Understanding Audit Evidence Essentials
Understanding Audit Evidence Essentials
2. Other Information
Relevance deals with the logical connection with, or bearing upon, the purpose of
the audit procedure and, where appropriate, the assertion under consideration. The
relevance of information to be used as audit evidence may be affected by the direction of
testing.
A given set of audit procedures may provide audit evidence that is relevant to certain
assertions, but not others. For e.g.- Physical counting of inventory is relevant for verifying
existence but not value.
Reliability
While recognising that exceptions may exist, the following generalisations about the
reliability of audit evidence may be useful:
1. External evidence > Internal evidence
3. Evidence obtained directly by auditor > Obtained indirectly, say, from the management.
1. Materiality
2. ROMM
3. Size and characteristics of population
(vii) Inquiry
(i) Inspection
Inspection involves examining records or documents or a physical examination of an
asset.
(ii) Observation
Observation provides audit evidence about the performance of a process or procedure, but is
limited to the point in time at which the observation takes place, and by the fact that the act
of being observed may affect how the process or procedure is performed.
(iv) Recalculation
(v) Reperformance
In the case of inquiries about management intent, the information available to support
management’s intent may be limited.
Although inquiry may provide important audit evidence, and may even produce evidence of a
misstatement, inquiry alone ordinarily does not provide sufficient audit evidence of the
absence of a material misstatementat the assertion level, nor of the operating effectiveness
of controls.
Audit Trail
An audit trail is a documented flow of a transaction. It is used to investigate howa source
document was translated into an account entry and from there it was inserted into
financial statement of an entity. It is used as audit evidence to establish authentication and
integrity of a transaction. Audit trails help inmaintaining record of system and user activity.
Audit trails (or audit logs) act as record-keepers that document evidence of certain events,
procedures or operations, because their purpose is to reduce fraud, material errors, and
unauthorized use.
When using information produced by the entity, the auditor shall evaluate whether the
information is sufficiently reliable for the auditor’s purposes, including as necessary in the
circumstances:
(a) Obtaining audit evidence about the accuracy and completeness of the information;
and
(b) Evaluating whether the information is sufficiently precise and detailed for the
auditor’s purposes.
If:
(a) audit evidence obtained from one source is inconsistent with that obtained from
another; or
(b) the auditor has doubts over the reliability of information to be used as audit evidence,
the auditor shall determine what modifications or additions to audit procedures are
necessary to resolve the matter
Activities Relating to Governance- The internal audit function may assess the
governance process in its accomplishment of objectives on ethics and values, Performance
management and accountability, communicating risk and control information and
effectiveness of communication among those charged with governance, external and internal
auditors, and management.
Activities Relating to Risk Management- The internal audit function may assist the entity
by identifying and evaluating significant exposures to risk and contributing to the
improvement of risk management.
4. Review of compliance with laws and regulations. Review compliance with laws,
regulations, and other external requirements
Scope of SA 610
Standard on Auditing (SA) 610 deals with the external auditor’s responsibilities if using
the work of internal auditors. This includes
(a) Using the work of the internal audit function in obtaining audit evidence and
(b) Using internal auditors to provide direct assistance under the direction,
supervision and review of the external auditor.
Objectives of the external auditor, where the entity has an internal audit function
(a) To determine whether the work of the internal audit function or direct assistance
from internal auditors can be used, and if so, in which areas and to what extent;
(b) If using the work of the internal audit function, to determine whether that
work is adequate for purposes of the audit; and
(c) If using internal auditors to provide direct assistance, to appropriately direct,
supervise and review their work.
i. Whether the organizational status supports the ability of the function to be free
from bias, conflict of interest or undue influence of others
ii. Whether TCWG oversee employment decisions related to the internal audit
function.
iii. Whether there are any constraints or restrictions placed on the internal audit function
by management or TCWG.
• Whether there are established policies for hiring, training and assigning internal
auditors
• Whether IA have adequate technical training and proficiency in auditing.
