Types of Audit Evidence and Sufficiency Standards
Audit evidence forms the backbone of audit conclusions and must meet specific standards for quality and quantity. The primary types include physical examination, confirmation, documentation, analytical procedures, recalculation, observation, and inquiry.
Evidence Reliability Hierarchy
Each evidence type has varying degrees of reliability. Physical evidence is typically more reliable than inquiry alone. External documentation from third parties is generally more reliable than internally generated documents. Understanding this hierarchy helps you quickly identify the most effective evidence-gathering procedures.
Sufficiency vs. Appropriateness Standards
Sufficiency refers to the quantity of evidence, while appropriateness refers to quality and relevance. Under PCAOB standards, audit evidence must satisfy both requirements. AU-C Section 500 establishes that auditors should obtain more reliable evidence when risks are higher.
For example, evidence about inventory existence through physical observation is more reliable than management representations alone. You must apply professional judgment to determine what constitutes sufficient appropriate evidence for each assertion tested.
Practical Application
Consider the risk of material misstatement and the characteristics of the population being tested. These factors guide your professional judgment in evidence evaluation and selection for different audit objectives.
Audit Sampling and Statistical Approaches
Audit sampling allows auditors to examine a subset of items within a population and draw conclusions about the entire population. This approach is essential when testing large populations where examining every item is impractical.
Statistical vs. Nonstatistical Sampling
There are two primary sampling approaches:
- Statistical sampling uses mathematical models to calculate sample sizes and evaluate results, providing quantifiable precision and confidence levels
- Nonstatistical sampling relies on auditor judgment to determine sample size and evaluate results but still requires the same rigor in selection and testing
Sampling Methods and Risk Types
Attribute sampling tests the operating effectiveness of controls by measuring occurrence rates of specific characteristics. Variables sampling estimates total values or magnitudes of misstatements in account balances.
The CPA exam emphasizes understanding sampling risk:
- Alpha risk: Incorrectly accepting a poor control or misstated account
- Beta risk: Incorrectly rejecting an effective control or correct account
Sample Size Determination Factors
When designing a sample, consider population size, tolerable error, expected error rate, and desired confidence level. Random selection, systematic selection, and stratified sampling represent different selection methods, each with advantages depending on your population characteristics.
Substantive Procedures and Assertion-Level Testing
Substantive procedures are audit tests designed to detect material misstatements in account balances and transactions. These procedures directly address specific audit assertions.
The Five Primary Audit Assertions
Each assertion requires different testing procedures tailored to detect specific types of misstatement:
- Existence or occurrence: Recorded sales actually occurred
- Completeness: All transactions that should be recorded actually are recorded
- Accuracy or valuation: Amounts are correctly calculated and recorded
- Rights and obligations: The entity has legal rights to assets or obligations to pay liabilities
- Presentation and disclosure: Accounts are properly classified and disclosed
Testing Procedures by Assertion
For existence, trace recorded sales to shipping documents and customer orders. For completeness, verify all transactions are recorded by testing for unrecorded liabilities or unbilled revenue. Accuracy testing involves verifying amounts are correctly calculated. Rights and obligations procedures ensure legal claims to assets. Presentation procedures verify proper classification and disclosure.
Substantive Procedure Types
Substantive procedures include analytical procedures, detailed testing of transactions and balances, confirmations, and recalculations. Analytical procedures compare current-year amounts to prior years, budgets, or industry benchmarks to identify unusual fluctuations.
Confirmations and External Evidence
Confirmations represent one of the most reliable forms of audit evidence because they involve direct communication with third parties outside the entity. These external parties have no incentive to support management's assertions if they are false.
Types of Confirmations
Positive confirmations require the recipient to respond regardless of agreement or disagreement with the amount stated. Negative confirmations request a response only if the recipient disagrees. Positive confirmations provide more reliable evidence because lack of response is not interpreted as agreement.
Common Confirmation Applications
- Accounts receivable confirmations are standard in most audits above certain thresholds
- Accounts payable confirmations verify outstanding amounts
- Bank balance confirmations confirm cash balances and transactions
- Debt confirmations verify loan amounts and terms
Handling Low Response Rates
The CPA exam emphasizes evaluating response rates and handling nonresponses. For nonresponses on positive confirmations, perform alternative procedures such as examining subsequent payments or vendor invoices. You must assess whether management's objections to confirmations are reasonable.
For nonresponses, alternative procedures might include reviewing subsequent cash receipts or supporting documentation to ensure sufficient appropriate evidence is obtained. Understand confirmation timing and request design to evaluate responses effectively.
Audit Documentation and Evidence Retention
Audit documentation, also called workpapers, constitutes the principal record of work performed and evidence obtained during an audit. AU-C Section 230 establishes standards for audit documentation throughout the engagement.
Required Documentation Elements
Audit documentation must clearly identify the preparer and date of preparation. Include evidence of planning decisions, identification of audit areas and assertions, description of procedures performed, and details of items examined.
Documentation should also include results of procedures, conclusions drawn, and the basis for judgments made. For example, document the rationale for sample sizes or evaluation of internal controls to create a clear trail of your work.
Documentation Standards and Retention
Audit firms maintain audit documentation for specified periods, typically 5 to 7 years depending on regulatory requirements and client type. The quality and completeness of documentation directly impacts audit quality and regulatory acceptance.
Linking Evidence to Conclusions
Your documentation must create a clear trail from assertions tested to procedures performed to evidence examined to conclusions reached. This linkage demonstrates the audit was performed in accordance with GAAS. For CPA exam success, understand how to identify properly prepared documentation and recognize deficiencies in workpaper quality.