The biggest mistake candidates make with CPA Auditing & Attestation's Related Parties isn't a lack of memorization—it's a failure of application and skepticism. You might think identifying a related party is straightforward, but examiners love to hide these relationships in plain sight, testing your judgment on the implications of these transactions for financial statement assertions and the auditor's report. Ignore the nuances here, and you're not just missing points; you're missing a fundamental risk area that separates a pass from a fail.
Related parties are entities or individuals with significant influence over a company, creating a higher risk of material misstatement from non-arm's-length transactions. For the CPA AUD exam, you must apply specific audit procedures (per AU-C 550) to identify these relationships, assess their business rationale, and verify proper GAAP disclosure.
Key facts
- Governing Standard (GAAS)
- AU-C Section 550, Related Parties, dictates the auditor's responsibilities for nonissuers.
- Governing Standard (GAAP)
- ASC 850, Related Party Disclosures, outlines the required financial statement disclosures for all entities.
- Primary Risk
- Potential for management override of controls and fraudulent financial reporting.
- Auditor's Focus
- Identifying relationships, understanding the business purpose of transactions, and evaluating the substance over the form.
- Official Pass Rate
- The AICPA reports the AUD pass rate for Q1 2024 was 47.96% (AICPA), highlighting the section's overall difficulty.
The Core Challenge: Why Candidates Miss Related Party Questions
What trips up even the sharpest candidates on this topic isn't the definition, but a fundamental misunderstanding of the auditor's mindset. They treat it like a simple disclosure checklist. The exam, however, treats it as a primary gateway to fraud risk and management override of controls.
Here are the top traps that cost candidates points:
- The "Disclosure-Only" Mindset: Many believe that if a related party transaction is disclosed, the job is done. This is wrong. Your job is to audit the substance of the transaction—its valuation, business purpose, and proper accounting—not just tick a disclosure box.
- Failing to Connect the Dots: Examiners won't always say "This is a related party." They'll give you clues: a board member of Company A is also the CEO of Company B, the CFO's spouse owns a key supplier, or a loan has unusually favorable terms. You have to be the detective.
- Taking Management's Word: Simply asking management if they've identified all related parties is a required first step, but it is never sufficient audit evidence. The exam will punish you for choosing an answer that relies solely on management inquiry without corroboration.
- Confusing GAAP Rules with GAAS Duties: This is a critical distinction. GAAP (specifically ASC 850) dictates what the company must disclose. GAAS (specifically AU-C 550) dictates the auditor's actions to gain assurance over those disclosures and the underlying transactions.
To avoid these traps, you need a systematic approach. If you're struggling to apply these concepts, the detailed explanations in VoraPrep's 9,500+ practice questions are designed to build that critical judgment.
Studying for CPA AUD? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
Auditor's Playbook: How to Identify and Assess Related Parties
Your goal under AU-C 550 is to obtain sufficient appropriate audit evidence on related party relationships and transactions. This isn't a passive review; it's an active hunt.
Step 1: Identifying Potential Related Parties
The definition is your starting point. Under auditing standards, a related party is defined by the applicable financial reporting framework (e.g., GAAP's ASC 850). If the framework is minimal, AU-C 550 provides a baseline, which includes parties that have:
- Control or significant influence over the entity.
- Joint control over the entity.
- The entity is an associate or joint venture of the other party.
- The party is a member of the key management personnel of the entity or its parent.
- The party is a close family member of anyone listed above.
- The party is an entity controlled, jointly controlled, or significantly influenced by, or for which significant voting power resides with, anyone listed above.
In practice, look for these indicators:
- Unusual or complex transactions, especially near year-end.
- Transactions with non-arm's-length terms (e.g., interest-free loans, sales at prices far above or below market).
- Transactions lacking a clear business rationale.
- Guarantees and other off-balance-sheet arrangements.
