CFC EQT Auditoria e Perícia common mistakes
CFC EQT Auditoria e Perícia · Understand the traps and how to avoid them.
Memorizing the numeric thresholds of CFC resolutions (e.g., minimum hours of continuing education, deadlines for registration) as isolated figures without connecting them to the rule that produces them, then applying the wrong number under exam pressure.
Candidates study normative texts by highlighting numbers and lose the underlying logic (who is obligated, what triggers the requirement, what exception applies), so similar figures from different resolutions get confused.
What to do instead
Build a one-page matrix per resolution with columns for obligated party, triggering event, numeric requirement, deadline, and exception; recite the matrix aloud and test yourself by covering the numbers and reconstructing them from the rule, not the reverse.
Treating the CFC Code of Ethics as abstract principles and failing to classify concrete situations (accepting a gift, holding a conflicting interest, using confidential client data) as permitted, requiring safeguards, or prohibited.
Ethics is studied as reading rather than as decision rules, so candidates recognize the vocabulary but cannot map a fact pattern to a specific article or to the required course of action.
What to do instead
Convert each ethics article into a two-line scenario card stating the trigger fact, the classification, and the required action; practice sorting 30 short scenarios into permitted, safeguard-required, and prohibited piles and justify each placement with the article.
Confusing independence of mind with independence in appearance when answering questions about threats and safeguards, and therefore accepting a safeguard that addresses only perception while the auditor retains a self-interest or self-review threat.
The two concepts are taught together and share vocabulary, so candidates collapse them into one idea and miss questions that test whether a safeguard actually eliminates or reduces the specific threat.
What to do instead
For every threat type (self-interest, self-review, advocacy, familiarity, intimidation, management participation) write the definition in your own words plus one safeguard that genuinely addresses it; then answer practice items by first naming the threat before evaluating the safeguard.
Answering questions about the auditor's report and opinion modification by choosing the opinion type that sounds most severe rather than the one that matches the nature of the misstatement (material versus pervasive, disagreement versus scope limitation).
Candidates memorize the list of opinion types without internalizing the two-dimensional decision grid, so they skip the pervasiveness judgment that determines qualified versus adverse or disclaimer.
What to do instead
Draw the decision grid with materiality on one axis and pervasiveness on the other and place each opinion in its cell; then work through fact patterns by explicitly stating both judgments before selecting the opinion, and explain why the adjacent cell was rejected.
Drafting the technical proposal and the work plan for a forensic engagement without distinguishing the question to be answered, the procedures that answer it, and the deliverable that reports it, producing a plan that lists techniques but no logical chain.
Candidates reproduce textbook lists of procedures instead of designing an engagement, so the proposal reads as a catalogue and fails questions that test coherence between objective, scope, evidence, and conclusion.
What to do instead
Practice writing three-page engagement plans using a fixed skeleton: question posed, hypotheses, evidence needed, procedure per evidence item, expected form of conclusion, and limitations; check each procedure by asking which hypothesis it discriminates between.
Treating the forensic report as a narrative of everything done on the engagement, including working-paper detail and procedural history, instead of a document limited to the object, the methodology, the findings, and the conclusion with clearly stated limitations.
Candidates transfer audit-reporting habits (describing scope and procedures extensively) into forensic reporting, where the reader needs the answer to the question posed and the basis for it, not a process log.
What to do instead
Rewrite sample reports to a strict structure: identification of the parties and object, questions addressed, sources and methods, findings with evidence references, conclusion, and restrictions on use; delete any sentence that does not support a finding or a limitation, and justify each retained section.
Using the working papers and evidence gathered during a statutory audit as if they were sufficient forensic evidence, without assessing whether the audit evidence meets the standard of proof and the specific legal question at issue.
The same documents serve both engagements, so candidates assume transferability and overlook differences in objective, adversarial context, and the need to test alternative explanations.
What to do instead
For each piece of evidence, apply a short checklist: does it address the specific question, is its origin independent, can its integrity be demonstrated, and does it survive the strongest alternative explanation; document the answers and exclude evidence that fails.
Applying the CVM rules on independent audit and on the auditor's obligations (rotation, prohibited services, communication duties, responsibility for the financial statements and for the report) by recalling the general CFC framework and assuming the regulator's rule mirrors it.
The CFC framework and the CVM rules overlap in vocabulary but differ in scope and in specific prohibitions, so candidates answer from the general rule and miss the regulator-specific requirement.
What to do instead
Maintain a comparison table with one row per obligation and columns for the CFC rule, the CVM rule, and the differences; study only the difference column once the table is complete, and answer practice items by first identifying which regime the question invokes.
Assuming that the BCB rules for independent auditors of financial institutions are a simple extension of the general audit standards, and therefore missing institution-specific requirements such as communication with the regulator and the treatment of information obtained in the engagement.
Candidates prepare for the general audit content and treat the banking-specific layer as optional reading, so they lack the specific duties that the exam tests directly.
What to do instead
Extract from the BCB norms a list of duties that exist only in the banking context, write each as a duty-holder and action pair, and rehearse them in short answer form until you can state who must communicate what to whom and by when.
Studying the Susep and Previc frameworks as generic insurance and pension content, without separating the supervisory rules that apply to the auditor from the substantive rules that apply to the supervised entity.
Both regulators publish long norms covering the entity's products and solvency as well as the auditor's duties, and candidates read them as one body of content, so they cannot tell which rule the question is testing.
What to do instead
Tag every article you study as either entity-substantive or auditor-duty, keep two separate summaries per regulator, and when answering, first decide which of the two the question concerns before recalling the content; review the auditor-duty summaries weekly.