Transparency Report 2019 - EY.com
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
Transparency
Report 2019
EY Luxembourg
Transparency Report 2019: EY Luxembourg 1
Contents
Message from the Country Managing Partner and the EY Luxembourg Assurance Leader ..................................................... 3
About Us ............................................................................................................................................................................ 5
Legal structure, ownership and governance .......................................................................................................................... 5
Network arrangements ........................................................................................................................................................ 6
Commitment to sustainable audit quality ............................................................................................................................. 8
Infrastructure supporting quality .......................................................................................................................................... 8
Instilled professional values .................................................................................................................................................. 9
Internal quality control system ........................................................................................................................................... 10
Client acceptance and continuance ..................................................................................................................................... 11
Performance of audits ........................................................................................................................................................ 12
Review and consultation ..................................................................................................................................................... 13
Rotation and long association ............................................................................................................................................. 14
Audit quality reviews.......................................................................................................................................................... 15
External quality assurance review ....................................................................................................................................... 16
Compliance with legal requirements .................................................................................................................................... 16
Independence practices..................................................................................................................................................... 17
Continuing education of audit professionals ....................................................................................................................... 19
Revenue and remuneration ............................................................................................................................................... 20
Financial information ......................................................................................................................................................... 20
Partner remuneration ........................................................................................................................................................ 21
Appendix 1: List of PIE audit clients .................................................................................................................................. 22
EY Luxembourg PIE audit clients......................................................................................................................................... 22
Appendix 2: ...................................................................................................................................................................... 24
More information about EY can be found at ey.com.
Transparency Report 2019: EY Luxembourg 2
Message from the
Country Managing
Partner and the EY
Luxembourg
Assurance Leader Welcome to the 2019 Transparency Report of Ernst & Young, Société
Anonyme (EY Luxembourg). We believe that how we advance sustainable
audit quality, manage risk and maintain our independence as auditors
should be transparent to our stakeholders. We value regular dialogue,
and this report is one of the ways in which we advise our stakeholders on
what we are doing in each of these areas.
Executing high-quality audits continues to be our top priority and is at
the heart of our commitment to serve the public interest. It enables us to
grow the global EY network successfully and responsibly, while achieving
our purpose of building a better working world. Auditors play a vital role
in the functioning of capital markets by promoting transparency and
supporting investor confidence. Companies, regulators and other
stakeholders count on us to deliver excellence in every engagement.
We are focused on investing in tools to improve what we do, creating the
highest-performing teams, and building trust and confidence in the
audits we perform.
EY Luxembourg reputation is based on and grounded in providing high-
quality professional audit services objectively and ethically to every
company we audit.
We embrace the transparency objectives of the European Union’s 8th
Company Law Directive (the “Directive”), of Regulation (EU) 537/2014
of the European Parliament and of the Counsel of 16 April 2014 (the
“Regulation EU 537/2014”) and of the Luxembourg law of 23 July 2016
relating to the audit profession (the “Luxembourg Law”), as amended,
which require Luxembourg statutory auditors of public interest entities
(PIEs) to publish annual transparency reports.
The 2019 EY Luxembourg Transparency Report complies with the
Directive, Regulation EU 537/2014 and Luxembourg Law, and covers
the fiscal year ending 30 June 2019. In this report, you can learn more
about our internal quality control system; how we instill professional
values; how we perform an audit; our review and consultation processes;
our approach to audit quality reviews; and our independence practices.
EY Luxembourg is focused on enhancing audit quality and upholding our
independence, informed by several matters, including external and
internal inspection results. Continuous improvement of audit quality
requires us to challenge approaches to audit execution, and we focus on
this by evaluating all inspection findings and taking responsive actions.
The need for trust and confidence in financial reporting in our capital
markets has never been greater, and auditors play an important role in
this regard.
Transparency Report 2019: EY Luxembourg 3We encourage all our stakeholders — including our clients and their
investors, audit committee members and regulators — to continue to
engage with us on our strategy as well as any of the matters covered in
this report.
Alain Kinsch Bernard Lhoest
Country Managing Partner Luxembourg Assurance Leader
Ernst & Young Luxembourg, Ernst & Young,
Société Anonyme Société Anonyme
EY is committed to doing its part in
building a better working world.
The insights and quality services we
EY’s purpose: deliver help build trust and confidence
in the capital markets and in economies
building a the world over. We develop
better working outstanding leaders who team to
world deliver on our promises to
stakeholders. In so doing, we play a
critical role in building a better working
world for our people, our clients and
our communities.
Transparency Report 2019: EY Luxembourg 4About Us
Legal structure, ownership and Each Region elects a Regional Partner Forum (RPF), whose
representatives advise and act as a sounding board to
governance Regional leadership. The partner elected as Presiding
Ernst & Young, Société Anonyme, is a public limited liability Partner of the RPF also serves as the Region’s
company organized in Luxembourg and is a member firm of
Ernst & Young Global Limited (EYG), a UK company limited
by guarantee. In this report we refer to ourselves as EY representative on the Global Governance Council
Luxembourg, “we,” “us”, or “our.” EY refers collectively to (see page 6).
the global organization of member firms of EYG. In Europe, there is a holding entity, EY Europe SCRL (EY
EY in Luxembourg includes the following operating firms Europe). EY Europe is a Limited Liability Cooperative
(hereafter the “EY firms in Luxembourg”): Company (SCRL or CVBA) incorporated in Belgium. It is an
audit firm registered with the Institut des Reviseurs
- Ernst & Young Luxembourg, Société Anonyme d’Entreprises (IRE-IBR) in Belgium, but it does not carry out
- Ernst & Young, Société Anonyme (“EY Luxembourg” in audits or provide any professional services.
this report) EY Europe has been formed to replace the holding entity
- Ernst & Young Tax Advisory Services, Société à Ernst & Young Europe LLP, a UK registered audit firm, in
Responsabilité Limitée order to ensure continued compliance with the EU’s
Statutory Audit Directive after the UK will have ceased to be
- Ernst & Young Business Advisory Services, Société à an EU Member State.
