Transparency Report 2021 - EY Lithuania
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
Contents Message from the leaders ........................................................................................................................... 3 About us ....................................................................................................................................................5 Legal structure, ownership and governance ............................................................................................... 5 Network arrangements ............................................................................................................................ 6 Creating long-term value for society .......................................................................................................... 8 Commitment to Sustainable Audit Quality.....................................................................................................9 Infrastructure supporting quality .............................................................................................................. 9 Instilled professional values .................................................................................................................... 12 Internal quality control system................................................................................................................ 14 Client acceptance and continuance.......................................................................................................... 16 Performance of audits ........................................................................................................................... 17 Review and consultation ........................................................................................................................ 19 Rotation and long association ................................................................................................................. 21 Audit quality reviews ............................................................................................................................. 21 External quality assurance review ........................................................................................................... 22 Root cause analysis ............................................................................................................................... 22 Compliance with legal requirements ........................................................................................................ 22 Independence practices ............................................................................................................................24 Continuing education and investing in exceptional talent .............................................................................26 Development of EY people ..................................................................................................................... 26 Revenue and remuneration........................................................................................................................28 Financial information ............................................................................................................................. 28 Partner remuneration ............................................................................................................................ 28 Appendix 1: list of PIE audit clients ............................................................................................................30 EY Lithuania PIE audit clients ................................................................................................................. 30 Appendix 2: approved EYG member firms ...................................................................................................31 Transparency Report 2021 | 2
Message from the leaders Welcome to the Transparency Report 2021 of EY Lithuania. We believe that how we advance audit quality, manage risk and maintain our independence as auditors should be transparent to stakeholders. This report is one of the ways in which we provide an update on what we are doing in these areas. Executing high-quality audits continues to be the top priority, and is at the heart of our commitment to serve the public interest. Auditors play a vital role in the functioning of capital markets by promoting transparency and Jonas Akelis supporting investor confidence. Companies, regulators and other stakeholders EY Baltics count on us to deliver excellence in every engagement. Managing Partner We are focused on investing in tools to improve what we do, creating high- performing, diverse and inclusive teams, and building trust and confidence through the audits we perform. EY Lithuania’s reputation is based on and grounded in providing high-quality professional audit services, objectively and ethically, to every company we audit. We embrace the transparency objectives of the European Union’s (EU’s) Regulation 537/2014 and the Law of the Republic of Lithuania on Audit of Financial Statements, which require Lithuanian statutory auditors of public Diana Krisjane interest entities (PIEs) to publish annual transparency reports. EY Baltics Assurance Leader The EY Lithuania Transparency Report 2021 complies with the Regulation and the Law of the Republic of Lithuania on Audit of Financial Statements, and covers the financial year ended 30 June 2021 as well as any more recent relevant events. In this report, you can learn about how we are creating long- term value for society; our commitment to Sustainable Audit Quality (SAQ), including how we instill professional values, the performance of audits and internal quality control; independence practices; and the impact of the COVID- 19 pandemic on operations. The focus on delivering high-quality audits has remained paramount during the global pandemic. A comprehensive set of actions has been developed to assess and respond to risk, with a particular focus on fraud risks. There has also been a continuing commitment to sustainability, as part of the global organization’s NextWave strategy, to create long-term value for all stakeholders. This includes an ambition to be carbon negative in 2021, following the achievement of carbon neutrality in 2020, and to be net zero in 2025, which is an important step in the EY sustainability journey. EY Lithuania is doing its part in achieving these goals. We remain focused on enhancing audit quality and upholding our independence, informed by several factors, including external and internal inspection results. Continuous improvement of audit quality requires us to challenge approaches to audit execution, and we concentrate on this by evaluating inspection findings and taking responsive actions. Transparency Report 2021 | 3
