CPA Exam · 13 min read

CPA Auditing & Attestation: Related parties — Complete Study Guide

Rob Pfleghardt

10-year PwC alumnus · Founder of VoraPrep · Previously CPA-licensed

CPA Auditing & Attestation: Related parties — Complete Study Guide

Key Takeaways

  • What trips up even the sharpest candidates on this topic isn't the definition, but a fundamental misunderstanding of the auditor's mindset.
  • Your goal under AU-C 550 is to obtain sufficient appropriate audit evidence on related party relationships and transactions.
  • Candidates often blur the lines between the company's reporting duty (GAAP) and the auditor's verification duty (GAAS).
  • Let's apply this playbook to a classic exam-style scenario.
  • Here are a few VoraPrep-style questions to test your judgment.

The biggest mistake candidates make with CPA Auditing & Attestation's Related Parties isn't a lack of memorization—it's a failure of application and skepticism. You might think identifying a related party is straightforward, but examiners love to hide these relationships in plain sight, testing your judgment on the implications of these transactions for financial statement assertions and the auditor's report. Ignore the nuances here, and you're not just missing points; you're missing a fundamental risk area that separates a pass from a fail.

Quick answer

Related parties are entities or individuals with significant influence over a company, creating a higher risk of material misstatement from non-arm's-length transactions. For the CPA AUD exam, you must apply specific audit procedures (per AU-C 550) to identify these relationships, assess their business rationale, and verify proper GAAP disclosure.

The CPA exam has a <50% pass rate.

VoraPrep's AI finds your weak spots before the exam does — adaptive practice that actually moves your score.

Try Free →

What trips up even the sharpest candidates on this topic isn't the definition, but a fundamental misunderstanding of the auditor's mindset. They treat it like a simple disclosure checklist. The exam, however, treats it as a primary gateway to fraud risk and management override of controls.

Here are the top traps that cost candidates points:

  1. The "Disclosure-Only" Mindset: Many believe that if a related party transaction is disclosed, the job is done. This is wrong. Your job is to audit the substance of the transaction—its valuation, business purpose, and proper accounting—not just tick a disclosure box.
  2. Failing to Connect the Dots: Examiners won't always say "This is a related party." They'll give you clues: a board member of Company A is also the CEO of Company B, the CFO's spouse owns a key supplier, or a loan has unusually favorable terms. You have to be the detective.
  3. Taking Management's Word: Simply asking management if they've identified all related parties is a required first step, but it is never sufficient audit evidence. The exam will punish you for choosing an answer that relies solely on management inquiry without corroboration.
  4. Confusing GAAP Rules with GAAS Duties: This is a critical distinction. GAAP (specifically ASC 850) dictates what the company must disclose. GAAS (specifically AU-C 550) dictates the auditor's actions to gain assurance over those disclosures and the underlying transactions.

To avoid these traps, you need a systematic approach. If you're struggling to apply these concepts, the AI-powered explanations in VoraPrep's 9,500+ practice questions are designed to build that critical judgment.

Your goal under AU-C 550 is to obtain sufficient appropriate audit evidence on related party relationships and transactions. This isn't a passive review; it's an active hunt.

Step 1: Identifying Potential Related Parties

The definition is your starting point. Under auditing standards, a related party is defined by the applicable financial reporting framework (e.g., GAAP's ASC 850). If the framework is minimal, AU-C 550 provides a baseline, which includes parties that have:

  • Control or significant influence over the entity.
  • Joint control over the entity.
  • The entity is an associate or joint venture of the other party.
  • The party is a member of the key management personnel of the entity or its parent.
  • The party is a close family member of anyone listed above.
  • The party is an entity controlled, jointly controlled, or significantly influenced by, or for which significant voting power resides with, anyone listed above.

In practice, look for these indicators:

  • Unusual or complex transactions, especially near year-end.
  • Transactions with non-arm's-length terms (e.g., interest-free loans, sales at prices far above or below market).
  • Transactions lacking a clear business rationale.
  • Guarantees and other off-balance-sheet arrangements.

