.

Considering Information from Engagement Acceptance and Continuance Procedures (Ref: Para. 104)

1.       Paragraph 75 requires the practitioner to obtain a preliminary knowledge of the engagement circumstances to provide an appropriate basis for establishing whether the preconditions for the engagement are present. This preliminary knowledge ordinarily is not sufficient to fulfill the requirements in paragraphs 103L and 103R, but may provide important evidence to support the required understanding. The practitioner may supplement the understanding of the applicable criteria obtained in accepting the engagement when performing risk assessment procedures with information from, for example:

• When applicable, other engagements performed by the engagement leader for the entity, such as the audit of financial report or verification of specific matters (e.g., verification of water consumption for a significant operation within the entity).
• Previous experience with the entity, if such information remains relevant and reliable as evidence for the current engagement.

Engagement Team Discussion (Ref: Para. 105)

1.       Discussions between the engagement leader and other key members of the engagement team, and any key practitioner’s external experts may:

• Provide an opportunity for more experienced engagement team members, including the engagement leader, to share their insights based on their knowledge of the entity.  Sharing information contributes to an enhanced understanding by all engagement team members.
• Allow the engagement team members to exchange information about how and where the sustainability information might be susceptible to material misstatement due to fraud or error.
• Assist the engagement team in planning and performing the engagement.

1.       When the engagement is carried out by a single individual, such as a sole practitioner, consideration of the matters referred to in paragraph 105 nonetheless may assist the practitioner in identifying and assessing risks of material misstatement.

Understanding the Sustainability Matters and the Sustainability Information (Ref: Para. 106)

1.       The characteristics of events or conditions that could give rise to a material misstatement of the disclosures may include complexity, judgement, change, uncertainty, or susceptibility to misstatement due to management bias or fraud, thus resulting in susceptibility of the disclosures to material misstatement, whether due to fraud or error.

1.       The characteristics of events or conditions that could give rise to risks of material misstatement may be different for different disclosures. For example:

• The risks of material misstatement related to information about the entity’s waste generated in the entity’s own activities may be different from the risks of material misstatement related to information about the waste generated upstream or downstream in the entity’s value chain.
• The risks of material misstatement in historical quantitative information may be different from the risks of material misstatement in forward-looking qualitative information.

1.       The sustainability matters may be complex to measure or evaluate or be subject to uncertainties. For example, potential climate-related risks, the likelihood of their occurrence, and their expected short, medium, and long-term impacts on an entity and its supply chain may be both complex to measure and evaluate and subject to a high degree of uncertainty. As a result of the inherent uncertainties, the risk of material misstatement of disclosures may be higher, or it may be difficult to identify and assess the risks of material misstatement of the sustainability information.

Determining the Suitability of the Applicable Criteria (Ref: Para. 107)

1.       Determining the suitability of the applicable criteria during the engagement builds on the preliminary knowledge obtained and discussion with appropriate party(ies) in evaluating their suitability prior to acceptance or continuance of the engagement, and includes determining whether the criteria exhibit the characteristics of suitable criteria in paragraph 78 (see also paragraph A199). The practitioner’s risk assessment procedures are different in nature and extent from the procedures that may be sufficient for acceptance or continuance of the engagement.
2.       If the applicable criteria comprise framework criteria that are presumed to be suitable, as described in paragraph A197, it may be sufficient for the practitioner to determine that the entity has applied such criteria in preparing the sustainability information. In other circumstances, the practitioner may consider whether the evaluation of the criteria at the acceptance and continuance stage remains appropriate for the purposes of the practitioner’s risk assessment procedures. If the practitioner’s evaluation of the criteria is no longer appropriate, a more detailed determination of the suitability of the criteria is required in accordance with paragraph 107. This may be the case, for example, if entity-developed criteria are available only after the engagement is accepted, or if the entity applies criteria in preparing the sustainability information that differ from what the practitioner anticipated prior to acceptance or continuance of the engagement. This may be due to a range of factors, for example:

• The criteria initially identified are no longer suitable for the entity’s circumstances.
• Changes in comparable industry practice.
• New or revised criteria being available.
• The entity applies more precise criteria.
• The entity identifies insufficient specificity in the framework criteria, necessitating entity-developed criteria to be developed.

1.       Determining the suitability of the applicable criteria and evaluating the appropriateness of their application assists the practitioner in identifying the susceptibility of the disclosures to misstatement. For example, the practitioner may:

• Identify elements of the applicable criteria that may be more susceptible to incorrect interpretation and application by the entity in preparing the sustainability information.
• Identify where the entity has the ability to exercise judgement in applying the applicable criteria, and therefore may give rise to risks of material misstatement due to inappropriate judgements in the circumstances of the entity.
• Identify aspects of the applicable criteria that may be more susceptible to manipulation, for example, when the entity is permitted to prepare the information on a comply or explain basis, provided the entity has a reasonable basis for doing so.
• Determine that the entity's process for identifying or developing and applying the applicable criteria is lacking, which may give rise to risks of material misstatement relating to the suitability or appropriate application of the applicable criteria in the entity’s circumstances.

