Published

Audit / Assurance Engagement

vr.wm-eco-035 · wm-eco-035-audit-assurance-engagement

Represent a governed professional engagement and its evidence-to-conclusion chain so agents can manage terms, independence, risks, procedures, evidence, findings, reporting and follow-up without confusing an audit with a review or related service, evidence with truth, management response with remediation, or an unmodified opinion with a guarantee.

World Models Society, people and institutions SOC.ECO.AUD

Bundle → Layer → Finding → Questions Classifiers What it is Why it exists Distinguishing features What robots and AI may and may not do Moral aspects Owners Links to other meta-models Identity and identifiers Direct properties Recognition Capabilities and actions Hazards and failure modes Standards and interfaces Context of use Sources

Bundle → Layer → Finding → Questions Filled

6 bundles · 12 layers · 24 findings · 72 questions

Engagement identity, terms and parties Establish one engagement, its kind, mandate, terms, subject and accountable participants

Engagement identity, class and terms

Groups governed assertions about engagement identity, class and terms for the engagement.

Engagement, version, kind, status, predecessor, successor and master system

Records engagement, version, kind, status, predecessor, successor and master system as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish engagement, version, kind, status, predecessor, successor and master system? identity
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on engagement, version, kind, status, predecessor, successor and master system, under what ethics and authority? authority
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify engagement, version, kind, status, predecessor, successor and master system? validation

Audit, review, assurance, agreed-upon procedures, internal, performance and compliance class

Records audit, review, assurance, agreed-upon procedures, internal, performance and compliance class as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish audit, review, assurance, agreed-upon procedures, internal, performance and compliance class? classification
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on audit, review, assurance, agreed-upon procedures, internal, performance and compliance class, under what ethics and authority? requirement
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify audit, review, assurance, agreed-upon procedures, internal, performance and compliance class? security

Mandate, terms, subject and parties

Groups governed assertions about mandate, terms, subject and parties for the engagement.

Appointment, mandate, engagement letter, objective, scope, period, deadline and fee

Records appointment, mandate, engagement letter, objective, scope, period, deadline and fee as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish appointment, mandate, engagement letter, objective, scope, period, deadline and fee? requirement
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on appointment, mandate, engagement letter, objective, scope, period, deadline and fee, under what ethics and authority? constraint
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify appointment, mandate, engagement letter, objective, scope, period, deadline and fee? privacy

Responsible party, measurer or evaluator, practitioner, client, governance body and intended user

Records responsible party, measurer or evaluator, practitioner, client, governance body and intended user as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish responsible party, measurer or evaluator, practitioner, client, governance body and intended user? relationship
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on responsible party, measurer or evaluator, practitioner, client, governance body and intended user, under what ethics and authority? process
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify responsible party, measurer or evaluator, practitioner, client, governance body and intended user? retention

Ethics, independence, competence and quality Preserve professional standing, threat evaluation, team capability and quality responsibilities

Ethics, independence, objectivity and confidentiality

Groups governed assertions about ethics, independence, objectivity and confidentiality for the engagement.

Integrity, objectivity, competence, due care, confidentiality and professional behavior

Records integrity, objectivity, competence, due care, confidentiality and professional behavior as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish integrity, objectivity, competence, due care, confidentiality and professional behavior? constraint
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on integrity, objectivity, competence, due care, confidentiality and professional behavior, under what ethics and authority? event
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify integrity, objectivity, competence, due care, confidentiality and professional behavior? access

Independence threat, interest, relationship, safeguard, breach and resolution

Records independence threat, interest, relationship, safeguard, breach and resolution as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish independence threat, interest, relationship, safeguard, breach and resolution? validation
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on independence threat, interest, relationship, safeguard, breach and resolution, under what ethics and authority? measurement
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify independence threat, interest, relationship, safeguard, breach and resolution? exception

Team, experts, resources, supervision and review

Groups governed assertions about team, experts, resources, supervision and review for the engagement.