The need for trust and confidence in financial reporting in the capital markets EY’s purpose: Building a has never been greater, and auditors play an important role in this regard. better working world We encourage all our stakeholders — including clients and their investors, audit EY is committed to doing its part in committee members and regulators — to continue to engage with us on our building a better working world. strategy as well as any of the matters covered in this report. The audits delivered by EY people help build trust and confidence in business and the capital markets. EY auditors serve the public interest by delivering high-quality, analytics-driven audits with independence, integrity, objectivity and professional Jonas Akelis Diana Krisjane skepticism. In so doing, the EY organization helps protect and President EY Baltics Assurance Leader promote sustainable and long-term value for stakeholders. Ernst & Young Baltic UAB Vilnius, 29 October 2021 Transparency Report 2021 | 4
About us EYG member firms are grouped into three geographic Legal structure, ownership and Areas: Americas; Asia-Pacific; and Europe, Middle governance East, India and Africa (EMEIA). The Areas comprise multiple Regions. Regions are groupings of member In Lithuania, Ernst & Young Baltic UAB is a limited firms (and in the case of the US member firm within liability company organized in Lithuania and is a that member firm) along geographical lines with the member firm of Ernst & Young Global Limited, a UK exception of the Financial Services Organization company limited by guarantee (EYG). In this report, (FSO) Regions, which comprise the financial services we refer to ourselves as “EY Lithuania,” “we,” “us” or activities of the relevant member firms within an “our.” EY refers collectively to the global organization Area. of the member firms of EYG. EY Lithuania is part of the EMEIA Area, which EY Lithuania is jointly owned by EY Europe SCRL (for comprises EYG member firms in 96 countries. Within details see “EY Europe SCRL” below) and Baltic the EMEIA Area, there were previously 10 Regions, Network OU, a limited liability company licensed to and, from 1 July 2021, the number has reduced to 8. provide audit services in Estonia. EY Europe SCRL EY Lithuania is part of the Central, Eastern and holds over 90% of the share capital of Baltic Network Southeastern Europe & Central Asia [CESA] Region. OU. The remainder of Baltic Network OU’s share capital is held by 22 EY Baltic partners. Details Ernst & Young (EMEIA) Limited (EMEIA Limited), an regarding the ownership of EY Lithuania are available English company limited by guarantee, is the in the public registry of the audit firms maintained by principal coordinating entity for the EYG member the Lithuanian Chamber of Auditors and can be found firms in the EMEIA Area. EMEIA Limited facilitates on its website: www.lar.lt. the coordination of these firms and cooperation The governance bodies of EY Lithuania are: between them, but it does not control them. EMEIA Limited is a member firm of EYG, has no financial • The General Meeting – the supreme body; operations and does not provide any professional • The Board of the Company – the collegial services. management body of the Company; the Board is Each Region elects a Regional Partner Forum (RPF), elected by the General Meeting for the period of 4 (four) years and consists of 3 (three) members; whose representatives advise and act as a sounding the Board elects its chairman from among its board to Regional leadership. The partner elected as members; Presiding Partner of the RPF also serves as the • The head of the Company – the President – the Region’s representative on the Global Governance single management body of the Company. Council (see page 7). Details of the bodies of EY Lithuania are available in the public registry of legal entities in Lithuania and can be found on its website: www.registrucentras.lt. EY Lithuania has no branches or subsidiaries and its place of business is at Aukštaičių St. 7, LT-11341 Vilnius, Lithuania. Transparency Report 2021 | 5
In Europe, there is a holding entity, EY Europe SCRL Network arrangements (EY Europe). EY Europe is a Limited Liability EY Areas, Regions and Countries* Asia-Pacific 6 Regions Americas 23 Countries 8 Regions 34 Countries EMEIA 8 Regions 96 Countries *Figures are as of 1 July 2021’ Cooperative Company (SCRL or CVBA) incorporated EY is a global leader in assurance, tax, strategy and in Belgium. It is an audit firm registered with the transactions, and consulting services. Worldwide, Institut des Reviseurs d’Entreprises (IRE-IBR) in over 312,000 people in member firms in more than Belgium, but it does not carry out audits or provide 150 countries share a commitment to building a any professional services. better working world, united by shared values and an unwavering commitment to quality, integrity and To the extent permitted by local legal and regulatory professional skepticism. In today’s global market, the requirements, EY Europe has acquired or will acquire integrated EY approach is particularly important in voting control of the EYG member firms operating in the delivery of high-quality multinational audits, Europe. EY Europe is a member firm of EYG. EY which can span nearly every country in the world. Europe acquired voting control of EY Lithuania as of 27 March 2019. This integrated approach enables EY member firms to develop and draw upon the range and depth of The Board of Directors of EY Europe is made up of experience required to perform such diverse and senior partners of EYG member firms in Europe. It complex audits. has authority and accountability for strategy execution and management of EY Europe. EYG coordinates the member firms and promotes cooperation among them. EYG does not provide services, but its objectives include the promotion of exceptional high-quality client service by member firms worldwide. Each member firm is a separate legal entity. Each member firm’s obligations and responsibilities as a member of EYG are governed by the regulations of EYG and various other agreements. The structure and principal bodies of the global organization, described below, reflect the principle that EY, as a global organization, has a common shared strategy. At the same time, the network operates on a Regional level within the Areas. This operating model allows for greater stakeholder focus in the Regions, permitting member firms to build stronger relationships with clients and others in each country, and be more responsive to local needs. Transparency Report 2021 | 6