1.       Framework criteria may not be considered suitable on their own (e.g., may be incomplete or subject to interpretation in application). Therefore, the entity may need to supplement the framework criteria so that the applicable criteria are suitable. The process of developing the applicable criteria and applying it to the sustainability matters may be complex, require judgement, and may be susceptible to bias. The determination required by paragraph 107 may result in the practitioner identifying disclosures where there is an increased susceptibility to misstatement or cause the practitioner to re-evaluate the suitability of the applicable criteria.
2.       The determination of the suitability of the applicable criteria may include understanding:

• The uncertainties and complexities associated with identifying the framework criteria, and any entity-developed criteria used to supplement the framework.
• The criteria for the entity’s process to identify sustainability information to be reported.
• The criteria for identifying the reporting boundary, and whether this differs for each disclosure. 
• If applicable, how the entity develops its own criteria, including criteria used to supplement the framework criteria.
• The controls over the entity’s process for identifying or developing and applying the applicable criteria.
• Whether there are any relief provisions. Such relief may be in relation to disclosure obligations over a certain period (e.g., an entity is only required to provide environmental information for the first three years of reporting), or in respect to data and information required to prepare the sustainability information (e.g., to address concerns about initial costs and resourcing constraints in obtaining required information regarding upstream and downstream value chain information).

1.       Understanding the process for identifying or developing and applying the applicable criteria, including the entity's process to identify sustainability information to be reported, may also help the practitioner determine the suitability of the applicable criteria, including whether the criteria:

• Address the purpose of the sustainability information.
• Are transparent.
• Involve engagement with intended users or their representatives in identifying their information needs for decision-making.
• Address how the criteria are applied in the entity's circumstances, including the selection and application of reporting policies consistent with the applicable criteria.
• Provide appropriate reasons for using the criteria.
• Consider if the criteria are appropriately specific regarding how the sustainability matters should be measured or evaluated.

Specific Considerations for Determining the Suitability of Criteria for Qualitative Information (Ref: Para. 78(c), 107)

1.       In some circumstances, the practitioner may determine that the criteria for qualitative information are unsuitable. For example, not all the characteristics for suitable criteria are exhibited because the criteria lack specificity or criteria for the qualitative information do not exist. In such circumstances, the practitioner may consider:

• Requesting that the entity develop suitable criteria.
• Requesting that the entity not report the information that would result from applying the unsuitable criteria, but if the entity decides to report that information, clearly identifying the information as other information that is not within the scope of the assurance engagement, and performing procedures in accordance with paragraphs 171–177.
• Whether the information may be misleading, and the impact on acceptance and continuance of the engagement.
• The impact on the assurance conclusion.

Specific Considerations for Determining the Suitability of Criteria for Processes, Systems and Controls (Ref: Para. 78(c), 107)

1.       If sustainability information on processes, systems and controls is subject to the assurance engagement, the practitioner may consider whether the criteria encompass the following:
   1.                 If the assurance conclusion covers the description of the entity’s process, systems or controls:
      1.                  The control objectives and controls designed to achieve those objectives;
      2.                The procedures and records, within both information technology and manual systems, by which the sustainability matters, and significant events and conditions, relevant to the sustainability information are recorded, processed, corrected as necessary, and transferred to the sustainability information reported.
   2.                 If the assurance conclusion covers the suitability of the design of the processes, systems or controls:
      1.                  Identification of the risks that threaten achievement of the control objectives stated in the description of the processes, systems or controls; and
      2.                Whether the controls identified in that description would, if operated as described, provide reasonable assurance about the achievement of the control objectives.
   3.                 If the assurance conclusion covers the operating effectiveness of the processes, systems or controls, whether the controls were consistently applied as designed throughout the specified period.

Specific Considerations for Determining the Suitability of Criteria for Performance (Ref: Para. 78(c), 107)

1.       In evaluating whether the criteria to evaluate the entity’s performance are suitable, the practitioner may consider whether the criteria encompass:
   1.                 Measures or benchmarks used to set the targets, key performance indicators, commitments or other goals against which performance is to be measured; and
   2.                 Methods of measurement or evaluation of the entity’s performance.

