Question 1 - Part d

In this lesson

1. 0:00 Auditor responsibilities for compliance with laws
2. 0:39 Understanding the data protection breach scenario
3. 2:25 Management's prime responsibility for compliance
4. 3:19 Auditor's duty to understand applicable laws
5. 4:05 Gathering evidence on legal breaches
6. 4:53 Reporting obligations in specific circumstances
7. 6:18 Reporting in the public interest
8. 7:36 Taking legal advice before disclosure
9. 8:25 Encouraging management to self-report first

About this lesson

Using a real-world data protection breach scenario, you'll discover how to structure a seven-mark answer by identifying the distinction between management's prime responsibility for compliance and the auditor's specific obligations—including gaining understanding of relevant legislation, gathering evidence of breaches, determining reporting duties, and considering public interest disclosures. You'll see how to apply theoretical knowledge directly to the scenario, ensuring each point earns full marks by linking audit principles to the specific facts presented. This walkthrough demonstrates a practical approach to answering Audit and Assurance questions where theory must be grounded in case study detail. You'll learn how to develop mini-paragraphs covering key areas: management accountability, auditor understanding requirements, evidence gathering for identified risks, mandatory reporting obligations, discretionary public interest reporting, the need for legal advice, and encouraging management self-reporting. The lesson emphasises that seemingly "just theory" topics can carry significant marks in the exam, so mastering these foundational concepts and their application is essential for confident performance.

Duration: 10m