Professional Ethics Standards for Forensic Accountants

Professional ethics standards for forensic accountants are the body of codified rules, principles, and standards issued by accounting and fraud-examination professional bodies that govern how practitioners conduct investigations, form opinions, and testify. Because forensic accountants routinely operate at the boundary between accounting analysis and legal proceedings, their professional obligations are drawn from several overlapping sources: the American Institute of Certified Public Accountants' (AICPA) Code of Professional Conduct and its consulting and valuation standards; the Association of Certified Fraud Examiners' (ACFE) Code of Professional Ethics; the International Standards on Auditing (ISA) issued by the International Auditing and Assurance Standards Board (IAASB), particularly ISA 240 governing an auditor's responsibilities relating to fraud; and a set of AICPA risk-assessment auditing standards issued in 2006. Together these frameworks define competence requirements, independence and objectivity rules, the limits of permissible opinion testimony, confidentiality and disclosure obligations, and the professional skepticism expected when fraud is suspected. A recurring theme across all of these codes is the deliberate separation of investigative fact-finding from legal adjudication: forensic accountants and fraud examiners are repeatedly instructed to determine what happened financially, not who is guilty.

Key Ethics Instruments
AICPA Code of Professional Conduct	6 principles; governs CPAs generally
SSCS No. 1	1991; consulting/litigation-support engagements
SSVS No. 1	2007; effective engagements accepted on/after Jan. 1, 2008; valuation conclusions
ACFE Code of Professional Ethics	8 canons; binds Certified Fraud Examiners
ISA 240	IAASB; auditor's responsibilities relating to fraud
AICPA Risk Assessment Standards	8 of 10 SASs; effective for periods beginning after Dec. 15, 2006

See also: Evidence and Testimony, Report Writing, Daubert Standard.

1 AICPA Code of Professional Conduct

The AICPA Code of Professional Conduct is the foundational ethics code binding members of the American Institute of Certified Public Accountants, including those practicing as forensic accountants or serving as expert witnesses. The Code is organized as a Preface followed by three Parts — Members in Public Practice, Members in Business, and Other Members — and is built around six overarching Principles of Professional Conduct:^[1]

• Responsibilities — members should exercise sensitive professional and moral judgment in all their activities.
• The Public Interest — members should act to honor the public trust and demonstrate commitment to professionalism.
• Integrity — members should perform all professional responsibilities with the highest sense of integrity.
• Objectivity and Independence — members should maintain objectivity and be free of conflicts of interest, and members in public practice should be independent in fact and appearance when providing auditing and other attestation services.
• Due Care — members should observe the profession's technical and ethical standards, strive to improve competence and quality of services, and discharge professional responsibility to the best of their ability.
• Scope and Nature of Services — a member in public practice should observe these Principles in determining the scope and nature of services to provide.

For forensic accounting practice specifically, the Objectivity and Independence principle is the most operationally significant: it determines when a CPA can ethically accept and continue a forensic engagement, including litigation support and expert-witness work, without a disqualifying conflict of interest. Independence issues arise frequently in fraud investigations because the forensic accountant may have prior relationships with the client organization, its officers, or opposing parties, and the Code requires that such relationships be evaluated before and throughout an engagement. The Code's due-care principle also underlies the competence and evidence-sufficiency requirements that recur throughout forensic reporting and expert testimony.^[1]

2 SSCS No. 1 — Consulting Services Standards

Most forensic accounting engagements — including fraud investigations and litigation support — are not audits, and are instead governed as consulting engagements under the Statement on Standards for Consulting Services No. 1 (SSCS No. 1), issued by the AICPA's Management Consulting Services Executive Committee in 1991 and now codified as CS Section 100.^[2] SSCS No. 1 establishes two tiers of obligation for a practitioner performing consulting services:

• General standards, applicable to all AICPA professional services: professional competence, due professional care, adequate planning and supervision, and obtaining sufficient relevant data to afford a reasonable basis for conclusions or recommendations.
• Consulting-services-specific standards: serving the client's interest while complying with applicable professional standards; establishing a written or oral understanding with the client about the engagement's objectives, scope, and limitations; and informing the client of significant reservations, conflicts of interest, or limitations concerning the engagement's anticipated benefits.

Because forensic accounting engagements typically fall under this consulting framework rather than the attestation framework governing statutory audits, SSCS No. 1 is the standard most directly analogous to a forensic accountant's day-to-day duty of care — requiring the same evidentiary sufficiency threshold that later becomes relevant when an engagement's work product is challenged under evidentiary rules such as the Daubert standard for expert reliability.

