Audit Engagements and the Audit Process

Introduction

An audit is a structured professional examination of information, usually financial statements, performed to provide users with confidence about its reliability. Auditing is part of the wider assurance profession, which includes engagements designed to improve the confidence of intended users in information other than financial statements or through procedures that provide less than an audit-level conclusion.

A successful audit is not simply a search for errors. It is a risk-based process involving professional judgment, ethical conduct, sufficient appropriate evidence, effective communication, and appropriate documentation. The auditor must understand the entity, assess risks of material misstatement, design and perform responsive procedures, evaluate the evidence obtained, and report a conclusion in accordance with the applicable reporting framework.

This chapter presents the audit process from acceptance through completion. It also explains engagement letters, planning, execution, supervision, documentation, quality management, and the distinction between audit and other assurance engagements. The discussion is based on internationally recognized auditing principles, including the International Standards on Auditing (ISAs). Local legislation, professional standards, and regulatory requirements must always be consulted because requirements may differ between jurisdictions.

Learning Objectives

By the end of this chapter, you should be able to:

1. Distinguish audit, review, and other assurance engagements.
2. Explain the factors considered before accepting or continuing an engagement.
3. Describe the purpose and contents of an engagement letter.
4. Explain the stages of audit planning, execution, completion, and reporting.
5. Distinguish audit evidence from audit documentation.
6. Explain the roles of supervision, review, professional judgment, and professional scepticism.
7. Describe the importance of quality management, ethics, independence, and confidentiality.
8. Apply the audit process to a practical business situation.

1. The Nature of Audit and Assurance Engagements

1.1 Assurance engagements

An assurance engagement is an engagement in which a practitioner obtains sufficient appropriate evidence to express a conclusion intended to enhance the confidence of intended users in information prepared by another party. The information being evaluated is commonly called the subject matter information.

An assurance engagement normally involves three parties:

• The practitioner, who performs the engagement.
• The responsible party, who prepares or measures the subject matter.
• The intended users, who rely on the practitioner’s conclusion.

For example, management prepares financial statements, an external auditor evaluates them, and shareholders, lenders, regulators, and other users rely on the auditor’s report.

Assurance engagements may provide either reasonable assurance or limited assurance. Reasonable assurance is a high, but not absolute, level of assurance. The practitioner reduces engagement risk to an acceptably low level and expresses a positive conclusion, such as: “In our opinion, the financial statements present fairly...” Limited assurance involves less evidence and provides a lower level of assurance. Its conclusion is generally expressed negatively, such as: “Nothing has come to our attention that causes us to believe...”

Absolute assurance is not normally possible because of limitations such as sampling, the use of judgment, persuasive rather than conclusive evidence, management estimates, time constraints, and the possibility of deliberate concealment.

1.2 Audit engagements

An audit is an assurance engagement in which an independent auditor expresses an opinion on whether financial statements are prepared, in all material respects, in accordance with an applicable financial reporting framework.

The auditor does not guarantee that the financial statements are perfectly accurate. The objective is to obtain reasonable assurance that the financial statements as a whole are free from material misstatement, whether caused by fraud or error.

A misstatement is material if it could reasonably be expected to influence the economic decisions of users taken on the basis of the financial statements. Materiality depends on both amount and nature. A relatively small amount may be material if it relates to fraud, a regulatory breach, or the concealment of information from users.

1.3 Audit compared with review and related services

An agreed-upon procedures engagement illustrates an important distinction. The practitioner reports what was found, such as the number of invoices examined and the exceptions identified, but does not express an opinion or assurance conclusion. Users must interpret the findings themselves.

1.4 Audit objectives and assertions

Management makes implicit or explicit assertions when it presents financial statements. The auditor obtains evidence about these assertions. Common assertions include:

• Existence or occurrence: recorded assets exist and recorded transactions occurred.
• Completeness: all transactions and balances that should be recorded are included.
• Accuracy, valuation, and allocation: amounts are recorded correctly and assets and liabilities are appropriately valued.
• Rights and obligations: the entity owns or controls assets and is responsible for liabilities.
• Cut-off: transactions are recorded in the correct accounting period.
• Classification and presentation: information is properly classified, described, and disclosed.