Responsabilité Limitée
To the extent permitted by local legal and regulatory
- Ernst & Young Services S.A., Société Anonyme, and requirements, EY Europe has acquired or will acquire voting
- Compagnie de Révision, Société Anonyme control of the EYG member firms operating in Europe. EY
Europe is a member firm of EYG. EY Europe acquired voting
EYG member firms are grouped into three geographic control of EY Luxembourg as of 22 March 2019.
Areas: Americas; Asia-Pacific; and Europe, Middle East,
India and Africa (EMEIA). Japan was a separate fourth Area, The Board of Directors of EY Europe is made up of senior
but on 1 July 2019 became part of Asia-Pacific. The Areas partners of EYG member firms in Europe. It has authority
comprise a number of Regions, which consist of member and accountability for strategy execution and management.
firms or sections of those firms.
EY Luxembourg is part of the EMEIA Area, which comprises
EYG member firms in 97 countries in Europe, the
Middle East, India and Africa. Within the EMEIA Area,
there are 10 Regions.
Ernst & Young (EMEIA) Limited (EMEIA Limited), an English
company limited by guarantee, is the principal coordinating
entity for the EYG member firms in the EMEIA Area. EMEIA
Limited facilitates the coordination of these firms and
cooperation between them, but it does not control them.
EMEIA Limited is a member firm of EYG, has no financial
operations and does not provide any professional services.
Transparency Report 2019: EY Luxembourg 5Network arrangements Global Governance Council
The Global Governance Council (GGC) is the main oversight
EY is a global leader in assurance, tax, transaction and body of EYG. It comprises one or more representatives from
advisory services. Worldwide, over 260,000 people in each Region, other member firm partners as at-large
member firms in more than 150 countries share a representatives and up to six independent non-executives
commitment to building a better working world, united by (INEs). The Regional representatives, who otherwise do not
shared values and an unwavering commitment to quality, hold senior management roles, are elected by their RPFs for
integrity and professional skepticism. In today’s global a three-year term, with provision for one successive
market, the integrated EY approach is particularly reappointment. The GGC advises EYG on policies,
important in the delivery of high-quality multinational strategies, and the public interest aspects of its decision-
audits, which can span nearly every country in the world. making. The GGC approves, upon the recommendation of
This integrated approach enables EY member firms to the GE, a number of matters that could affect EY.
develop and draw upon the range and depth of experience
required to perform such diverse and complex audits. Independent Non-Executives
Up to six Independent Non-Executives (INEs) are appointed
EYG coordinates the member firms and promotes
from outside EY. The INEs are senior leaders from both the
cooperation among them. EYG does not provide services,
public and private sectors, and reflect diverse geographic
but its objectives include the promotion of exceptional high-
and professional backgrounds. They bring to the global
quality client service by member firms worldwide. Each
organization, and the GGC, the significant benefit of their
member firm is a legally distinct entity. Their obligations
varied perspectives and depth of knowledge. The INEs also
and responsibilities as members of EYG are governed by the
form a majority of the Public Interest Sub-Committee (PIC)
regulations of EYG and various other agreements.
of the GGC. The role of the PIC includes public interest
The structure and principal bodies of the global aspects of decision-making, issues raised under whistle-
organization, described below, reflect the principle that EY, blowing policies and procedures, and stakeholder dialogue
as a global organization, has a common shared strategy. and engagement in quality and risk management
discussions. The INEs are nominated by a dedicated
The Executive includes the Global Executive (GE), its
committee.
committees and teams, and the leadership of the three
(previously four) Areas. At the same time, the network
operates on a Regional level within the Areas. This
operating model allows for greater stakeholder focus in the
Regions, permitting member firms to build stronger
relationships with clients and others in each country, and be
more responsive to local needs.
Transparency Report 2019: EY Luxembourg 6Global Practice Group
Global Executive
This group brings together the members of the GE, GE
The Global Executive (GE) brings together EY’s leadership committees, Regional leaders and sector leaders. The
functions, services and geographies. As of 1 July 2019, it is Global Practice Group seeks to promote a common
chaired by the Chairman and CEO of EYG, and includes its understanding of EY’s strategic objectives and helps drive
Global Managing Partners of Client Service and Business consistency of execution across the organization.