Step 2: Performing Risk Assessment Procedures

Once you suspect a related party, you must perform specific procedures to understand the relationships and assess risk:

  • Inquire of Management: Ask management and those charged with governance for a complete list of related parties, the nature of the relationships, and the types and purposes of any transactions.
  • Review Records and Documents: Go beyond inquiry. Scrutinize:
  • Prior year audit files.
  • Shareholder registers and board meeting minutes.
  • Significant contracts, loan agreements, and legal confirmations.
  • Bank confirmations for guarantees or unusual terms.
  • Income tax filings.
  • Maintain Professional Skepticism: This is your most important tool. Assume that relationships may exist that management has not identified or disclosed.

Step 3: Evaluating Significant Transactions Outside the Normal Course of Business

This is where judgment becomes critical. If you identify a significant related party transaction outside the entity's normal business, AU-C 550.18 requires you to:

  1. Inspect the underlying contracts or agreements to understand the terms.
  2. Evaluate the business rationale (or lack thereof). Is there a legitimate economic reason for this transaction, or does it appear designed solely to produce a specific financial result?
  3. Assess Authorization and Approval: Determine if the transaction was properly authorized by management and, where appropriate, those charged with governance.
  4. Verify Accounting and Disclosure: Ensure the transaction is accounted for and disclosed correctly according to GAAP (ASC 850).

GAAP vs. GAAS: Knowing Your Role

Candidates often blur the lines between the company's reporting duty (GAAP) and the auditor's verification duty (GAAS). The exam will test this distinction.

AspectGAAP (ASC 850) - The Company's ResponsibilityGAAS (AU-C 550) - The Auditor's Responsibility
Primary GoalTo provide financial statement users with the information needed to understand the potential effects of related party relationships on the financial statements.To identify and assess the risks of material misstatement arising from related party relationships and obtain sufficient appropriate evidence about them.
Core TaskDisclosure. The company must disclose the nature of the relationship, a description of the transactions, dollar amounts, and amounts due to/from related parties.Verification & Risk Assessment. The auditor must design and perform procedures to identify, assess, and respond to the risks posed by related party transactions.
Key OutputFootnote disclosures in the financial statements.Audit evidence documented in the workpapers and, if necessary, a modified audit opinion if misstatements are found.
ExampleA company discloses it leases its office space from an entity controlled by the CEO's spouse, detailing the annual lease cost.The auditor inspects the lease agreement, compares the rent to market rates, and reviews board minutes to ensure the transaction was properly approved.

Let's apply this playbook to a classic exam-style scenario.

Scenario: During the 2026 audit of "TechSolutions Inc.," a nonissuer, the audit team identifies a significant transaction: TechSolutions sold its proprietary software division, "CodeCrafters," to "Innovate Holdings LLC" for $15,000,000 on October 1, 2026. TechSolutions recognized a gain on sale of $5,000,000. Further investigation reveals that Innovate Holdings LLC is 70% owned by Sarah Chen, the sister of TechSolutions' CEO, David Chen. An independent appraisal valued the software division at $17,500,000 six months prior to the sale. Management asserts the price was negotiated at arm's length. Audit Question: What is the most critical audit procedure related to this transaction that the auditor should perform, given the information provided? Step-by-Step Walkthrough:
  1. Identify the Related Party: Don't get distracted by the corporate names. Sarah Chen (sister of CEO) controls Innovate Holdings. This makes Innovate Holdings a related party. Red flag number one.
  2. Assess the Risk: The transaction is significant, non-recurring, and involves a related party. The key risks are valuation (is the price fair?) and fraud (is the transaction structured to benefit the CEO's family at the company's expense?).
  3. Analyze the Transaction's Substance:
  • Sale Price vs. Appraisal: $15M sale price vs. a $17.5M appraisal. This $2.5M discrepancy is red flag number two and directly challenges management's "arm's length" assertion.
  • Business Rationale: Why would the company sell an asset to a related party for $2.5M less than its appraised value? This is the core question you must answer.
  1. Determine the Most Critical Audit Procedure (The Judgment Call):
  • Tempting Wrong Answer: "Inquire with the board of directors about the approval process for the sale." This is a necessary procedure, but it's not the most critical one. Board approval doesn't fix a misstated transaction. It addresses the process, not the substance of the financial impact.
  • Correct Approach: Your primary duty is to challenge the valuation assertion. The $2.5M discrepancy is a potential material misstatement. You cannot rely on management's explanation without corroborating evidence.
  • Most Critical Procedure: Critically evaluate management's rationale for the sale price discrepancy and the continued relevance of the six-month-old appraisal. Before commissioning a new valuation, the first step is to challenge management directly. Why was the appraisal ignored? Has the market changed? Can they provide evidence to support the lower price? If their explanation is weak or lacks evidence, then you would proceed to obtain an updated independent valuation or engage an auditor's specialist to corroborate the fair value as of the sale date. This directly addresses the valuation risk and the potential for a material misstatement in the gain on sale.