Global Governance Council The GE’s responsibilities include the promotion of global objectives and the development, approval and, The Global Governance Council (GGC) is a key where relevant, implementation of: governance body of EYG. It comprises one or more • Global strategies and plans representatives from each Region, other member firm partners as at-large representatives and • Common standards, methodologies and policies to be promoted within member firms independent non-executives (INEs). The Regional representatives, who otherwise do not hold senior • People initiatives, including criteria and processes for admission, evaluation, management roles, are elected by their RPFs for a development, and reward and retirement of three-year term, with provision for one successive partners reappointment. The GGC advises EYG on policies, • Quality improvement and protection programs strategies, and the public interest aspects of its decision-making. The GGC approves, in some • Proposals regarding regulatory matters and public policy instances upon the recommendation of the Global Executive (GE), certain matters that could affect EY. • Policies and guidance relating to member firms’ service of international clients, business Independent Non-Executives development, and markets and branding • EY’s development funds and investment Up to six Independent Non-Executives (INEs) are priorities appointed from outside EY. The INEs are senior • EYG’s annual financial reports and budgets leaders from both the public and private sectors and reflect diverse geographic and professional • GGC recommendations on certain matters backgrounds. They bring to the global organization, The GE also has the power to mediate and adjudicate and the GGC, the significant benefit of their varied disputes between member firms. perspectives and depth of knowledge. The INEs also form a majority of the Public Interest Sub-Committee GE committees (PIC) of the GGC. The role of the PIC includes public Established by the GE, and bringing together interest aspects of decision-making and stakeholder representatives from across the organization, the GE dialogue, issues raised under whistleblowing policies committees are responsible for making and procedures, and engagement in quality and risk recommendations to the GE. In addition to the Global management discussions. The INEs are nominated by Audit Committee, examples of other committees a dedicated committee, approved by the GE and include Assurance, Consulting, Tax, Strategy and ratified by the GGC. Transactions, Global Markets and Investments, Global Accounts, Emerging Markets, Talent and Risk Global Executive Management. The GE brings together EY’s leadership functions, services and geographies. As of 1 July 2021, it is Global Practice Group chaired by the Chairman and CEO of EYG, and The Global Practice Group brings together the includes its Global Managing Partners of Client members of the GE, GE committees, Regional leaders Service and Business Enablement; the Area Managing and sector leaders. It seeks to promote a common Partners; the global functional leadership for Talent; understanding of EY’s strategic objectives and helps the leaders of the global service lines — Assurance, drive consistency of execution across the Consulting, Strategy and Transactions, and Tax; and organization. one EYG member firm partner on rotation. EYG member firms The GE also includes the Global Vice Chair of Markets, the Global Vice Chair of Transformation, the Under the regulations of EYG, member firms commit Chief Client Technology Officer, the Chair of the themselves to pursue EY’s objectives, such as the Global Accounts Committee, the Chair of the provision of high-quality service worldwide. To that Emerging Markets Committee, as well as a end, the member firms undertake the representative from the Emerging Markets practices. implementation of global strategies and plans, and work to maintain the prescribed scope of service The GE and the GGC approve nominations for the capability. They are required to comply with common Chairman and CEO of EYG and ratify appointments of standards, methodologies and policies, including the Global Managing Partners. The GE also approves those regarding audit methodology, quality and risk appointments of Global Vice Chairs. The GGC ratifies management, independence, knowledge sharing, the appointments of any Global Vice Chair who talent and technology. serves as a member of the GE. Transparency Report 2021 | 7
Above all, EYG member firms commit to conducting The EY social impact ambition their professional practices in accordance with applicable professional and ethical standards, and all The global corporate responsibility program, applicable requirements of law. This commitment to EY Ripples, brings together the global EY network integrity and doing the right thing is underpinned by with a goal of positively impacting one billion lives by the EY Global Code of Conduct and EY values (see 2030. To date, EY Ripples initiatives have page 13). cumulatively benefited more than 45 million people, aided by: Besides adopting the regulations of EYG, member • A rigorous focus on three areas (supporting the firms enter into several other agreements covering next generation workforce, working with impact aspects of their membership in the EY organization, entrepreneurs, and accelerating environmental such as the right and obligation to use the EY name, sustainability) where the distinctive skills, and knowledge sharing. knowledge and experience of EY people can Member firms are subject to reviews to evaluate make the biggest difference. adherence to EYG requirements and policies • A collaboration with other like-minded governing issues, such as independence, quality and organizations to build ecosystems capable of risk management, audit methodology and HR. creating change at scale. For example, the Member firms unable to meet quality commitments TRANSFORM initiative with Unilever and the UK Foreign, Commonwealth and Development and other EYG membership requirements may be Office, which aims to change the lives of 150 subject to termination from the EY organization. million people across sub-Saharan Africa and South Asia by 2030, by tackling inequality. Creating long-term value for society The EY carbon ambition While capitalism has created enormous global EY aims to become carbon negative in 2021 and net prosperity, it has also left too many people behind. zero in 2025. EY endeavors to achieve this by Extreme poverty is already on the rise as a result of significantly reducing absolute carbon emissions, and the COVID-19 pandemic, and climate change is then removing or offsetting more than the remaining threatening to deepen inequality still further as amount every year. To reach net zero by FY25, EY vulnerable communities are hit first and worst by its member firms plan to reduce absolute emissions by effects. EY believes an economic system that is fairer, 40% across Scopes 1, 2 and 3 (versus an FY19 more trustworthy and capable of addressing baseline), consistent with a 1.5°C science-based humanity’s most profound challenges is urgently target approved by the Science Based Targets needed. initiative (SBTi). Specific actions include: From advising governments on how to build more • Reducing business travel emissions, with a target sustainable and inclusive economies, to encouraging to achieve a 35% reduction by FY25 against the businesses to focus and report on their creation of FY19 baseline long-term value for all stakeholders, EY services • Reducing overall office electricity usage, and already play a vital role in this. However, more can procuring 100% renewable energy for remaining and must be done. needs, earning RE100 membership by FY25 • Structuring electricity Power Purchase As a proud participant in the