Partner, team, component auditor, internal auditor, expert, competence and availability

Records partner, team, component auditor, internal auditor, expert, competence and availability as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish partner, team, component auditor, internal auditor, expert, competence and availability? composition
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on partner, team, component auditor, internal auditor, expert, competence and availability, under what ethics and authority? evidence
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify partner, team, component auditor, internal auditor, expert, competence and availability? interoperability

Direction, supervision, review, consultation, quality review and difference of opinion

Records direction, supervision, review, consultation, quality review and difference of opinion as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish direction, supervision, review, consultation, quality review and difference of opinion? process
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on direction, supervision, review, consultation, quality review and difference of opinion, under what ethics and authority? quality
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify direction, supervision, review, consultation, quality review and difference of opinion? decision

Subject matter, criteria, materiality and risk Bind the exact subject and suitable criteria, then qualify materiality and risk without absorbing their masters

Subject matter, information, criteria and assertions

Groups governed assertions about subject matter, information, criteria and assertions for the engagement.

Underlying subject, subject-matter information, assertion, criterion, framework and benchmark

Records underlying subject, subject-matter information, assertion, criterion, framework and benchmark as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish underlying subject, subject-matter information, assertion, criterion, framework and benchmark? other
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on underlying subject, subject-matter information, assertion, criterion, framework and benchmark, under what ethics and authority? validation
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify underlying subject, subject-matter information, assertion, criterion, framework and benchmark? identity

Criterion relevance, completeness, reliability, neutrality, understandability and availability

Records criterion relevance, completeness, reliability, neutrality, understandability and availability as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish criterion relevance, completeness, reliability, neutrality, understandability and availability? quality
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on criterion relevance, completeness, reliability, neutrality, understandability and availability, under what ethics and authority? security
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify criterion relevance, completeness, reliability, neutrality, understandability and availability? classification

Materiality, risk, controls and fraud

Groups governed assertions about materiality, risk, controls and fraud for the engagement.

Materiality, threshold, performance materiality, tolerable misstatement and aggregation

Records materiality, threshold, performance materiality, tolerable misstatement and aggregation as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish materiality, threshold, performance materiality, tolerable misstatement and aggregation? decision
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on materiality, threshold, performance materiality, tolerable misstatement and aggregation, under what ethics and authority? privacy
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify materiality, threshold, performance materiality, tolerable misstatement and aggregation? composition

Inherent, control, detection, engagement, fraud, noncompliance and significant risk

Records inherent, control, detection, engagement, fraud, noncompliance and significant risk as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish inherent, control, detection, engagement, fraud, noncompliance and significant risk? other
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on inherent, control, detection, engagement, fraud, noncompliance and significant risk, under what ethics and authority? retention
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify inherent, control, detection, engagement, fraud, noncompliance and significant risk? relationship

Planning, procedures, evidence and documentation Connect risk-responsive work to sufficient appropriate evidence and an immutable workpaper trail

Strategy, plan, program, procedure and sampling

Groups governed assertions about strategy, plan, program, procedure and sampling for the engagement.

Strategy, plan, milestone, procedure, nature, timing, extent, owner and status

Records strategy, plan, milestone, procedure, nature, timing, extent, owner and status as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish strategy, plan, milestone, procedure, nature, timing, extent, owner and status? process
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on strategy, plan, milestone, procedure, nature, timing, extent, owner and status, under what ethics and authority? access
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify strategy, plan, milestone, procedure, nature, timing, extent, owner and status? state

Population, sampling frame, unit, selection method, size, deviation and projection

Records population, sampling frame, unit, selection method, size, deviation and projection as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish population, sampling frame, unit, selection method, size, deviation and projection? measurement
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on population, sampling frame, unit, selection method, size, deviation and projection, under what ethics and authority? exception
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify population, sampling frame, unit, selection method, size, deviation and projection? lifecycle

Evidence, source, procedure and workpaper

Groups governed assertions about evidence, source, procedure and workpaper for the engagement.