• Whether IA possess knowledge relating to the entity’s financial reporting and the
applicable financial reporting framework.
Determining the Nature and Extent of Work of the Internal Audit Function that Can Be
Used
As a basis for determining the areas and the extent to which the work of the internal audit
function can be used, the external auditor shall consider the nature and scope of the work that
has been performed, or is planned to be performed, by the internal audit function and its
relevance to the external auditor’s overall audit strategy and audit plan.
Examples of work of the internal audit function that can be used by theexternal auditor
include the following:
1. Testing of the operating effectiveness of controls.
2. Substantive procedures involving limited judgment.
Circumstances in which the external auditor shall plan to use less of the work of the
Internal audit function and perform more of the work directly
a. The more judgment is involved in:
• Planning and performing relevant audit procedures; and
• Evaluating the audit evidence gathered;
b. The higher the assessed risk of material misstatement at the assertion level, with
special consideration given to risks identified as significant;
c. The less the internal audit function’s organizational status and relevant policies and
procedures adequately support the objectivity of the internalauditors; and
d. The lower the level of competence of the internal audit function.
Using the Work of the Internal Audit Function
If the external auditor plans to use the work of the internal audit function, the external
auditor shall
(A) discuss the planned use of its work with the function
(B) Read the reports of the internal audit function to obtain an understanding of the nature
and extent of audit procedures perform sufficient audit procedures on the body of work
of the internal audit function as a whole that the external auditor plans to use to
determine its adequacy for purposes of the audit.
Discussion and Coordination with the Internal Audit Function
• The timing of such work.
• The nature of the work performed.
• The extent of audit coverage.
• Materiality for the financial statements as a whole
• Documentation of the work performed.
• Review and reporting procedures.
Determining Whether, in Which Areas, and to What Extent Internal Auditors Can Be
Used to Provide Direct Assistance
Direct assistance refers to the use of internal auditors to perform audit procedures
under the direction, supervision and review of the external auditor.
The external auditor shall not use an internal auditor to provide direct assistance if:
(a) There are significant threats to the objectivity of the internal auditor; or
(b) The internal auditor lacks sufficient competence to perform the proposedwork.
The external auditor shall not use internal auditors to provide direct assistance to perform
procedures that:
(a) Involve making significant judgments in the audit;
(b) Relate to higher assessed risks of material misstatement
(c) Relate to work with which the internal auditors have been involved
(d) Relate to decisions the external auditor makes in accordance with this SA
SA 530 Audit Sampling
Audit Sampling means the application of audit procedures to less than 100% of items within a
population of audit relevance.
The objective of the auditor is to provide a reasonable basis for the auditor to draw
conclusions about the population from which the sample is selected.
It is not obligatory that the auditor must adopt the sampling technique while auditing the
accounts. However, SA 530 will be applicable when auditor uses audit sampling for performing
audit procedures.
Traditional approach to audit is economically wasteful because all the efforts are
directed to check all transactions without any exception. It leads to more emphasis on
routine checking which seldom reveals anything material.
With increase in formal internal controls the possibilities of routine errors & frauds have
greatly diminished, i.e. there is Prevention, Detection and Correction of Frauds and Errors.
Thus, the auditors are also more focussed on checking of principles and controls rather than
extensive checking and vouching of all entries.
Population refers to the entire set of data from which a sample is selected and about which
the auditor wishes to draw conclusions. Population must be complete, reliable and
appropriate.
Samples is generated from the population and is representative of the entire population.
Characteristics of population are: (CAR)
Sampling process can be applied on both Test of controls (to find deviations) and test of
details. (to find misstatement)
A) Non-statistical or
B) Statistical sampling approaches.
Statistical sampling is an approach to sampling that has the random selection of the sample
units; and the use of probability theory to evaluate sample results, including measurement of
sampling risk characteristics.
➢ Statistical sampling is an approach to sampling that has the random selection of the
sample items.
