Auditing Financial Statement Cycles and Assertions

Introduction and Context

An audit is not merely a search for errors in individual accounts. It is a systematic evaluation of whether financial statement information is materially misstated and whether it is presented in accordance with the applicable reporting framework. Auditors organize this work through transaction cycles—groups of economically related transactions—and financial statement assertions—management’s implicit or explicit claims about reported information.

The principal cycles considered in this chapter are revenue and receivables, purchases and payables, payroll, inventory and cost of sales, cash and investments, financing and equity, and related-party and other disclosures. Although cycles are discussed separately, transactions often cross cycle boundaries. For example, a sale affects revenue, receivables, inventory, cost of sales, cash collections, and taxation.

A well-designed audit procedure links three elements:

1. the assessed risk;
2. the relevant assertion; and
3. the source and nature of persuasive evidence.

The auditor must also distinguish tests of controls, which assess whether controls operated effectively, from substantive procedures, which detect material misstatements in amounts, transactions, balances, or disclosures.

Learning Objectives

By the end of this chapter, students should be able to:

• explain the major financial statement assertions;
• map transactions and balances to audit cycles;
• distinguish tests of controls from substantive tests;
• design procedures for revenue, purchases, payroll, inventory, cash, receivables, liabilities, equity, and disclosures;
• explain the direction of testing for occurrence and completeness;
• evaluate evidence quality and limitations; and
• document procedures so that each procedure has a clear audit purpose.

Assertions and Audit Evidence

Assertions about transactions and events

• Occurrence: recorded transactions actually occurred and relate to the entity.
• Completeness: all transactions that should have been recorded are recorded.
• Accuracy: amounts and other data were recorded correctly.
• Cut-off: transactions were recorded in the correct accounting period.
• Classification: transactions were recorded in appropriate accounts.

Assertions about account balances

• Existence: assets, liabilities, and equity interests exist at the reporting date.
• Rights and obligations: the entity controls assets and owes recorded liabilities.
• Completeness: all balances that should be recorded are included.
• Valuation and allocation: balances are recorded at appropriate amounts, including necessary adjustments and allowances.

Assertions about presentation and disclosure

• Occurrence and rights and obligations: disclosed events and relationships occurred and belong to the entity.
• Completeness: all required disclosures are included.
• Classification and understandability: information is appropriately organized and clearly described.
• Accuracy and valuation: disclosed amounts and explanatory information are accurate and appropriately measured.

Direction of testing

The direction of selection is central to audit design. To test occurrence, an auditor generally starts with recorded entries and vouches them to supporting evidence. To test completeness, the auditor starts with an independent source—such as shipping documents, receiving reports, or a physical observation—and traces forward into the accounting records.

For inventory, selecting items from the inventory listing and locating them physically tests existence. Selecting items observed in the warehouse and tracing them to the inventory listing tests completeness. Confusing these directions produces an invalid conclusion.

Tests of controls and substantive procedures

A test of control asks whether a control operated as designed. Examples include inspecting evidence of credit approval or reperforming a three-way match. A substantive procedure asks whether a recorded amount or disclosure is materially misstated. Examples include confirming a receivable or recalculating depreciation.

Evidence is generally more persuasive when it is obtained directly by the auditor, is documentary, is generated by an independent external party, and relates precisely to the assertion being tested. Evidence quality must nevertheless be evaluated in context; an external confirmation may be unreliable if the recipient is not independent or if the auditor does not control the confirmation process.

A Cycle-Based Audit Framework

A practical audit plan can follow this sequence:

1. understand the business process and information systems;
2. identify significant classes of transactions, balances, and disclosures;
3. identify risks of material misstatement, including fraud risks;
4. map risks to assertions;
5. identify relevant controls and decide whether to test them;
6. design substantive procedures responsive to residual risk;
7. evaluate exceptions, project likely misstatements where appropriate, and reassess risk; and
8. conclude and document the work.

The familiar audit-risk relationship is useful as a planning model:

Here, AR is audit risk, RMM is the risk of material misstatement, and DR is detection risk. The relationship is conceptual rather than a precise mechanical calculation. If assessed risk of material misstatement increases, the auditor ordinarily reduces acceptable detection risk by obtaining more persuasive or extensive evidence. Inherent risk and control risk are components of RMM, but auditors should not treat risk estimates as mathematically exact measurements.