Evidence item, source, assertion, procedure, relevance, reliability and contradiction

Records evidence item, source, assertion, procedure, relevance, reliability and contradiction as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish evidence item, source, assertion, procedure, relevance, reliability and contradiction? evidence
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on evidence item, source, assertion, procedure, relevance, reliability and contradiction, under what ethics and authority? interoperability
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify evidence item, source, assertion, procedure, relevance, reliability and contradiction? temporal

Workpaper index, preparer, reviewer, cross-reference, digest, sign-off and lock

Records workpaper index, preparer, reviewer, cross-reference, digest, sign-off and lock as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish workpaper index, preparer, reviewer, cross-reference, digest, sign-off and lock? provenance
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on workpaper index, preparer, reviewer, cross-reference, digest, sign-off and lock, under what ethics and authority? decision
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify workpaper index, preparer, reviewer, cross-reference, digest, sign-off and lock? provenance

Findings, evaluation, conclusion and reporting Preserve observations, management responses and criteria-scoped conclusions without overstating assurance

Findings, misstatements, deficiencies and responses

Groups governed assertions about findings, misstatements, deficiencies and responses for the engagement.

Condition, criterion, cause, effect, finding, misstatement, deviation and noncompliance

Records condition, criterion, cause, effect, finding, misstatement, deviation and noncompliance as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish condition, criterion, cause, effect, finding, misstatement, deviation and noncompliance? evidence
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on condition, criterion, cause, effect, finding, misstatement, deviation and noncompliance, under what ethics and authority? identity
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify condition, criterion, cause, effect, finding, misstatement, deviation and noncompliance? ownership

Corrected, uncorrected, deficiency, significant deficiency, material weakness, response and action

Records corrected, uncorrected, deficiency, significant deficiency, material weakness, response and action as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish corrected, uncorrected, deficiency, significant deficiency, material weakness, response and action? state
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on corrected, uncorrected, deficiency, significant deficiency, material weakness, response and action, under what ethics and authority? classification
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify corrected, uncorrected, deficiency, significant deficiency, material weakness, response and action? authority

Evaluation, conclusion, opinion, report and communication

Groups governed assertions about evaluation, conclusion, opinion, report and communication for the engagement.

Sufficiency, appropriateness, materiality, aggregation, unresolved matter and overall evaluation

Records sufficiency, appropriateness, materiality, aggregation, unresolved matter and overall evaluation as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish sufficiency, appropriateness, materiality, aggregation, unresolved matter and overall evaluation? decision
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on sufficiency, appropriateness, materiality, aggregation, unresolved matter and overall evaluation, under what ethics and authority? composition
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify sufficiency, appropriateness, materiality, aggregation, unresolved matter and overall evaluation? requirement

Reasonable, limited, none, unmodified, qualified, adverse, disclaimer, emphasis and other matter

Records reasonable, limited, none, unmodified, qualified, adverse, disclaimer, emphasis and other matter as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish reasonable, limited, none, unmodified, qualified, adverse, disclaimer, emphasis and other matter? classification
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on reasonable, limited, none, unmodified, qualified, adverse, disclaimer, emphasis and other matter, under what ethics and authority? relationship
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify reasonable, limited, none, unmodified, qualified, adverse, disclaimer, emphasis and other matter? constraint

Lifecycle, follow-up, governance and interoperability Issue, communicate, archive and follow up with qualified provenance, access and loss-aware projections

Issuance, communication, follow-up and archive

Groups governed assertions about issuance, communication, follow-up and archive for the engagement.

Draft, review, approval, signature, issue, release, distribution, restriction and withdrawal

Records draft, review, approval, signature, issue, release, distribution, restriction and withdrawal as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish draft, review, approval, signature, issue, release, distribution, restriction and withdrawal? lifecycle
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on draft, review, approval, signature, issue, release, distribution, restriction and withdrawal, under what ethics and authority? state
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify draft, review, approval, signature, issue, release, distribution, restriction and withdrawal? process

Governance communication, recommendation, action, owner, due, status, verification and closure

Records governance communication, recommendation, action, owner, due, status, verification and closure as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish governance communication, recommendation, action, owner, due, status, verification and closure? relationship
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on governance communication, recommendation, action, owner, due, status, verification and closure, under what ethics and authority? lifecycle
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify governance communication, recommendation, action, owner, due, status, verification and closure? event

Provenance, access, retention and projection

Groups governed assertions about provenance, access, retention and projection for the engagement.