Enablement; the Area Managing Partners; the global
functional leadership for Talent; the leaders of the global EYG member firms
service lines — Assurance, Advisory, Tax and Transaction
Under the regulations of EYG, member firms commit
Advisory Services (TAS); and one EYG member firm partner
themselves to pursue EY’s objectives, such as the provision
on rotation.
of high-quality service worldwide. To that end, the member
The GE also includes the Chair of the Global Accounts firms undertake the implementation of global strategies and
Committee and the Chair of the Emerging Markets plans, and work to maintain the prescribed scope of service
Committee, as well as a representative from the Emerging capability. They are required to comply with common
Markets practices. standards, methodologies and policies, including those
regarding audit methodology, quality and risk management,
The GE and the GGC approve nominations for the Chairman
independence, knowledge sharing, HR, and technology.
and CEO of EYG, and ratify appointments of the Global
Managing Partners. The GE also approves appointments of Above all, EYG member firms commit to conducting their
Global Vice Chairs. The GGC ratifies the appointments of professional practices in accordance with applicable
any Global Vice Chair who serves as a member of the GE. professional and ethical standards, and all applicable
requirements of law. This commitment to integrity and
The GE’s responsibilities include the promotion of global
doing the right thing is underpinned by the EY Global Code
objectives and the development, approval, and, where
of Conduct and EY values (see page 10).
relevant, implementation of:
Besides adopting the regulations of EYG, member firms
• Global strategies and plans
enter into several other agreements covering aspects of
• Common standards, methodologies and policies to be
their membership in the EY organization, such as the right
promoted within member firms
and obligation to use the EY name, and knowledge sharing.
• People initiatives, including criteria and processes for
admission, evaluation, development, reward and Member firms are subject to reviews to evaluate adherence
retirement of partners to EYG requirements and policies governing issues, such as
• Quality improvement and protection programs independence, quality and risk management, audit
• Proposals regarding regulatory matters and public methodology, and HR. Member firms unable to meet quality
policy commitments and other EYG membership requirements
• Policies and guidance relating to member firms’ service may be subject to separation from the EY organization.
of international clients, business development, markets
and branding
• EY’s development funds and investment priorities
• EYG’s annual financial reports and budgets
• GGC recommendations
The GE also has the power to mediate and adjudicate
disputes between member firms.
GE committees
Established by the GE and bringing together representatives
from the three (previously four) Areas, the GE committees
are responsible for making recommendations to the GE. In
addition to the Global Audit Committee, there are
committees for Global Markets and Investments, Global
Accounts, Emerging Markets, Talent, Risk Management,
Assurance, Advisory, Tax, and TAS.
Transparency Report 2019: EY Luxembourg 7Commitment to
sustainable audit
quality
Infrastructure supporting Professional Practice group also oversees the development
of the guidance, training and monitoring programs and
quality processes used by member firm professionals to execute
audits consistently and effectively. The Global, Area and
Quality in our service lines Regional PPDs, together with other professionals who work
with them in each member firm, are knowledgeable about
Vision 2020+, which sets out EY’s purpose, ambition and
EY people, clients and processes, and they are readily
strategy, calls for EYG member firms to provide exceptional
accessible for consultation with audit engagement teams.
service to our stakeholders worldwide. This is supported by
an unwavering commitment to quality and service that is Additional resources often augment the Global Professional
professionally and globally consistent, and means service Practice group, including networks of professionals focused
that is based on objectivity, professional skepticism, and on:
adherence to EY and professional standards.
• Internal-control reporting and related aspects of the EY
EYG member firms and their service lines are accountable audit methodology
for delivering quality engagements. EY service lines • Accounting, auditing and risk issues for specific
manage the overall process for quality reviews of completed industries and sectors
engagements and input for the quality of in-process • Event-specific issues involving areas of civil and
engagements, which helps achieve compliance with political unrest; or sovereign debt and related
professional standards and EY policies. accounting, auditing, reporting and disclosure
implications
Vision 2020+ has reinforced the ownership of quality
• General engagement matters and how to work
by the service lines, including audit. It has also effectively with audit committees
resulted in increased clarity around the role of risk
management in policies and practices that support and Risk management
improve audit quality.
Responsibility for high-quality service and ownership of the
The Global Vice Chair of Assurance coordinates member risks associated with quality is placed with the member
firms’ compliance with EY policies and procedures for firms and their service lines. Among other things, the
assurance services. Global Risk Management Leader helps oversee the
management of these risks by the member firms, as well as
Professional Practice other risks across the organization as part of the broader
The Global Vice Chair of Professional Practice, referred to Enterprise Risk Management framework.
as the Global Professional Practice Director (PPD), is Member firm partners are appointed to lead risk
overseen by the Global Vice Chair of Assurance and works management initiatives (supported by other staff and
to establish global audit quality control policies and professionals) within member firms, including coordinating
procedures. Each of the Area PPDs is overseen by the with the service lines on such matters. The Global Risk
Global PPD and the related Area Assurance Leader. This Management Leader is responsible for establishing globally
helps provide greater assurance as to the objectivity of consistent risk management execution priorities and
audit quality and consultation processes. enterprise-wide risk management.
The Global PPD also leads and oversees the Global These priorities cascade to member firms, and their
Professional Practice group. This is a global network of execution is monitored through an Enterprise Risk
technical subject matter specialists in accounting and Management program.
auditing standards, who consult on accounting, auditing and
financial reporting matters, and perform various practice
monitoring and risk management activities.