Revenue and Receivables Cycle

Revenue is frequently presumed to present a fraud risk because management may have incentives to accelerate or fabricate sales. Receivables also involve valuation risk because customers may not pay in full.

Relevant risks and assertions

Tests of controls

The auditor may inspect evidence that:

• customer orders were approved;
• credit limits were reviewed;
• sequential invoices were accounted for;
• dispatch records were matched to invoices;
• prices and terms were approved;
• credit notes were independently authorized; and
• aged receivables were reviewed by management.

The auditor may reperform the matching of customer order, dispatch record, and invoice, or observe whether system restrictions prevent unauthorized price changes.

Substantive procedures

For occurrence, select recorded sales from the sales journal and vouch them to the customer order, dispatch documentation, invoice, and—in suitable cases—cash receipt. For completeness, select dispatch notes issued before and after year-end and trace them to invoices and the sales ledger. Test prices, quantities, extensions, discounts, tax treatment, and period-end cut-off.

Receivables may be tested by positive confirmations, subsequent cash receipts, inspection of correspondence, and examination of credit ratings or disputes. A confirmation is relevant mainly to existence and rights; it does not by itself establish collectability or completeness. The auditor should evaluate the allowance for expected credit losses using historical experience, current conditions, and reasonable supportable forecasts as required by the reporting framework.

Purchases and Payables Cycle

The purchases cycle includes requisitions, purchase orders, receipt of goods or services, supplier invoices, recording of payables, and payment. The major liability risk is often unrecorded obligations, making completeness especially important.

Tests of controls

Relevant controls include authorized purchase orders, segregation of ordering and payment duties, sequential receiving reports, three-way matching of purchase order–receiving report–invoice, review of exception reports, and independent approval of supplier master-file changes.

Substantive procedures

For occurrence, select recorded purchases and vouch them to approved orders, receiving reports, supplier invoices, and evidence of payment. For completeness of payables, inspect unmatched receiving reports, review cash disbursements after year-end, examine unpaid invoices and supplier statements, and search legal correspondence for claims. Compare goods received before year-end with the date on which the liability was recorded.

The auditor should test expenses as well as liabilities. An entity may record a payable but misclassify it as an expense, fixed asset, or related-party amount. Analytical procedures—such as comparing purchases and gross margins with prior periods—can identify unusual relationships, but analytics usually require corroboration when risk is significant.

Payroll Cycle

Payroll risks arise from fictitious employees, unauthorized pay rates, incorrect hours, improper deductions, and recording payroll in the wrong period.

Controls may include human-resources authorization of new employees, independent approval of pay-rate changes, time-sheet approval by supervisors, restricted access to payroll master data, reconciliations of payroll reports to the general ledger, and review of terminated employees.

Substantive procedures include:

• selecting employees from the payroll register and agreeing names, rates, and employment status to personnel records;
• selecting personnel records and tracing them to payroll, which addresses completeness of payroll processing;
• recalculating gross pay, deductions, employer contributions, and net pay;
• agreeing payroll tax returns and remittances to the ledger;
• investigating unusual overtime, duplicate bank accounts, or inactive employees; and
• testing accrued wages and bonuses at year-end for cut-off and completeness.

Confidentiality is particularly important because payroll files contain personal information. Audit teams should limit access and use secure transfer methods.

Inventory and Cost of Sales Cycle

Inventory usually combines existence, completeness, rights, and valuation risks. It may be held at multiple locations, on consignment, in transit, or by third parties.

Physical inventory observation

Observation enables the auditor to assess count procedures, inspect condition, identify obsolete or damaged items, and perform independent test counts. It is not, by itself, a valuation test. The auditor should record test counts and reconcile them to the final inventory compilation.

The direction of testing must be explicit:

• inventory listing → physical goods: evidence primarily for existence;
• physical goods → inventory listing: evidence primarily for completeness.

The auditor should also inspect shipping and receiving documents around year-end to test cut-off. Goods owned by customers, consigned inventory, and goods held for others must be distinguished from the entity’s own inventory.

Valuation

Inventory valuation procedures depend on the applicable reporting framework. Common procedures include testing costs to supplier invoices, checking quantities and calculations, reviewing standard-cost variances, comparing carrying amounts with subsequent selling prices, and evaluating provisions for obsolete or slow-moving goods. Where net realizable value is relevant, the auditor considers expected selling price, costs of completion, and selling costs.

