Assurance: Concepts, Evidence and Judgement
The assurance mindset
Assurance engagements express a conclusion that enhances the confidence of intended users in subject matter measured against criteria. Candidates must distinguish reasonable assurance (sufficient appropriate evidence gathered to reduce engagement risk to an acceptably low level, expressed positively) from limited assurance (lower level, expressed negatively, as in a review). Audit risk is the risk of an inappropriate conclusion; it is driven by inherent, control and detection risk, with detection risk being the auditor's lever.
Evidence and procedures
Evidence must be sufficient (quantity) and appropriate (relevance and reliability). Rank reliability: auditor's direct observation and external confirmations generally outrank internally generated documents, which outrank oral representations. Understand inspection, observation, inquiry, confirmation, recalculation, re-performance and analytical procedures. Analytical procedures are mandatory at the planning and final review stages of a statutory audit but optional as substantive tests.
Materiality and sampling
Materiality is a matter of professional judgement, applied at overall and performance levels; performance materiality reduces the chance that uncorrected misstatements exceed the overall threshold. Sampling risk (concluding on a population based on an unrepresentative sample) differs from non-sampling risk (human error or inappropriate procedures).
Traps to watch
Questions often swap positive and negative assurance, confuse the auditor's responsibility for fraud detection with a guarantee, or imply that internal audit evidence is always sufficient external evidence. Another trap: treating subsequent-events procedures as a substitute for year-end substantive work.
Worked rule of thumb
If a question asks which procedure best supports a receivable balance, prefer direct external confirmation over internal sales invoices or management representations; the rule: independent, externally sourced evidence beats internally generated evidence, which beats inquiry alone.