Source, actor, derivation, quality, confidence, conflict, event time and knowledge time

Records source, actor, derivation, quality, confidence, conflict, event time and knowledge time as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish source, actor, derivation, quality, confidence, conflict, event time and knowledge time? quality
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on source, actor, derivation, quality, confidence, conflict, event time and knowledge time, under what ethics and authority? temporal
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify source, actor, derivation, quality, confidence, conflict, event time and knowledge time? measurement

Owner, custodian, purpose, confidentiality, privilege, access, legal hold, retention and mapping loss

Records owner, custodian, purpose, confidentiality, privilege, access, legal hold, retention and mapping loss as source-qualified Audit / Assurance Engagement context while client, subject matter, criteria, statements, disclosures, controls, risks, issues, actions, regulator cases and records masters remain external.

Which stable engagement, version, kind, mandate, subject, criteria, scope, period and external-master identities establish owner, custodian, purpose, confidentiality, privilege, access, legal hold, retention and mapping loss? access
Who appoints, prepares, performs, supervises, reviews, evaluates, concludes, communicates or may rely on owner, custodian, purpose, confidentiality, privilege, access, legal hold, retention and mapping loss, under what ethics and authority? provenance
Which assertion, criterion, risk, procedure, evidence, materiality, source, event time, knowledge time, uncertainty and successor lineage qualify owner, custodian, purpose, confidentiality, privilege, access, legal hold, retention and mapping loss? evidence

Classifiers Filled

Family: World Models
Category: Society, people and institutions
Entry kind: aggregate
Navigation path: NAV.SOC.ECO.AUD
Domain: SOC.ECO.AUD
Industry: Cross-industry
Tags: auditassuranceengagementsoc.eco.aud

What it is Filled

Owns engagement and version identity; financial audit, review, other assurance, sustainability assurance, agreed-upon procedures, internal, public-sector, management-system, statutory, performance and compliance profiles; appointment, mandate, engagement letter, objective, scope, period, deadline and fee terms; responsible party, measurer or evaluator, practitioner, client, governance body and intended-user roles; integrity, objectivity, competence, due care, confidentiality, professional behavior, independence threats, safeguards, breaches and resolutions; partner, team, component practitioner, internal auditor, expert, resources, direction, supervision, review, consultation, quality review and differences of opinion; underlying subject, subject-matter information, assertions, criteria, frameworks and benchmarks; materiality, performance materiality and aggregation; inherent, control, detection, engagement, fraud, noncompliance and significant risks; audit strategy, plan, program, procedures, timing, extent, population, sampling and deviations; evidence items, sources, relevance, reliability, sufficiency, appropriateness, contradictions and workpaper provenance; condition, criterion, cause, effect, findings, misstatements, deviations, noncompliance, deficiencies, management responses, recommendations and action references; overall evaluation, unresolved matters, reasonable, limited or no assurance, conclusions, unmodified, qualified, adverse and disclaimer opinions, emphasis and other matters; report drafting, approval, signature, issuance, distribution, restriction, withdrawal, governance communications, follow-up and closure; archive, provenance, clocks, confidentiality, privilege, access, retention and loss-aware projections. External client, subject, criteria, statement, disclosure, control, risk, evidence source, issue, action, regulator case and records masters remain authoritative.

In scope

Engagement identity, terms, parties, ethics, independence, competence, quality, subject, criteria, materiality, risks and controls
Planning, procedures, sampling, evidence, workpapers, findings, responses, evaluation, conclusion, report, communication, follow-up, archive, access and projections

Out of scope

Owning Organization, Person, Subject Matter, Criteria, Legal Norm, Statement, Disclosure, Control, Risk, Evidence Source, Issue, Remediation Action, Regulator Case, Decision, Sanction or Records masters
Treating a review as audit, agreed-upon factual findings as assurance, management assertion as practitioner conclusion, approval as independence, or unmodified opinion as guarantee
Autonomous appointment, engagement acceptance, independence attestation, evidence waiver, workpaper sign-off, opinion issuance, privileged disclosure or record destruction

Why it exists Filled

Distinguishing features Filled

Holds the engagement, its evidence and its conclusion, not the subject matter or the management assertion being examined.
Distinguishes audit (reasonable assurance), review (limited assurance) and agreed-upon procedures (factual findings without assurance).
Keeps practitioner findings, management responses and regulator decisions as separately sourced records.
An unmodified opinion is assurance in a stated scope, not a guarantee against fraud or error.