This thought process—identify, assess risk, challenge the substance, and prioritize evidence—is exactly how you dismantle complex simulations on exam day.

Here are a few VoraPrep-style questions to test your judgment.

Sample Q1:

During the audit of Vortex Inc., a nonissuer, the audit senior identifies a significant, previously undisclosed sale to "Alpha Holdings Corp." for $3,000,000. Further investigation reveals that Alpha Holdings is controlled by the spouse of Vortex Inc.'s Chief Financial Officer (CFO). Which of the following audit procedures would be the most effective in assessing the completeness and valuation of this related party transaction?
A. Inquiring of the CFO about the business rationale and approval of the transaction.
B. Examining contracts and invoices for unusual terms, comparing the sale price to market prices for similar assets, and reviewing board minutes for authorization.
C. Confirming the transaction details with Alpha Holdings Corp. directly.
D. Performing analytical procedures to determine if the sale significantly impacts Vortex Inc.'s financial ratios compared to prior periods.
Explanation: The correct answer is B.
  • A is incorrect: Inquiry alone is never sufficient, especially when the person you're inquiring with (the CFO) has a direct conflict of interest.
  • B is correct: This is a comprehensive set of procedures. Examining contracts addresses completeness, comparing prices to the market addresses valuation, and reviewing minutes addresses authorization. This is the textbook approach to gathering sufficient appropriate evidence.
  • C is incorrect: Confirmation with the related party is not independent evidence. Alpha Holdings is controlled by the CFO's spouse and has the same incentive to misstate the transaction.
  • D is incorrect: Analytical procedures can identify that something is unusual, but they don't provide direct evidence about the valuation or completeness of a specific transaction.

Sample Q2:

Chen, a senior auditor, is reviewing the audit file for Innovate Corp., a nonissuer. Chen notes a significant sale of equipment to "Gamma Solutions Inc." at a price significantly below its book value. Innovate Corp.'s CEO, Robert Chen, also serves on the board of directors for Gamma Solutions Inc. What is the auditor's primary concern regarding this related party transaction?
A. The transaction may not have been conducted at arm's length, potentially resulting in a material misstatement of asset valuation and loss on sale.
B. Gamma Solutions Inc. might not have the financial capacity to pay for the equipment, leading to uncollectible receivables.
C. The transaction could indicate a weakness in Innovate Corp.'s internal controls over sales processes.
D. Innovate Corp. might be attempting to avoid tax liabilities by selling assets at a loss to a related entity.
Explanation: The correct answer is A.
  • A is correct: The CEO's dual role creates a clear conflict of interest. A sale below book value to a related party is a massive red flag for a non-arm's-length transaction. The immediate financial statement impact—the valuation of the asset and the accuracy of the loss—is the auditor's primary concern.
  • B, C, and D are incorrect: While these could be secondary concerns, they are not the primary issue. The core problem is the substance of the transaction itself and its potential to materially misstate the financials due to the related party influence.

Ready to solidify your understanding? You can practice with VoraPrep's full question bank on Related Parties and other critical AUD topics to ensure you're fully prepared for the exam.

