CPA AUD Cheat Sheet: Auditing and Attestation Cheat Sheet

Use the tables for a quick pre-exam check. Expand a topic’s notes for explanations, examples, and additional distinctions.

Scope and study context

For AUD questions, think in this order:

1. What engagement is being performed? Audit, review, compilation, preparation, examination, agreed-upon procedures, issuer audit, nonissuer audit, government audit.
2. What standard applies? AICPA GAAS, PCAOB, SSARS, SSAE, GAGAS, or special reporting guidance.
3. What assertion or objective is at risk? Existence, completeness, valuation, rights/obligations, cutoff, classification, presentation.
4. What evidence is most persuasive? External, direct, written, original, generated under strong controls.
5. What report wording or modification follows? Unmodified, qualified, adverse, disclaimer, emphasis-of-matter, other-matter, restricted-use, no assurance.

For CPA AUD, quick review only helps if you immediately apply it. After reading a section:

1. Do focused topic drills on that area.
2. Review detailed explanations for both correct and incorrect answers.
3. Track whether mistakes are due to standards knowledge, assertion matching, report selection, or wording traps.
4. Rework missed questions after a delay.
5. Move to mixed sets only after individual weak areas improve.

A practical next step is to use an independent companion practice question bank with original practice questions, topic drills, mock exams, and detailed explanations focused on AICPA U.S. CPA AUD - Auditing and Attestation (CPA AUD).

Standards and Engagement Selection

Audit Risk Model

\[ \text{Audit Risk (AR)} = \text{Risk of Material Misstatement (RMM)} \times \text{Detection Risk (DR)} \]\[ \text{Risk of Material Misstatement (RMM)} = \text{Inherent Risk (IR)} \times \text{Control Risk (CR)} \]

Notes and examples

Detection Risk Relationship

If assessed RMM is…	Acceptable detection risk is…	Auditor response
Higher	Lower	More persuasive evidence, larger samples, more year-end testing, more experienced staff
Lower	Higher	Less extensive procedures may be acceptable if justified
Control risk assessed below maximum	Depends on control testing results	Must test operating effectiveness of controls
Controls not tested	Usually maximum for relevant assertions	Rely primarily on substantive procedures

Audit Risk Model

For audits, the auditor plans work to reduce audit risk to an acceptably low level.

\[ \text{Audit Risk} = \text{Risk of Material Misstatement} \times \text{Detection Risk} \]\[ \text{Risk of Material Misstatement} = \text{Inherent Risk} \times \text{Control Risk} \]

Risk	Meaning	Auditor controls it?	Key response
Inherent risk	Susceptibility before controls	No	Understand business, complexity, estimates, fraud risk
Control risk	Client controls fail to prevent/detect/correct	No	Test controls only if relying on them
Detection risk	Auditor procedures fail to detect misstatement	Yes	Change nature, timing, and extent of audit procedures
Audit risk	Auditor gives inappropriate opinion	Indirectly	Lower detection risk when RMM is high

High-Yield Risk Relationship

If assessed RMM is…	Detection risk should be…	Evidence should be…
Higher	Lower	More persuasive, often more year-end testing
Lower	Higher	Less extensive, but still sufficient and appropriate

Common trap: Higher inherent/control risk does not mean higher detection risk. It means the auditor must accept lower detection risk and perform stronger procedures.

Materiality Cheat Sheet

Audit Process Map

Assertions and Best-Fit Procedures

Notes and examples

Directional Testing

Audit direction	Starts with	Ends with	Primary assertion	Detects
Vouch	Accounting records	Source documents	Existence / occurrence	Overstatement
Trace	Source documents	Accounting records	Completeness	Understatement
Recalculate	Client calculation	Auditor math	Accuracy / valuation	Mathematical errors
Inspect subsequent cash disbursements	Post-year-end payments	Year-end liability population	Completeness	Unrecorded liabilities
Confirm with third party	External party	Auditor directly	Existence, rights, obligations	False or misstated recorded balances

Evidence Reliability

Inquiry alone is rarely sufficient appropriate audit evidence for a significant assertion.

Notes and examples

Evidence: Reliability Ranking

Evidence must be sufficient and appropriate. Sufficiency is quantity; appropriateness is relevance and reliability.