United Nations Global Agreements (PPAs) to introduce more renewable Compact (UNGC) since 2009, EY is committed to electricity than EY consumes into national grids integrating the UNGC Ten Principles and the UN • Using nature-based solutions and carbon- Sustainable Development Goals (SDGs) into EY reduction technologies to remove from the strategy, culture and operations. atmosphere or offset more carbon than emitted, Among other things, this commitment is reflected in: every year • Providing EY teams with tools to calculate, then Corporate responsibility governance work to reduce, the amount of carbon emitted in structures carrying out client work Corporate responsibility across EY is coordinated by • Requiring 75% of EY suppliers, by spend, to set the EY Corporate Responsibility Governance Council science-based targets by no later than FY25 (CRGC). This body includes members of the EY Global • Investing in EY services and solutions that help Executive and provides senior leadership clients create value from decarbonizing their representation from across EY services lines, businesses and provide solutions to other functions and geographic areas. sustainability challenges and opportunities Transparency Report 2021 | 8
Commitment to Sustainable Audit Quality engagements and input for the quality of in-process Infrastructure supporting quality engagements, which helps achieve compliance with professional standards and EY policies. Quality in the EY service lines The Global Vice Chair of Assurance coordinates NextWave is the EY global strategy and ambition to member firms’ compliance with EY policies and deliver long-term value to clients, people and society. procedures for services provided by Assurance. It has put EY in a strong position to adapt and innovate, while the EY purpose of Building a better working world continues to inspire EY people not only Global Audit Quality Committee to serve clients, but also to use EY knowledge, skills The EY Global Audit Quality Committee (GAQC) is an and experiences to support the communities in which important element of the culture of continuous we live and work. The insights and quality services we improvement. It comprises senior leaders from across deliver help build trust and confidence in the capital the EY organization with extensive, diverse and markets and in economies around the world. highly relevant experience. The GAQC advises EY Assurance leadership on the many aspects of the In response to disruptions in the environment, EY organization’s business, operations, culture, talent member firms adapted to maintain the delivery of strategy, governance and risk management that high-quality audits. EY provided its audit affect audit quality. professionals with additional training and enablement to help detect fraud. In addition, through a data-first The committee develops innovative ideas and approach enabled by analytics and digital tools, approaches to delivering high-quality audits and is a teams were able to deliver high-quality audits with forum for sharing best practices of EY member firms. independence, integrity, objectivity and professional The committee also helps develop audit quality skepticism. indicators (AQIs) and other forms of quality monitoring that feed into the continuous EY member firms continue to develop the audit of the improvement cycle. future, including ever more sophisticated data analytics, efficiently delivering greater insight and Quality Enablement Leaders assurance in support of the high-quality audits that are valued by the companies that EY audits and the The EY Quality Enablement Leaders (QEL) network is capital markets. a group of senior Assurance leaders around the world who drive improvements in audit quality by providing Our people are our greatest asset in delivering support to engagement teams. quality and value and building trust. We are elevating their experiences, using data and technology, so they Their responsibilities include: coaching teams; can spend more time addressing risks and exercising supporting internal and external inspections; advising professional judgment. By applying cutting-edge teams on remediating the root causes of significant technologies and sophisticated data analytics, all audit deficiencies; driving practice and project while serving the public interest, our people are able management; supporting portfolio risk analyses; and to connect and contribute to the overall EY purpose implementing processes related to the EY system of of Building a better working world. quality management, including global AQIs. EYG member firms and their service lines are Using EY Canvas and Milestones (see page 18), as accountable for delivering high-quality engagements. well as ever more sophisticated artificial intelligence EY member firms’ service lines manage the overall (AI) tools, the QELs are able to build a picture of audit process for quality reviews of completed quality performance in real time. This, in turn, gives Transparency Report 2021 | 9
greater clarity over where resources should be training and monitoring programs, and processes deployed to support audit teams and the companies used by member firm professionals to execute audits they audit. consistently and effectively. The Global, Area, Regional and Country PPDs, together with other Professional Practice professionals who work with them in each member firm, are knowledgeable about EY people, clients and The Global Vice Chair of Professional Practice, processes, and they are readily accessible for referred to as the Global Professional Practice consultation with audit engagement teams. Director (PPD), is overseen by the Global Vice Chair of Assurance and works to establish global audit Additional resources often augment the Global quality control policies and procedures. Each of the Professional Practice group, including networks of Area PPDs as well as the Global Delivery Service professionals focused on: center PPD is overseen by the Global PPD and the • Internal-control reporting and related aspects of related Area Assurance Leader. This helps provide the EY audit methodology greater assurance as to the objectivity of audit • Accounting, auditing and risk issues for specific quality and consultation processes. topics, industries and sectors The Global PPD also leads and oversees the Global • Event-specific issues involving areas of civil and Professional Practice group. This is a global network political unrest; pandemics; or sovereign debt of technical subject-matter specialists in accounting and related accounting, auditing, reporting and and auditing standards who consult on accounting, disclosure implications auditing and financial reporting matters; and perform • General engagement matters and how to work various practice monitoring and risk management effectively with audit committees activities. Assurance Governance* * Illustrative to show global alignment; actual reporting lines may vary based on legal, regulatory and structural considerations The Global PPD oversees the development of the EY Global Audit Methodology (EY GAM) and related audit policies and technologies so that they are consistent with relevant professional standards and regulatory requirements. The Global Professional Practice group also oversees the development of the guidance, Transparency Report 2021 | 10