Step 2: Performing Risk Assessment Procedures
Once you suspect a related party, you must perform specific procedures to understand the relationships and assess risk:
- Inquire of Management: Ask management and those charged with governance for a complete list of related parties, the nature of the relationships, and the types and purposes of any transactions.
- Review Records and Documents: Go beyond inquiry. Scrutinize:
- Prior year audit files.
- Shareholder registers and board meeting minutes.
- Significant contracts, loan agreements, and legal confirmations.
- Bank confirmations for guarantees or unusual terms.
- Income tax filings.
- Maintain Professional Skepticism: This is your most important tool. Assume that relationships may exist that management has not identified or disclosed.
Step 3: Evaluating Significant Transactions Outside the Normal Course of Business
This is where judgment becomes critical. If you identify a significant related party transaction outside the entity's normal business, AU-C 550.18 requires you to:
- Inspect the underlying contracts or agreements to understand the terms.
- Evaluate the business rationale (or lack thereof). Is there a legitimate economic reason for this transaction, or does it appear designed solely to produce a specific financial result?
- Assess Authorization and Approval: Determine if the transaction was properly authorized by management and, where appropriate, those charged with governance.
- Verify Accounting and Disclosure: Ensure the transaction is accounted for and disclosed correctly according to GAAP (ASC 850).
GAAP vs. GAAS: Knowing Your Role
Candidates often blur the lines between the company's reporting duty (GAAP) and the auditor's verification duty (GAAS). The exam will test this distinction.
| Aspect | GAAP (ASC 850) - The Company's Responsibility | GAAS (AU-C 550) - The Auditor's Responsibility |
|---|---|---|
| Primary Goal | To provide financial statement users with the information needed to understand the potential effects of related party relationships on the financial statements. | To identify and assess the risks of material misstatement arising from related party relationships and obtain sufficient appropriate evidence about them. |
| Core Task | Disclosure. The company must disclose the nature of the relationship, a description of the transactions, dollar amounts, and amounts due to/from related parties. | Verification & Risk Assessment. The auditor must design and perform procedures to identify, assess, and respond to the risks posed by related party transactions. |
| Key Output | Footnote disclosures in the financial statements. | Audit evidence documented in the workpapers and, if necessary, a modified audit opinion if misstatements are found. |
| Example | A company discloses it leases its office space from an entity controlled by the CEO's spouse, detailing the annual lease cost. | The auditor inspects the lease agreement, compares the rent to market rates, and reviews board minutes to ensure the transaction was properly approved. |
Check Your State’s Exact CPA Exam Requirements
Every state has different credit hour, ethics, and residency rules. Use our 55-jurisdiction checker to verify your eligibility before applying.
Walkthrough: How to Dismantle a Related Party Simulation
Let's apply this playbook to a classic exam-style scenario.
Step 1: Identify the Related Party
Don't get distracted by the corporate names. Sarah Chen (sister of CEO) controls Innovate Holdings. This makes Innovate Holdings a related party. Red flag number one.
Step 2: Assess the Risk
The transaction is significant, non-recurring, and involves a related party. The key risks are valuation (is the price fair?) and fraud (is the transaction structured to benefit the CEO's family at the company's expense?).
Step 3: Analyze the Transaction's Substance
- Sale Price vs. Appraisal: $15M sale price vs. a $17.5M appraisal. This $2.5M discrepancy is red flag number two and directly challenges management's "arm's length" assertion.
- Business Rationale: Why would the company sell an asset to a related party for $2.5M less than its appraised value? This is the core question you must answer.
Step 4: Determine the Most Critical Audit Procedure (The Judgment Call)
The correct approach is to challenge the valuation assertion. The $2.5M discrepancy is a potential material misstatement. You cannot rely on management's explanation without corroborating evidence.
