This AUD domain isn't about memorizing procedures; it's about knowing which evidence is reliable enough to sign your name to. Most candidates fail here because they can't distinguish between evidence that looks good and evidence that is good.
Performing Further Procedures and Obtaining Evidence is the core of an audit where you design and execute tests to gather sufficient, appropriate evidence. This involves substantive procedures, tests of controls, and evaluating findings for accounts and assertions to support your final audit opinion, as outlined in AU-C 330 and AU-C 500.
Key facts
- AUD Exam Weight: 30-40% of the Auditing & Attestation (AUD) section.
- Core Standards: Primarily AU-C 330 (Performing Audit Procedures), AU-C 500 (Audit Evidence), and AU-C 530 (Audit Sampling).
- Question Types: Heavily tested in both Multiple-Choice Questions (MCQs) and Task-Based Simulations (TBS).
- Passing Score: 75 on a 0-99 scale, required for all CPA Exam sections.
- Official Body: The American Institute of Certified Public Accountants (AICPA).
Why Do Further Procedures Matter on the AUD Exam?
This domain accounts for 30-40% of your AUD score, making it the most heavily weighted area. It's where the exam moves from theory to application. You won't just be asked to define a procedure; you'll be forced to choose the best procedure for a specific risk and assertion. This is the heart of the audit.The AICPA Professional Standards, particularly AU-C Section 330 and AU-C Section 500, provide the framework. But the exam tests your judgment within that framework. A common trap is memorizing a list of procedures for inventory without understanding which procedure best tests for existence versus valuation.
Another pitfall is misunderstanding the direct link between risk assessment and your audit plan. If you identify a high risk of material misstatement in revenue recognition, your further procedures must be more extensive and performed closer to year-end. Failing to make this connection is a frequent cause of losing points on simulations. Ready to see how you'd handle a realistic simulation? Try VoraPrep's adaptive CPA practice questions.
Studying for CPA AUD? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
What Key Concepts Drive Audit Evidence?
Mastering this domain requires a deep understanding of several interconnected concepts. This isn't a checklist; it's a toolkit for exercising professional skepticism.The Hierarchy of Evidence Reliability
Not all evidence is created equal. The exam will test your ability to rank the reliability of different types of evidence. The general hierarchy is:- Direct Personal Knowledge: Evidence obtained directly by the auditor (e.g., physical observation of inventory). This is the gold standard.
- External Evidence: Evidence received directly from a third party (e.g., a bank confirmation).
- External-Internal Evidence: Evidence that originates outside the company but is held by the client (e.g., bank statements, vendor invoices).
- Internal Evidence: Evidence generated and held within the client's organization (e.g., sales invoices, purchase orders). Its reliability depends heavily on the strength of internal controls.
- Oral Evidence: Inquiries of client personnel. This is necessary but must always be corroborated with other evidence.
A simulation might give you five potential procedures and ask you to select the most reliable one. The answer will always follow this hierarchy.
Substantive Analytical Procedures
Governed by AU-C 520, these procedures evaluate financial information by studying plausible relationships among both financial and non-financial data. Instead of testing individual transactions, you're looking at the big picture. For example, you might analyze the relationship between a hotel's occupancy rates (non-financial) and its revenue (financial). A significant, unexpected deviation could indicate a misstatement.These are powerful but only effective when the underlying relationships are predictable. They are less useful for auditing accounts based on management judgment, like the allowance for doubtful accounts.
External Confirmations
Defined in AU-C 505, external confirmations are direct written responses to the auditor from a third party. They provide highly reliable evidence for assertions like existence and rights and obligations. While commonly associated with accounts receivable, they are also used for:- Bank balances and loan details
- Accounts payable balances
- Inventory held on consignment
The exam may test your knowledge of positive vs. negative confirmations. Positive confirmations ask for a reply in all cases, while negative confirmations ask for a reply only if the information is incorrect. Positive confirmations provide more reliable evidence.
Noncompliance with Laws and Regulations
Auditors are not lawyers. Your responsibility under AU-C 250 is to obtain reasonable assurance that the financial statements are free of material misstatement due to noncompliance with laws and regulations that have a direct effect on the determination of financial statement amounts. Think tax laws or pension regulations.For laws with an indirect effect (like environmental regulations), your responsibility is limited to performing procedures to identify noncompliance if specific information comes to your attention. The trap is assuming you must detect all illegal acts. You don't. Your focus is on the financial statement impact.
Attribute Sampling in Tests of Controls
Attribute sampling is used to test whether a control is operating effectively. You're testing for a specific characteristic—an "attribute"—like the presence of an approval signature. Key terms you must know:- Tolerable Deviation Rate: The maximum rate of deviation you can accept and still conclude the control is effective.
- Expected Deviation Rate: The rate you anticipate finding in the population.
- Risk of Assessing Control Risk Too Low: The risk that you conclude a control is effective when it is not. A lower risk (higher confidence) requires a larger sample size.