➢ Statistical sampling uses the scientific method of choosing samples from a given
population. Since the statistical theory of sampling is based on a scientific law, it can be
relied upon to a greater extent than any arbitrary technique which lacks in basis and
acceptability.
➢ Sampling other than statistical sampling is non-statistical sampling. Under non-statistical
sampling – samples are selected based on personal experience and knowledge; thus, it
is criticized on the grounds that it is neither objective nor scientific.
➢ Whatever may be the approach non-statistical or statistical sampling, the sample must
be representative.
Factors considered for deciding upon the extent of checking on a sampling plan: a)
Size of the organisation under audit, b) state of the internal control, c) adequacy and
reliability of books and records, d) Tolerable error range and e) Degree of desired
confidence.
Sampling Process
1. Sample design, size and selection of items for testing
Stratification refers to dividing a population into discrete sub population which have similar
characteristics. Each Sub population is called as Stratum and units under those sub population
are referred to as Strata.
▪ Under this conclusion drawn from individual units in stratum is extrapolated to stratum
and results of each stratum is used to analyses the entire population.
▪ Objective of stratification is to reduce variability of items within each stratum &
therefore allow sample size to be reduced without increasing sampling risk.
▪ When performing TODs, population is often stratified by monetary value. This allows
greater audit effort to be directed to the larger value items, as these items may contain
the greatest potential misstatement in terms of overstatement.
▪ Population may be stratified according to a particular characteristic that indicates a
higher ROMM, for example, when testing the allowance for doubtful accounts in the
valuation of accounts receivable, balances may be stratified by age.
▪ The results of AP applied to a sample of items within a stratum can only be projected to
the items that make up that stratum.
▪ To draw a conclusion on entire population, consider the ROMM in relation to whatever
other strata make up the entire population.
In value weighted selection, the sample size, its selection and evaluation will result in a
conclusion in monetary amounts.
When performing TODs, it may be efficient to identify sampling unit as the individual
monetary units that make up population. Having selected specific monetary units from within
the population, for example, the accounts receivable balance, examine the particular items, for
example, individual balances, that contain those monetary units.
One benefit of this approach to defining the sampling unit is that audit effort is directed to the
larger value items because they have a greater chance of selection, and can result in smaller
sample sizes.
This approach may be used in conjunction with the systematic method of sample selection
and is most efficient when selecting items using random selection
Sample Size
➢ A sample size should be sufficient to reduce sampling risk to acceptably low level.
➢ The lower the risk the auditor is willing to accept, greater will be sample size.
• For greater reliance on controls- greater will be TOC and greater will be sample size.
• Increase in tolerable rate of deviation- will decrease sample size and vice versa
• higher the expected rate of deviation, larger the sample size
• greater the level of assurance from samples- higher the sample size
• large population- has little effect on sample size and for small population- sample is not
required
Projecting misstatements
✓ The auditor is required to project misstatements for the population to assess the
quantum of misstatement, but this projection is not sufficient evidence to determine
an amount to be recorded.
✓ Treatment of anomaly- it should be excluded for projection of misstatement
✓ For test of details- projections are done for misstatement whereas for test of
controls no projections is required since sample deviation rate is population
deviation rate.
Inventory
When inventory is material to the FS, the auditor shall obtain SAAE regarding the
existence & condition by:
a) Nature of inventory.
b) Stages of completion of work in progress.
c) The ROMM related to inventory.
d) The nature of the IC related to inventory.
e) Whether adequate procedures are expected to be established and proper instructions
issued
f) The timing of physical inventory counting.
g) Whether the entity maintains a perpetual inventory system.
h) The locations at which inventory is held, including the materiality and the ROMM at
different locations, in deciding at which locations attendance is appropriate
i) Whether the assistance of an auditor’s expert is needed.
If physical inventory counting is conducted at a date other than the date of the FS, the
auditor shall, in addition to the above, perform AP to obtain audit evidence about whether
changes in inventory between the count date and the date of the FS are properly recorded.