For example, a recorded inventory balance may exist physically but still be misstated because it includes obsolete goods. Existence evidence alone is therefore insufficient; valuation must also be considered.

2. Before Accepting the Engagement

Acceptance decisions protect both the public interest and the audit firm. An auditor should not accept an engagement merely because it is commercially attractive. The auditor must consider whether the engagement can be performed competently, ethically, and in accordance with professional standards.

2.1 Client integrity

The auditor should evaluate the integrity of the prospective client and its management. Relevant information may be obtained from:

• Communication with the predecessor auditor, where permitted and authorized.
• Discussions with bankers, legal advisers, and other professional contacts.
• Public records and regulatory databases.
• Previous financial statements and audit reports.
• Enquiries about management’s reputation and business practices.

Warning signs include a history of regulatory violations, aggressive or dishonest management, unexplained changes of auditor, refusal to provide information, pressure to reduce necessary audit work, or significant disputes about accounting policies.

2.2 Independence and ethical requirements

Independence includes independence of mind and independence in appearance. The auditor must be able to reach an objective conclusion and must avoid relationships or circumstances that would cause a reasonable and informed observer to doubt that objectivity.

Threats may arise from:

• Self-interest: financial interests in the client.
• Self-review: auditing work previously performed by the auditor’s firm.
• Advocacy: promoting the client’s position.
• Familiarity: excessive closeness with client personnel.
• Intimidation: pressure or threats from management.

Safeguards may include removing an affected person from the engagement, arranging an independent review, disposing of a financial interest, or declining the engagement. If threats cannot be reduced to an acceptable level, the engagement must not be accepted or continued.

2.3 Competence, resources, and preconditions

The firm should determine whether it has:

• Staff with appropriate technical knowledge and industry experience.
• Sufficient time to complete the work properly.
• Access to specialists where necessary.
• Appropriate information technology and audit tools.
• Ability to meet reporting deadlines without sacrificing audit quality.

The auditor should also establish whether the preconditions for an audit exist. Management should accept responsibility for preparing the financial statements, maintaining relevant internal control, and providing the auditor with access to records, personnel, and information. If management refuses to acknowledge these responsibilities, acceptance is generally inappropriate.

2.4 Communication with the predecessor auditor

When a new auditor is being considered, professional practice commonly requires communication with the predecessor auditor, subject to the prospective client’s permission and applicable confidentiality rules. The purpose is to identify matters such as disagreements with management, restrictions on audit scope, suspected fraud, unpaid fees, or reasons for the change of auditor.

The prospective auditor should not assume that silence means there are no concerns. If communication is prevented or information is withheld, the risk of acceptance increases.

3. The Engagement Letter

An engagement letter is a written agreement between the auditor and the client that records the terms and conditions of the audit. It reduces misunderstandings and provides evidence that the parties have a common understanding of the engagement.

Important contents usually include:

1. The objective and scope of the audit.
2. The applicable financial reporting framework.
3. The responsibilities of management.
4. The responsibilities of the auditor.
5. The expected form and content of the audit report.
6. The inherent limitations of an audit and internal control.
7. Arrangements for access to records, staff, and external parties.
8. The basis on which fees will be calculated and billed.
9. Use of specialists, internal auditors, or component auditors where relevant.
10. Expected timing and communication arrangements.
11. Requirements concerning confidentiality and electronic communication.
12. Arrangements for ownership and retention of audit working papers, where relevant.

The engagement letter should be issued before significant audit work begins. It may be updated when circumstances change, such as a change in ownership, reporting framework, scope, or legal requirements. A recurring audit does not necessarily require a new letter every year, but the auditor should consider whether the terms remain appropriate.

An engagement letter does not remove the auditor’s professional responsibilities. It is not a substitute for professional standards, legislation, or ethical requirements.

4. Audit Planning

Planning is a continuing and iterative process rather than a single meeting held at the beginning of the audit. Effective planning helps the auditor focus effort on areas of higher risk and avoid unnecessary procedures.

4.1 Understanding the entity and its environment

The auditor obtains an understanding of:

• The entity’s industry, legal structure, ownership, and governance.
• Its objectives, strategies, and related business risks.
• Revenue sources, customers, suppliers, financing, and operations.
• Accounting policies and changes in those policies.
• Information systems and transaction processing.
• Internal control relevant to financial reporting.
• Applicable laws, regulations, and contractual obligations.
• Performance measures and management incentives.