More reliable	Less reliable
Direct auditor knowledge	Client-provided explanations
External evidence received directly by auditor	External evidence routed through client
Original documents	Copies or scanned documents
Written evidence	Oral evidence
Evidence from strong internal controls	Evidence from weak internal controls
Recalculation/reperformance	Inquiry alone

Procedure Strengths and Weaknesses

Procedure	Best for	Limitation
Inquiry	Understanding, corroborating	Not enough alone for important assertions
Observation	Seeing process performed	Only valid at observed time
Inspection	Documents/assets	Documents may not prove ownership or valuation
Confirmation	Existence/rights/terms	Nonresponse requires follow-up
Recalculation	Mathematical accuracy	Does not prove underlying data is valid
Reperformance	Control effectiveness	Can be time-consuming
Analytical procedures	Relationships/trends	Less persuasive for detailed assertions
Scanning	Unusual items	Depends on auditor judgment

Audit Procedures by Account Area

Notes and examples

Revenue and Receivables

Risk/assertion	Strong procedures
AR existence	Positive confirmations, subsequent cash receipts
Sales occurrence	Vouch recorded sales to shipping docs/orders
Sales completeness	Trace shipping documents to sales invoices/journal
Cutoff	Test shipments around year-end
Allowance valuation	Aging analysis, subsequent collections, historical loss rates
Fraud risk	Journal entries, side agreements, unusual terms

Common trap: Negative confirmations are appropriate only when risk is low, controls are effective, balances are small/homogeneous, and recipients are expected to respond if incorrect.

Inventory

Risk/assertion	Strong procedures
Existence/condition	Observe physical count
Completeness	Trace floor counts to final inventory records
Rights	Inspect consignment/warehouse agreements
Valuation	Test cost, lower of cost and net realizable value, obsolescence
Cutoff	Test receiving/shipping around year-end

If inventory observation is impracticable, the auditor performs alternative procedures. If sufficient evidence cannot be obtained, consider a scope limitation.

Purchases, Payables, and Expenses

Risk/assertion	Strong procedures
AP completeness	Search for unrecorded liabilities
Expense cutoff	Review receiving reports and vendor invoices around year-end
Validity	Vouch recorded purchases to purchase orders/receiving reports
Accrued liabilities	Review subsequent disbursements
Related parties	Inspect board minutes, contracts, confirmations

Search for unrecorded liabilities usually focuses on understatement, so it starts with subsequent cash disbursements, unmatched receiving reports, vendor statements, and invoices.

Cash

Risk/assertion	Strong procedures
Existence	Bank confirmations
Completeness	Bank reconciliations, cutoff bank statements
Kiting	Interbank transfer schedule
Restrictions	Review agreements and disclosures
Fraud	Surprise counts, segregation of duties review

Payroll

Risk/assertion	Strong procedures
Occurrence	Compare payroll to HR records/time approvals
Completeness	Reconcile payroll tax filings to payroll records
Authorization	Inspect approval of pay rates
Segregation	Separate HR authorization, timekeeping, payroll processing, distribution

Debt and Equity

Risk/assertion	Strong procedures
Completeness	Confirm debt with lenders, inspect board minutes
Classification	Review maturity dates and covenant terms
Valuation	Recalculate interest and amortization
Disclosure	Review covenants, collateral, restrictions
Equity authorization	Inspect minutes and shareholder records

Estimates and Fair Value

Risk/assertion	Strong procedures
Reasonableness	Evaluate method, assumptions, and data
Bias	Retrospective review of prior estimates
Specialist use	Evaluate competence, capability, objectivity
Fair value	Compare to market data or independent pricing
Disclosure	Review sensitivity and uncertainty disclosures

Common trap: The auditor does not simply accept management’s estimate because it is complex. Complexity often increases inherent risk.

Confirmations

Notes and examples

Confirmations

Type	Meaning	Best use
Positive confirmation	Recipient responds whether agrees or disagrees	Higher risk, large balances, expected errors
Blank confirmation	Recipient fills in amount/info	More persuasive but lower response rate
Negative confirmation	Recipient responds only if disagrees	Low risk, many small balances, strong controls

If a positive confirmation is not returned, the auditor should perform follow-up and alternative procedures, such as examining subsequent cash receipts and supporting documents.