3 SSVS No. 1 — Valuation Services Standards

Where a forensic accounting engagement culminates in a conclusion of value — as in damages calculations, shareholder disputes, marital dissolution, or fraud-loss quantification — the applicable standard is the Statement on Standards for Valuation Services No. 1 (SSVS No. 1), issued by the AICPA in June 2007 and effective for engagements accepted on or after January 1, 2008. It is now codified as VS Section 100.^[3] SSVS No. 1 was the AICPA's first mandatory valuation standard and prescribes the procedures a member must follow when performing an engagement to estimate value, including:

• determining the appropriate type of engagement (a formal valuation engagement or a more limited calculation engagement);
• developing an understanding of the subject entity and the purpose and intended use of the valuation;
• selecting and applying appropriate valuation approaches and methods; and
• documenting and reporting the basis for the conclusion of value.

Because valuation conclusions produced under SSVS No. 1 are frequently the subject of admissibility challenges in litigation, the standard's documentation and methodology requirements are closely scrutinized in Daubert-type reliability challenges to expert valuation testimony — a court assessing whether a damages or valuation opinion rests on a reliable methodology will often look directly at whether SSVS No. 1's procedural requirements were followed.^[3]

4 ACFE Code of Professional Ethics

The Association of Certified Fraud Examiners' Code of Professional Ethics is a concise, one-page code that every Certified Fraud Examiner (CFE) and ACFE member is required to abide by. It is organized into eight canons.^[4] Three of these canons carry particular weight for how a fraud examination is conducted and reported:

• Canon V requires an examiner to obtain evidence or other documentation to establish a reasonable basis for any opinion rendered, and — critically — to express no opinion regarding the guilt or innocence of any person or party. This canon codifies the central professional boundary of fraud examination: an examiner's role is to establish facts and support conclusions about what occurred financially, not to adjudicate criminal or civil liability, a determination reserved for courts, juries, and triers of fact. This principle mirrors the boundary discussed in Evidence and Testimony, where an expert witness's function is distinguished from that of a factfinder.
• Canon VI establishes the examiner's confidentiality obligations, requiring that information obtained during an engagement not be disclosed except as authorized or legally required — a duty that governs how forensic accountants handle sensitive client and third-party financial data throughout an investigation.
• Canon VII requires disclosure of all material matters discovered during an examination which, if omitted, could cause a distortion of the facts. Read together, Canons VI and VII strike a balance: examiners must protect confidential information from improper disclosure, while ensuring that findings material to the matter under examination are not selectively withheld in a way that would mislead the reader of a report.

The remaining canons address matters such as competence, diligence, and lawful conduct, but Canons V through VII are the ones most frequently invoked in disputes over the scope and content of a fraud examiner's report, and they directly inform the drafting conventions covered in Report Writing — particularly the practice of stating findings in terms of financial facts and patterns rather than legal conclusions.

5 ISA 240 and the Auditor's Fraud Responsibilities

The International Auditing and Assurance Standards Board (IAASB), established in 1978 under the International Federation of Accountants (IFAC) and reorganized in 2023 under a new International Foundation for Ethics and Audit to strengthen its independence, issues the International Standards on Auditing (ISAs), which are used or adopted in more than 130 jurisdictions worldwide.^[5] Within this body of standards, ISA 240, "The Auditor's Responsibilities Relating to Fraud in an Audit of Financial Statements," is the key reference point for understanding what an external audit does and does not do with respect to fraud.

ISA 240 requires auditors to:

• maintain an attitude of professional skepticism throughout the audit, recognizing the possibility that a material misstatement due to fraud could exist notwithstanding past experience with the entity's honesty and integrity;
• identify and assess the risk of material misstatement due to fraud, using the classic fraud-risk-factor framework (incentive/pressure, opportunity, and rationalization — commonly known as the fraud triangle); and
• design and perform audit procedures responsive to identified fraud risks, including specific attention to the risk of management override of controls — recognized as a fraud risk present in every entity regardless of the auditor's other risk assessments, because management is uniquely positioned to override controls that otherwise operate effectively.