The Global PPD oversees development of the EY Global
Audit Methodology (EY GAM) and related technologies so
that they are consistent with relevant professional
standards and regulatory requirements. The Global
Transparency Report 2019: EY Luxembourg 8Global Confidentiality Policy communications reminding them of their responsibilities on
Protecting confidential information is ingrained in the these policies and general security awareness practice.
everyday activities of EYG member firms. Respect for
intellectual capital and all other sensitive and restricted Components of the audit quality control program
information is required by the EY Global Code of Conduct, In the following sections, we describe the principal
which provides a clear set of principles to guide the components of the audit quality control program, which EY
behaviors expected of all EY people. The Global Luxembourg follows:
Confidentiality Policy further details this approach to
• Instilled professional values
protecting information and reflects the ever-increasing use
• Internal quality control system
of restricted data. This policy provides added clarity for EY
people and forms the fundamental element of broader • Client acceptance and continuance
guidance that includes key policies on conflicts of interest, • Performance of audits
personal data privacy and records retention. Other • Review and consultation
guidance includes: • Rotation and long association
• Social media guidance • Audit quality reviews
• Information-handling requirements • External quality assurance reviews
• Compliance with legal requirements
In addition, the global policy on Reporting Fraud, Illegal
Acts and Other Non-compliance with Laws, Regulations and Instilled professional values
EY’s Code of Conduct require EY professionals to speak up
on seeing any behavior that is believed to be a violation of Sustainable Audit Quality
applicable law or regulation, applicable standard or EY’s
Quality is the foundation of our work and central to EY’s
Global Code of Conduct. This includes the unauthorized or
responsibility to provide confidence to the capital markets.
improper disclosure of confidential information.
This is reflected in the Sustainable Audit Quality (SAQ)
Furthermore, the global policy on Personal Data Protection program, which continues to be the highest priority for EY
supports and builds upon provisions within the EY Global Assurance practices.
Code of Conduct regarding respecting and protecting
SAQ establishes a strong governance structure that enables
personal information, in accordance with local law and
each member firm to provide high-quality audits. It is
professional standards, and was recently updated to comply
implemented locally, and coordinated and overseen globally.
with the EU General Data Protection Regulation (GDPR).
The word “sustainable” in SAQ is used to demonstrate that
this is not a one-off, short-term initiative, but an ongoing
Cybersecurity
process of improvement.
Managing the risk of major and complex cybersecurity
attacks is a part of doing business for all organizations. There are six SAQ pillars: tone at the top, people
While no systems are immune from the threat of cyber capabilities, simplification and innovation, audit technology
attacks, EY Luxembourg is vigilant in the steps it takes to and digital, enablement and quality support, and
secure and protect client data. The EY approach to accountability. The pillars are supported by a foundation of
cybersecurity is proactive and includes the implementation serving the public interest.
of technologies and processes necessary to manage and Significant progress has been made through SAQ. EY’s
minimize cybersecurity risks globally. EY information internal and external inspection findings globally are
security and data privacy programs, consistent with improving, and there is greater consistency in execution. EY
industry practices and applicable legal requirements, are has deployed world-class technological tools that enhance
designed to protect against unauthorized disclosure of data. the quality and value of EY audits, including the EY Canvas
There is a dedicated team of internal and external online audit platform, the EY Helix analytics platform and
cybersecurity specialists who actively monitor and defend the EY Atlas research platform.
EY systems.
A key feature of EY Canvas is the Client Portal, which
Beyond technical and process controls, all EY people are enables clients to communicate with audit teams and
required to affirm in writing their understanding of the confirm what information auditors have requested and
principles contained in the EY Global Code of Conduct and whether that information has been provided. EY Canvas
their commitment to abide by them, and to participate in an also facilitates the use of the Milestones project
annual security awareness learning activity. There are management program, which helps audit teams keep on
various policies outlining the due care that must be taken track and highlights potential matters to be addressed
with technology and data, including, but not limited to, the during the audit process.
Global Information Security Policy, and a global policy on
the Acceptable Use of Technology. EY cybersecurity policies When Milestones is combined with the EY Client Portal,
and processes recognize the importance of timely engagement teams have more time to focus, to be curious
communication. EY people receive regular and periodic and to be skeptical. As a result, audit quality is enhanced.
Transparency Report 2019: EY Luxembourg 9Other recent SAQ initiatives include: a new approach to Code of Conduct
pictorially depict a company’s internal controls and We promote a culture of integrity among our professionals.
processes; Purpose-Led Outcome Thinking (PLOT), a The EY Global Code of Conduct provides a clear set of
framework that focuses on the behaviors that drive high principles that guide our actions and our business conduct,
quality audits: and Key Findings Review, which helps coach and are to be followed by all EY personnel. The EY Global
our teams. Code of Conduct is divided into five categories:
There are also a network of Quality Enablement Leaders • Working with one another
(QELs), an overall Global Audit Quality Committee and a
Culture and Behaviors Taskforce. They help us in executing • Working with clients and others
and reviewing root-cause analysis and understanding the
impact of our initiatives in driving quality outcomes, better • Acting with professional integrity
behaviors and a continuous improvement mindset. • Maintaining our objectivity and independence
Audit quality is something that every team member must
• Respecting intellectual capital
understand and be committed to implementing locally. SAQ
is essential to all our goals and ambitions, and each Through our procedures to monitor compliance with
Regional and Area leader has oversight of the efforts to the EY Global Code of Conduct and through frequent
achieve those goals. communications, we strive to create an environment that
The SAQ infrastructure demonstrates that audit quality is encourages all personnel to act responsibly, including
the single most important factor in our decision-making and reporting misconduct without fear of retaliation.
the key measure on which our professional reputation
stands.