This understanding may be developed through interviews, observation, inspection of documents, analytical procedures, site visits, and discussions with those charged with governance.

4.2 Risk assessment

Audit risk is the risk that the auditor expresses an inappropriate opinion when the financial statements are materially misstated. A common conceptual model is:

Inherent risk is the susceptibility of an assertion to misstatement before considering related controls. Control risk is the risk that a misstatement will not be prevented, detected, or corrected promptly by internal control. Detection risk is the risk that audit procedures will not detect a material misstatement that exists.

This relationship is a planning model, not a precise mechanical calculation. The risks are not normally measured with mathematical certainty, and auditors should not multiply unsupported percentages to produce a false appearance of precision. The model explains that when inherent and control risks are assessed as high, the auditor generally needs to reduce detection risk by performing more persuasive or extensive procedures.

Risk assessment considers both financial-statement-level risks and assertion-level risks. For instance, management pressure to meet a profit target may create a risk of premature revenue recognition. A complex valuation may create a risk that estimates are materially misstated.

4.3 Materiality

Materiality guides the nature, timing, and extent of audit procedures. The auditor establishes materiality for the financial statements as a whole and may establish a lower performance materiality to reduce the risk that uncorrected and undetected misstatements collectively exceed overall materiality.

Materiality is not determined by a universal percentage. It requires consideration of the size and nature of an item, the needs of users, the entity’s circumstances, and relevant laws or regulations. Examples of potentially sensitive matters include directors’ remuneration, related-party transactions, loan covenant breaches, and fraud.

4.4 Analytical procedures in planning

Planning analytical procedures involve evaluating plausible relationships in financial and non-financial information. Examples include comparing current gross margin with prior periods, comparing payroll expense with employee numbers, or examining receivables days.

A significant unexpected fluctuation does not prove that an error exists. It identifies an area requiring explanation and possibly additional testing. Explanations should be supported by reliable evidence rather than accepted uncritically.

4.5 The audit strategy and audit plan

The overall audit strategy sets the scope, timing, and direction of the audit. The detailed audit plan describes the procedures to be performed in response to assessed risks.

An audit plan commonly identifies:

• Significant accounts and disclosures.
• Relevant assertions.
• Assessed risks.
• Planned tests of controls and substantive procedures.
• Sampling approaches.
• Specialists and other auditors.
• Timing of interim and final work.
• Staffing, supervision, and review responsibilities.

The plan must remain flexible. New information obtained during fieldwork may require reassessment of risk and modification of procedures.

5. Execution: Obtaining Audit Evidence

5.1 Sufficient appropriate evidence

Audit evidence includes information used by the auditor in reaching conclusions. Evidence must be both:

• Sufficient: the measure of quantity of evidence.
• Appropriate: the measure of quality, including relevance and reliability.

More evidence does not compensate automatically for poor-quality evidence. Evidence obtained directly from an independent external source is often more reliable than an unsupported oral explanation from management, although reliability depends on the circumstances.

5.2 Common audit procedures

Inquiry alone is rarely sufficient for important assertions because explanations may be incomplete or biased. It is normally combined with inspection, confirmation, observation, or other procedures.

5.3 Tests of controls and substantive procedures

Tests of controls evaluate whether controls operated effectively during the relevant period. For example, the auditor may inspect evidence that credit approval was obtained before sales were made.

Substantive procedures are designed to detect material misstatements at the assertion level. They include tests of details and substantive analytical procedures. A test of details might involve agreeing a sample of recorded purchases to supplier invoices and receiving reports.

The auditor may decide not to rely on controls and instead perform mainly substantive procedures. However, where reliance on controls is necessary or efficient, the auditor must obtain evidence about their operating effectiveness.

5.4 Sampling

Audit sampling involves applying audit procedures to less than 100 percent of items in a population, with every sampling unit having a chance of selection. The auditor uses the sample to draw a conclusion about the population.