Analytical Procedures and Ratios

Analytical procedures are required during planning and final overall review in an audit. They may also be used as substantive procedures when suitably precise.

Notes and examples

Unexpected trend	Possible audit concern
Sales increase but cash collections decrease	Fictitious sales, collectability, channel stuffing
Gross margin improves sharply	Premature revenue, understated COGS, inventory costing error
Inventory grows faster than sales	Obsolescence, overstatement, demand decline
A/P decreases while purchases increase	Unrecorded liabilities
Legal expense increases	Litigation disclosure risk
Repairs expense decreases while assets increase	Improper capitalization

Analytical Procedures

Audit phase	Required or common?	Purpose
Planning	Expected	Understand business, identify risks
Substantive testing	Optional	Obtain evidence if predictable relationships exist
Final review	Expected	Evaluate overall financial statement reasonableness

Analytical procedures are strongest when:

• Data is reliable.
• Relationships are predictable.
• Expectation is precise.
• Difference threshold is appropriate.
• Unexpected differences are investigated and corroborated.

Common trap: Inquiry alone does not resolve an unexpected analytical difference. The auditor needs corroborating evidence.

Internal Control Reference

COSO Components

Notes and examples

Control Testing

Procedure	Purpose
Inquiry	Understand how control is performed; weak alone
Observation	See control being performed; limited to moment observed
Inspection	Examine evidence of performance
Reperformance	Auditor independently executes control; strong evidence
Walkthrough	Trace transaction through system to confirm understanding/design/implementation

If auditor plans to rely on controls	Then auditor must…
Reduce substantive testing based on controls	Test operating effectiveness
Assess control risk below maximum	Test operating effectiveness
Perform integrated audit	Test controls over financial reporting
Believe substantive procedures alone are insufficient	Test relevant controls

Control Deficiency Severity

Deficiency type	Meaning	Communication
Control deficiency	Control missing or not operating such that misstatements may not be prevented/detected/corrected timely	Communicate as appropriate
Significant deficiency	Less severe than material weakness but important enough for governance attention	Written communication to management and those charged with governance
Material weakness	Reasonable possibility material misstatement will not be prevented/detected/corrected timely	Written communication; adverse ICFR opinion in integrated audit

Internal Control: COSO Components

Component	What to remember
Control environment	Tone at the top, integrity, governance, assignment of authority
Risk assessment	Entity identifies and responds to business/reporting risks
Control activities	Approvals, reconciliations, segregation, physical controls, IT controls
Information and communication	Capturing, processing, reporting relevant information
Monitoring	Ongoing or separate evaluations of control performance

Control Deficiency Severity

Type	Meaning	Communication
Control deficiency	Control design or operation does not prevent/detect/correct misstatement timely	Usually management-level
Significant deficiency	Important enough to merit attention by those charged with governance	Communicate to governance
Material weakness	Reasonable possibility material misstatement will not be prevented/detected/corrected timely	Written communication to management and governance

Common trap: A material weakness means there is a reasonable possibility of material misstatement, not that a misstatement definitely occurred.

Fraud, Noncompliance, and Professional Skepticism

Notes and examples

Fraud vs Error

Feature	Error	Fraud
Intent	Unintentional	Intentional
Common form	Miscalculation, misunderstanding	Fraudulent reporting or asset misappropriation
Auditor challenge	Detect material error	Fraud may involve concealment, collusion, override
Reporting implication	Correct or modify if material	Consider governance communication, legal implications, withdrawal where appropriate

Sampling Reference

Notes and examples

Sampling risk	Type of test	Effect
Risk of overreliance	Test of controls	Effectiveness problem; auditor relies on ineffective control
Risk of underreliance	Test of controls	Efficiency problem; auditor does more work than needed
Risk of incorrect acceptance	Substantive test	Effectiveness problem; auditor accepts materially misstated balance
Risk of incorrect rejection	Substantive test	Efficiency problem; auditor investigates balance that is not materially misstated

Sampling type	Used for	Output
Attribute sampling	Tests of controls	Deviation rate
Variables sampling	Substantive dollar testing	Estimated misstatement
Monetary-unit sampling	Substantive testing, overstatement emphasis	Probability proportional to size
Classical variables sampling	Substantive testing	Mean/difference/ratio estimates