Our values: who we are
Tone at the top
EY Luxembourg leadership is responsible for setting the People who demonstrate
right tone at the top and demonstrating EY’s commitment integrity, respect and teaming
to building a better working world through behavior and
actions. While the tone at the top is vital, our people also
understand that quality and professional responsibility start People with energy, enthusiasm
with them. Our shared values, which inspire our people and and the courage to lead
guide them to do the right thing, and our commitment to
quality are embedded in who we are and in everything
we do. People who build relationships
based on doing the right thing
The EY approach to business ethics and integrity is
contained in the EY Global Code of Conduct and other
policies, and is embedded in the EY culture of consultation,
training programs and internal communications. Senior
management regularly reinforces the importance of
performing quality work, complying with professional Internal quality control system
standards, adhering to our policies, leading by example and
through various communications. Also, EY’s quality review Structure
programs assess professional service as a key metric in
EY Luxembourg reputation for providing high-quality
evaluating and rewarding all professionals.
professional audit services independently, objectively and
The EY culture strongly supports collaboration and places ethically is fundamental to our success as independent
special emphasis on the importance of consultation in auditors. We continue to invest in initiatives to promote
dealing with complex or subjective accounting, auditing, enhanced objectivity, independence and professional
reporting, regulatory and independence matters. We believe skepticism. These are fundamental attributes of a
it is important to determine that engagement teams and high-quality audit.
clients correctly follow consultation advice, and we
At EY Luxembourg, our role as auditors is to provide
emphasize this when necessary.
assurance on the fair presentation of the financial
statements of the companies we audit. We bring together
qualified teams to provide our services, drawing on our
The consistent stance of EY Luxembourg has been
broad experience across industry sectors and services. We
that no client is more important than our professional
continually strive to improve our quality and risk
reputation — the reputation of EY Luxembourg and the
management processes so that the quality of our service is
reputation of each of our professionals.
at a consistently high level.
We recognize that in today’s environment — characterized
by continuing globalization, the rapid movement of capital
and the impact of technology changes — the quality of our
Transparency Report 2019: EY Luxembourg 10audit services has never been more important. As part of
EY Vision 2020+, we continue to invest heavily in
Client acceptance and
developing and maintaining our audit methodology, tools continuance
and other resources needed to support quality service.
While the market and stakeholders continue to demand EY policy
high-quality audits, they also demand increasingly effective The EY global policy on Client and Engagement Acceptance
and efficient delivery of audit services. In addition to the sets out principles for member firms to determine whether
investments mentioned, EY continues to seek ways to to accept a new client or a new engagement, or to continue
improve the effectiveness and efficiency of its audit with an existing client or engagement. These principles are
methodology and processes, while improving audit quality. fundamental to maintaining quality, managing risk,
protecting our people and meeting regulatory
We work to understand where our audit quality may not be
requirements. The objectives of the policy are to:
up to our own expectations and those of stakeholders,
including independent audit regulators. We seek to learn • Establish a rigorous process for evaluating risk and
from external and internal inspection activities and to making decisions to accept or continue clients or
identify root causes of adverse quality occurrences to engagements
enable us continually to improve audit quality. We believe • Meet applicable independence requirements
that taking effective and appropriate actions to improve • Identify and deal appropriately with any conflicts
quality is important. of interest
• Identify and decline clients or engagements that pose
Effectiveness of the quality control system excessive risk
EY has designed and implemented a comprehensive set of • Require consultation with designated professionals to
global audit quality control policies and practices. These identify additional risk management procedures for
specific high-risk factors
policies and practices meet the requirements of the
International Standards on Quality Control issued by the • Comply with legal, regulatory and professional
International Auditing and Assurance Standards Board requirements
(IAASB). EY Luxembourg has adopted these global policies In addition, the EY global policy on conflicts of interest
and procedures, and has supplemented them as necessary defines global standards for addressing categories of
to comply with local laws and professional guidelines, and to potential conflicts of interest and a process for identifying
address specific business needs. them. It also includes provisions for managing potential
conflicts of interest as quickly and efficiently as possible
We also execute the EY Audit Quality Review (AQR) program
using appropriate safeguards. Such safeguards may include
to evaluate whether our system of audit quality control has
obtaining client consent to act for another party where a
operated effectively so as to provide reasonable assurance
conflict of interest may exist, establishing separate
that EY Luxembourg and our people comply with applicable
engagement teams to act for two or more parties,
professional standards, internal policies and regulatory
implementing “Chinese Walls” between engagement teams
requirements.
or declining an engagement to avoid an identified conflict.
The results of the AQR program and external inspections
The EY global policy on Conflicts of Interest and associated
are evaluated and communicated within EY Luxembourg to
guidance take into account the increasing complexity of
provide the basis for continual improvement in audit quality,
engagements and client relationships, and the need for
consistent with the highest standards in the profession.
speed and accuracy in responding to clients. They also align
The GE has oversight of the implementation of quality with the latest International Ethics Standards Board for
improvement. As such, it reviews the results of the internal Accountants (IESBA) standards.
