AAT L3 Ethics for Accountants 3 — Questions and Answers
Question 1: Which of the following bodies can a UK accountant use for ethical guidance if their employer is unresponsive?
- HM Revenue & Customs
- The Advertising Standards Authority
- AAT's ethics support service or CCAB guidance (Correct answer)
- The Competition and Markets Authority
Correct answer: AAT's ethics support service or CCAB guidance
AAT members can seek guidance from AAT's ethics support helpline or the CCAB's (Consultative Committee of Accountancy Bodies) ethical guidance publications when employer escalation fails to resolve an ethical issue.
Question 2: The familiarity threat to ethical behaviour arises from:
- Having too little knowledge of a client's business
- A long-standing personal relationship with a client that makes it hard to be objective (Correct answer)
- Charging fees that are too high
- Being asked to prepare a report in an area outside one's specialism
Correct answer: A long-standing personal relationship with a client that makes it hard to be objective
Familiarity threats develop when an accountant becomes so close to a client that they sympathise too readily with the client's interests and accept their judgements without adequate scrutiny.
Question 3: An accountant discovers their employer has been fraudulently claiming expenses. After raising the concern internally with no resolution, the next appropriate step is:
- Continue working as normal
- Report to the appropriate regulatory authority or use protected whistleblowing channels (Correct answer)
- Accept the situation to avoid conflict
- Inform the client immediately
Correct answer: Report to the appropriate regulatory authority or use protected whistleblowing channels
Where internal escalation fails to resolve a serious ethical issue such as fraud, the accountant may need to report to an external regulatory authority (e.g., HMRC, FRC, or the police) or use whistleblowing protection.
Question 4: Social engineering in the context of cybersecurity and professional ethics refers to:
- Using social media to market professional services
- Manipulating people into divulging confidential information or taking unsafe actions (Correct answer)
- Engineering software for social media platforms
- Networking at professional events
Correct answer: Manipulating people into divulging confidential information or taking unsafe actions
Social engineering is a manipulation technique used by fraudsters to trick individuals into revealing passwords, confidential data, or performing actions that compromise security — relevant to accountants protecting client data.
Question 5: Data protection obligations for accountants handling client personal data include:
- Storing all data indefinitely for audit trail purposes
- Processing personal data lawfully, transparently, and only retaining it as long as necessary (Correct answer)
- Sharing personal data freely with all staff
- Providing personal data to any third party who requests it
Correct answer: Processing personal data lawfully, transparently, and only retaining it as long as necessary
Under UK GDPR, accountants must process personal data lawfully, fairly, and transparently; limit retention to the period necessary for the purpose; and implement appropriate security measures to protect the data.
Question 6: The intimidation threat to ethical principles arises when:
- An accountant lacks sufficient knowledge
- A client or employer attempts to coerce the accountant into acting improperly through threats (Correct answer)
- An accountant is personally involved in a transaction they are reviewing
- An accountant becomes too friendly with a client
Correct answer: A client or employer attempts to coerce the accountant into acting improperly through threats
Intimidation threats occur when an accountant is deterred from acting objectively through actual or implied threats — for example, threats of dismissal, litigation, or damaging the accountant's professional reputation.
Which of the following bodies can a UK accountant use for ethical guidance if their employer is unresponsive?