Risk Management adjust the handling of travel and events, enable a fully remote workforce and plan for recovery. Risk Management (RM) coordinates organization- With a robust GCMP in place, we were able to act wide activities designed to help EY people meet quickly to keep EY people safe — the top priority global and local compliance responsibilities and throughout the entire process. Throughout the support client-facing teams in delivering quality and pandemic, the GCMP team: exceptional client service. Responsibility for high- quality service and ownership of the risks associated • Created guidance for various stages of the with quality is placed with the member firms and pandemic and developed a resource library on their service lines. the Global Security SharePoint portal to serve as a centralized repository Among other things, the Global RM Leader helps • Maintained a daily list of high-risk locations and monitor the identification and mitigation of these provided a consolidated daily report for each risks, as well as other risks across the organization as Area part of the broader enterprise risk management • Produced a daily report for leadership on the (ERM) framework. The ERM priorities are Global, Area, Region and local impacts communicated to member firms. The GCMP also had a role in managing confirmed The Global RM Leader is responsible for establishing cases by: globally consistent risk management execution • Developing pandemic checklists for local crisis priorities and co-ordinating risk management across management teams to manage confirmed cases EY. in the workforce • Conducting training on how to respond to Member firm partners are appointed to lead risk confirmed cases management initiatives (supported by other staff and • Assisting Talent with contact tracking for professionals), including coordinating with the confirmed cases service lines on such matters. • Providing input and advice on travel, meetings There have been additional complexities as the world and events, resulting in several global directives continued to deal with the COVID-19 pandemic. This • Identifying international travelers to help them has required a coordinated response across EY via return to their home countries safely activation of the local crisis management plans Now that the focus has shifted to a safe return to the (CMPs) that reside in nearly all EY member firm office, the GCMP team has developed a recovery plan offices. CMPs detail specific actions to be taken to that includes: both protect the EY workforce and respond in the • Leading the effort to develop return-to-work event of a COVID-19 infection within an EY protocols and track the easing of government workspace. However, while individual offices had to restrictions deal with issues around contact tracing and safe • Creating a timeline for reopening offices workspace practices, there was a need to provide a set of uniform guidance across all EY Areas. Even • Determining worksite leader responsibilities and procedures for building management, office before the World Health Organization (WHO) declared setup, workspaces and meetings the existence of a pandemic, the EY Global Crisis • Establishing personal responsibilities including Management Program (GCMP) was activated. The office entry, workspaces, breaks and meetings GCMP allowed for the creation of a Steering Committee led by the Global RM Leader who • Developing a post-vaccine recovery plan convened key Global and Area leadership daily for six Global Confidentiality Policy months (and thereafter regularly but less frequently) to address issues relevant to all geographies and Protecting confidential information is ingrained in the service lines. everyday activities of EYG member firms. Respect for intellectual capital and all other sensitive and The Steering Committee issued regular guidance on restricted information is required by the EY Global EY’s COVID-19 response protocols and addressed Code of Conduct, which provides a clear set of issues related to travel, meetings and events as well principles to guide the behaviors expected of all as adoption and promotion of best practices, and those who work with EY. The Global Confidentiality relayed specific safe working practices guidance from Policy further details this approach to protect the WHO. Guidance is still being issued and risk information and reflect ever-changing restrictions on factors are being monitored during the second year the use of data. This policy provides added clarity for of the global pandemic. those who work with EY member firms and forms the In implementing the GCMP, the goal was to keep fundamental broader guidance that includes key people safe and informed, manage confirmed cases, policies on conflicts of interest, personal data privacy and records retention. Transparency Report 2021 | 11
Other guidance includes: Components of our audit quality • Social media guidance control program • Information-handling requirements In the following sections, we describe the principal In addition, the global policy on reporting fraud, components of the audit quality control program, illegal acts and other noncompliance with laws and which EY Lithuania follows: regulations, and EY’s Global Code of Conduct • Instilled professional values requires EY professionals to speak up on observing • Internal quality control system behavior that is believed to be a violation of a law or • Client acceptance and continuance regulation, the applicable standard or EY’s Global • Performance of audits Code of Conduct. This includes the unauthorized or improper disclosure of confidential information. • Review and consultation • Rotation and long association Global Personal Data Protection Policy • Audit quality reviews • External quality assurance reviews The global policy on personal data protection supports and builds upon provisions within the EY • Root cause analysis Global Code of Conduct, regarding respecting and • Compliance with legal requirements protecting personal information, in accordance with applicable law, regulatory frameworks and Instilled professional values professional standards. This has been updated to be consistent with the EU General Data Protection Sustainable Audit Quality Regulation (GDPR) and other local regulations across Quality is the foundation of our work and central to the globe. EY member firms’ responsibility to provide Cybersecurity confidence to the capital markets. This is reflected in the Sustainable Audit Quality (SAQ) program, which Managing the risk of major and complex cyberattacks continues to be the highest priority for EY member is a part of conducting business for all organizations. firms’ Assurance practices. While no systems are immune from the threat of SAQ establishes a strong governance structure that cyberattacks, EY Lithuania is vigilant in the steps it enables each