skip to main content

AICPA Releases SAS No. 145 to Strengthen Risk Assessment

AICPA Releases SAS No. 145 to Strengthen Risk Assessment

In the most recent issuance of Statement of Auditing Standards (SAS) No. 145, Understanding the Entity and Its Environment and Assessing the Risks of Material Misstatement, the AICPA aimed to target concerns from the 2020 U.S. peer reviews. SAS No. 145 amends various AU-C sections of the AICPA Professional Standards. SAS No. 145 has the goal of enhancing certain aspects of the identification and assessment of the risks of material misstatement to sharpen auditors’ risk assessments and in the end, the overall quality of the audit in a world of evolving business practices.

SAS No. 145 enhances risk assessment through several changes. These include the following: requirements relating to obtaining an understanding of the internal control processes and assessment of control risk and guidance addressing aspects of the markets and environments that the entities and the audit firms operate in. Additionally, the AICPA has revised and added the following new requirements: a revised definition of significant risk; revised requirements on the evaluation of general information technology controls to determine proper implementation; a new requirement to separately assess inherent and control risk; a new requirement to assess maximum control risk in the event of foregoing testing the operating effectiveness of controls and to assess inherent risk at the same level of the risk of material misstatement; a new “stand back” requirement to evaluate completeness of transactions, account balances, and disclosures; audit documentation updates; guidance on scalability; and guidance on maintaining professional skepticism. SAS No. 145 takes effect for financial statement audits for periods ending on or after December 15, 2023, with early adoption permissible.



Please complete this form to hear from one of our seasoned audit professionals


Hide Firm Disclaimer


UHY LLP is a licensed independent CPA firm that performs attest services in an alternative practice structure with UHY Advisors, Inc., and its subsidiary entities. UHY Advisors, Inc.’s subsidiaries, including UHY Consulting, Inc., provide tax and business consulting services through wholly owned subsidiary entities that operate under the name of “UHY Advisors” and “UHY Consulting”. UHY Advisors, Inc., and its subsidiary entities are not licensed CPA firms. UHY LLP, UHY Advisors, Inc. and UHY Consulting are U.S. members of Urbach Hacker Young International Limited, a UK company, and form part of the international UHY network of legally independent accounting and consulting firms. “UHY” is the brand name for the UHY international network. Any services described herein are provided by UHY LLP, UHY Advisors and/or UHY Consulting (as the case may be) and not by UHY or any other member firm of UHY. Neither UHY nor any member of UHY has any liability for services provided by other members.

On this website, (i) the term "our firm", "we" and terms of similar import, denote the alternative practice structure conducted by UHY LLP and UHY Advisors, Inc. and its subsidiary entities, and (ii) the term "UHYI" denotes the UHY international network, in each case as more fully described in the preceding paragraph.