Sample size is influenced by the assessed risk, expected error, tolerable misstatement or deviation rate, population characteristics, and the quality of evidence. A sample is not automatically representative merely because it is large. Selection must be designed to avoid bias, and the auditor must investigate identified deviations appropriately.

5.5 External confirmations

External confirmations may be used for bank balances, receivables, investments, legal claims, or borrowing arrangements. The auditor should maintain control over the confirmation process, including selecting the confirming party, preparing the request, sending it, and receiving the response directly where possible.

A non-response does not prove that the balance is correct. Alternative procedures may include examining subsequent cash receipts, shipping documents, contracts, or other supporting evidence.

5.6 Estimates and professional judgment

Accounting estimates often involve uncertainty. Examples include provisions, impairment allowances, depreciation lives, fair values, and warranty obligations. The auditor evaluates the methods, assumptions, data, and disclosures used by management.

Professional scepticism requires a questioning mind and alertness to contradictory evidence. It does not mean assuming that management is dishonest; it means avoiding unjustified acceptance of evidence and remaining attentive to possible bias or fraud.

6. Completion and Reporting

At completion, the auditor assesses whether the evidence obtained supports the proposed opinion and whether all significant matters have been resolved.

6.1 Completion procedures

Completion commonly includes:

• Reviewing misstatements identified during the audit.
• Requesting management to correct material misstatements.
• Evaluating uncorrected misstatements individually and in aggregate.
• Performing final analytical procedures.
• Reviewing subsequent events.
• Evaluating going concern.
• Obtaining written representations from management.
• Reviewing related-party transactions.
• Ensuring required disclosures are complete.
• Communicating significant findings to those charged with governance.
• Completing the engagement quality review where required.

6.2 Subsequent events

Subsequent events are events occurring between the date of the financial statements and the date of the auditor’s report, and sometimes facts discovered after the report date. The auditor determines whether such events require adjustment or disclosure under the applicable reporting framework.

For example, a customer’s bankruptcy after year-end may provide evidence about a receivable condition that already existed at year-end. Conversely, a major flood occurring after year-end may represent a non-adjusting event requiring disclosure rather than adjustment, depending on the reporting framework.

6.3 Going concern

Management is responsible for assessing the entity’s ability to continue as a going concern. The auditor evaluates management’s assessment and considers evidence such as cash-flow forecasts, financing arrangements, debt maturities, losses, legal claims, and dependence on major customers.

A material uncertainty related to going concern may require specific disclosure and modification or inclusion of a relevant section in the auditor’s report, depending on the circumstances and applicable standards.

6.4 Audit opinions

The principal forms of audit opinion are:

• Unmodified opinion: the financial statements are presented fairly, in all material respects, in accordance with the applicable framework.
• Qualified opinion: the auditor identifies a material misstatement or limitation, but the matter is not pervasive.
• Adverse opinion: misstatements are both material and pervasive, so the financial statements do not present fairly.
• Disclaimer of opinion: the auditor cannot obtain sufficient appropriate evidence and the possible effects are both material and pervasive.

The distinction between material and pervasive is important. A matter is pervasive when it is not confined to specific elements, represents a substantial proportion of the financial statements, or is fundamental to users’ understanding.

7. Audit Documentation and Working Papers

Audit documentation is the record of procedures performed, evidence obtained, and conclusions reached. It should enable an experienced auditor with no previous connection to the engagement to understand the work performed, the timing and extent of procedures, the results, significant matters, and the basis for conclusions.

Working papers may include:

• Planning memoranda and risk assessments.
• Materiality calculations.
• Understanding of internal control.
• Audit programmes and sampling records.
• Copies or summaries of important contracts.
• Confirmation responses.
• Reconciliations and substantive test schedules.
• Misstatement summaries.
• Communications with management and governance.
• Final review checklists and completion memoranda.

Documentation should be prepared promptly. A working paper should identify the preparer, reviewer, dates of work and review, procedures performed, evidence examined, and conclusion reached. A tick mark without explanation is usually insufficient.

Documentation is not a substitute for performing audit work. An undocumented procedure may be difficult to demonstrate, supervise, or defend, even if someone claims that it was performed. Audit files are confidential and must be retained, protected, and disposed of in accordance with professional, legal, and regulatory requirements.

