An Agreed-Upon-Procedures Engagement is one where an auditor performs tests on only a portion of the organization's finances, and can therefore be done at much lower cost. CPA Dennis Walsh discusses how this little-used process could be utilized more for nonprofit benefit:
In Southeast Alaska, the United Way coordinates the federal government's Combined Federal Campaign (CFC). In 1998, the CFC required an audit when program revenues exceeded $100,000. Southeast Alaska had many nonprofits with revenues over $100,000 but less than the federal single audit theshold (currently $500,000), above which a financial statement audit is mandatory for entities receiving federal funds.A
"Given that many of these organizations were only receiving a few thousand dollars or so from the United Way/CFC, it hardly made sense for them to continue to receive these funds if it only meant that they were going to have to turn around and pay them out as audit fees," noted Max Mertz, CPA, a partner with Elgee Rehfeld Mertz, LLC, in Juneau. The cost of an audit to these small nonprofits was typically $4,000 or more.
Fortunately, according to Mertz, the United Way board was enlightened enough to see the value of accepting his proposal for an agreed upon procedures engagement as an alternative to a financial statement audit. It satisfied the CFC accountability requirements and lowered costs to the United Way member nonprofits. His firm typically charges nonprofit organizations $1,500 for this service.
Using this approach, the engagement targets a key area for nonprofit boards, that their organizations have properly working internal controls.A And for United Way contributors, it targets what they are concerned with the most, that their contributions are safeguarded and properly used.
MertzaEU(tm)s firm has since seen many of its other nonprofit clients with no external audit requirements also adopt this engagement, demonstrating their fiduciary responsibility by opening their systems of internal controls to CPA inspection.
Additionally, Mertz has found the AUPE to be more responsive than the audit standards to the needs of many of these small nonprofits because the engagement focuses on controls over disbursements, receipts, and regulatory compliance with government agencies. By contrast, an audit, even with the recent risk assessment revisions, looks at controls only for the limited focus of financial reporting.
As a side note, while an audit is designed to help reduce the risk of undetected material misstatement in the financial statements, the common perception that it is designed to uncover fraud is misplaced. "Fraud is identified in only a small percentage of audits," said Betsy Lowder, CPA and CFO of the United Way of Greater High Point, North Carolina. "More fraud is detected through whistleblower action and organizations should consider adopting a whistleblower program," she added.
CPA Terry Lancaster of Charlotte, North Carolina (C. DeWitt Foard and Company), finds the AUP engagement useful for nonprofit clients that want to test staff compliance with accounting systems and evaluate the efficiency of their systems: "This type of engagement is useful if the client has no need for audited financial statements but still wants some level of assurance that good procedures have been established and are being followed. Typically, our fee is approximately half that of a full audit."
But an AUP will serve as an audit substitute in only limited circumstances, particularly when dealing with grantor agencies. "I think the question you need to answer is: Who am I reporting to and will they accept the report? You will need to discuss this up front with the grantors or whomever you are reporting to and get their buy-in. This, of course, is not necessarily an easy thing to do with government bureaucracies," Mertz commented.