AQR program and external audit firm regulatory reviews,
as well as any key actions designed to address areas Putting policy into practice
for improvement. We use the EY Process for Acceptance of Clients and
The recent results of such monitoring, together with Engagements (PACE), an intranet—based system, for
feedback from independent audit regulators, provide EY efficiently coordinating client and engagement acceptance
Luxembourg with a basis to conclude that our internal and continuance activities in line with global, service line
control systems are designed appropriately and are and member firm policies. PACE takes users through the
operating effectively. acceptance and continuance requirements, and identifies
the policies and references to professional standards
needed to assess both business opportunities and
associated risks.
Transparency Report 2019: EY Luxembourg 11As part of this process, we carefully consider the risk Using an online tool, EY Atlas, an EY auditor is presented
characteristics of a prospective company or engagement with a version of EY GAM organized by topic and designed
and the results of several due diligence procedures. Before to focus the audit strategy on the financial statement risks,
we take on a new engagement or company, we determine and the design and execution of the appropriate audit
whether we can commit sufficient resources to deliver response to those risks. EY GAM consists of two key
quality service, especially in highly technical areas, and if components: requirements and guidance, and supporting
the services the client wants are appropriate for us to forms and examples. The requirements and guidance reflect
provide. The approval process is rigorous, and no new audit both auditing standards and EY policies. The forms and
engagement may be accepted without the approval of examples include leading practice illustrations, and assist in
Regional or local PPD. performing and documenting audit procedures.
In the EY annual client and engagement continuance EY GAM can be “profiled” or tailored to present the relevant
process, we review our service and ability to continue to requirements and guidance, depending on the nature of the
provide a quality service, and confirm that companies we entity being audited — e.g., there are profiles for listed
serve share EY Luxembourg commitment to quality and entities, for other public interest entities and for those
transparency in financial reporting. The partner in charge of considered non-complex entities. Enhancements to the
each audit, together with our Assurance leadership, audit methodology are made regularly to address new
annually reviews our relationship with the audit client to standards, emerging auditing issues and matters,
determine whether continuance is appropriate. implementation experiences, and external and internal
inspection results. In addition, we monitor current and
As a result of this review, certain audit engagements are
emerging developments, and issue timely audit planning
identified as requiring additional oversight procedures
and execution communications that emphasize areas noted
during the audit (close monitoring), and some audit clients
during inspections as well as other key topics of interest to
are discontinued. As with the client acceptance process, our
our local audit regulator (or regulators) and the
local PPD is involved in the client continuance process and
International Forum of Independent Audit Regulators
must agree with the continuance decisions.
(IFIAR). Specifically, we are preparing for the
Decisions about acceptance or continuance of clients and implementation of ISA 540 (Revised), Auditing Accounting
engagements consider the engagement team’s assessment Estimates and Related Disclosures (effective for audits of
of whether the company’s management may pressure us to periods beginning on or after 15 December 2019), by
accept inappropriate accounting, auditing and reporting raising awareness of the requirements of the new standard
conclusions to undermine quality. Considerations and and providing reminders on performing risk assessment
conclusions on the integrity of management are essential procedures specific to the audit of accounting estimates,
to acceptance and continuance decisions. and designing and performing audit procedures responsive
to those risks.
Performance of audits Technology
There has been significant investment in EY in improving Our audit engagement teams use technology to assist in
audit methodologies and tools, with the goal of performing executing and documenting the work performed in
the highest-quality audits in the profession. This investment accordance with EY GAM.
reflects EY’s commitment to building trust and confidence
in the capital markets and in economies the world over. EY Canvas, the global EY audit platform, lies at the heart of
the audit and enables us to provide a high-quality audit. EY
Audit methodology Canvas is built using state-of-the-art technology for web
applications. This allows us to provide data security and to
EY GAM provides a global framework for delivering high-
evolve our software to respond to changes in the
quality audit services through the consistent application of
accounting profession and regulatory environment.
thought processes, judgments and procedures in all audit
engagements, regardless of size. EY GAM also requires Through the use of profile questions, audit engagements in
compliance with relevant ethical requirements, including EY Canvas are automatically configured with information
independence from the entity we audit. Making risk relevant to an entity’s listing requirements and industry.
assessments, reconsidering and modifying them as This helps to keep our audit plans customized and up-to-
appropriate, and using these assessments to determine the date, and provides direct linkage to our audit guidance,
nature, timing and extent of audit procedures are professional standards and documentation templates. EY
fundamental to EY GAM. The methodology also emphasizes Canvas is built with a user interface that allows the team to
applying appropriate professional skepticism in the visualize risks and their relationship to the planned
execution of audit procedures. EY GAM is based on response and work performed in key areas. It also enables a
International Standards on Auditing (ISAs) and is linkage for our group audit teams to communicate inter-
supplemented in Luxembourg to comply with the local office risks and instructions so that the primary audit team
auditing standards and regulatory or statutory can direct execution and monitor performance of the
requirements. group audit.