The most critical procedure is to critically evaluate management's rationale for the sale price discrepancy and the continued relevance of the six-month-old appraisal. Before commissioning a new valuation, the first step is to challenge management directly. Why was the appraisal ignored? Has the market changed? Can they provide evidence to support the lower price? If their explanation is weak or lacks evidence, then you would proceed to obtain an updated independent valuation or engage an auditor's specialist to corroborate the fair value as of the sale date. This directly addresses the valuation risk and the potential for a material misstatement in the gain on sale.
This thought process—identify, assess risk, challenge the substance, and prioritize evidence—is exactly how you dismantle complex simulations on exam day.
Practice questions: test yourself on Related parties
Here are a few VoraPrep-style questions to test your judgment.
Sample Q1:
During the audit of Vortex Inc., a nonissuer, the audit senior identifies a significant, previously undisclosed sale to "Alpha Holdings Corp." for $3,000,000. Further investigation reveals that Alpha Holdings is controlled by the spouse of Vortex Inc.'s Chief Financial Officer (CFO). Which of the following audit procedures would be the most effective in assessing the completeness and valuation of this related party transaction?- A is incorrect: Inquiry alone is never sufficient, especially when the person you're inquiring with (the CFO) has a direct conflict of interest.
- B is correct: This is a comprehensive set of procedures. Examining contracts addresses completeness, comparing prices to the market addresses valuation, and reviewing minutes addresses authorization. This is the textbook approach to gathering sufficient appropriate evidence.
- C is incorrect: Confirmation with the related party is not independent evidence. Alpha Holdings is controlled by the CFO's spouse and has the same incentive to misstate the transaction.
- D is incorrect: Analytical procedures can identify that something is unusual, but they don't provide direct evidence about the valuation or completeness of a specific transaction.
Sample Q2:
Chen, a senior auditor, is reviewing the audit file for Innovate Corp., a nonissuer. Chen notes a significant sale of equipment to "Gamma Solutions Inc." at a price significantly below its book value. Innovate Corp.'s CEO, Robert Chen, also serves on the board of directors for Gamma Solutions Inc. What is the auditor's primary concern regarding this related party transaction?- A is correct: The CEO's dual role creates a clear conflict of interest. A sale below book value to a related party is a massive red flag for a non-arm's-length transaction. The immediate financial statement impact—the valuation of the asset and the accuracy of the loss—is the auditor's primary concern.
- B, C, and D are incorrect: While these could be secondary concerns, they are not the primary issue. The core problem is the substance of the transaction itself and its potential to materially misstate the financials due to the related party influence.
Ready to solidify your understanding? You can practice with VoraPrep's full question bank on Related Parties and other critical AUD topics to ensure you're fully prepared for the exam.
Your Final Review and Exam-Day Strategy
Mastering this topic requires a strategic approach, not just cramming.
Time allocation on exam day: Related party questions are often dense. For MCQs, plan for 1.5-2 minutes. For a Task-Based Simulation, give yourself 15-20 minutes to read all exhibits carefully. The detail that reveals the relationship or the risk is often buried in a footnote or an email exhibit. How Related Parties connects to other AUD topics: This topic is a hub that connects to several other high-yield areas:- Risk Assessment: This is the foundation. A related party transaction automatically increases inherent and fraud risk. This connects directly to the core principles of evaluating control design and implementation.
- Fraud: Related party transactions are a classic tool for management override. Always wear your fraud-detection hat.
- Audit Evidence: The need for independent, corroborating evidence is highest here.
- Auditor's Report: An uncorrected material misstatement related to these transactions can lead to a qualified or adverse opinion.
- Re-read AU-C 550: Focus on the auditor's responsibilities and the required procedures for transactions outside the normal course of business.
- Drill High-Difficulty TBSs: Use the VoraPrep adaptive learning engine to find the toughest related party simulations. The key is to practice dissecting exhibits and forming a judgment.
- Review the GAAP vs. GAAS table: Burn that distinction into your memory.
- Use a cheat sheet: For a quick review of key rules and mnemonics across the entire AUD section, our 2026 CPA Auditing and Attestation Cheat Sheet is an essential final-week resource.