ISA 240's significance for forensic accounting lies in the boundary it draws: a financial statement audit conducted under the ISAs is designed to obtain reasonable — not absolute — assurance that financial statements are free of material misstatement, and it is not designed primarily to detect fraud. A dedicated forensic accounting investigation, by contrast, is typically commissioned specifically because fraud is suspected or has been discovered, and applies more targeted, fraud-specific procedures than a general-purpose audit. Understanding this distinction is essential when a forensic accountant is asked to explain, in a report or in testimony, why a prior audit did not detect a fraud that a subsequent investigation later uncovered.

6 AICPA Risk Assessment Standards (2006)

In 2007, John L. Colbert's article "What the 10 New Auditing Standards Mean for Forensic Accountants" (The Forensic Examiner, Winter 2007) explained a set of ten new Statements on Auditing Standards (SASs) issued by the AICPA's Auditing Standards Board, applicable to audits for periods beginning on or after December 15, 2006.^[6] Eight of these ten SASs are collectively known as the Risk Assessment Standards. Their core requirement is that auditors develop a deeper, more structured understanding of the client entity and its internal control environment — including its business, industry, and regulatory environment — before assessing the risk of material misstatement, whether arising from error or fraud.

For forensic accountants, the practical significance of the Risk Assessment Standards is that they changed the nature and depth of the documentation trail an auditor is required to produce. An auditor operating under these standards must document a more detailed risk assessment and a more explicit linkage between identified risks and the audit procedures performed in response. When fraud is later suspected and a forensic accountant is engaged to investigate, this expanded documentation trail — or its absence — becomes part of what the forensic accountant examines in reconstructing how a fraud may have gone undetected, and can itself become relevant evidence regarding whether prior audit work met applicable professional standards.

7 How the Standards Interact

These several ethics and standards regimes are not redundant; they apply to different roles and different moments in a financial-crime matter. The AICPA Code of Professional Conduct sets the baseline ethical obligations for any CPA, including one working in a forensic capacity. SSCS No. 1 and SSVS No. 1 govern the specific consulting and valuation engagements through which most forensic accounting work is actually delivered. The ACFE Code of Professional Ethics binds Certified Fraud Examiners specifically, and its Canon V prohibition on opining regarding guilt or innocence is the clearest single statement, across all of these codes, of the line between forensic fact-finding and legal judgment. ISA 240 explains what a statutory auditor is and is not obligated to do about fraud risk during a routine audit, providing the baseline against which a subsequent forensic investigation's added value is often measured. And the AICPA's Risk Assessment Standards describe the documentation and risk-assessment discipline auditors have been required to apply since 2006, shaping the evidentiary record a forensic accountant later reviews.

A forensic accountant's report and testimony sit downstream of all five frameworks at once: due care and evidentiary sufficiency (AICPA Code, SSCS No. 1), documented valuation methodology where damages or value conclusions are offered (SSVS No. 1), the confidentiality/disclosure balance and the no-guilt-or-innocence rule (ACFE Code), an understanding of what prior audit work could reasonably have been expected to catch (ISA 240), and an understanding of the risk-assessment documentation trail auditors have produced since 2006 (the AICPA Risk Assessment Standards). Practitioners who depart from these standards — for example, by rendering an opinion on a party's guilt, or by failing to document the basis for a valuation conclusion — expose their work product to exactly the kind of methodological challenge addressed in the Daubert standard and discussed further in Evidence and Testimony.

References

1. American Institute of Certified Public Accountants (AICPA). "AICPA Code of Professional Conduct." AICPA & CIMA. https://pub.aicpa.org/codeofconduct/ethicsresources/et-cod.pdf
2. AICPA Management Consulting Services Executive Committee. "Statement on Standards for Consulting Services No. 1." 1991. Codified as CS Section 100. https://www.aicpa-cima.com/resources/download/statement-on-standards-for-consulting-services-no-1
3. AICPA Consulting Services Executive Committee. "Statement on Standards for Valuation Services No. 1." 2007. Codified as VS Section 100. https://www.aicpa-cima.com/resources/download/statement-on-standards-for-valuation-services-vs-section-100
4. Association of Certified Fraud Examiners (ACFE). "Code of Professional Ethics." 2020. https://www.acfe.com/-/media/files/acfe/pdfs/acfe-code-of-ethics---2020-11-01.pdf
5. International Auditing and Assurance Standards Board (IAASB). "International Standards on Auditing (ISAs)." https://www.iaasb.org/about-iaasb
6. Colbert, J. L. "What the 10 New Auditing Standards Mean for Forensic Accountants." The Forensic Examiner 16(4), Winter 2007, pp. 32-37.