ICAB PL Audit & Assurance common mistakes
ICAB PL Audit & Assurance · Understand the traps and how to avoid them.
Quoting ISAs by number and title without stating what the standard actually requires the auditor to do in the scenario, so the answer never engages with the facts given.
Candidates memorise a list of standard numbers as a shortcut under time pressure and then treat naming the standard as the analysis, because recalling the number feels like demonstrating knowledge.
What to do instead
For each standard you cite, force yourself to write the operative requirement in one sentence ('the auditor must obtain sufficient appropriate evidence about completeness of the population before selecting samples') and then apply it to a named figure or fact from the scenario. Practise by taking five standards and writing a two-sentence application to a fictional client for each, without using the standard's number.
Treating 'reasonable assurance' and 'absolute assurance' as interchangeable, and describing the audit as guaranteeing that the financial statements are free from error.
Everyday language uses 'assurance' loosely, and candidates conflate the audit opinion's persuasive level of assurance with a guarantee, missing the inherent limitations of audit.
What to do instead
Write out the assurance equation once: reasonable assurance is high but not absolute, limited by sampling risk, judgement, inherent limitations of internal control and the possibility of collusion or forgery. Then in every answer that mentions the opinion, add the phrase 'high level of assurance, not a guarantee'. Test yourself by explaining to a hypothetical client why an undetected fraud does not necessarily mean the audit failed.
Jumping straight to substantive testing procedures in the plan without first identifying and assessing the risks of material misstatement at financial statement and assertion level.
Procedures feel concrete and productive to write, whereas risk assessment feels abstract, so candidates skip the step that should logically drive the procedures chosen.
What to do instead
Structure every planning answer as a chain: understand the entity and its environment, identify the risk, state the assertion affected, assess likelihood and magnitude, then select the response. If a procedure appears in your answer, you must be able to point to the risk sentence that justified it. Draft answers with the risk column filled first and the procedure column left blank until the risks are complete.
Setting materiality once at planning as a single percentage of profit before tax and never revising it or applying a lower specific threshold to sensitive balances.
Textbook formulas are easy to reproduce, and candidates treat materiality as a one-off calculation rather than a continuing judgement that changes as the audit progresses.
What to do instead
In every materiality answer, state the benchmark and percentage with a reason tied to the entity (for example, profit before tax for a stable trading company, total assets or revenue where profit is volatile), then explicitly address performance materiality, the need to revise materiality if new information arises, and a lower threshold for sensitive items such as directors' remuneration or related-party balances.
Describing internal controls generically ('the company has good segregation of duties') instead of identifying the specific control activity, the assertion it addresses, and the test of that control.
Candidates confuse understanding the entity's system of internal control with evaluating and testing it, and generic praise of controls is easier to write than naming a precise control.
What to do instead
For each control you mention, use a three-part sentence: who performs it, what they do and how often, and which assertion it mitigates. Then add the test: inquiry, observation, inspection of evidence, or re-performance, plus a sample. For example, name the clerk who reconciles the bank account monthly, the assertion of existence and valuation it supports, and the test of inspecting the reconciliation and the sign-off for a sample of months.
Treating a management representation letter as sufficient appropriate audit evidence on its own for a matter such as the completeness of liabilities or the valuation of a related-party balance.
Written representations are easy to obtain and candidates overvalue a signed document, forgetting that representations are not a substitute for other evidence and are lowest in the evidence hierarchy.
What to do instead
State the rule explicitly in answers: written representations support other evidence but never replace it, and they are required for matters where other evidence is not expected to exist. Pair every representation with the corroborating procedure you would perform, such as confirming balances with third parties or inspecting subsequent payments.
Writing an audit report conclusion that ignores the type of modification required, for example issuing an unmodified opinion with an emphasis of matter paragraph where the financial statements are materially misstated.
Candidates memorise report layouts but not the decision logic that maps the nature and pervasiveness of the issue to the correct opinion and paragraph type, and they confuse emphasis of matter with qualification.
What to do instead
Learn the two-axis decision grid: nature of the matter (material misstatement versus inability to obtain evidence) against pervasiveness (material but not pervasive versus material and pervasive). Drill it by writing four short scenarios and, for each, naming the opinion and whether the paragraph goes before or after the opinion section. Emphasise that an emphasis of matter paragraph is only for a matter appropriately presented and disclosed, never for a misstatement.
Failing to distinguish subsequent events adjusting the financial statements from those that are non-adjusting, and not describing the auditor's procedures over the period up to the date of the auditor's report.
The date boundaries are fiddly and candidates blur the client's year end, the date the financial statements are approved, and the date of the auditor's report, so they apply the wrong cut-off.
What to do instead
Draw a timeline in rough work with three marked dates: year end, approval of the financial statements, and date of the auditor's report. Place each event on the line, decide whether it provides evidence of a condition existing at year end (adjusting) or arose afterwards (non-adjusting, with disclosure considered), and state the procedures performed between year end and the report date, including reviewing minutes, management accounts and inquiries about subsequent events.
Answering an ethics scenario by naming the fundamental principle breached but not applying the conceptual framework to identify, evaluate and address the threat.
Candidates learn the five principles as a list and stop there, so they label the problem instead of working through the safeguards analysis the question is asking for.
What to do instead
Use a fixed four-step template for every ethics scenario: identify the threat and its category (self-interest, self-review, advocacy, familiarity, intimidation), evaluate its significance, identify available safeguards, and state the action if safeguards cannot reduce the threat to an acceptable level, including declining or withdrawing. Write the steps as headings before writing prose so the structure cannot collapse under time pressure.
Describing engagement quality control review and firm-level monitoring as the same thing, and omitting the engagement partner's responsibility for direction, supervision and review of the work performed.
Quality management terminology overlaps, and candidates compress the firm's system of quality management, the engagement-level review, and the partner's review duties into one undifferentiated idea.
What to do instead
Build a two-level map: firm level (system of quality management, acceptance and continuance, human resources, monitoring and remediation) and engagement level (partner direction, supervision and review, engagement quality review for listed and higher-risk engagements, consultation on difficult matters). For each, write who performs it and what evidence shows it happened. Then answer a practice question requiring you to place four quality activities at the correct level.