Specific Considerations for Determining the Suitability of Criteria for Forward-looking Sustainability Information (Ref: Para. 78(c), 107)

1.       In evaluating whether the criteria to be applied in preparing the entity’s forward-looking information are suitable, the practitioner may consider whether the criteria encompass:
   1.                 The basis of the assumptions to be made and the nature, sources and extent of uncertainty inherent in those assumptions; and
   2.                 The measurement or evaluation methods to be used for the forward-looking sustainability information to be prepared on the basis of the assumptions in (a).             

Relevance of the Criteria (Ref: Para. 78(c)(i), 107)

1.       In evaluating whether the criteria are relevant, the practitioner may consider whether the criteria:
   1.                 Result in sustainability information that assists decision-making by the intended users.
   2.                 Were developed through a process, by the entity or an external party, that focused on identifying or evaluating whether the sustainability information assists decision-making by the intended users, including the general types of decisions that intended users are expected to make based on the purpose of the sustainability information.
   3.                 Address the inherent level of measurement or evaluation uncertainty in applying the criteria in the circumstances of the engagement, including whether the sustainability information that is subject to high inherent measurement or evaluation uncertainty will be accompanied by disclosures that make the nature and extent of the uncertainty clear.
   4.                 Specify the level of disaggregation or aggregation of the information or include principles for determining an appropriate level of aggregation or disaggregation in particular circumstances.
   5.                 Are consistent with those generally recognised to be appropriate in the context of the entity’s industry or sector or there are justifiable reasons not to use such criteria (e.g., the entity develops more relevant criteria).
   6.                  Permit omissions of sustainability disclosures only in circumstances when it is appropriate to do so. For example, the criteria may allow the entity to exclude certain disclosures if:
      1.                  The reporting processes have not yet fully matured, such that the information is incomplete or unavailable, and the criteria require the entity to disclose this fact and its reasons for omitting the disclosures.
      2.                That disclosure is not applicable to the entity’s circumstances.
      3.              There are legal constraints preventing the disclosure.
      4.              In extremely rare circumstances, the sustainability information is confidential, or the adverse consequences of disclosure would reasonably be expected to outweigh the public interest benefits of doing so, such as information that might prejudice an investigation into an actual, or suspected, illegal act.
   7.                 Are specific to the topics and aspects of the topics, that will result in information that assists decision-making by the intended users, such as whether the criteria for:
      1.                  Processes, systems or controls includes, for example, control objectives to evaluate the suitability of their design (see also paragraph A333);
      2.                Performance includes the targets, key performance indicators, commitments or goals against which performance is measured and methods of measurement or evaluation of that performance (see also paragraph A334);
      3.              Forward-looking information includes the basis for evaluating the reasonableness of the underlying assumptions and methods of preparation based on those assumptions (see also paragraph A335); or
      4.              Historical information includes methods of measurement or evaluation of the entity’s activities.

Consideration of the relevance of the criteria when financial materiality or impact materiality apply (Ref: Para. 99, 107)

1.       Relevant criteria that assist the decision-making of intended users may relate to:
   1.                 Either:
      1.                  The material impacts of environmental, social and governance matters on the entity’s strategy, business model and performance, which may be referred to as “financial materiality;” or
      2.                The material impacts of the entity’s activities, products and services on the environment, society, or economy, which may be referred to as “impact materiality;” or
   2.                 Both financial materiality and impact materiality, which may be described by the applicable criteria as “double materiality.”

Completeness of Criteria (Ref Para. 78(c)(ii), 107)

1.       In evaluating the completeness of the criteria, including entity-developed criteria to supplement any framework criteria used, the practitioner may consider whether they address:

• Topics or aspects of topics that could reasonably be expected to affect decisions of intended users, or cannot be as readily measured or evaluated as other topics or aspects of topics.
• The basis for significant judgements in preparing the sustainability information.
• The source of significant inherent uncertainties in applying the criteria.
• The reporting boundary.

Reliability of the Criteria (Ref: Para. 78(c)(iii), 107)

1.       In evaluating whether the criteria are reliable, the practitioner may consider:

• Whether the measurement or evaluation of the sustainability matters can be undertaken with the necessary degree of precision to be relevant in the engagement circumstances.
• Whether the criteria are based on definitions with little or no ambiguity.
• Whether applying the criteria allows for reasonably consistent measurement or evaluation of the sustainability matters when used in similar circumstances by different parties.
• The sources of the criteria and the process used to develop them.

Neutrality of the Criteria (Ref: Para. 78(c)(iv), 107)

1.       In evaluating whether the criteria are neutral, the practitioner may consider whether the criteria:

• Require a balanced disclosure of both favourable and unfavourable information and are not subject to management bias by excluding any topics or aspects of topics only on the basis that they may reflect poorly on the entity.
• Do not result in information that is misleading to the intended users in the interpretation of the sustainability information.
• Are consistent between reporting periods, unless there is a reasonable basis for the change.
• Address how the information is presented and disclosed, to reduce the opportunity for management bias.
• Are entity-developed (e.g., may be subject to management bias).

