Carrying out computerised auditing is an essential skill for accountancy professionals in Kenya, particularly as organisations increasingly rely on digital financial systems. This chapter explores how auditors apply technology to enhance audit efficiency and accuracy while addressing the specific challenges posed by computerised environments. Mastery of computerised auditing techniques supports auditors in identifying risks and ensuring compliance with relevant regulations such as the Public Audit Act and IFRS standards applicable in Kenya.

8.1 Purpose of the auditor’s report

The auditor's report is the formal document in which the auditor tells the users of financial statements whether those statements give a true and fair view, or are fairly presented, in accordance with the applicable financial reporting framework. It is the end product of the audit and the only part of the auditor's work most users ever see. ISA 700 (Revised), Forming an Opinion and Reporting on Financial Statements, sets out what it must contain, and ICPAK has adopted it for audits in Kenya. Example: the shareholders of a tea factory company in Kericho read the auditor's report at the annual general meeting before deciding whether to approve the accounts and the directors' dividend proposal.

8.1.1 Communicating the auditor's opinion

The main purpose of the report is to express a clear opinion on the financial statements, based on audit evidence that is sufficient and appropriate. The opinion tells users how far they can rely on the figures.

• Expressing an opinion: The report states whether the statements are free from material misstatement and prepared in line with IFRS or IFRS for SMEs, and with the Companies Act 2015 where it applies.
• Giving reasonable assurance: The report does not guarantee that the statements are perfect; it gives a high but not absolute level of assurance.
• Stating the basis for the opinion: The auditor explains the standards followed and the independence and ethical requirements met, so users know the opinion was properly formed.
• Using standard wording: Standard wording lets a bank officer in Nairobi or an investor abroad read any audit report and understand its meaning quickly.
• Making any problems visible: If the auditor disagrees with management or could not obtain evidence, the report says so instead of hiding it.

8.1.2 Meeting the needs of users

Different users depend on the report for different decisions, and the report must serve all of them fairly.

• Shareholders and members: They use it to hold directors accountable and to decide on matters such as dividends and the reappointment of directors. SACCO members, for example, rely on it before approving the society's accounts at the annual general meeting.
• Lenders: Banks and development partners use it when deciding whether to grant or continue a loan.
• Regulators and tax authorities: Bodies such as the Capital Markets Authority, the Sacco Societies Regulatory Authority and the Kenya Revenue Authority rely on audited statements for supervision and assessment.
• Management and those charged with governance: The audit committee or board uses the report as independent confirmation of the quality of financial reporting.
• Suppliers, employees and the public: Suppliers deciding on credit terms and employees negotiating pay want assurance that the entity is financially sound.
• Public sector stakeholders: In county governments, the county assembly and citizens rely on reports of the Auditor-General to see whether public money was used properly.

8.1.3 Enhancing credibility and accountability

An unaudited set of accounts is only management's own statement. The independent report adds credibility because it comes from a qualified professional who has no interest in the figures.

• Credibility of financial information: Users trust figures that an independent auditor has examined and reported on.
• Accountability of management: Directors and managers know their stewardship will be reported on, which encourages honest reporting and good record keeping.
• Reduced information asymmetry: Managers know more about the entity than outsiders; the report narrows that gap.
• Lower cost of capital: A clean report helps an entity such as a hospital or manufacturer raise funds on better terms.
• Deterrence of fraud and error: The knowledge that an audit will take place discourages manipulation of records.

8.1.4 Meeting legal and professional requirements

The report also exists because law and professional standards demand it.

• Statutory requirement: The Companies Act 2015 requires companies to have their financial statements audited and the auditor's report presented to members; the Public Audit Act 2015 does the same for public entities.
• Regulatory filing: Audited statements with the report are filed with the Registrar of Companies, the Kenya Revenue Authority, and sector regulators.
• Professional standards: ISA 700 and related standards set the form and content of the report, and ICPAK members must follow them.
• Protection of the auditor: A properly worded report that states the auditor's responsibilities and the limits of the audit helps protect the auditor against later claims.
• Evidence of compliance: The report shows the entity and the auditor have met the requirements of the law and the standards.

Chapter Summary

This chapter explored the concept of audit risks, emphasizing their significance in the auditing process and how they can affect the accuracy and reliability of audit conclusions. It detailed the various types of audit risks, including inherent risk, control risk, and detection risk, explaining how each type can influence the overall risk assessment during an audit. The discussion then focused on risk based audit reports, highlighting how auditors tailor their reporting to reflect the identified risks, ensuring that stakeholders receive a clear understanding of potential financial uncertainties. Understanding audit risks enables auditors to design effective procedures that mitigate these risks and enhance audit quality. The chapter also underscored the importance of integrating technology in computerized auditing to manage and assess risks more efficiently. By applying risk-based approaches, auditors can prioritize areas with higher risk, thus improving the focus and relevance of their audit findings. This approach supports better decision-making and strengthens confidence in financial statements.