What robots and AI may and may not do Filled

Must not

Accept or continue an engagement.
Assert independence on behalf of the practitioner.
Waive evidence, sign off workpapers or form an opinion.
Disclose privileged or client-confidential material.
Alter workpapers after archive.

Only with a human decision

Engagement acceptance and independence confirmation.
Forming and signing the conclusion or opinion.
Deciding to report suspected fraud or noncompliance.

May

Organise workpapers, evidence references and procedures.
Run analytics and sampling to support procedures.
Draft findings and the management letter for practitioner review.
Track remediation actions and follow-up dates.

Moral aspects Filled

Third parties rely on assurance; an unsupported opinion misleads them.
Auditor independence protects the public interest and must not be compromised by convenience.
Workpapers contain confidential client and personal data.

Who is affected

Shareholders and other users of the report
Management and those charged with governance
Employees whose actions are examined
Regulators

Owners Filled

Steward

Dimension owner, namespace authority and delegated engagement, professional, legal, ethics, privacy, security and records authorities

Roles

Appointing party and client: Authorize scoped terms and access while remaining separate from the practitioner's conclusion.
Responsible party and measurer or evaluator: Own subject-matter information, assertions and representations under the applicable criteria.
Engagement partner and practitioner: Own acceptance, direction, evidence judgments, conclusion, report and overall engagement quality.
Engagement team, component practitioner and expert: Perform authorized procedures, document evidence and communicate limits and contradictions.
Reviewer and engagement quality reviewer: Objectively review significant judgments, workpapers, conclusions and unresolved differences before release.
Governance body and intended user: Receive scoped communications and reports without altering practitioner-owned conclusions.
Ethics, legal, privacy, security and records authority: Own independence, confidentiality, privilege, access, exception, archive and retention controls.

Links to other meta-models Filled

references

WM-ACT-036 - Preserve the semantically suspect Research Study parent signal only as a review hold, not as containment.
WM-ACT-033 Review / Inspection / Audit and WM-ACT-034 Assessment / Evaluation - Reference generic process patterns without duplicating professional engagement authority and evidence semantics.
Organization, Person, Subject Matter, Criteria, Legal Norm, Statement, Disclosure, Control, Risk, Issue, Action, Regulator Case and Records models - Resolve external identity, rule, source, response and governance records without duplicating their lifecycles.

aligned

IAASB, IESBA, IIA, PCAOB, GAO, INTOSAI, ISO 19011 and EU statutory-audit profiles - Project version-pinned professional and jurisdiction profiles with declared scope and semantic loss.
RFC 3339, PROV-O, DQV and ODRL - Project temporal, provenance, quality and policy views without claiming universal conformance.

neighbor

WM-ACT-036 - The registry supplies Research Study as a provisional parent signal, which is semantically suspect for audit and assurance; no containment or cascade authority is inferred.
WM-ACT-033 and WM-ACT-034 - Generic review, inspection, audit, assessment and evaluation processes may be referenced, but this aggregate owns professional terms, ethics, evidence-to-conclusion and report semantics.
Audit, review, assurance and agreed-upon procedures - Each class has different objectives, work effort, evidence, wording and assurance level; factual findings are not an assurance conclusion.
Subject matter, assertion, criteria, evidence and conclusion - The engagement binds an external subject to suitable criteria, gathers source-qualified evidence and issues a scoped conclusion without making the underlying master its own.
Finding, response, action and regulator decision - A practitioner finding, responsible-party response, promised or completed action, verification and regulator outcome remain separately owned assertions.
Professional and jurisdiction profiles - IAASB, IESBA, IIA, PCAOB, GAO, INTOSAI, ISO and EU rules are versioned scoped profiles and do not establish universal conformance.