Obtain SAAE regarding the existence & condition of that inventory by performing one or both
of the following:
a) Request confirmation from the third party as to the quantities and condition of
inventory held on behalf of the entity.
b) Perform inspection or other AP appropriate in the circumstances.
a) Inquiry of management and, where applicable, others within the entity, including in-
house legal counsel;
b) Reviewing minutes of meetings of TCWG and correspondence between the entity and
its external legal counsel; and
c) Reviewing legal expense accounts.
If the auditor assesses ROMM regarding litigation or claims that have been identified, or
when AP performed indicate that other material litigation or claims may exist, the auditor
shall, in addition to the procedures required by other SAs, seek direct communication with
the entity’s external legal counsel.
Further if:
a) management refuses to communicate or meet with the entity’s external legal counsel, or
the entity’s external legal counsel refuses to respond to the letter of inquiry/is
prohibited from responding; and
b) the auditor is unable to obtain SAAE by performing alternative AP,
the auditor shall modify the opinion in the auditor’s report in accordance with SA 705.
Take Written Representation from mgmt. & TCWG that all known actual or possible litigation
and claims have been disclosed to the auditor and appropriately accounted for and disclosed
in FS.
Segment Information
The auditor shall obtain SAAE regarding the presentation and disclosure of segment
information in accordance with the applicable FRF by:
The objective of the auditor is to design & perform procedures to obtain relevant & reliable
audit evidence
The auditor shall maintain control over external confirmation requests, including:
External confirmation is for confirmation of account balance & their elements. It may be used
for confirm terms of agreements, contracts, or transactions between an entity & other parties,
or to confirm the absence of certain conditions, such as a “side agreement”.
Responses to confirmation requests provide more relevant & reliable audit evidence when
confirmation requests are sent to a confirming party the auditor believes is knowledgeable
about the information to be confirmed.
The auditor may send an additional confirmation request when a reply to a previous request
has not been received within a reasonable time.
a) Inquire reasons for the refusal, and seek audit evidence as to their validity and
reasonableness;
b) Evaluate the implications of refusal on the auditor’s assessment of the relevant ROMM,
including the risk of fraud, and on the NTE of other AP; and
c) Perform alternative AP designed to obtain relevant and reliable audit evidence
If auditor conclude- unreasonable refusal or unable to obtain relevant & reliable audit
evidence from alternative AP- Communicate to TCWG (SA-260) & determine implications for
the auditor opinion (SA 705)
Positive confirmation request – Confirming party respond directly to the auditor indicating
whether the confirming party agrees/disagrees with the info. in the request, or providing the
requested information.
Negative confirmation request – Confirming party respond directly to the auditor only if the
confirming party disagrees with the info. provided in the request.
It provides less persuasive audit evidence than positive confirmations. Negative confirmation
requests not be used as the sole substantive audit procedure to address an assessed ROMM
at the assertion level unless all of the following are present:
• The auditor has assessed the ROMM as low and has obtained SAAE regarding the
operating effectiveness of controls relevant to the assertion;
• The population of items comprises a large number of small, homogeneous, account
balances, transactions or conditions;
• A very low exception rate is expected; and
• The auditor is not aware of circumstances/conditions that would cause recipients of
negative confirmation requests to disregard such requests.
Auditor to evaluate the results of the confirmation provide relevant and reliable audit
evidence, or whether performing FAP is necessary.
When evaluating the results of individual external confirmation requests, the auditor may
categorize such results as follows:
(a) A response by the appropriate confirming party indicating agreement
(b) A response deemed unreliable;
(c) A non-response; or
a) Opening balances contain misstatements that materially affect the current period’s FS;
b) Appropriate accounting policies reflected in the opening balances have been
consistently applied in the current period’s FS, or changes thereto are properly
accounted for and adequately presented and disclosed in accordance with the
applicable FRF.