8. Supervision, Review, and Quality Management

Audit quality is the responsibility of the engagement partner and the audit firm. Quality management involves policies and procedures designed to ensure that engagements comply with professional standards, laws, ethical requirements, and the firm’s own quality objectives.

8.1 Supervision and review

Supervision involves directing assistants, monitoring progress, addressing significant issues, and ensuring that work is performed appropriately. Review involves evaluating whether the work supports the conclusions and whether the audit objectives have been achieved.

The extent of supervision depends on the competence and experience of team members, the complexity of the engagement, and the assessed risk. High-risk areas require more experienced staff and more detailed review.

8.2 Engagement quality review

Certain engagements, such as audits of listed entities or other engagements specified by law or firm policy, may require an engagement quality review. An appropriately qualified reviewer who is not part of the engagement team evaluates significant judgments and conclusions before the report is issued.

8.3 Root causes and continuous improvement

Quality management should not focus only on detecting errors after they occur. Firms should investigate the root causes of deficiencies, such as inadequate training, unrealistic deadlines, poor consultation, weak independence checks, or ineffective review. Corrective action may include revised procedures, coaching, technology controls, or changes in staffing.

9. Ethics, Governance, and Confidentiality

Auditors serve the public interest, not merely the paying client. Fundamental ethical principles include integrity, objectivity, professional competence and due care, confidentiality, and professional behaviour.

Auditors must protect confidential information except where disclosure is authorized or legally required. Confidentiality does not permit an auditor to conceal suspected money laundering, fraud, or regulatory violations where reporting is required by law.

Those charged with governance, such as a board or audit committee, should receive timely communication about significant risks, accounting policies, control deficiencies, uncorrected misstatements, independence matters, and difficulties encountered during the audit. Effective communication promotes accountability without transferring management’s responsibilities to the auditor.

10. Technology and AI in the Audit Process

Modern audits may use electronic working papers, data analytics, automated confirmations, continuous monitoring tools, and artificial intelligence. Technology can help auditors examine large populations, identify unusual transactions, and compare information across systems.

However, technology does not eliminate professional judgment. Automated results may contain false positives, incomplete data, programming errors, or biased models. The auditor remains responsible for understanding the tool, validating data, protecting confidentiality, and evaluating whether the output is relevant and reliable.

AI-generated explanations or risk scores should not be accepted without corroboration. Audit evidence must be traceable, reproducible where appropriate, and sufficiently documented. Sensitive client data should not be entered into unapproved public AI systems.

Applied Case: The Audit of Sunrise Office Supplies Ltd.

This is an illustrative case.

Background

Sunrise Office Supplies Ltd. is a medium-sized wholesaler. Its sales increased sharply in the final month of the financial year. Management is seeking a bank loan and has a bonus arrangement based on reported profit. The company’s accounting system records sales when invoices are prepared. Goods are sometimes dispatched several days after invoicing.

Problem

The audit team identifies three risks:

1. Sales may be recorded before control of goods transfers to customers.
2. Receivables may include amounts that will not be collected.
3. Inventory may include goods already invoiced but still held in the warehouse.

Management explains that the increase reflects a successful promotion and provides a sales summary prepared by the finance manager.

Analysis

The bonus arrangement creates a possible incentive to accelerate revenue. The difference between invoicing and dispatch creates a cut-off risk. The sales summary is internally prepared and does not, by itself, provide sufficient evidence. The auditor therefore links procedures to the relevant assertions:

• Inspect sales invoices and dispatch records before and after year-end.
• Test whether recorded sales were dispatched in the correct period.
• Examine credit notes and sales returns after year-end.
• Confirm selected receivable balances with customers.
• Inspect subsequent cash receipts for non-confirmed balances.
• Attend or observe the inventory count and identify invoiced goods still on hand.
• Discuss the incentive arrangement with management and governance.

Approach and solution

The auditor increases attention on revenue cut-off and receivables valuation. A sample is selected from sales recorded immediately before and after year-end. Several invoices dated before year-end relate to goods dispatched after year-end. The auditor proposes an adjustment and evaluates whether other similar transactions exist.

For receivables, some customers do not respond to confirmations. The auditor examines subsequent receipts and finds that most balances were collected, but one large balance remains unpaid and the customer is experiencing financial difficulty. The auditor discusses an impairment allowance with management.