member firm to provide high-quality takes to secure and protect client data. audits. It is implemented locally, and coordinated and The EY approach to cybersecurity is proactive and overseen globally. The word “sustainable” in SAQ is includes the implementation of technologies and used to demonstrate that this is not a one-off, short- processes necessary to manage and minimize term initiative, but an ongoing process of cybersecurity risks globally. EY information security improvement. and data privacy programs, consistent with industry There are six SAQ pillars: tone at the top; exceptional practices and applicable legal requirements, are talent; simplification and innovation; audit designed to protect against unauthorized access to technology and digital; enablement and quality systems and data. There is a dedicated team of support; and accountability. These pillars are cybersecurity specialists, who constantly monitor and supported by a foundation of serving the public defend EY systems. interest. Beyond technical and process controls, all EY people Significant progress has been made through SAQ. EY are required to annually affirm in writing their member firms’ internal and external inspection understanding of the principles contained in the EY findings globally are improving, and there is greater Global Code of Conduct and their commitment to consistency in execution. The trend in results also abide by them. There are also required security reflects the involvement of the QEL network and a awareness learning activities. Various policies outline focus on culture and behaviors. the due care that must be taken with technology and data, including, but not limited to, the Global EY has deployed leading technological tools that Information Security Policy, and a global policy on enhance the quality and value of EY audits, including the acceptable use of technology. EY cybersecurity the EY Canvas online audit platform, EY Helix policies and processes recognize the importance of analytics platform and EY Atlas research platform. timely communication. EY Canvas facilitates the use of the “Milestones” project management functionality, which helps audit EY people receive regular and periodic teams stay on pace with their audit execution and communications reminding them of their drive executive involvement. The EY Canvas Client responsibilities outlined in these policies and of Portal, which is a component of EY Canvas, magnifies general security awareness practice. its importance in having a secure and user-friendly Transparency Report 2021 | 12
platform in transmitting data between engagement reinforce the importance of performing quality work, teams and the companies audited while effectively complying with professional standards, adhering to monitoring the pacing of the audit. This suite of tools EY policies and leading by example. In addition, EY played a key role in helping EY navigate this past member firms assess the quality of professional year: having the right technology and tools in place services provided as a key metric in evaluating and for EY audit teams to work together effectively in a rewarding EY professionals. remote environment continues to be a key success The EY culture strongly supports collaboration and factor and differentiator. places special emphasis on the importance of Additionally, EY Helix and the entire suite of data consultation in dealing with complex or subjective analytic tools represent key ways to address the risk accounting, auditing, reporting, regulatory and of fraud in audit execution. Increasing the required independence matters. We believe it is important to use of these tools provides a more robust response to determine that engagement teams and clients audit risks associated with companies facing correctly follow consultation advice, and we economic challenges, especially in light of the emphasize this when necessary. pandemic. Broader adoption of these data analytic tools is occurring this year. The consistent stance of EY Lithuania has been EY Atlas is a cloud-based platform for accessing and that no client is more important than our searching accounting and auditing content, including professional reputation — the reputation of EY external standards, EY interpretations and thought Lithuania and the reputation of each of our leadership. professionals. Current SAQ initiatives are focused on supporting EY teams in understanding the business of the Global Code of Conduct companies audited. By leveraging data and technology and executing enhanced engagement risk We promote a culture of integrity among our assessment, EY is continuing to drive quality audit professionals. The EY Global Code of Conduct execution. Additionally, a network of coaches is provides a clear set of principles that guide our actively supporting engagement teams in staying on actions and our business conduct and are to be track with respect to the pace of their audits, driving followed by all EY personnel. The EY Global Code of timely executive involvement and providing positive Conduct is divided into five categories: direction and enablement when necessary. • Working with one another Audit quality is something that every team member • Working with clients and others must understand and be committed to implementing • Acting with professional integrity locally. SAQ is essential to all our goals and • Maintaining our objectivity and independence ambitions, and each Regional and Area leader has a • Protecting data, information and intellectual role in achieving these goals. capital The SAQ infrastructure demonstrates that audit Through our procedures to monitor compliance with quality is the single most important factor in our the EY Global Code of Conduct and through frequent decision-making and the key measure on which our communications, we strive to create an environment professional reputation stands. that encourages all personnel to act responsibly, including reporting misconduct without fear of Tone at the top retaliation. EY Lithuania’s leadership is responsible for setting the right tone at the top and demonstrating EY’s Whistleblowing commitment to building a better working world The EY Ethics Hotline provides EY people, clients and through behavior and actions. While the tone at the others outside of the organization with a means to top is vital, EY people also understand that quality confidentially report activity that may involve and professional responsibility start with them and unethical or improper behavior, and that may be in that within their teams and communities, they are violation of professional standards or otherwise leaders too. EY shared values, which inspire EY inconsistent with the EY shared values or Global Code people and guide them to do the right thing, and the of Conduct. Globally, the hotline is operated by an EY commitment to quality are embedded in who we external organization that provides confidential and, are and in everything we do. if desired, anonymous hotline reporting. The EY approach to business ethics and integrity is When a report comes into the EY Ethics Hotline, contained in the EY Global Code of Conduct and other either by phone or internet, it receives prompt policies and is embedded in the EY culture of attention. Depending on the content of the report, consultation, training programs and internal appropriate individuals from Risk Management, communications. Senior leadership regularly Transparency Report 2021 | 13