Read the most recent FS and the predecessor auditor’s report, if any, for information relevant
to opening balances, including disclosures.
Obtain SAAE about whether the opening balances contain misstatements that materially
affect the current period’s FS by:
a) Determining whether the prior period’s closing balances have been correctly brought
forward to the current period or, any adjustments have been disclosed as prior period
items in the current year’s P&L;
b) Determining whether the opening balances reflect the application of appropriate
accounting policies;
c) Performing one or more of the following:
i) Where the prior year FS were audited, perusing the copies of the audited FS including
the other relevant documents relating to the prior period FS;
ii) Evaluating whether AP performed in the current period provide evidence relevant to the
opening balances; or
iii) Performing specific AP to obtain evidence regarding the opening balances
If misstatements obtained in opening balances that could materially affect the current
period’s FS, perform additional AP to determine the effect on the current period’s FS. If
auditor concludes that misstatement exist in current period’s FS, communicate to
management & TCWG
If the policies were not consistent or change was not properly accounted/presented/disclosed,
Auditor shall express a qualified opinion or an adverse opinion as per SA 705.
▪ If auditor unable to obtain SAAE regarding the opening balances, the auditor shall
express a qualified opinion or a disclaimer of opinion, as appropriate, in accordance
with SA 705.
▪ If concluded that the opening balances contain a misstatement that materially affects
the current period’s FS, and the effect of the misstatement is not properly accounted
for/not adequately presented or disclosed, express a qualified opinion or an adverse
opinion, as appropriate, in accordance with SA 705.
If FRF do not prescribes, then following will be considered as related party to reporting entity:
▪ A person or other entity that has direct or indirect control(C) or significant influence;
▪ Another entity over which the reporting entity has direct or indirect control or
significant influence; or
▪ Another entity that is under common control with the reporting entity i.e. under
common controlling ownership or owners who are close family members; or common
key management.
Many Related party transactions are in the normal course of business, carrying no higher
ROMM of the FS. However, the nature of RPRT may, give rise to higher ROMM of the FS than
transactions with unrelated parties. Examples
✓ Related party transactions May operate through an extensive and complex range of
relationships and structures
✓ Related party transactions may not be conducted under normal market terms and
conditions.
Understanding the Entity’s Related Party Relationships& Transactions
The auditor shall inquire of management regarding:
(a) The identity of the entity’s related parties, including changes from the prior period
(b) The nature of the relationships between the entity and these related parties; and
(c) Whether the entity entered into any transactions with these related parties during the period and,
if so, the type and purpose of the transactions.
(a) Identify, account for, and disclose related party relationships and transactionsin accordance
with the applicable financial reporting framework;
(b) Authorize and approve significant transactions and arrangements withrelated parties; and
(c) Authorize and approve significant transactions and arrangements outside thenormal course of
business.
Documents which provide evidence on existence of related party relationships and
transactions:
AP include the consideration of comparisons of the entity’s financial information with as well as
consideration of relationships with:
• Account Type - Income statement accounts tend to be more predictable because they reflect
accumulated transactions over a period, while balance sheet accounts represent the net effect
of transactions at a point in time. Balance sheet accounts are subject to greater management
judgment and are less subject to analysis by analysts.
• Inherent Risk or “WCGW” - When inherent risk is higher, we may design tests of details to
address the higher inherent risk. When significant risks have been identified, audit evidence
obtained solely from SAP is unlikely to be sufficient
• Nature of Assertion – SAP may be more effective in providing evidence for some assertions
(e.g., completeness or valuation) than for others (e.g., rights and obligations). Predictive
analytical procedures using data analytics can be used to address completeness,
valuation/measurement & occurrence
• Predictability – SAPs are more appropriate when an account balance or relationships between
items of data are predictable. A predictable relationship is one that may reasonably be expected
to exist and continue over time.
• Availability of Data – The availability of reliable and relevant data will facilitate effective
analytical procedures.