1.       When the criteria are not consistent with previous reporting periods, the practitioner may consider whether:

• The entity has a reasonable basis for the change, for example, the entity may be developing and improving its process to prepare the sustainability information and the entity-developed criteria may have been changed to reflect more appropriate or modern approaches, data or methods.
• The basis for the change is sufficiently disclosed and explained in the sustainability information.
• The criteria are different from those commonly used in the entity’s industry or sector, as this may be an indicator of management bias.
• The change results in information that is always positive (e.g., management changes the criteria year on year so that the outcome looks more positive).

Understandability of the Criteria (Ref: Para. 78(c)(v), 107)

1.       In evaluating whether the criteria are understandable, the practitioner may consider whether the criteria:

• Are clear and unambiguous.
• Will enable the intended users to identify readily the main points being made and to infer appropriately whether they affect their decision-making.
• Will result in a presentation that does not obscure relevant information.
• Will result in clear presentation of the sustainability information in a way that effectively summarises and draws attention to key features of the information reported.
• Will result in the sustainability information being coherent, easy to follow, clear and logical.
• Will result in sustainability information that can be readily located, for example, the information may be difficult to locate if it is spread across different reports, webpages or included by reference.
• Will result in sustainability information that is appropriately balanced between conciseness to be understandable and relevance.
• Will result in logical and comparable time periods, whether those be:
  • A point in time (e.g., for description or implementation of a process not covering the period).
  • Periods that have ended (e.g., for historical information).
  • Periods that end in the future (e.g., for strategy, targets or commitments).

Understanding the Entity’s Reporting Policies (Ref: Para. 108–109)

1.       Reporting policies are the bases, conventions, rules and practices applied by an entity in preparing and presenting the sustainability information. The entity’s reporting policies are not criteria by themselves, but assist the entity in complying with the applicable criteria. The criteria need to encompass sufficient principles as the basis for the entity to select and apply reporting policies that are consistent with the underlying concepts in, and meet the objectives of, the requirements of the criteria, as explained in paragraph A2. If the existing criteria do not provide sufficient principles for the entity to select and apply reporting policies, criteria from another framework may need to be identified or entity-developed criteria may need to be developed. Matters that the practitioner may consider when obtaining an understanding of the entity’s selection and application of reporting policies, including any changes and the reasons for those changes, may include:

• Reporting policies used by similar entities, such as those in the same industry or jurisdiction.
• The methods the entity uses to recognise, measure, present and disclose significant sustainability information, or to address unusual or exceptional circumstances.
• The effect of significant policies in controversial or emerging areas for which there is a lack of authoritative guidance or consensus.
• Changes in the environment, such as changes in the applicable criteria, law and regulation or accepted interpretation of the criteria that may necessitate a change in the entity’s reporting policies.
• Criteria and laws and regulations that are new to the entity and when and how the entity will adopt, or comply with, such requirements.

Understanding the Entity and Its Environment

Understanding the Entity’s Operations, Legal and Organisational Structure, Ownership and Governance, and Business Model (Ref: Para. 110(a))

1.       The practitioner uses professional judgement to determine the characteristics of the entity and its environment that are relevant to the sustainability information and therefore are necessary to understand. The practitioner’s primary consideration is whether the understanding that has been obtained is sufficient to meet the objective of the risk assessment procedures. The practitioner's understanding may involve less effort when the scope of the assurance engagement is limited to certain sustainability information (e.g., discrete metrics). On the other hand, a broader understanding of the entity and its environment may be necessary if the scope of the assurance engagement addresses multiple topics or aspects of the topics. Similarly, the depth of understanding of the entity and its environment necessary for a limited assurance engagement may be less than the depth of understanding necessary in a reasonable assurance engagement.
2.       The practitioner’s understanding of the entity and its environment may include an understanding of the following:              
   1.                 The nature of the entity and its sustainability-related business risks, including:
      1.                  The nature of the operations included in the reporting boundary, including:
         1.                    Whether the activities or operations within the reporting boundary are internal or external to the entity;
         2.                    The contribution of each activity or operation to the sustainability information, including entities or operations within the value chain, if material to the sustainability information; and
         3.                    The uncertainties associated with the quantities reported in the sustainability information.
      2.                Changes from the prior period in the nature of the entity, its business risks, or the reporting boundary, including whether there have been any mergers, acquisitions, disposals, or outsourcing of functions.
      3.              The frequency and nature of interruptions to operations.
   2.                 The maturity of the processes and controls over sustainability information and the extent to which they integrate the use of IT.