Talent, Legal or other functions are involved in perspectives, spanning geographies, service lines and addressing the report. The same procedures are functions. followed for matters that are reported outside of the EY Ethics Hotline. Our values: who we are Diversity and inclusiveness People who People with People who EY has a long-standing commitment to diversity and demonstrate energy, build inclusiveness (D&I). This commitment to building integrity, enthusiasm relationships high-performing, diverse and inclusive teams is respect, and the based on teaming and courage doing the especially important in audit, where diverse inclusiveness to lead right thing perspectives drive professional skepticism and critical thinking. Greater diversity and inclusive 1 2 3 environments drive better decision-making, stimulate innovation and increase organizational agility. Internal quality control system EY has been on a D&I journey for decades, and while substantial progress has been made, under the global Structure NextWave strategy and ambition EY has committed to EY Lithuania’s reputation for providing high-quality increasing D&I progress throughout the organization. professional audit services independently, objectively The Global Executive has made a visible commitment and ethically is fundamental to our success as to EY people and to the market to accelerate D&I at independent auditors. We continue to invest in EY through signing the Global Executive Diversity & initiatives to promote enhanced objectivity, Inclusion Statement. Not only does this reinforce that independence and professional skepticism. These are D&I is a key business lever, it ensures that EY fundamental attributes of a high-quality audit. member firms hold themselves accountable for progress, starting with the tone at the top. At EY Lithuania, our role as auditors is to provide assurance on the fair presentation of the financial There has been a particular focus on promoting statements of the companies audited. We bring gender diversity over recent years. In 2021, 36.8% of together qualified teams to provide audit services, new audit partners, globally, were women. A strong drawing on our broad experience across industry pipeline of female leadership has been built, sectors and services. We continually strive to improve supported by 52.4% of all audit hires across the globe quality and risk management processes so that the in 2020 being female. quality of our service is at a consistently high level. Inclusive organizations maximize the power of all differences. Employees need to feel they are working In today’s environment, characterized by continuing for an organization that not only values them as globalization, rapid movement of capital and the individuals, but also sees differences as strengths impact of technological changes, the quality of our and values their contributions. Fostering this sense of audit services has never been more important. As belonging is critical to helping the EY organization part of NextWave, there is a continued and strong attract the most talented individuals, and helping our investment in the development and maintenance of professionals stay motivated and engaged. the EY audit methodology, tools and other resources needed to support high-quality audits. In the November 2020 employee listening survey, 82% of auditors said the EY organization prepares While the market and stakeholders continue to them to work effectively with clients and colleagues demand high-quality audits, they also demand an from different countries and cultures, and 86% increasingly effective and efficient delivery of audit agreed that the people they work with make them services. In addition to the investments mentioned, feel that they belong to a team. EY continues to seek ways to improve the Leaders across EY make D&I a priority and it is a key effectiveness and efficiency of its audit methodology metric across all the organization’s talent and processes, while improving audit quality. management programs. To enable greater EY works to understand where member firms’ audit accountability across the EY organization, the Global quality may not be up to their own expectations and D&I Tracker helps track progress with consistent those of stakeholders, including independent audit diversity and inclusiveness metrics and reporting regulators. This includes seeking to learn from across the organization globally. EY also created the external and internal inspection activities and to Global Social Equity Task Force (GSET) to develop identify the root causes of adverse quality cohesive action plans specifically addressing inequity occurrences to enable a continual improvement of and discrimination, including racism. It includes EY audit quality. leaders with a wide range of backgrounds and Transparency Report 2021 | 14
Effectiveness of the quality control system effectiveness of the overall EY system of quality management. EY has designed and implemented a comprehensive set of global audit quality control policies and Update to the control framework – ISQM 1 practices. These policies and practices meet the In September 2020, the IAASB approved a quality requirements of the International Standards on management standard that includes significant Quality Control issued by the International Auditing changes to the way professional accountancy firms and Assurance Standards Board (IAASB). EY manage quality. The International Standard on Lithuania has adopted these global policies and Quality Management 1 (ISQM 1) will replace the procedures and has supplemented them as necessary current International Standard on Quality Control 1 to comply with local laws and professional guidelines, (ISQC 1) and requires a more proactive and risk- and to address specific business needs. based approach to managing quality at the firm level. We also execute the EY Audit Quality Review (AQR) ISQM 1 requires firms to design, implement, monitor program to evaluate whether our system of audit and evaluate the overall system of quality quality control has operated effectively to provide management (SQM) that provides reasonable reasonable assurance that EY Lithuania and our assurance a firm will meet prescribed quality people comply with applicable professional objectives. standards, internal policies and regulatory The standard includes more robust requirements for requirements. the governance, leadership and culture of The results of the AQR program and external professional accountancy firms, and introduces a risk inspections are evaluated and communicated to assessment process for firms to assess risks to relevant personnel within EY Lithuania to provide the achieving quality objectives and design responses basis for