Welcome to Audit Evidence: The Auditor's "Proof"
Hello there! Today we are diving into one of the most critical chapters in your HKICPA QP journey: Sufficient and Appropriate Audit Evidence. Think of an auditor as a high-level detective. A detective cannot simply guess who committed a crime; they need fingerprints, DNA, and witness statements. Similarly, an auditor cannot just "guess" that the financial statements are correct. They need Evidence.
Don't worry if this seems a bit technical at first. We are going to break down the "what," the "how," and the "how much" of audit evidence so you can walk into your exam with confidence!
1. The Golden Rule: HKSA 500
In Hong Kong, we follow HKSA 500 Audit Evidence. This standard tells us that the auditor must obtain sufficient appropriate audit evidence to be able to draw reasonable conclusions on which to base the auditor’s opinion.
Quick Review: The Evidence Formula
If you like math, think of it this way:
\( \text{Audit Evidence} = \text{Sufficiency (Quantity)} + \text{Appropriateness (Quality)} \)
2. Sufficiency: "How Much Do I Need?"
Sufficiency is the measure of the quantity of audit evidence. It’s about having enough "stuff" to prove your point.
What affects sufficiency?
1. Risk of Material Misstatement (RMM): The higher the risk (e.g., a complex business or a history of errors), the more evidence you need.
2. Quality of Evidence: If the evidence is super high quality, you might need less of it. However, remember that obtaining more evidence may not compensate for its poor quality!
Analogy: If you are trying to prove it rained yesterday, one photo of a puddle (high quality) might be enough. If you only have a vague "smell of rain" (low quality), you'll need many more witnesses to be sure.
3. Appropriateness: "How Good Is It?"
Appropriateness is the measure of the quality of audit evidence. Quality is split into two parts: Relevance and Reliability.
A. Relevance
Evidence must be logically connected to the assertion (the specific claim) you are testing. For example, if you want to check if a company actually owns a building (Rights and Obligations), looking at the "Existence" of the building isn't enough. You need to see the title deeds!
B. Reliability
This is about whether we can trust the evidence. Here are the "General Rules of Reliability" that you should memorize for the exam:
- External > Internal: Evidence from an independent source outside the company (like a bank statement) is more reliable than evidence created by the client.
- Direct > Indirect: Evidence obtained directly by the auditor (like counting cash) is better than evidence obtained indirectly (like asking the manager if they counted the cash).
- Documentary > Oral: A written contract is better than someone's verbal promise.
- Originals > Photocopies: Original documents are harder to fake than copies or digitized scans.
- Strong Controls > Weak Controls: If the company has a great internal system, the documents it produces are more reliable.
Key Takeaway: Always look for external, original, and auditor-generated evidence first!
4. The 7 Audit Procedures (Methods to Get Evidence)
How do we actually get this evidence? We use these seven techniques. You can remember them using the mnemonic "AEIOU" (plus a couple extra!):
- Inspection: Examining records or physical assets (e.g., looking at an invoice or a machine).
- Observation: Watching a process being performed by others (e.g., watching the client's staff count inventory). Note: This only provides evidence for that specific moment!
- External Confirmation: Getting a direct written response from a third party (e.g., asking the bank to confirm the account balance).
- Recalculation: Checking the mathematical accuracy of documents (e.g., re-adding the totals on an invoice).
- Re-performance: The auditor independently executes procedures that were originally performed by the client (e.g., re-doing the aging of accounts receivable).
- Analytical Procedures: Evaluating financial information by looking at relationships (e.g., comparing this year's travel expense to last year's).
- Inquiry: Seeking information from knowledgeable persons (asking questions). Warning: Inquiry alone is never enough! You must always back it up.
Did you know? Inquiry is often the starting point, but it's the weakest form of evidence because the person might be biased or mistaken.
5. Financial Statement Assertions
Assertions are the "claims" management makes when they give you the financial statements. When they say "Inventory is $1 million," they are implicitly claiming that the inventory exists, they own it, it's valued correctly, and it's all there (complete).
Common Assertions to Test:
- Existence: Do the assets/liabilities actually exist?
- Rights and Obligations: Does the company actually own the assets and owe the liabilities?
- Completeness: Has everything been recorded, or is something missing?
- Accuracy, Valuation, and Allocation: Are the amounts recorded correctly and at the right value?
- Classification: Is it in the right account? (e.g., is "Repairs" correctly put in the P&L and not capitalized?)
- Cut-off: Is it recorded in the correct accounting period?
Common Mistake: Students often confuse Existence with Completeness.
- Existence: Start from the accounting records and go to the physical item (Checking for "fake" items).
- Completeness: Start from the physical item/source document and go to the accounting records (Checking for "missing" items).
6. Summary and Quick Tips
To wrap up this chapter, here is a "Cheat Sheet" for your revision:
- Sufficiency = Quantity; Appropriateness = Quality (Relevance + Reliability).
- Risk up = Evidence up. If the risk is high, you need more and better evidence.
- Source matters. Third-party evidence (like banks or customers) is the gold standard.
- Mix it up. Use different procedures (Inspection, Recalculation, etc.) to cover different assertions.
Final Encouragement: Audit evidence is the "heart" of the audit. Once you master the 7 procedures and the assertions, you'll find that the rest of the auditing syllabus starts to make a lot more sense. You've got this!