SMSF Specialist Auditor (SSAud) Exam common mistakes
SMSF Specialist Auditor (SSAud) Exam · Understand the traps and how to avoid them.
Treating the auditor's role as a compliance checklist that includes preparing or correcting the fund's records, rather than independently forming an opinion on the financial statements and compliance with SIS.
Candidates often carry over habits from accounting or administration roles, and the exam's scenario questions deliberately blur the line by describing a fund with poor records and asking what the auditor should do next.
What to do instead
Before each scenario, state the auditor's statutory objective: form an opinion on the financial statements and report on SIS compliance under the SIS Act and the auditing standard. Any action that involves preparing, adjusting, or completing the trustee's records is a management function and must be excluded. Practise sorting options into 'auditor may do', 'auditor must do', and 'trustee must do'.
Missing that the auditor must be appointed by the trustee within 30 days of the fund's year end and that the audit report must be given to the trustee within the statutory timeframe, instead treating deadlines as administrative details.
The exact day counts and the distinction between the trustee's appointment obligation and the auditor's reporting obligation are easy to conflate, and questions often present a plausible but wrong number.
What to do instead
Build a one-page timeline for a standard 30 June year end: trustee appoints auditor by 30 July, audit report provided to trustee within the period set by the SIS Regulations (generally within 28 days of the auditor receiving the required information, and no later than the following 31 October in the ordinary case). Check each practice question against that timeline rather than relying on memory.
Failing to identify a contravention because the candidate looks only at the transaction's form (for example, a loan documented as an investment) and not at the substance and the specific SIS covenant it breaches.
Exam scenarios are written so the transaction looks permissible on its face; candidates who do not map each fact to the relevant section of the SIS Act or Regulations miss the breach.
What to do instead
For every transaction in a scenario, run a fixed sequence: identify the parties and their relationship, identify the asset or payment, then test against the borrowing, in-house asset, related-party acquisition, and sole-purpose rules in turn. Write the section or regulation next to each conclusion in your working notes.
Confusing the trustee's investment strategy obligations with the auditor's duty, and concluding that a poor or undocumented strategy is automatically a breach the auditor must report, rather than assessing whether the trustee has formulated and reviewed a strategy as required.
The investment strategy covenant is broad and the exam tests whether candidates can distinguish a process failure from an outcome failure.
What to do instead
Learn the elements of the covenant: formulate a strategy, have regard to the specified matters (risk, return, diversification, liquidity, cash flow), and review it regularly. In questions, ask whether the trustee can evidence the process; only then decide whether a contravention exists and whether it is significant enough to report.
Applying the general in-house asset limit without first determining whether the asset is an in-house asset at all, and without applying the specific exclusions and the 5% threshold correctly.
The in-house asset rules contain multiple definitions and exceptions, and candidates often jump to the 5% test before classifying the asset.
What to do instead
Work through the classification first: is it a loan to, or an investment in, a related party, or an asset subject to a lease or arrangement with a related party? Then check the exclusions (for example, certain listed securities, business real property, and investments in related unit trusts that are not in-house assets). Only then apply the 5% limit and consider whether the fund exceeds it at year end.
Accepting the trustee's valuation of an unlisted asset at face value, or accepting a valuation that is stale or prepared by a party without appropriate qualifications, without testing the valuation inputs or the valuation date.
Unlisted assets are common in SMSF scenarios and candidates often focus on whether a valuation exists rather than whether it is appropriate and current.
What to do instead
For each unlisted asset, check three things: the valuation date is close enough to year end, the valuer has relevant qualifications and independence, and the method and key inputs are documented. If any of these fail, treat the carrying value as unsupported and consider a qualification or further evidence request. Practise writing the audit procedure you would perform, not just the conclusion.
Missing a related-party acquisition breach because the candidate does not trace the chain of ownership or control through interposed entities and family relationships.
Scenarios often describe a purchase from a 'friend' or a 'company' without stating the relationship explicitly, and candidates who do not build an ownership map miss the connection.
What to do instead
Draw the relationship map for every party in the scenario: members, relatives, trusts, companies, and their directors and shareholders. Then test each acquisition against the related-party acquisition rules, noting the exceptions such as business real property acquired at market value. Do this before reading the answer options.
Treating the audit report as a pass/fail document and issuing a clean report despite identified contraventions, or issuing a qualified report without specifying the contravention and its effect.
Candidates often believe that if the financial statements are materially correct, the compliance report can be unqualified, and they underestimate the need to describe each contravention.
What to do instead
Separate the two opinions. For the compliance opinion, list every contravention identified, assess whether it is significant, and state the section breached and the facts. Practise drafting a qualified compliance report that names the contravention and explains why it is significant, and a clean report only where no contravention exists.
Overlooking the auditor's obligation to report certain contraventions to the regulator, or reporting too readily without considering the significance threshold and the trustee's opportunity to rectify.
The reporting obligation is conditional, and candidates either ignore it or apply it mechanically without analysing the conditions.
What to do instead
Memorise the conditions for a reportable contravention: a contravention of a specified provision, or a contravention that is significant and not rectified. For each scenario, state whether the contravention falls within the specified list, whether it is significant, and whether the trustee has been given the chance to rectify. Then decide whether a report is required.
Failing to recognise an independence threat, such as preparing the fund's accounts or providing administration services, and concluding that the audit can proceed with only a disclosure.
Many candidates work in firms that provide both administration and audit services and assume this is acceptable, so they under-identify self-review and self-interest threats.
What to do instead
Apply the independence framework explicitly: identify the threat (self-interest, self-review, advocacy, familiarity, intimidation), evaluate its significance, and apply safeguards or decline the engagement. Learn that preparing the financial statements or maintaining the fund's records creates a self-review threat that cannot be adequately safeguarded for an SMSF audit, so the engagement must be refused or the services separated.