The auditor also identifies goods invoiced before year-end but still controlled by Sunrise at year-end. The accounting treatment is reassessed under the applicable reporting framework.

Outcome

Management corrects the cut-off error and records an additional allowance for doubtful receivables. The auditor documents the identified risks, procedures, evidence, discussions, and conclusions. The final opinion is unmodified because the corrected financial statements are materially fairly presented and sufficient appropriate evidence has been obtained.

Learning points

The case demonstrates that:

• Risk assessment should be connected to specific assertions.
• Management explanations require corroborating evidence.
• Incentives may increase fraud or bias risk.
• Cut-off testing is especially important around the reporting date.
• Non-responses to confirmations require alternative procedures.
• Completion includes evaluating both corrected and uncorrected misstatements.

Challenges and Limitations of the Audit Process

Audits face practical limitations. Sampling means that some transactions are not examined. Fraud may involve collusion, forged documents, or management override. Estimates may remain uncertain even after extensive testing. Auditors may face time pressure, incomplete records, cyber incidents, or limitations on access to information.

The audit expectation gap arises when users expect auditors to guarantee the accuracy of every figure, detect every fraud, or predict future business failure. Clear reporting and communication can reduce misunderstanding, but an audit opinion is not a guarantee of future viability or absolute accuracy.

Auditors must also manage commercial pressures. A client’s importance to a firm must never override independence, professional scepticism, or the public interest. Effective quality management, consultation, regulatory inspection, and ethical leadership are important safeguards.

Best-Practice Checklist

Before accepting an audit, the auditor should confirm client integrity, independence, competence, resources, and management’s acceptance of its responsibilities. During planning, the auditor should understand the entity, identify risks, set materiality, and design a responsive audit strategy. During execution, the auditor should obtain sufficient appropriate evidence, document procedures clearly, and revise the plan when necessary. At completion, the auditor should evaluate misstatements, going concern, subsequent events, disclosures, written representations, and the proposed opinion. Throughout the engagement, supervision, review, confidentiality, professional scepticism, and quality management must be maintained.

Chapter Summary

An audit is a reasonable-assurance engagement in which an independent auditor expresses an opinion on financial statements. Assurance is a broader concept that includes audits, reviews, and other engagements. Audits differ in their level of assurance, procedures, and form of conclusion.

Before acceptance, the auditor evaluates client integrity, independence, competence, resources, predecessor communication, and management’s responsibilities. The engagement letter records the agreed objective, scope, responsibilities, reporting framework, access arrangements, and other important terms.

Planning involves understanding the entity, assessing risks, determining materiality, and developing an audit strategy and detailed plan. Execution involves obtaining sufficient appropriate evidence through procedures such as inspection, observation, confirmation, recalculation, reperformance, inquiry, and analytical procedures. Evidence must support relevant assertions and conclusions.

Completion includes evaluating misstatements, subsequent events, going concern, disclosures, written representations, and communications with governance. Documentation records the work performed and conclusions reached. Supervision, review, independence, ethics, confidentiality, and firm-wide quality management support reliable audits. Technology and AI can improve efficiency, but they do not replace professional judgment, scepticism, or accountability.

Key Terms

Assurance engagement: An engagement designed to enhance intended users’ confidence in subject matter information.

Audit: An independent reasonable-assurance engagement resulting in an opinion on financial statements.

Audit evidence: Information used by the auditor to reach conclusions.

Audit risk: The risk that an inappropriate audit opinion is expressed on materially misstated financial statements.

Control risk: The risk that internal control fails to prevent, detect, or correct a misstatement.

Detection risk: The risk that audit procedures fail to detect an existing material misstatement.

Engagement letter: Written agreement recording the terms and conditions of an audit.

Inherent risk: Susceptibility of an assertion to misstatement before considering controls.

Limited assurance: A lower level of assurance generally expressed in negative form.

Materiality: The significance of a misstatement or omission to users’ decisions.

Professional judgement: Applying relevant training, knowledge, and experience to reach informed conclusions.

Professional scepticism: A questioning mind and alertness to possible misstatement or contradictory evidence.

Reasonable assurance: A high, but not absolute, level of assurance.

