Welcome to the Heart of Auditing: Audit Procedures!

Hello there! Welcome to one of the most practical and important chapters in your Business Assurance journey. If you’ve ever wondered what auditors actually do all day, this is the answer. We are moving into the "Perform Assurance Engagements" phase.

Think of an auditor as a professional detective. To solve a case (form an opinion on financial statements), you need evidence. Audit procedures are the specific tools and techniques you use to gather that evidence. Don't worry if it feels like a lot of jargon at first—we’ll break it down into simple steps and relatable stories.

1. The "Why" Behind the Procedures: Management Assertions

Before we learn how to test, we need to know what we are testing. When management prepares financial statements, they are making certain "promises" or assertions about the numbers. Our job is to verify these promises.

The Two Main Categories of Assertions:

A. Transactions and Events (The Income Statement):

  • Occurrence: Did the sale actually happen? (No "fake" sales)
  • Completeness: Is every single expense recorded? (Nothing left out)
  • Accuracy: Are the amounts correct?
  • Cut-off: Is it recorded in the right year?
  • Classification: Is it in the right account (e.g., "Repairs" vs. "Assets")?

B. Account Balances (The Balance Sheet):

  • Existence: Does that building or cash balance actually exist?
  • Rights and Obligations: Does the company really own that car, or is it the CEO’s personal car?
  • Completeness: Are all debts and liabilities listed?
  • Valuation and Allocation: Is the inventory valued correctly (not sitting at old, high prices)?

Quick Tip: If you're worried about overstatement (fake profits), you test Existence/Occurrence. If you're worried about understatement (hidden debts), you test Completeness.

Key Takeaway: Audit procedures are designed to test these specific assertions. We don't just "check the books"; we check if the assertions are true.

2. The "How": Types of Audit Procedures (The AEIOU Mnemonic)

To make it easy to remember the different types of procedures, we use the vowels: A-E-I-O-U.

A – Analytical Procedures

This involves looking at relationships between data.
Example: If a company’s sales went up by 50%, but their shipping costs stayed the same, that looks suspicious! You are using ratios and trends to find "weird" spots that need more looking into.

E – Enquiry

This is simply asking questions. You talk to management or the warehouse staff.
Common Mistake: Enquiry alone is never enough! People can tell lies or be mistaken. You must always back up an enquiry with other evidence.

I – Inspection

This is looking at physical things or documents.
Example: Looking at a property deed (document) or physically walking into the warehouse to see the machinery (physical asset).

O – Observation

Watching a process being performed by others.
Example: Watching the client’s staff count the inventory at year-end to make sure they are following the rules.
Note: Observation only proves what happened while you were watching.

U – Recalculation and Re-performance

Recalculation: Checking the math (e.g., adding up an invoice).
Re-performance: Doing the process yourself to see if you get the same result (e.g., re-doing a bank reconciliation).

Key Takeaway: Use the AEIOU mnemonic to quickly list procedures in an exam. Mix and match them to get the best evidence!

3. Tests of Controls vs. Substantive Procedures

Auditors generally take two approaches to gathering evidence. Think of this like checking the security of a house.

1. Tests of Controls (ToC)

Instead of checking every single item, you check if the company’s "security system" (Internal Controls) works.
Analogy: Instead of checking every window in a skyscraper, you test if the "Alarm System" works. If the alarm works, you can trust that the windows are likely safe.

2. Substantive Procedures

These are tests that look directly at the numbers and disclosures to find actual errors.
Analogy: This is physically going to every window and pulling on the handle to see if it’s locked, regardless of whether there is an alarm or not.

Did you know? Even if the controls are amazing, auditors must always perform some substantive procedures for material (large/important) items. You can't rely 100% on controls!

Key Takeaway: ToC checks the process; Substantive checks the numbers.

4. Quality of Evidence: What makes it "Good"?

Not all evidence is created equal. In the HKSA (Hong Kong Standards on Auditing), we look for evidence that is Sufficient and Appropriate.

  • Sufficient: This refers to the quantity (Do I have enough?).
  • Appropriate: This refers to the quality (Is it relevant and reliable?).
The "Reliability" Hierarchy (From strongest to weakest):
  1. External Evidence: Documents sent directly to the auditor from a third party (e.g., a bank confirmation). This is the "Gold Standard."
  2. Auditor-Generated: Evidence the auditor creates (e.g., a recalculation).
  3. Client-Generated (Internal): Documents created by the company. These are only reliable if the company has good controls.
  4. Oral Evidence: Just talking. This is the weakest form.

Key Takeaway: Always aim for written, external evidence whenever possible. It’s much harder to fake!

5. Audit Sampling: We Can't Check Everything!

In a large company like HSBC or Tencent, there are millions of transactions. It is impossible to check them all. This is why we use Sampling.

Step-by-Step Sampling Process:

  1. Design the sample: Decide what you are looking for (e.g., all invoices over $10,000).
  2. Select the items: You can use Random Selection (using a computer), Systematic Selection (every 10th item), or Haphazard Selection (picking randomly by hand).
  3. Perform the test: Apply your audit procedures to those items.
  4. Evaluate the results: If you find a 5% error rate in your sample, you might "project" that there is a 5% error rate in the whole population.

Quick Review: Sampling risk is the risk that your sample is "lucky" and shows no errors, even though the rest of the books are full of mistakes!

Summary Checklist for Students

Before you move to the next chapter, make sure you can:

  • List the assertions for both transactions and balances.
  • Explain the AEIOU audit procedures with examples.
  • Differentiate between Tests of Controls and Substantive Procedures.
  • Identify which evidence is more reliable (External vs. Internal).

Don't worry if this feels like a puzzle. As you practice more past papers, you'll start to see how these procedures fit together to build a "wall of evidence" that protects the auditor's opinion!