Communications and Documentation

Notes and examples

Management Representation Letter

Representation area	Why it matters
Management responsibility for F/S	Confirms management, not auditor, owns statements
Completeness of information	Supports access to records and minutes
Fraud and suspected fraud	Required corroborative representation
Uncorrected misstatements	Management acknowledges effects
Litigation and claims	Supports legal contingency evaluation
Subsequent events	Confirms events through report date
Related parties	Supports completeness and disclosure

With Management and Those Charged With Governance

Communication	Usually to
Planned scope and timing	Those charged with governance
Significant findings	Those charged with governance
Significant accounting policies and estimates	Those charged with governance
Significant difficulties or disagreements	Those charged with governance
Uncorrected misstatements	Management and governance
Significant deficiencies and material weaknesses	Management and governance, usually in writing
Illegal acts or fraud involving senior management	Those charged with governance

Predecessor and Successor Auditor

Before accepting an engagement, the successor auditor asks management for permission to communicate with the predecessor. Topics include:

• Management integrity.
• Disagreements with management.
• Reasons for auditor change.
• Communications about fraud, noncompliance, or internal control matters.

Common trap: If management refuses permission, that is a major red flag for acceptance.

Subsequent Events and Subsequently Discovered Facts

Going Concern

Common indicators: recurring losses, negative cash flows, loan defaults, denial of trade credit, legal proceedings, loss of major customer, uninsured catastrophe, work stoppage.

Notes and examples

Going Concern

The auditor evaluates whether substantial doubt exists about the entity’s ability to continue as a going concern for a reasonable period under applicable standards.

Situation	Audit reporting effect
Substantial doubt alleviated by management plans	Consider disclosure; unmodified opinion if adequate
Substantial doubt remains, disclosure adequate	Unmodified opinion with appropriate going-concern emphasis
Disclosure inadequate	Qualified or adverse opinion, depending on materiality/pervasiveness
Auditor cannot obtain sufficient evidence	Scope limitation; possible qualified opinion or disclaimer

Common trap: Going concern uncertainty does not automatically mean adverse opinion. The key is whether the financial statements and disclosures are appropriate.

Audit Reporting: Opinion Decisions

Notes and examples

Report Modification Terms

Term	Use when	Core meaning
Unmodified opinion	Sufficient appropriate evidence and F/S fairly presented	Clean opinion
Qualified opinion	Material issue but not pervasive	“Except for”
Adverse opinion	Material and pervasive GAAP departure	F/S not fairly presented
Disclaimer of opinion	Auditor cannot obtain sufficient appropriate evidence and possible effects are pervasive	No opinion expressed
Emphasis-of-matter	Matter is properly presented/disclosed but fundamental to users’ understanding	Does not modify opinion
Other-matter	Matter not presented/disclosed in F/S but relevant to audit/report/users	Does not modify opinion

Emphasis-of-Matter vs Other-Matter

Paragraph	Matter location	Examples
Emphasis-of-matter	In the financial statements or notes	Major catastrophe, significant subsequent event, related-party transaction, special purpose framework
Other-matter	Outside the financial statements	Prior-period statements audited by predecessor, restricted use, required supplementary information issues

Issuer vs Nonissuer Reporting Distinctions

Notes and examples

Issuer vs Nonissuer Reporting: Quick Distinctions

Area	Nonissuer audits	Issuer audits
Standards	AICPA auditing standards	PCAOB standards
Opinion terminology	Unmodified opinion	Unqualified opinion commonly used in PCAOB context
Key audit matters / CAMs	Not the same as issuer CAM requirements	Critical audit matters may apply
Independence	AICPA and applicable rules	SEC/PCAOB independence considerations may apply
Internal control over financial reporting	Separate reporting only in certain contexts	Integrated audit concepts are important

Common trap: Do not mix report elements from one standard-setter into the other unless the question facts support it.

Group Audits and Component Auditors

High-yield distinction: making reference is not a scope limitation by itself. It indicates divided responsibility.