Illustrative adjustment

Suppose goods costing $18,000 were mistakenly included in cost of sales even though they remained in inventory at year-end. The correcting entry is:

• increase inventory by $18,000; and
• reduce (reverse) cost of sales by $18,000.

Thus, the adjustment increases reported inventory and decreases reported cost of sales. It is not accurate to describe this merely as “restoring inventory and cost of sales,” because that phrase does not specify the direction of the cost-of-sales adjustment.

Cash and Investments Cycle

Cash is susceptible to theft, unauthorized payments, and concealment through timing differences. Investments create additional risks involving existence, ownership, valuation, classification, and disclosure.

Controls include bank reconciliations prepared by a person independent of cash handling, dual authorization of payments, restricted online-banking access, review of unusual transfers, and independent custody of investment confirmations.

Substantive procedures include:

• obtaining bank confirmations directly;
• inspecting bank reconciliations and testing outstanding items to subsequent clearing;
• agreeing bank balances to statements and the ledger;
• testing transfers recorded shortly before and after year-end for window dressing;
• counting petty cash where material; and
• confirming investments with custodians and agreeing quoted investments to reliable market data.

Bank confirmations support existence and rights but do not necessarily establish completeness of all bank accounts. The auditor should search for undisclosed accounts and review interest income, loan covenants, and restrictions on cash.

Liabilities, Financing, and Equity

Long-term debt procedures include confirmation of balances and terms, inspection of loan agreements, recalculation of interest, testing covenant compliance, and assessing current-versus-non-current classification. Search procedures for unrecorded liabilities remain relevant even when debt confirmations are obtained.

For equity, the auditor inspects board minutes, incorporation documents, share registers, transfer records, and dividend approvals. The auditor agrees issuances and repurchases to supporting documentation and verifies authorization. Assertions include existence of issued shares, rights of shareholders, completeness of transactions, accuracy of amounts, and appropriate presentation of restrictions or treasury shares.

Board minutes are valuable for identifying dividends, litigation, financing, related parties, and commitments. They are not a substitute for testing the underlying accounting records.

Related Parties and Other Disclosures

Related-party transactions may be conducted on terms that differ from market terms and may be used to conceal financing, transfer assets, or manipulate results. The auditor should:

• inquire of management and those charged with governance;
• inspect shareholder registers, minutes, contracts, and unusual journals;
• review large or unusual transactions outside the normal course of business;
• obtain evidence of authorization and commercial substance; and
• assess whether the relationship, transaction, terms, balances, and commitments are properly disclosed.

Disclosure testing should be performed as an assertion-based procedure, not as a final proofreading exercise. The auditor prepares or uses a disclosure checklist, agrees numerical information to audited schedules, reads accounting policies for consistency with the reporting framework, and evaluates whether disclosures are complete, understandable, and appropriately classified.

Important disclosure areas include accounting policies, estimates and uncertainty, commitments, contingencies, subsequent events, financial instruments, liquidity risks, segment information, going-concern uncertainties, and related parties.

Integrated Illustrative Case: Northstar Components Ltd.

This is a fictional educational case.

Background

Northstar Components Ltd. manufactures electronic parts. It experienced declining sales during December but reported a substantial increase in year-end revenue and profit. Inventory is stored at two warehouses, and the company uses an enterprise resource-planning system integrated with payroll and purchasing.

Problems identified

The audit team identified four indicators:

1. several large sales were recorded on December 31 although dispatch occurred in January;
2. receiving reports dated December 29 were not matched to supplier invoices until January;
3. obsolete components remained in inventory at their original cost; and
4. one employee’s bank account matched that of a terminated employee.

Audit response

For revenue, the team selected December and January dispatch records and traced them to invoices, testing cut-off and occurrence. It also reviewed post-year-end credit notes. For payables, it examined unmatched receiving reports and January cash disbursements, testing completeness. For inventory, auditors observed counts, traced recorded items to the warehouse for existence, and traced observed items back to the listing for completeness. They tested aging reports and subsequent sales for valuation. For payroll, they compared the payroll register with personnel files and investigated duplicate bank details.