Review engagement: An engagement providing limited assurance mainly through inquiry and analytical procedures.

Substantive procedure: A procedure designed to detect material misstatement.

Test of controls: A procedure evaluating whether a control operated effectively.

Working papers: Documentation of procedures, evidence, and conclusions.

Those charged with governance: Persons responsible for overseeing an entity’s strategic direction and accountability.

Review Questions

Short Answer Questions

1. What is the main difference between reasonable assurance and limited assurance?
2. Identify three matters an auditor should consider before accepting a new client.
3. What is the purpose of an engagement letter?
4. Distinguish sufficient evidence from appropriate evidence.
5. Name four procedures commonly used to obtain audit evidence.

Long Answer Questions

1. Explain the stages of the audit process from acceptance through completion.
2. Discuss the importance of materiality and risk assessment in audit planning.
3. Explain audit assertions and show how they guide the selection of audit procedures.
4. Describe the purpose and characteristics of effective audit documentation.
5. Discuss how independence, professional scepticism, supervision, and quality management contribute to audit quality.

Analytical / Application Questions

1. A company records all sales when invoices are issued, although goods may be dispatched later. Identify the relevant audit risks and design appropriate procedures.
2. A client refuses to allow the auditor to contact the predecessor auditor and insists on an unusually short audit deadline. Analyse the acceptance decision and explain what further enquiries should be made.
3. An auditor receives no response to a confirmation request for a significant receivable. Explain how the auditor should respond and what evidence might be obtained through alternative procedures.

Multiple Choice Questions with Answers

Question 1

Which engagement normally provides reasonable assurance and results in a positive-form opinion?

A. Compilation engagement

B. Audit engagement

C. Agreed-upon procedures engagement

D. Bookkeeping engagement

Correct Answer: B. Audit engagement

Question 2

Which of the following is an example of a self-review threat to independence?

A. A client threatens to replace the auditor

B. The auditor owns shares in the client

C. The auditor audits financial information previously prepared by the auditor’s own firm

D. The auditor has never worked in the client’s industry

Correct Answer: C. The auditor audits financial information previously prepared by the auditor’s own firm

Question 3

What is the principal purpose of an engagement letter?

A. To guarantee that no fraud exists

B. To record the agreed terms and responsibilities of the engagement

C. To replace the auditor’s working papers

D. To provide management with an audit opinion before testing

Correct Answer: B. To record the agreed terms and responsibilities of the engagement

Question 4

Which assertion addresses whether all transactions that should be recorded have been included?

A. Existence

B. Completeness

C. Rights and obligations

D. Classification

Correct Answer: B. Completeness

Question 5

If inherent risk and control risk are assessed as high, the auditor will generally seek to:

A. Increase acceptable detection risk

B. Perform no substantive procedures

C. Reduce detection risk through more persuasive or extensive procedures

D. Issue an automatic adverse opinion

Correct Answer: C. Reduce detection risk through more persuasive or extensive procedures

Question 6

Which procedure involves independently carrying out a control or process originally performed by the entity?

A. Inquiry

B. Observation

C. Reperformance

D. Inspection

Correct Answer: C. Reperformance

Question 7

What does audit documentation primarily record?

A. Only the client’s accounting policies

B. Procedures performed, evidence obtained, and conclusions reached

C. The auditor’s expected fee only

D. Management’s personal opinions about the auditor

Correct Answer: B. Procedures performed, evidence obtained, and conclusions reached

Question 8

A qualified opinion is generally appropriate when a matter is:

A. Immaterial and fully resolved

B. Material but not pervasive

C. Never investigated by the auditor

D. Always related to going concern

Correct Answer: B. Material but not pervasive

Question 9

Which statement about professional scepticism is correct?

A. It requires assuming that all management is dishonest

B. It means accepting explanations without corroboration

C. It involves a questioning mind and alertness to contradictory evidence

D. It eliminates the need for professional judgment

Correct Answer: C. It involves a questioning mind and alertness to contradictory evidence

Question 10

Which party is normally responsible for preparing the financial statements?

A. The external auditor

B. The bank lending to the entity

C. Management of the entity

D. The audit regulator

Correct Answer: C. Management of the entity