Special Purpose Frameworks and Other Presentations

SSARS: Preparation, Compilation, Review

SSARS Traps

Notes and examples

SSARS: Preparation, Compilation, Review

Service	Independence required?	Assurance	Report?	Main procedures
Preparation	No	None	No report required	Prepare financial statements
Compilation	No, but impairment disclosed	None	Yes	Read financial statements for obvious issues
Review	Yes	Limited	Yes	Inquiry and analytical procedures

SSARS Traps

• Compilation does not provide assurance.
• Review does not provide an opinion.
• Preparation is not an attest service.
• Lack of independence can be disclosed in a compilation, but not in a review.
• Review evidence is much less extensive than audit evidence.

SSAE: Attestation Engagements

Forecast vs Projection

Notes and examples

SSAE Attestation Engagements

Engagement	Assurance	Report output
Examination	Reasonable	Opinion
Review	Limited	Conclusion
Agreed-upon procedures	None	Findings

Attestation Essentials

• Subject matter must be capable of evaluation.
• Suitable criteria are required.
• Practitioner independence is generally required.
• Management or responsible party is responsible for the subject matter.
• AUP reports present procedures and findings, not assurance.

Common trap: In an agreed-upon procedures engagement, the practitioner does not decide whether the subject matter is fairly stated. Users evaluate the findings.

Independence and Ethics

Notes and examples

Conceptual Framework Threats

Threat	Meaning	Example safeguard
Self-review	CPA audits own work	Separate personnel; avoid prohibited services
Advocacy	CPA promotes client position	Do not advocate in ways impairing objectivity
Adverse interest	CPA and client are opposed	Remove conflicted personnel
Familiarity	Too close to client	Rotation, independent review
Undue influence	Client pressure affects judgment	Governance communication, firm consultation
Financial self-interest	CPA benefits financially	Dispose of interest; remove individual
Management participation	CPA acts as management	Prohibited for attest client

Use of Specialists, Internal Auditors, and Service Organizations

Notes and examples

Specialist

The auditor may use a specialist for valuation, actuarial estimates, environmental obligations, complex instruments, or other specialized areas.

Evaluate:

• Competence.
• Capability.
• Objectivity.
• Work performed and assumptions used.
• Relevance and reasonableness of findings.

Internal Auditors

The external auditor may use internal audit work when appropriate, but evaluates:

• Objectivity.
• Competence.
• Systematic and disciplined approach.
• Nature and risk of the area.

More judgmental or high-risk areas require more direct external auditor work.

Group Audits

For group audits, the group auditor considers:

• Component significance.
• Component auditor competence and independence.
• Group-wide controls.
• Consolidation process.
• Communication with component auditors.

Common trap: The group auditor cannot simply outsource responsibility without evaluating the work and determining the effect on the group audit.

Government Auditing and Single Audit Concepts

High-Yield “If You See This, Think That” Table

Common CPA AUD Traps

Final Review Checklist

Before exam day, be able to answer quickly:

• Which standard applies: AICPA GAAS, PCAOB, SSARS, SSAE, or GAGAS?
• Is the engagement providing reasonable, limited, or no assurance?
• Which assertion is tested by vouching, tracing, confirmation, recalculation, observation, or inquiry?
• Does the issue involve a GAAP departure or a scope limitation?
• Is the issue material only or material and pervasive?
• Does the report need qualified, adverse, disclaimer, emphasis-of-matter, or other-matter wording?
• Are controls being merely understood, or is operating effectiveness being tested?
• Is the candidate answer confusing review, compilation, and preparation?
• Are issuer rules being mixed up with nonissuer rules?
• Is the question asking for the most persuasive evidence, not just any evidence?

Notes and examples

Final Review Checklist Before Practice

Before starting mixed AUD mock exams, confirm you can answer these quickly:

• Which standards apply: GAAS, PCAOB, SSARS, SSAE, government/compliance?
• What assurance level is provided?
• What assertion is being tested?
• Is the procedure a risk assessment, test of control, substantive test, or analytical procedure?
• Is the evidence sufficient and appropriate?
• Does the issue affect independence?
• Is the misstatement material? Pervasive?
• Is the issue a GAAP departure or a scope limitation?
• Does the report need modification, emphasis, or other-matter language?
• Are management representations required but not sufficient by themselves?
• Is the event Type I or Type II?
• Is the service organization report Type 1 or Type 2?
• Is the sampling question about controls or dollar misstatement?