• Disaggregation – The degree of disaggregation in available data can directly affect the degree
of its usefulness in detecting misstatements.
• Source – Some classes of transactions tend to be more predictable because they consist of
numerous, similar transactions. Whereas the transactions recorded by non-routine and
estimation SCOTs are often subject to management judgment and therefore more difficult to
predict.
• Trend analysis – Trend analysis is a commonly used technique. It is the comparison of current
data with the prior period balance or with a trend in two or more prior period balances. The
auditor evaluates whether the current balance of an account moves in line with the trend
established with previous balances for that account, or based on an understanding of factors
that may cause the account to change.
• Ratio analysis – Ratio analysis is useful for analyzing asset and liability accounts as well as
revenue and expense accounts. Ratios can also be compared over time or to the ratios of
separate entities within the group, or with the ratios of other companies in the same industry.
• Reasonableness tests – It does not rely on events of prior periods, but upon non-financial data
for the audit period under consideration. These tests are made by reviewing the relationship of
certain account balances to other balances for reasonableness of amounts.
• Structural modelling – A modelling tool constructs a statistical model from financial and/or
non-financial data of prior accounting periods to predict current account balances.
Analytical Procedures used as Substantive Tests
1. Determine suitability of AP- consider based on assertion, risk of material misstatement
2. Evaluate reliability of data- based on source, comparability, nature, controls on information
3. Develop an expectation- of the account/assertion for comparison with the actual balances.
4. Determine acceptable difference- between the actual values and the expectation for analyzing the
unacceptable differences.
Example: If an entity has a known number of employees at fixed rates of pay throughout the period, it
may be possible for the auditor to use this data to estimate the total payroll costs for the period with
a high degree of accuracy, thereby providing audit evidence for a significant item in FS & reducing the
need to perform TODs on payroll.
Example: Prediction of total rental income on a building divided into apartments, taking the rental
rates, the number of apartments and vacancy rates into consideration, can provide persuasive
evidence & may eliminate the need for further verification by means of TODs, provided the elements
are appropriately verified. In contrast, calculation & comparison of gross margin % as a means of
confirming a revenue figure may provide less persuasive evidence, but may provide useful
corroboration if used in combination with other AP.
▪ The determination of the suitability of particular SAP is influenced by the nature of the assertion and
the auditor’s assessment of the ROMM.
Example: Controls over sales order processing are weak, the auditor may place more reliance on TODs
rather than on SAP for assertions related to receivables.
2. Reliability of data
▪ Source of the information available.
For example, information may be more reliable when it is obtained from independent sources outside the
entity;
▪ Comparability of the information available.
For example, broad industry data may need to be supplemented to be comparable to that of an entity that
produces and sells specialized products;
▪ Nature and relevance of the information available.
For example, whether budgets have been established as results to be expected rather than as goals to be
achieved; and
▪ Controls over the preparation of the information that are designed to ensure its completeness,
accuracy and validity.
For example, controls over the preparation, review and maintenance of budgets.
3. Evaluation of whether the expectation is sufficiently precise
• The accuracy with which the expected results of SAP can be predicted.
Example: Auditor may expect greater consistency in comparing gross profit margins from one period to
another than in comparing discretionary expenses, such as research or advertising
• The degree to which information can be disaggregated.
Example: SAP may be more effective when applied to financial information on individual sections of an
operation or to FS of components of a diversified entity, than when applied to FS of the entity as a
whole
• The availability of the information, both financial and non-financial.
Example: Auditor may consider whether financial information, such as budgets or forecasts, and non-
financial information, such as the number of units produced or sold, is available to design SAP. If the
information is available, the auditor may also consider the reliability of the information.
SA 330 requires auditor to obtain more persuasive audit evidence the higher the auditor’s assessment
of risk. As the assessed risk increases, amount of difference considered acceptable without
investigation decreases in order to achieve the desired level of persuasive evidence