Transparency Report 2019: EY Luxembourg 12EY Canvas includes a Client Portal to assist teams in whether specialized or additional expertise is needed to
communicating with clients and streamlining their client supplement or enhance the audit engagement team.
requests. Mobile applications are integrated with EY Canvas
In many situations, internal specialists are assigned as part
to help our people in their audit work — e.g.,, in monitoring
of the audit engagement team to assist in performing audit
the status of the audit, capturing audit evidence securely
procedures and obtaining appropriate audit evidence. These
and performing inventory observations.
professionals are used in situations requiring special skills
Audit engagement teams use other applications, data or knowledge, such as information systems, asset valuation
analyzers and forms during various phases of an audit to and actuarial analysis.
assist in executing procedures, making and documenting
audit conclusions, and performing analysis. This includes EY
Smart Automation, a collection of applications that are
Review and consultation
being developed and deployed globally through EY Canvas
Reviews of audit work
to digitally enable EY audit professionals in executing audit
procedures and processes. EY policies describe the requirements for timely and direct
senior professional participation, as well as the level of
At EY, we are making data analysis integral to our audits. review required for the work performed. Supervisory
Our use of data and analysis is not about additive members of an audit engagement team perform a detailed
procedures or visualizations. It is about taking large review of the audit documentation for accuracy and
populations of company data, and applying our globally completeness. Senior audit executives and engagement
consistent technology (EY Helix) and methodology (EY partners perform a second-level review to determine
GAM) to audit that data. adequacy of the audit work as a whole, and the related
EY Helix is a library of data analyzers for use in audits. accounting and financial statement presentation. A tax
These data analyzers are transforming the audit through professional reviews the significant tax and other relevant
the analysis of larger populations of audit-relevant data, working papers. For listed entities and other public interest
identifying unseen patterns and trends in that data, and entities and certain other companies, an engagement
helping to direct our audit efforts. The use of data analytics quality reviewer (described below) reviews important areas
also allows us to obtain better perspectives, richer insights of accounting, financial reporting and audit execution, as
and a deeper understanding of transactions and areas of well as the financial statements of the company we audit
risk. and our auditor’s report.
EY is deploying data analyzers to analyze the business The nature, timing and extent of the reviews of audit work
operating cycles of the companies that we audit, supported depend on many factors, including:
by analytics-based audit programs to aid the application of • The risk, materiality, subjectivity and complexity of the
these data analyzers. subject matter
Using the EY Helix library of data analyzers, our • The ability and experience of the audit team members
engagement teams can enhance their audit risk preparing the audit documentation
assessment, enabling the audit of higher-risk transactions, • The level of the reviewer’s direct participation in the
and assisting our people in asking better questions about audit work
audit findings and evaluating the outcomes. • The extent of consultation employed
EY Atlas is a global technology platform that enables our Our policies also describe the roles and responsibilities of
auditors to access the latest accounting and auditing each audit engagement team member for managing,
content, including external standards, EY interpretations directing and supervising the audit, as well as the
and thought leadership. requirements for documenting their work and conclusions.
Formation of audit engagement teams Consultation requirements
EY Luxembourg policies require an annual review of partner EY consultation policies are built upon a culture of
assignments by our Assurance leadership and country PPD. collaboration, whereby audit professionals are encouraged
This is carried out to make sure that the professionals to share perspectives on complex accounting, auditing and
leading listed-company audits possess the appropriate reporting issues. Consultation requirements and related
competencies (i.e., the knowledge, skills and abilities) to policies are designed to involve the right resources so that
fulfill their engagement responsibilities, and are in audit teams reach appropriate conclusions.
compliance with applicable auditor rotation regulations.
The assignment of professionals to an audit engagement is
also made under the direction of our Assurance leadership.
Factors considered when assigning people to audit teams
include engagement size and complexity, specialized
industry knowledge and experience, timing of work,
continuity, and opportunities for on-the-job training. For
more complex engagements, consideration is given to
Transparency Report 2019: EY Luxembourg 13Differences of professional opinion that arise during an
Consultation is built into the decision-making process; audit are generally resolved at the audit engagement team
it is not just a process to provide advice. level. However, if any person involved in the discussion of an
issue is not satisfied with the decision, they refer it to the
next level of authority until agreement is reached or a final
For complex and sensitive matters, we have a formal decision is made.
process requiring consultation outside of the audit
engagement team with other personnel who have more Furthermore, if the engagement quality reviewer makes
experience or specialized knowledge, primarily Professional recommendations that the engagement partner does not
Practice and Independence personnel. In the interests of accept or the matter is not resolved to the reviewer’s
objectivity and professional skepticism, our policies require satisfaction, the auditor’s report is not issued until the
members of Professional Practice, Independence and matter is resolved. EY policies require documentation of
certain others to withdraw from a consultation if they disagreements and their resolution.
currently serve, or have recently served, the client to which
the consultation relates. In this circumstance, other Rotation and long association
appropriate individuals would be assigned.
EY supports mandatory audit partner rotation to help
EY policies also require that all consultations are
reinforce auditor independence. EY Luxembourg complies
documented, including written concurrence from the person
with the audit partner rotation requirements of the code of
or persons consulted, to demonstrate their understanding
the IESBA, as approved for Luxembourg by the Commission
of the matter and its resolution.
de Surveillance du Secteur Financier (“CSSF”), of
Regulation EU 537/2014, as well as the U.S. Securities and
Engagement quality reviews
Exchange Commission (SEC), where required. EY
Engagement quality reviews are performed by audit Luxembourg supports audit partner rotation because it
partners in compliance with professional standards for provides a fresh perspective and promotes independence
audits of all listed companies and other public interest from company management, while retaining expertise and
entities and those considered to need close monitoring. knowledge of the business. Audit partner rotation,
Engagement quality reviewers are experienced combined with independence requirements, enhanced
professionals with significant subject matter knowledge. systems of internal quality controls and independent audit
They are independent of the engagement team and able oversight, helps strengthen independence and objectivity,
to provide objective evaluation of significant accounting, and are important safeguards of audit quality.