CPA AUD Cheat Sheet

This independent quick review is for candidates preparing for the AICPA U.S. CPA AUD - Auditing and Attestation exam, code CPA AUD. Use it as a final-pass review before moving into topic drills, mock exams, and detailed explanations in an independent companion practice question bank.

The AUD mindset is not “memorize every report.” It is:

1. Identify the engagement type.
2. Identify the applicable standards.
3. Decide the level of assurance.
4. Evaluate evidence, risk, materiality, and independence.
5. Choose the correct report or modification.

AUD Exam Mindset: The Core Decision Pattern

Most CPA AUD questions test professional judgment through a small set of recurring decisions.

Assurance Levels: Know the Engagement Before Answering

Notes and examples

Quick rule: Audit/examination = reasonable assurance. Review = limited assurance. Compilation/preparation/AUP = no assurance.

Planning and Engagement Acceptance

Before accepting or continuing an audit, the auditor considers:

• Independence and ethical requirements.
• Management integrity.
• Competence and availability of engagement team.
• Whether the financial reporting framework is acceptable.
• Whether management acknowledges its responsibilities.
• Whether scope limitations are likely.
• Communication with predecessor auditor when applicable.

Engagement Letter: What It Usually Covers

Common trap: The auditor does not accept responsibility for preventing fraud or maintaining internal control. Those are management responsibilities.

Materiality: How AUD Questions Use It

Materiality is judged from the perspective of a reasonable user. It includes quantitative and qualitative factors.

Common Qualitative Red Flags

• Turns a loss into income.
• Helps meet analyst, lender, or bonus targets.
• Masks a trend.
• Affects debt covenant compliance.
• Involves fraud or illegal acts.
• Affects related-party disclosures.
• Concerns a sensitive estimate or significant disclosure.

Assertions: Match Procedure to Objective

Transaction Assertions

Notes and examples

Account Balance Assertions

Assertion	What can go wrong?	Common procedures
Existence	Asset/liability does not exist	Confirm receivables, observe inventory
Rights and obligations	Entity does not own asset or owe liability	Inspect title, contracts, confirmations
Completeness	Asset/liability omitted	Search for unrecorded liabilities
Accuracy, valuation, allocation	Incorrect amount or valuation	Test pricing, estimates, allowances
Classification	Current/noncurrent or account classification wrong	Review terms and agreements
Presentation	Disclosure incomplete or unclear	Review notes and framework requirements

Directional Testing

Audit concern	Direction	Example
Existence / occurrence	From accounting records to source evidence	Vouch recorded sales to shipping docs
Completeness	From source evidence to accounting records	Trace shipping docs to sales journal
Overstatement	Vouch	Recorded amount may not be valid
Understatement	Trace	Valid item may not be recorded

Common trap: Confirming accounts receivable primarily tests existence, not completeness.

Testing Controls vs Substantive Procedures

    flowchart TD
	    A[Assess risk of material misstatement] --> B{Plan to rely on controls?}
	    B -->|Yes| C[Test design and operating effectiveness]
	    C --> D{Controls effective?}
	    D -->|Yes| E[Reduce substantive testing as appropriate]
	    D -->|No| F[Increase substantive procedures]
	    B -->|No| G[Perform substantive procedures]
	    A --> H{Substantive procedures alone insufficient?}
	    H -->|Yes| C

When Tests of Controls Are Needed

• Auditor plans to rely on controls.
• Substantive procedures alone cannot provide sufficient appropriate evidence.
• Compliance or integrated audit requirements apply.
• Controls address high-volume automated processing.

Control Testing Procedures

Inquiry alone is rarely sufficient for testing operating effectiveness.

Fraud: High-Yield Review

Fraud includes fraudulent financial reporting and misappropriation of assets.

Required Fraud Mindset

• Maintain professional skepticism.
• Discuss fraud risks with engagement team.
• Inquire of management, internal audit, and others.
• Consider management override.
• Evaluate unusual journal entries.
• Review accounting estimates for bias.
• Consider whether revenue recognition presents a fraud risk.