When you evaluate the results, you calculate the upper deviation rate (UDR). This is your sample deviation rate plus an allowance for sampling risk. If the UDR is greater than your tolerable deviation rate, the control has failed. You cannot rely on it as planned and must increase your substantive testing.
Audit Evidence for Specific Accounts
The exam requires you to link procedures to assertions for key accounts. Here’s a quick reference for Accounts Receivable:| Assertion | Description | Example Procedure (Accounts Receivable) |
|---|---|---|
| Existence | The receivables exist. | Confirm balances directly with customers (positive confirmations for large balances). |
| Completeness | All receivables are recorded. | Trace shipping documents to sales invoices and the sales journal. |
| Valuation and Allocation | Receivables are stated at net realizable value. | Review the A/R aging schedule and test the adequacy of the allowance for doubtful accounts. |
| Rights & Obligations | The entity holds the rights to the receivables. | Inquire about factored or pledged receivables and review loan agreements. |
| Presentation & Disclosure | Receivables are properly classified and disclosed. | Review disclosures for compliance with ASC 310, including credit risk and related parties. |
Understanding these links is non-negotiable for passing. Our exam details and format breakdown shows how these concepts are woven into the test structure.
Worked Example: The Attribute Sampling Trap
Let's walk through a common simulation scenario involving attribute sampling.Perez & Co. is auditing the purchasing cycle of Innovate Corp. A key control is that the accounting department matches the vendor invoice to the purchase order and receiving report before approving payment. The auditor plans to test this control.
Check Your State’s Exact CPA Exam Requirements
Every state has different credit hour, ethics, and residency rules. Use our 55-jurisdiction checker to verify your eligibility before applying.
- Calculate the Sample Deviation Rate:
The auditor found 4 deviations in a sample of 75. Sample Deviation Rate = 4 / 75 = 5.33%.
- Compare Sample Rate to Tolerable Rate:
The sample rate (5.33%) is less than the tolerable rate (6%). This is where unprepared candidates stop and make a critical error.
- Determine the Upper Deviation Rate (UDR):
You don't need statistical tables on the exam. You need judgment. The UDR is the sample deviation rate plus an allowance for sampling risk. Since your sample rate is already very close to the tolerable rate, it is almost certain that once you add the allowance for sampling risk, the UDR will exceed the tolerable rate.
- Formulate the Conclusion:
Because the UDR will exceed the tolerable rate of 6%, the auditor cannot rely on this control. The planned level of substantive testing for accounts payable and expenses must be increased.
The tempting wrong answer and why it's wrong: A common distractor is: "The control is operating effectively because the sample deviation rate of 5.33% is less than the tolerable deviation rate of 6%." Why it's wrong: This answer completely ignores sampling risk. The sample is just an estimate of the population. The UDR, which is the statistically valid conclusion, accounts for the risk that your sample wasn't perfectly representative. The exam punishes candidates who forget this. This concept, detailed in AU-C Section 530, is a frequent source of lost points.A Better Way to Study: The "Why-What-How" Method
Instead of just memorizing procedures, adopt a more active study method. For every topic, ask yourself these three questions:- Why? Why am I performing this procedure? What financial statement assertion (existence, completeness, etc.) am I trying to get evidence for? What risk am I trying to mitigate?
- What? What is the best type of evidence? Should I use a confirmation, observation, analytical procedure, or recalculation? Refer back to the hierarchy of evidence.
- How? How will the result of this test affect the rest of my audit? If I find a control deviation or a misstatement, what is the next step? Does it change my risk assessment? Do I need to expand my sample or perform different substantive tests?
This framework forces you to think like an examiner. It moves you from passive memorization to active judgment, which is exactly what the AUD exam demands. The VoraPrep platform, with its 9,500+ questions and detailed explanations, is built to train this kind of thinking.
Frequently asked questions
How many questions on this topic are on the AUD exam?
"Performing Further Procedures and Obtaining Evidence" makes up 30-40% of the AUD exam. Expect a significant number of both MCQs and simulations covering these concepts.What is the best way to study for this AUD domain?
Focus on application, not just memorization. Use practice questions and simulations to understand how to select the right procedure for a given assertion and risk. Master the hierarchy of evidence reliability, as it is a core judgment principle.Is this topic tested more in simulations or MCQs?
It is heavily tested in both formats. MCQs will test your knowledge of specific rules and definitions, while Task-Based Simulations (TBS) will require you to apply procedures, interpret sampling results, and evaluate evidence in a case-study format.How much time should I dedicate to studying this area?
Allocate your study time in proportion to the exam weight. If you plan to study 100 hours for AUD, you should spend 30-40 of those hours mastering this critical domain.---
Ready to Pass Your CPA Exam?Don't let the complexities of audit evidence hold you back. VoraPrep's adaptive learning engine targets your weak areas, ensuring efficient study. With over 9,500 practice questions and 24/7 Vory tutor support, you'll gain the confidence to think like an examiner. Visit voraprep.com to get started and experience the VoraPrep difference.
Start Your Free 14-Day Trial at voraprep.com →