Your Final Review and Exam-Day Strategy

Mastering this topic requires a strategic approach, not just cramming.

Time allocation on exam day: Related party questions are often dense. For MCQs, plan for 1.5-2 minutes. For a Task-Based Simulation, give yourself 15-20 minutes to read all exhibits carefully. The detail that reveals the relationship or the risk is often buried in a footnote or an email exhibit. How Related Parties connects to other AUD topics: This topic is a hub that connects to several other high-yield areas:
  • Risk Assessment: This is the foundation. A related party transaction automatically increases inherent and fraud risk. This connects directly to the core principles of evaluating control design and implementation.
  • Fraud: Related party transactions are a classic tool for management override. Always wear your fraud-detection hat.
  • Audit Evidence: The need for independent, corroborating evidence is highest here.
  • Auditor's Report: An uncorrected material misstatement related to these transactions can lead to a qualified or adverse opinion.
What to review in the final week:
  1. Re-read AU-C 550: Focus on the auditor's responsibilities and the required procedures for transactions outside the normal course of business.
  2. Drill High-Difficulty TBSs: Use the VoraPrep adaptive learning engine to find the toughest related party simulations. The key is to practice dissecting exhibits and forming a judgment.
  3. Review the GAAP vs. GAAS table: Burn that distinction into your memory.
  4. Use a cheat sheet: For a quick review of key rules and mnemonics across the entire AUD section, our 2026 CPA Auditing and Attestation Cheat Sheet is an essential final-week resource.

--- Ready to Pass Your CPA Exam? Don't let complex topics like Related Parties hold you back. VoraPrep's adaptive learning engine pinpoints your weak areas, while our AI tutor (Vory) provides instant, personalized support 24/7. With over 9,500 practice questions and AI-written explanations, we teach you to think like the examiner. Get started today and transform your study experience. Visit voraprep.com to get started Start Your Free 7-Day Trial at voraprep.com →

Official resources and references

Frequently asked questions

How many questions on Related parties appear on the CPA exam?

There is no fixed number, but expect 2-4 MCQs and potentially a full Task-Based Simulation dedicated to or involving related parties. It is a foundational topic for risk assessment, so its principles are tested frequently.

What's the best way to study Related parties?

Focus on application. Use practice questions that force you to identify subtle relationships in complex scenarios, assess the business rationale of a transaction, and select the most appropriate audit procedure beyond simple inquiry.

Is Related parties tested in simulations/TBS or only MCQ?

Yes, it is frequently tested in simulations (TBSs). An exam simulation might provide you with board minutes, contracts, and financial data, requiring you to identify undisclosed related parties and propose audit adjustments.

How long should I spend studying Related parties?

Allocate 5-8 focused hours. Spend time understanding the concepts in AU-C 550, then dedicate the majority of your time to working through practice MCQs and TBSs to build your judgment and application skills.

Studying for the CPA?

Stop guessing which topics to review. VoraPrep's adaptive engine diagnoses exactly where you're losing points and rebuilds those areas. 10 minutes a day, measurable score improvement.

Start your free trial → voraprep.com
RP

About the Author: Rob Pfleghardt

Rob Pfleghardt is the founder of VoraPrep, a comprehensive exam prep platform for the CPA, CMA, EA, CIA, CISA, and CFP exams. A Virginia Tech graduate in Accounting and Finance, Rob began his career at Price Waterhouse, spending a decade in audit and IT consulting. After holding an active CPA license for 37 years (1987–2024) and successfully scaling his own enterprise IT consultancy serving the Department of Defense, Rob launched VoraPrep. He now leverages his deep systems architecture background to build the adaptive training technology and curriculum that helps candidates pass their certification exams efficiently.

Connect with Rob on LinkedIn →

Don't let this be why you retake the CPA.

Most candidates fail because they study the wrong things, not because they don't study enough. VoraPrep's AI identifies your actual weak spots and targets them — so you walk in knowing exactly where you're strong.

Start Free — No Credit Card →

Keep reading