Outcome

The audit identified premature revenue, unrecorded liabilities, an inventory write-down requirement, and a suspected fictitious payroll record. Management corrected the financial statements by reversing premature revenue, recording omitted payables, reducing inventory to its supportable value, and removing the invalid payroll entry. The inventory correction also reduced inventory and increased cost of sales where the carrying amount exceeded the recoverable amount; this direction differs from the earlier error in which inventory was wrongly charged to cost of sales.

Learning points

The case demonstrates that one transaction stream can affect several assertions and cycles. It also shows why procedures must be designed in both directions: recorded-to-source for occurrence and source-to-records for completeness. Controls may reduce risk, but unusual period-end activity still requires focused substantive testing.

Technology, Data Analytics, and Professional Judgment

Continuous auditing tools can identify duplicate invoices, unusual journal entries, weekend postings, sequential-number gaps, rapid changes in supplier or employee master files, and transactions just before period-end. These tools improve population coverage but do not eliminate the need to define the relevant assertion, validate data completeness, investigate exceptions, and exercise professional skepticism.

Artificial intelligence may assist in document extraction, anomaly detection, and contract review. However, auditors remain responsible for understanding model limitations, false positives, biased training data, access controls, confidentiality, and the audit trail supporting conclusions. An algorithmic flag is an investigation prompt, not proof of misstatement or fraud.

Challenges, Ethics, and Best Practices

Common challenges include incomplete system interfaces, reliance on management-generated evidence, confirmation nonresponses, estimates with high uncertainty, multiple locations, and pressure to meet reporting deadlines. Ethical practice requires independence, competence, confidentiality, integrity, and professional skepticism.

Best practices include:

• state the assertion and objective before selecting a procedure;
• document population, sample selection, timing, and exceptions;
• use alternative procedures when confirmations do not respond;
• investigate exceptions rather than automatically treating them as errors;
• evaluate whether exceptions indicate a control deficiency or broader misstatement;
• maintain an audit trail from risk assessment to conclusion; and
• communicate significant control deficiencies and suspected fraud appropriately.

Chapter Summary

Financial statement auditing is most effective when organized around cycles and assertions. Revenue and receivables emphasize occurrence, cut-off, and valuation; purchases and payables emphasize completeness and cut-off; payroll emphasizes authorization and existence; inventory requires separate attention to existence, completeness, rights, valuation, and cut-off; cash and investments require confirmation, reconciliation, and ownership testing; liabilities and equity require authorization, completeness, classification, and disclosure work; and related-party transactions require focused inquiry and corroboration.

Tests of controls determine whether controls operated effectively, whereas substantive procedures address possible misstatements directly. The direction of testing is crucial: recorded records to supporting evidence generally addresses occurrence, while independent source documents to the accounting records addresses completeness. Strong audit design connects risk, assertion, procedure, evidence, and conclusion while applying professional skepticism and ethical judgment.

Key Terms

Assertion: A management claim about recognition, measurement, presentation, or disclosure.

Audit risk: The risk that the auditor expresses an inappropriate opinion on materially misstated statements.

Completeness: The assertion that all items that should be recorded or disclosed are included.

Cut-off: Recording transactions in the correct reporting period.

Detection risk: The risk that audit procedures fail to detect a material misstatement.

Existence: The assertion that a recorded asset, liability, or equity interest exists.

Occurrence: The assertion that a recorded transaction actually happened and relates to the entity.

Substantive procedure: An audit procedure designed to detect material misstatement.

Test of control: A procedure evaluating whether a control operated effectively.

Valuation: Recording an item at an appropriate amount, including required adjustments.

Rights and obligations: The entity owns or controls assets and owes recorded liabilities.

Vouching: Tracing a recorded item back to supporting evidence.

Tracing: Following an originating document into the accounting records.

Three-way match: Comparison of purchase order, receiving report, and supplier invoice.

Unrecorded liability: An obligation existing at period-end but omitted from the records.

Cut-off testing: Examination of transactions around period-end for proper timing.

Related party: A person or entity with a relationship capable of influencing transactions.

Professional skepticism: An alert, questioning attitude toward audit evidence.

Review Questions

Short Answer Questions

1. Distinguish occurrence from completeness testing.
2. Why is inventory observation not, by itself, a valuation test?
3. Identify two substantive procedures for testing unrecorded liabilities.
4. What assertions are most relevant to receivables valuation?
5. Explain why bank reconciliation testing does not prove that every bank account has been disclosed.

