36.1 Risk-Assertion-Procedure Drill
Key Takeaways
- A strong AUD response ties each business fact to a financial statement risk, a relevant assertion, and a procedure that directly addresses that assertion.
- Occurrence and cutoff risks usually call for tests of recorded transactions, while completeness risks usually call for searches from outside the accounting records back into the records.
- High risk of material misstatement lowers acceptable detection risk, which changes the nature, timing, or extent of further audit procedures.
- Fraud cues such as pressure to meet targets, weak journal entry review, and unusual period-end activity require specific responses rather than generic extra testing.
- The best procedure is not the most complicated one; it is the one that produces relevant, reliable evidence about the identified assertion.
Why This Drill Matters on AUD
Auditing and Attestation (AUD) is one of the three Core sections of the CPA Exam under CPA Evolution. It runs four hours and contains 78 multiple-choice questions (MCQs) plus 7 task-based simulations (TBSs), with MCQs and TBSs each weighted 50 percent of your scaled score. You pass with a reported score of 75 on a 0 to 99 scale. AUD risk questions are rarely asking for a definition in isolation. They give you a business fact, a control fact, or a strange transaction pattern and expect you to convert it into an audit response.
The working chain is: risk fact -> relevant assertion -> focused procedure. If one link is vague, the answer choice often becomes a trap. The AICPA Blueprint tests this at the Application and Analysis skill levels, so memorizing assertion names is never enough.
The Three-Part Link
| Step | Ask | Output | Common wrong turn |
|---|---|---|---|
| 1. Risk | What could be materially misstated? | Account, transaction class, or disclosure | Naming a broad business risk only |
| 2. Assertion | What management claim is threatened? | Existence, completeness, cutoff, valuation, rights, accuracy, classification, presentation | Picking an assertion that does not match the direction of error |
| 3. Procedure | What evidence would directly test it? | Inspection, confirmation, recalculation, reperformance, inquiry plus corroboration, analytics | Choosing a procedure for a different assertion |
Use direction of error to choose the assertion. If revenue may be recorded when no sale occurred, think occurrence. If expenses or liabilities may be omitted, think completeness. If sales belong in the wrong period, think cutoff. If inventory is obsolete or receivables may not be collectible, think valuation and allocation. If the client holds goods owned by a customer or has pledged assets, think rights and obligations.
The Audit Risk Model Connection
The formula auditors apply is Audit Risk = Inherent Risk x Control Risk x Detection Risk. The auditor sets audit risk low (commonly modeled as roughly 5 percent) and assesses inherent and control risk from the evidence. The product of inherent and control risk is the risk of material misstatement (RMM), which the auditor cannot change. The auditor can change detection risk by adjusting the nature, timing, and extent of substantive procedures:
- Nature: more reliable evidence (confirmation over inquiry; external over internal).
- Timing: testing at period-end rather than interim when RMM is high.
- Extent: larger sample sizes or 100 percent testing of high-value items.
When RMM is assessed high, acceptable detection risk falls, so the exam expects you to choose the more rigorous response. A choice that says "perform analytical procedures at interim" is usually wrong for a high-risk, fraud-flavored revenue account.
Workflow: From Scenario to Procedure
- Underline the account or disclosure.
- State the suspected misstatement in plain English: overstatement, understatement, wrong period, wrong owner, wrong amount, or missing disclosure.
- Name the assertion.
- Choose a procedure that starts from the right population.
- Check whether the procedure gives evidence about that assertion, not merely about activity in the account.
Scenario Drill 1: Revenue Cutoff
The client sells industrial equipment. Sales staff receive bonuses for fourth-quarter billings. On January 8, the auditor sees several large December invoices with shipping documents dated January 3. The risk is revenue recorded too early. The assertions are occurrence and cutoff for revenue and receivables. A focused response is to select sales recorded near year-end, inspect bills of lading or carrier records, compare shipment date and shipping terms (FOB shipping point vs. FOB destination) to the invoice date, and test subsequent returns or credit memos.
Confirming the receivable helps existence but does not prove the sale belonged in December.
Scenario Drill 2: Accrued Liabilities
A manufacturing client changed purchasing systems in November. Several vendors send January statements showing unpaid December shipments, but the year-end accounts payable listing omits them. The risk is understated payables and expenses; the assertion is completeness. The recorded payable list is the wrong population, because omitted liabilities are absent from it. Better procedures include examining unmatched receiving reports, vendor statements, unpaid invoice files, and subsequent cash disbursements after year-end, then tracing items back to the year-end accrual. This "search for unrecorded liabilities" is a classic AUD answer.
Scenario Drill 3: Inventory Rights
A retailer has a large year-end inventory balance at a public warehouse. The warehouse confirmation agrees to quantities, but the footnotes show heavy borrowing under a secured lending agreement. Existence is partly addressed, but the secured borrowing raises rights and obligations and presentation. Inspect the lending agreement, determine whether inventory is pledged, confirm the arrangement, and review disclosure adequacy. Counting goods is not enough when the question is whether the entity owns or has pledged them.
Mini Practice Set
| Fact pattern | Assertion | Procedure that fits |
|---|---|---|
| New allowance model ignores aging over 120 days | Valuation and allocation | Recalculate aging, test assumptions, compare subsequent collections |
| Manual journal entries posted by controller at 11:58 p.m. on December 31 | Occurrence, accuracy, fraud risk | Inspect support and approvals, test user logs, examine entries affecting income |
| Customer deposits recorded as sales | Classification and occurrence | Inspect contracts and cash receipts; test whether performance obligations were satisfied |
| Legal counsel reports an unrecorded probable loss | Completeness and valuation | Review legal letter, management estimate, and subsequent settlement activity |
Before moving on, write one sentence per scenario that begins "Because the risk is..." and ends with the procedure, specific enough that another auditor could perform the work without guessing the assertion.
A client records FOB shipping point sales when goods leave its warehouse. The auditor notices several December invoices for goods picked up by the carrier on January 2. Which response best addresses the primary assertion risk?
Which procedure is most responsive to a completeness risk for accounts payable?