An audit is not a search for errors. It is the process of accumulating enough evidence to say, at an acceptably low risk of being wrong, that financial statements are fairly stated — and almost every rule follows from that one sentence. "Enough" is why sampling exists. "Acceptably low risk" is why risk is assessed before any testing is planned. "Fairly stated" is why materiality exists, since not every error matters. And the whole thing is worth nothing if the auditor is not independent, which is why ethics comes before technique. Read this for that chain of reasoning; the individual standards are much easier to hold once you can see which link each one is defending.
Each chapter opens with the short version. Tap one to read the detail.
What an audit is for, and what it does not promise
~2 min
An audit provides reasonable — not absolute — assurance that statements are free of material misstatement. That single qualifier explains sampling, materiality, and why an audit can be performed correctly and still miss something.
Independence, and why appearance counts as much as fact
~2 min
Independence must exist both in fact and in appearance, because the audit's value comes from being believed. Most rules therefore restrict relationships that would look compromising even where the auditor's judgement is genuinely unaffected.
Risk first, testing second — and materiality decides the threshold
~2 min
Audit effort is allocated by assessed risk, not spread evenly. Materiality sets what counts as an error worth finding, and it is set during planning precisely so it cannot be adjusted afterwards to suit the result.
Controls: testing the machine instead of the output
~2 min
Testing controls asks whether the system that produces the numbers works, which is different from testing the numbers. It is efficient only when controls are actually effective — and a failed control test sends you back to substantive work, not forward.
What makes evidence persuasive
~2 min
Evidence is judged on relevance and reliability, and reliability follows a predictable hierarchy: independent beats internal, direct observation beats inference, original beats copy. Quantity does not compensate for a weak source.
Confirmation, lawyers, and specialists — evidence from outside
~2 min
Some evidence can only come from third parties, and each source has a characteristic failure. Confirmations fail by non-response, legal letters by scope limitation, and specialists by unexamined assumptions.
Sampling: two risks, and only one of them is dangerous
~2 min
Sampling accepts that a subset may not represent the population. Its two errors are not symmetric — concluding wrongly that a balance is fine threatens the opinion, while concluding wrongly that it is wrong only costs extra work.
Testing by cycle, and the direction that decides the assertion
~2 min
Work is organised by transaction cycle, and within each the crucial choice is direction. Tracing forward from source documents tests completeness; vouching backward from the records tests occurrence. They are not interchangeable.
Fraud: the professional-scepticism problem
~2 min
Fraud differs from error by intent and by concealment, which is why ordinary procedures may not find it. Standards respond with required scepticism, a discussion among the team, and specific procedures aimed at management override.
The opinion, and what each modification actually says
~2 min
The report's wording is a code with defined meanings. The choice among unmodified, qualified, adverse and disclaimer turns on two questions: is the problem material, and is it pervasive.
The engagement ladder: audit, review, compilation
~2 min
Not every engagement is an audit. A review gives limited assurance from inquiry and analytics; a compilation gives none at all. Confusing the level of assurance with the level of effort is the common error.
Government auditing, and what gets added
~2 min
Government audits keep the financial-statement audit and add to it — compliance with laws and grant terms, and reporting on internal control. The standards also impose stricter independence and continuing-education requirements.
Written by Keentune. We are not affiliated with or endorsed by the organizations whose documentation informs this guide, and any linked sources belong to their respective owners.
All exam, test, and product names and trademarks are the property of their respective owners and are used here for identification and reference only. Keentune is independent study practice — not affiliated with, authorized, or endorsed by any of these organizations.