auditing and reporting matters. In no circumstances may
the responsibility of the engagement quality reviewer be For PIEs and other entities listed on a recognized market,
delegated to another individual. the EY Global Independence Policy requires the lead
engagement partner, the engagement quality reviewer and
The engagement quality review spans the entire other audit partners who make key decisions or judgments
engagement cycle, including planning, risk assessment, on matters significant to the audit (together, the “key audit
audit strategy and execution. Policies and procedures for partners”) to be rotated after seven years. For a new PIE
the performance and documentation of engagement quality (including a newly listed company), key audit partners may
reviews provide specific guidelines on the nature, timing remain in place for an additional two years before rotating
and extent of the procedures to be performed, and the off the team if they have served the company for six or
required documentation evidencing their completion. Our more years prior to the listing.
country PPD approves all engagement quality review
assignments. Upon completing the maximum service period for rotation,
a key audit partner may not lead or coordinate professional
Audit engagement team resolution process for services to the PIE audit client until after completing a
differences of professional opinion cooling-off period. This period is five years for a lead audit
engagement partner, three years for an engagement quality
EY has a collaborative culture that encourages and expects
reviewer, and two years for other partners subject to
people to speak up, without fear of reprisal, if a difference
rotation.
of professional opinion arises or if they are uncomfortable
about a matter relating to a client engagement. Policies
and procedures are designed to empower members of an
audit engagement team to raise any disagreements relating
to significant accounting, auditing or reporting matters.
These policies are made clear to people as they join EY, and
we continue to promote a culture that reinforces a person’s
responsibility and authority to make their own views heard,
and seek out the views of others.
Transparency Report 2019: EY Luxembourg 14Where the required cooling-off period for the lead audit The engagements reviewed each year are selected on a risk-
engagement partner established by the local legislative based approach, emphasizing audit engagements that are
body or regulator is less than five years, the higher of that large, complex or of significant public interest, including
cooling-off period or three years may be substituted for the elements of unpredictability. The Global AQR program
otherwise required five-year cooling off period. This includes detailed risk-focused file reviews covering a large
jurisdictional exception for the lead audit engagement sample of listed and non-listed audit engagements, and
partner may only be applied for audit periods beginning public interest entities and non-public interest entities, to
prior to 15 December 2023. measure compliance with internal policies and procedures,
EY GAM requirements, and relevant local professional
In addition to the key audit partners rotation requirements
standards and regulatory requirements. It also includes
applicable to PIE audit clients, EY has established a long
reviews of a sample of non-audit engagements. These
association safeguards framework that, consistent with the
measure compliance with the relevant professional
requirements of the IESBA Code and Article 17 of
standards, and internal policies and procedures that should
Regulation EU 537/2014, includes consideration of the
be applied in executing non-audit services. In addition,
threats to independence created by involvement of
practice-level reviews are performed to assess compliance
professionals over a long period of time on an audit and a
with quality control policies and procedures in the
safeguards framework to address such threats.
functional areas set out in ISQC 1.
We employ tools to effectively monitor compliance with
The Global AQR program complements external practice
internal rotation and requirements for audit partners and
monitoring and inspection activities, such as inspection
other professionals who have had long association with the
programs executed by audit regulators and external peer
audit client as well as gradual rotation. There is also a
reviews.
process for rotation planning and decision-making that
involves consultation with, and approvals by, our AQR reviewers and team leaders are selected for their skills
Professional Practice and Independence professionals. and professional competence in accounting and auditing, as
well as their industry specialization; they often work in the
External rotation
Global AQR program for a number of years and are highly
For PIEs we comply with the external rotation requirements skilled in the execution of the program. Team leaders and
of Art. 17 (1) of the Regulation EU 537/2014. reviewers are assigned to inspections outside of their home
location and are independent of the audit teams reviewed.
Audit quality reviews The results of the Global AQR program, external practice
monitoring and inspection activities are evaluated and
The EY Global AQR program is the cornerstone of the EY communicated to improve quality. Any quality
process to monitor audit quality. EY Luxembourg executes improvement plans describe the follow-up actions to be
the Global AQR program, reports results and develops taken, the people responsible, the timetable and deadlines,
responsive actions plans. The primary goal of the program and sign-off on completed actions. Measures to resolve
is to determine whether systems of quality controls, audit quality matters noted from the Global AQR program,
regulatory inspections and peer reviews are addressed by
including those of EY Luxembourg, are appropriately
Assurance leadership and our PPD. The actions are
designed and followed in the execution of audit
monitored by our PPD and Assurance leadership. These
engagements to provide reasonable assurance of programs provide important practice monitoring feedback
compliance with policies and procedures, professional for our continuing quality improvement efforts.
standards, and regulatory requirements. The Global AQR
program complies with guidelines in the International
Standard on Quality Control (ISQC) 1, as amended, and is
supplemented where necessary to comply with Luxembourg
professional standards and regulatory requirements. It also
aids EY Luxembourg continual efforts to identify areas
where we can improve our performance or enhance our
policies and procedures.
Executed annually, the program is coordinated and
monitored by representatives of the Global PPD network,
with oversight by Global Assurance leadership.
Transparency Report 2019: EY Luxembourg 15You can also read