Common trap: An audit is designed to obtain reasonable assurance, not to guarantee fraud detection.

Management Override: Typical Responses

High-yield procedures include:

• Test journal entries and other adjustments.
• Review accounting estimates for bias.
• Evaluate business rationale for significant unusual transactions.
• Consider related-party transactions.
• Incorporate unpredictability into audit procedures.

Sampling: Fast Rules

Control Sampling

Notes and examples

Substantive Sampling

Concept	Variables / monetary-unit sampling
Used for	Tests of details
Measures	Monetary misstatement
Key risk	Incorrect acceptance of materially misstated balance
If projected misstatement exceeds tolerable misstatement	Expand testing, request adjustment, or modify approach

Sampling Risk Effects

Risk	Affects	Meaning
Risk of assessing control risk too low	Effectiveness	Auditor relies too much on bad controls
Risk of assessing control risk too high	Efficiency	Auditor does extra work
Risk of incorrect acceptance	Effectiveness	Auditor accepts misstated balance
Risk of incorrect rejection	Efficiency	Auditor rejects fairly stated balance

Sample Size Direction

Change	Sample size effect
Higher desired confidence	Increase
Lower tolerable deviation/misstatement	Increase
Higher expected deviation/misstatement	Increase
Greater population variability	Increase
Larger population, after a point	Usually limited effect

Monetary-Unit Sampling Trap

Monetary-unit sampling is efficient for detecting overstatements in populations with recorded book values. It is less effective for understatements, zero balances, or negative balances.

Written Representations

Written representations are required audit evidence but do not replace other procedures.

Common representations include:

• Management responsibility for financial statements.
• Management responsibility for internal control.
• All relevant information and access provided.
• Disclosure of fraud or suspected fraud.
• Disclosure of known noncompliance.
• Related-party relationships and transactions disclosed.
• Subsequent events evaluated.
• Uncorrected misstatements acknowledged.

Common trap: Refusal to provide written representations is a serious scope limitation and may affect the auditor’s ability to issue an opinion.

Attorney Letters, Contingencies, and Litigation

Loss contingency accounting generally depends on likelihood and estimability. AUD questions often test whether the auditor has enough evidence and whether disclosure is adequate.

Related Parties

Related-party transactions are not automatically improper, but they require careful evaluation.

High-yield procedures:

• Inquire of management and governance.
• Inspect minutes, contracts, and conflict-of-interest statements.
• Review unusual transactions.
• Confirm terms with related parties when appropriate.
• Evaluate business purpose.
• Ensure proper disclosure.

Common trap: A transaction with a related party may need disclosure even if recorded at the correct amount.

Subsequent Events

Subsequent Events Periods

Common trap: If a subsequent event provides evidence about conditions existing at year-end, it usually affects recognition. If it relates to new conditions after year-end, it usually affects disclosure.

Audit Reports: Opinion Modifications

Opinion Types

Emphasis-of-Matter vs Other-Matter

Examples of emphasis matters may include going concern, significant uncertainty, or a major subsequent event when properly disclosed. The exact placement and wording depend on the applicable standards and report type.

Integrated Audit and ICFR Concepts

For audits involving internal control over financial reporting:

Common trap: An adverse ICFR opinion does not automatically mean the financial statement opinion is adverse. The auditor may still obtain enough substantive evidence for an unmodified financial statement opinion.

Service Organizations and SOC Reports

Common trap: A SOC report does not eliminate the user auditor’s responsibility to understand the user entity’s controls and assess risk.

Prospective Financial Information

High-yield points:

• Prospective information is not historical fact.
• Assumptions are central to the engagement.
• Reports avoid guaranteeing future results.
• Projections often require careful attention to purpose and user limitations.

Government Auditing and Compliance Concepts

For government and compliance-oriented audits, AUD candidates should recognize:

Common trap: Compliance reporting is not the same as a standard financial statement opinion, even when performed alongside a financial statement audit.

IT and Data Concepts

Modern AUD questions may include automated systems, IT general controls, and audit data analytics.

Common trap: A strong automated application control may still be unreliable if relevant general IT controls are weak.

Common AUD Candidate Mistakes

Fast Opinion Modification Drill

Use this decision table when practicing report questions.

Put the review into practice