Long Answer Questions

1. Design a control and substantive audit program for the revenue and receivables cycle.
2. Explain how an auditor should test inventory existence, completeness, rights, cut-off, and valuation.
3. Discuss the relationship between tests of controls and substantive procedures.
4. Develop an audit approach for payroll, including fictitious employees and year-end accruals.
5. Explain how related-party disclosures can be audited using both inquiry and independent evidence.

Analytical / Application Questions

1. A company records December 31 sales when goods are dispatched on January 3. Identify the affected assertions and propose correcting audit procedures.
2. During an inventory count, auditors find goods on the warehouse floor that are absent from the inventory listing. Explain the assertion tested, possible financial statement effects, and follow-up work.
3. A receiving report dated December 28 is matched to a supplier invoice and recorded on January 5. Analyze the effect on liabilities, expenses or inventory, cut-off, and the audit response.

Multiple Choice Questions with Answers

Question 1

Which procedure primarily tests the occurrence of recorded sales?

A. Select sales invoices from the sales journal and vouch them to dispatch documentation

B. Select dispatch notes and trace them to sales invoices

C. Inspect unmatched receiving reports

D. Observe the physical inventory count

Correct Answer: A. Select sales invoices from the sales journal and vouch them to dispatch documentation

Question 2

An auditor selects items observed in the warehouse and traces them to the inventory listing. Which assertion is primarily tested?

A. Existence

B. Completeness

C. Valuation

D. Rights and obligations

Correct Answer: B. Completeness

Question 3

Selecting items from the inventory listing and locating them physically primarily tests which assertion?

A. Completeness

B. Existence

C. Accuracy

D. Classification

Correct Answer: B. Existence

Question 4

Which procedure is most directly responsive to the risk of unrecorded liabilities?

A. Inspect January cash disbursements and unmatched receiving reports

B. Confirm recorded customer receivables

C. Recalculate depreciation expense

D. Observe employees at work

Correct Answer: A. Inspect January cash disbursements and unmatched receiving reports

Question 5

Goods costing $18,000 were incorrectly included in cost of sales although they remained in year-end inventory. What is the correcting effect?

A. Decrease inventory by $18,000 and increase cost of sales by $18,000

B. Increase inventory by $18,000 and reduce cost of sales by $18,000

C. Increase both inventory and cost of sales by $18,000

D. Decrease both inventory and cost of sales by $18,000

Correct Answer: B. Increase inventory by $18,000 and reduce cost of sales by $18,000

Question 6

Which procedure most directly tests the valuation of receivables?

A. Agree the receivables listing total to the general ledger

B. Inspect subsequent cash receipts and assess the expected credit-loss allowance

C. Trace dispatch notes to invoices

D. Inspect the share register

Correct Answer: B. Inspect subsequent cash receipts and assess the expected credit-loss allowance

Question 7

Which is a test of control rather than a substantive procedure?

A. Confirm a bank balance with the bank

B. Recalculate payroll deductions for selected employees

C. Inspect evidence that purchase orders were approved before ordering

D. Examine subsequent payments for unrecorded liabilities

Correct Answer: C. Inspect evidence that purchase orders were approved before ordering

Question 8

Which procedure most directly supports rights and obligations for an investment?

A. Inspect the investment custodian’s confirmation in the auditor’s control

B. Compare the investment’s market price with the prior year

C. Recalculate dividend income only

D. Review the inventory count sheets

Correct Answer: A. Inspect the investment custodian’s confirmation in the auditor’s control

Question 9

A payroll register contains an employee whose personnel file shows termination before year-end. Which risk is most directly indicated?

A. Fictitious or unauthorized payroll

B. Understatement of inventory valuation

C. Incorrect share classification

D. Incomplete related-party disclosure only

Correct Answer: A. Fictitious or unauthorized payroll

Question 10

Which statement best describes the audit-risk relationship AR = RMM × DR?

A. It is a precise formula that eliminates professional judgment

B. It is a conceptual planning model linking assessed misstatement risk and acceptable detection risk

C. It proves that substantive procedures are unnecessary when controls exist

D. It applies only to cash balances

Correct Answer: B. It is a conceptual planning model linking assessed misstatement risk and acceptable detection risk