Audit Evidence on the CPA Exam: Sufficient and Appropriate

Audit evidence is the foundation upon which every audit opinion is built. Without it, an auditor has no basis for concluding whether financial statements are fairly presented. On the AUD section of the CPA exam, questions about audit evidence appear frequently because the topic touches nearly every phase of an engagement, from planning through reporting. Understanding what makes evidence sufficient and appropriate is not just an academic exercise; it is a core competency tested in both multiple-choice and task-based simulation formats.

This guide walks through the key concepts you need to know, including the types of audit evidence, the reliability hierarchy, common audit procedures, and documentation requirements. By the end, you will have a clear framework for tackling any audit evidence question the exam throws at you.

What Is Audit Evidence?

Audit evidence is all of the information used by the auditor to arrive at the conclusions on which the audit opinion is based. It includes the information contained in the accounting records underlying the financial statements as well as other information. According to AU-C Section 500, the auditor must design and perform audit procedures that are appropriate in the circumstances for the purpose of obtaining sufficient appropriate audit evidence.

Two adjectives matter here: sufficient and appropriate. They are distinct concepts, and the exam will test whether you understand the difference.

Sufficiency vs. Appropriateness

Sufficiency: The Quantity Question

Sufficiency refers to the quantity of audit evidence. The auditor needs enough evidence to support the conclusions drawn. The amount required is influenced by several factors:

• Risk of material misstatement - Higher risk means the auditor needs more evidence.
• Quality of evidence obtained - Higher-quality evidence may reduce the quantity needed.
• Nature and size of the population - Larger or more complex populations generally require more testing.
• Experience from prior audits - Recurring engagements may inform evidence decisions, but the auditor still exercises professional judgment each period.

Appropriateness: The Quality Question

Appropriateness is about quality, which has two dimensions: relevance and reliability. Evidence must be relevant to the assertion being tested and reliable enough to support the conclusion.

For example, confirming accounts receivable directly with customers is both relevant (it addresses the existence assertion) and reliable (it comes from an independent third party). In contrast, inquiring of management about the collectibility of receivables may be relevant to the valuation assertion but is less reliable because the source is internal and potentially biased.

The Reliability Hierarchy

Not all evidence is created equal. The AICPA standards and the CPA exam expect you to understand a hierarchy of reliability. Here are the general principles, ranked from most to least reliable:

1. Evidence from independent external sources is more reliable than evidence obtained from the entity.
2. Evidence generated internally is more reliable when related controls are effective.
3. Evidence obtained directly by the auditor (such as observation or inspection) is more reliable than evidence obtained indirectly or by inquiry.
4. Documentary evidence (whether paper or electronic) is more reliable than oral representations.
5. Original documents are more reliable than photocopies or facsimiles.

A classic exam question might present two pieces of evidence and ask which is more reliable. Apply these principles systematically. A bank confirmation obtained directly by the auditor from the bank is more reliable than a bank statement provided by the client, even though both originate from the bank, because the auditor controlled the confirmation process.

Types of Audit Procedures

The auditor obtains evidence by performing audit procedures. You should know the following categories and be able to identify which procedure is being described in an exam scenario:

• Inspection of records and documents - Examining records, contracts, invoices, or other documents, whether internal or external.
• Inspection of tangible assets - Physically examining assets such as inventory or equipment.
• Observation - Watching a process or procedure being performed, such as the client counting inventory.
• Inquiry - Seeking information from knowledgeable persons inside or outside the entity. Inquiry alone is generally insufficient.
• Confirmation - Obtaining a direct response from a third party, such as a bank or customer, verifying specific information.
• Recalculation - Checking the mathematical accuracy of documents or records.
• Reperformance - Independently executing procedures or controls originally performed by the entity.
• Analytical procedures - Evaluating financial information through analysis of plausible relationships among financial and nonfinancial data.

On the exam, you may see a scenario describing an auditor comparing the current year gross margin to prior years and industry averages. That is an analytical procedure. If the auditor independently adds up the amounts in a subsidiary ledger, that is recalculation. Being precise about the terminology matters.

Assertions and How Evidence Links to Them

Evidence does not exist in a vacuum; it is gathered to test specific management assertions. The exam frequently tests whether you can match the right procedure to the right assertion. The major assertion categories are:

• Existence or occurrence - Assets and liabilities exist; transactions actually occurred.
• Completeness - All transactions and accounts that should be recorded have been recorded.
• Valuation or allocation - Assets, liabilities, and equity are recorded at appropriate amounts.
• Rights and obligations - The entity holds rights to assets and has obligations for liabilities.
• Presentation and disclosure - Financial statement components are properly classified, described, and disclosed.

A key exam tip: testing for existence typically involves selecting items from the accounting records and vouching to supporting documents (testing from the books to reality). Testing for completeness works in the opposite direction, selecting items from the real world (such as shipping documents) and tracing to the accounting records (from reality to the books). This directional testing concept is heavily tested.

Documentation Requirements

Audit documentation, sometimes called workpapers, serves as the principal record of the evidence obtained and conclusions reached. Key points for the exam include:

• Documentation should be sufficient to enable an experienced auditor with no prior connection to the engagement to understand the work performed.
• The audit documentation completion date is generally 60 days after the report release date.
• Documentation must not be deleted or discarded after the completion date, though additional documentation may be added with proper annotation.
• Retention period is generally five years from the report release date for non-issuers (seven years for issuers under PCAOB standards).

Exam Approach: Strategies for Audit Evidence Questions

Here are practical strategies for handling audit evidence questions on the CPA exam:

1. Read for the assertion - Identify what assertion the question is testing before evaluating the evidence.
2. Apply the reliability hierarchy - When asked which evidence is "best" or "most reliable," rank the choices using the principles discussed above.
3. Remember that inquiry alone is not sufficient - The exam loves to test this. Inquiry must be corroborated with other evidence.
4. Watch for direction of testing - Existence tests go from records to supporting documents; completeness tests go from source documents to records.
5. Consider the source - External, independent evidence is stronger. Evidence the auditor obtains directly is stronger than evidence provided by the client.

Task-based simulations may present a scenario where you must identify which audit procedure provides the best evidence for a given assertion, or evaluate whether sufficient appropriate evidence has been obtained. Practice connecting procedures to assertions until it becomes second nature.

Bringing It All Together

Audit evidence is not a standalone topic; it connects to risk assessment, internal controls, substantive testing, and the audit report. When the auditor cannot obtain sufficient appropriate evidence, the implications flow all the way through to a modified opinion. Understanding this interconnectedness will help you see the bigger picture on exam day.

If you are looking for structured practice with audit evidence concepts, Think CPA offers topic-specific quizzes and simulations that test your ability to apply these principles in realistic exam scenarios. Building this kind of applied understanding is the fastest path to a passing score on the AUD section.