continual improvement in audit quality, that address those risks. It also requires more consistent with the highest standards in the extensive monitoring of the SQM to identify profession. deficiencies that require corrective actions and to provide the basis for evaluating the overall The Global Executive has responsibility for the effectiveness of the SQM. coordination of quality improvement implementation. As such, it reviews the results of the internal AQR The EY approach is to design an SQM that is program and external audit firm regulatory reviews, consistently applied across the entire network of as well as any key actions designed to address areas member firms to promote consistent engagement for improvement. quality and operating effectiveness. This is especially important in a global economy where many audits are The recent results of such monitoring, together with transnational and involve the use of other EY feedback from independent audit regulators, provide member firms. EY Lithuania with a basis to conclude that our internal control systems are designed appropriately The standard requires firms to design and implement and are operating effectively. a system of quality management by December 2022. EY Lithuania has commenced work to implement the Audit quality indicators new standard alongside the EY System of Quality Management transformation program. Our initial Audit quality is not defined in professional standards, steps have included: and stakeholders may have different views on how it should be measured. While no single reportable • Identifying the functions and service lines that metric or set of metrics can be viewed as a sole provide support for, or perform engagements indicator of audit quality, a set of metrics can be used within the scope of ISQM 1 to give an indication of audit quality. • Establishing a program governance structure to manage design and implementation of a system Assurance leadership monitors the execution of the of quality management that complies with ISQM EY strategy and vision by local geographies through a 1 with representatives from various functions combination of metrics or audit quality indicators and service lines (AQIs). These include: external and internal • Identifying and assessing quality risks, and inspection results; Milestones performance; people documenting responses in accordance with the surveys; and retention rates. network-developed approach AQI dashboards help to inform the leadership about • Identifying and understanding network resources and their implementation or use by the country whether particular actions are having the intended in its SQM effect, to provide an early warning where • Challenging and identifying enhancements to the intervention is warranted and to support the existing quality control system to achieve compliance with the new standard Transparency Report 2021 | 15
We believe that implementing the requirements acceptance and continuance activities in line with within ISQM 1 will be useful to improving quality at global, service line and member firm policies. PACE the firm and engagement level, because an effective takes users through the acceptance and continuance system of quality management is foundational to requirements, and identifies the policies and achieving consistent engagement quality. references to professional standards needed to assess both business opportunities and associated Client acceptance and continuance risks. Global policy on client and engagement As part of this process, we carefully consider the risk acceptance characteristics of a prospective client or engagement and the results of due diligence procedures. Before The EY global policy on client and engagement taking on a new engagement or client, we determine acceptance sets out principles for member firms to whether we can commit sufficient resources to determine whether to accept a new client or a new deliver quality service, especially in highly technical engagement, or to continue with an existing client or areas, and if the services the client wants are engagement. These principles are fundamental to appropriate for us to provide. The approval process is maintaining quality, managing risk, protecting EY rigorous, and no new audit engagement may be people and meeting regulatory requirements. The accepted without the approval of Regional or objectives of the policy are to: local PPD. • Establish a rigorous process for evaluating risk and making decisions to accept or continue In the EY annual client and engagement continuance clients or engagements process, we review our service and ability to continue • Meet applicable independence requirements to provide a quality service, and confirm that clients share EY Lithuania’s commitment to quality and • Identify and deal appropriately with any conflicts of interest transparency in financial reporting. The lead audit engagement partner of each audit, together with our • Identify and decline clients or engagements that Assurance leadership, annually reviews our pose excessive risk relationship with the audit client to determine • Require consultation with designated whether continuance is appropriate. professionals to identify additional risk management procedures for specific high-risk As a result of this review, certain audit engagements factors are identified as requiring additional oversight • Comply with legal, regulatory and professional procedures during the audit (close monitoring), and requirements some audit clients are discontinued. As with the In addition, the EY global policy on conflicts of client acceptance process, our Regional, where interest defines global standards for addressing necessary, and local PPD are involved in the client categories of potential conflicts of interest and a continuance process and must agree with the process for identifying them. It also includes continuance decisions. provisions for managing potential conflicts of interest Decisions about acceptance or continuance of clients as quickly and efficiently as possible, using and engagements consider the engagement team’s appropriate safeguards. Such safeguards may include assessment of several risk factors across a broad obtaining client consent to act for another party range of categories including management’s attitude, where a conflict of interest may exist, establishing internal controls and related parties. separate engagement teams to act for two or more parties, implementing appropriate separations between engagement teams or declining an engagement to avoid an identified conflict. The EY global policy on conflicts of interest and associated guidance consider the increasing complexity of engagements and client relationships, and the need for speed and accuracy in responding to clients. They also align with the latest International Ethics Standards Board for Accountants (IESBA) standards. Putting policy into practice We use the EY Process for Acceptance of Clients and Engagements (PACE), an intranet-based system, for efficiently coordinating client and engagement Transparency Report 2021 | 16
You can also read