Auditing & Assurance

Audit Evidence & Procedures

18 question(s)

What is audit evidence?

Beginner
Audit evidence is all the information used by the auditor to reach the conclusions on which the opinion is based. It includes accounting records and other corroborating information from procedures like inspection, observation, confirmation, recalculation, and analytical procedures. It must be sufficient (enough) and appropriate (relevant and reliable).
Real-world example Bank confirmations, invoices, and recalculations together form the evidence supporting the cash and payables balances.

Common follow-ups: What makes evidence sufficient vs appropriate? | What are the sources of evidence?

ISA Standards Audit Sampling Audit Evidence & Procedures

What is the difference between sufficiency and appropriateness of evidence?

Beginner
Sufficiency is the measure of the quantity of evidence—affected by assessed risk and the quality of evidence (higher risk or lower quality needs more). Appropriateness is the measure of quality: relevance (does it address the assertion?) and reliability (can it be trusted, based on source and nature). Both are needed; more of poor evidence can't fully compensate for low quality.
Real-world example The auditor gathers enough confirmations (sufficiency) from independent banks (appropriateness) to support the cash assertion.

Common follow-ups: Can quantity compensate for poor quality? | What drives reliability?

Audit Sampling Audit Risk & Materiality Audit Evidence & Procedures

What factors affect the reliability of audit evidence?

Intermediate
Reliability is higher when evidence is: obtained from independent external sources; generated under effective internal controls; obtained directly by the auditor (e.g., observation) rather than indirectly; in documentary or electronic form rather than oral; and from original documents rather than copies. Auditors weigh these when evaluating evidence.
Reliability (generally higher -> lower):
external > internal-with-good-controls > internal
auditor-obtained > entity-provided
original > photocopy/oral
Real-world example A bank confirmation received directly is more reliable than a photocopied statement provided by the client.

Common follow-ups: Why is auditor-obtained evidence more reliable? | Is external always more reliable than internal?

Audit Sampling ISA Standards Audit Evidence & Procedures

What are the main types of audit procedures?

Beginner
The main procedures are: inspection (of records/documents/assets), observation (watching a process), external confirmation (third-party responses), recalculation (checking math), reperformance (redoing a control), inquiry (asking management/staff), and analytical procedures (evaluating relationships among data). Auditors combine them to gather evidence.
Real-world example To verify payroll, the auditor inspects records, recalculates gross-to-net, and confirms with the payroll provider.

Common follow-ups: Which procedure gives the strongest evidence? | Why isn't inquiry alone sufficient?

Analytical Procedures Audit Sampling Audit Evidence & Procedures

What is the difference between tests of controls and substantive procedures?

Intermediate
Tests of controls evaluate whether controls operate effectively to prevent or detect misstatements (supporting a lower control-risk assessment). Substantive procedures detect material misstatements directly at the assertion level, comprising tests of details and substantive analytical procedures. If controls are relied upon, tests of controls are needed; substantive procedures are always required for material items.
Real-world example The auditor tests the approval control on purchases, then substantively tests a sample of balances regardless.

Common follow-ups: When are tests of controls required? | Are substantive procedures always needed?

Internal Controls Evaluation Audit Sampling Audit Evidence & Procedures

What is external confirmation and when is it used?

Intermediate
External confirmation is audit evidence obtained as a direct written response to the auditor from a third party (in paper or electronic form). It's highly reliable and commonly used for bank balances, accounts receivable, loans, and legal matters. Positive confirmations request a reply in all cases; negative confirmations ask for a reply only if the recipient disagrees.
Real-world example The auditor sends positive confirmations to major customers to verify the existence and amount of receivables.

Common follow-ups: Positive vs negative confirmation? | Why is confirmation highly reliable?

Audit Sampling Analytical Procedures Audit Evidence & Procedures

What is the difference between a test of details and a substantive analytical procedure?

Intermediate
A test of details examines individual items—vouching transactions to documents, confirming balances, recalculating. A substantive analytical procedure evaluates plausibility by studying relationships among financial and non-financial data (e.g., expecting payroll to move with headcount). Tests of details give direct evidence on items; analytics give evidence about reasonableness of a total.
Real-world example The auditor estimates expected rent expense from lease terms (analytics) and also vouches selected payments to invoices (details).

Common follow-ups: When are analytics more efficient than details? | What builds a reliable expectation?

Analytical Procedures Audit Sampling Audit Evidence & Procedures

What is vouching and what is tracing?

Beginner
Vouching starts from a recorded item in the accounts and follows it back to supporting documentation—testing for occurrence/existence (that recorded items are valid). Tracing starts from source documents forward to the records—testing for completeness (that all items are recorded). Direction of testing matters for the assertion addressed.
Vouching: ledger -> source document (existence/occurrence)
Tracing: source document -> ledger (completeness)
Real-world example To test completeness of sales, the auditor traces shipping documents forward to invoices and the sales ledger.

Common follow-ups: Which assertion does vouching test? | Which direction tests completeness?

Audit Objectives & Types Audit Sampling Audit Evidence & Procedures

How does the auditor evaluate the work of a management's expert?

Advanced
Under ISA 500/620, the auditor evaluates the expert's competence, capabilities, and objectivity; obtains an understanding of their work; and assesses the appropriateness of their work as audit evidence—reviewing methods, assumptions, and source data. If the expert's work is insufficient, the auditor performs additional procedures or engages an auditor's expert.
Real-world example For a property valuation by management's valuer, the auditor checks the valuer's credentials and challenges the key assumptions.

Common follow-ups: Management's expert vs auditor's expert? | What if the expert's work is inadequate?

Audit Risk & Materiality ISA Standards Audit Evidence & Procedures

What are subsequent events and how does the auditor address them?

Intermediate
Subsequent events are events between the balance-sheet date and the date of the auditor's report (and beyond). Adjusting events provide evidence of conditions existing at the balance-sheet date (adjust the statements); non-adjusting events arise after (disclose if material). The auditor performs procedures (inquiries, reviewing minutes, later results) to identify them.
Real-world example A customer's post-year-end bankruptcy confirming a doubtful debt is an adjusting event requiring a write-down.

Common follow-ups: Adjusting vs non-adjusting events? | What procedures identify subsequent events?

Going Concern Audit Report & Opinions Audit Evidence & Procedures