parent

WM-ACT-036

What else AI and robots need to interact with it Filled

Sources Filled

2025 Handbook of International Quality Management, Auditing, Review, Other Assurance, and Related Services Pronouncements - International Auditing and Assurance Standards Board
ISA 220 Revised: Quality Management for an Audit of Financial Statements - International Auditing and Assurance Standards Board
ISA 315 Revised 2019: Identifying and Assessing the Risks of Material Misstatement - International Auditing and Assurance Standards Board
ISA 700 Revised: Forming an Opinion and Reporting on Financial Statements - International Auditing and Assurance Standards Board
ISAE 3000 Revised: Assurance Engagements Other than Audits or Reviews of Historical Financial Information - International Auditing and Assurance Standards Board
ISSA 5000 General Requirements for Sustainability Assurance Engagements - International Auditing and Assurance Standards Board
ISRE 2400 Revised: Engagements to Review Historical Financial Statements - International Auditing and Assurance Standards Board
ISRS 4400 Revised: Agreed-Upon Procedures Engagements - International Auditing and Assurance Standards Board
International Code of Ethics for Professional Accountants - International Ethics Standards Board for Accountants
2024 Global Internal Audit Standards - The Institute of Internal Auditors
AS 1000: General Responsibilities of the Auditor in Conducting an Audit - Public Company Accounting Oversight Board
AS 1105: Audit Evidence - Public Company Accounting Oversight Board
AS 3101: The Auditor's Report - Public Company Accounting Oversight Board
Government Auditing Standards 2024 Revision - United States Government Accountability Office
ISSAI 100 Fundamental Principles of Public-Sector Auditing - International Organization of Supreme Audit Institutions
ISO 19011:2026 Guidelines for Auditing Management Systems - International Organization for Standardization
Directive 2006/43/EC on Statutory Audits - European Union
PCAOB Auditing Standards Index - Public Company Accounting Oversight Board
ISA 610 Revised 2013: Using the Work of Internal Auditors - International Auditing and Assurance Standards Board
ISA 600 Revised: Special Considerations in Group Audits - International Auditing and Assurance Standards Board
RFC 3339: Date and Time on the Internet - Internet Engineering Task Force
PROV-O: The PROV Ontology - World Wide Web Consortium
Data Quality Vocabulary - World Wide Web Consortium
ODRL Information Model 2.2 - World Wide Web Consortium

Open questions

Canonically adjudicate the WM-ACT-036 parent signal and register relations to generic audit, assessment, party, subject, criteria, statement, disclosure, control, risk, source, issue, action, regulator and records models.
Create independently validated financial audit, review, other assurance, sustainability assurance, agreed-upon procedures, internal audit, public-sector, management-system, statutory, performance, compliance, sector and jurisdiction profiles.
Benchmark acceptance, independence, materiality, risk assessment, control reliance, sampling, evidence evaluation, workpaper review, findings, opinion modification, communications, follow-up and archive controls.
Validate jurisdiction, profession, entity class, appointment, licensing, privilege, regulator access, reporting, distribution, external inspection and retention policies.
Pin exact external releases and licensing conditions and obtain independent audit, assurance, ethics, legal, privacy, security and records review before promotion beyond reviewable-draft assurance.
Claude and Grok each timed out on one bounded attempt; no independent external result was admitted.
WM-ACT-036 is a semantically suspect provisional parent signal because the registry names it Research Study; no settled WM-ECO-035 edge exists.
Financial audit, review, other assurance, sustainability assurance, internal audit, public-sector, management-system, statutory, performance, compliance, sector and jurisdiction profiles need separate validation.
Client, subject matter, criteria, statements, disclosures, controls, risks, evidence sources, issues, actions, regulator cases and retention remain adopting-Dimension profiles.
IAASB, IESBA, IIA and ISO normative text carries licensing or access conditions; this model records public metadata and links, not copied standards.
Every IAASB, IESBA, IIA, PCAOB, GAO, INTOSAI, ISO, EU, RFC, PROV, DQV and ODRL mapping needs exact release pins and conformance tests.

Machine files

Card as JSON Specification AGENTS.md Source Card backlog vercy.card/1

Provenance

world-models research · reviewable-draft

Built from: models/wm-eco-035-audit-assurance-engagement/spec.yaml, ver-cy/world-models/card-supplements/wm-eco-035-audit-assurance-engagement.json