CPA AUD common mistakes
CPA AUD · Understand the traps and how to avoid them.
Treating every independence question as satisfied once the CPA is 'not an employee' of the client, ignoring direct financial interests in a client held through a spouse or dependent, or loans to/from attest clients that are not from a normal lending institution on normal terms.
Candidates learn the employee/partner distinction first and over-apply it, underweighting the per se prohibitions and the look-through to immediate family and material indirect holdings.
What to do instead
Build a mental checklist run in order: (1) does the CPA or immediate family have a direct financial interest or material indirect interest; (2) is there a loan that is not from a financial institution under normal terms; (3) is there a business relationship or employment relationship that creates a mutual or conflicting interest; (4) only then evaluate threats and safeguards. Memorize the short list of per se prohibitions before practicing judgment questions.
Selecting 'disclose the situation to the client and obtain consent' as the answer whenever a threat arises, even when the Code requires the CPA to decline or terminate the engagement because no safeguard can reduce the threat to an acceptable level.
Candidates pattern-match 'threat' to the safeguards framework and forget that some threats are so significant that no safeguard suffices; disclosure is not a universal remedy.
What to do instead
For each threat, first ask whether the threat is at an acceptable level. If not, ask whether a safeguard exists that is both available and effective. Choose decline/terminate when the threat is created by a prohibited interest or relationship, or when the CPA lacks the competence or objectivity to perform the service.
Confusing the auditor's responsibility for detecting fraud with the responsibility for detecting all misstatements, and answering that the auditor must 'guarantee' or 'absolutely assure' detection of material fraud.
The reasonable assurance standard and the professional skepticism requirement get blended into an absolute-duty standard under exam pressure.
What to do instead
Anchor on the phrase 'reasonable assurance' and on the two fraud types: fraudulent financial reporting (management bias, revenue recognition, estimates) and misappropriation of assets (cash, inventory). The auditor is responsible for planning and performing procedures to obtain reasonable assurance about whether the statements are free of material misstatement, whether caused by error or fraud, and for exercising professional skepticism, not for guaranteeing detection.
Treating the risk assessment as a one-time planning step and failing to update the assessed risks and planned procedures when evidence obtained during the audit contradicts earlier expectations.
Textbook sequencing (plan, then perform) leads candidates to treat risk assessment as complete once the plan is documented.
What to do instead
When a question presents new information discovered mid-audit, first ask whether it changes the assessed risk of material misstatement. If so, revise the risk assessment, revise the nature, timing, and extent of further procedures, and document the revision and its effect on the audit plan.
Choosing 'increase sample size' as the response to every risk, instead of matching the response to the specific risk: changing the nature of procedures (substantive vs. tests of controls), shifting timing toward year-end, or involving more experienced staff.
Sample size is the most familiar lever and candidates default to it, ignoring that nature and timing can be more responsive to a specific risk.
What to do instead
For each identified risk, ask three questions in order: can I design a different procedure that better addresses this assertion (nature)? can I perform it closer to period end or on unaudited interim balances with roll-forward (timing)? and only then, how much evidence do I need (extent)? Also consider assigning more experienced personnel and increasing the extent of supervision.
Confirming accounts receivable with a positive confirmation request, receiving no reply, and treating the nonresponse as evidence that the balance is correct rather than performing alternative procedures.
Candidates conflate 'no exception reported' with 'no exception exists' and forget that nonresponse is not audit evidence about the balance.
What to do instead
For positive confirmations, nonresponses require alternative procedures: examine subsequent cash receipts, shipping documents, and other evidence of the receivable's existence and valuation. Only when alternative procedures are performed and support the balance can the nonresponse be treated as resolved.
Concluding that an immaterial misstatement identified during the audit can simply be ignored, without accumulating it and evaluating it together with other misstatements against materiality.
Candidates evaluate each misstatement individually against the materiality threshold rather than in the aggregate, and forget the requirement to accumulate misstatements other than clearly trivial ones.
What to do instead
Accumulate all misstatements other than clearly trivial ones, including known and projected misstatements from sampling and uncorrected prior-period misstatements. At the end of the audit, evaluate the aggregate against materiality and consider qualitative factors (e.g., a misstatement that changes a loss into income). Document the conclusion.
Issuing an unmodified opinion when the financial statements contain a departure from the applicable framework that is material but not pervasive, instead of issuing a qualified opinion.
Candidates equate 'material' with 'must disclaim' and 'not pervasive' with 'clean opinion,' missing the qualified middle category.
What to do instead
Use the two-by-two grid: material but not pervasive → qualified opinion; material and pervasive → adverse opinion. For scope limitations: material but not pervasive → qualified opinion; material and pervasive → disclaimer. Determine pervasiveness by whether the effect is confined to specific elements or represents substantially the whole statements.
Drafting an emphasis-of-matter or other-matter paragraph for a matter that requires a modification, or omitting the required placement and cross-reference to the basis-for-modification section.
Candidates treat emphasis-of-matter and modified opinions as interchangeable tools for highlighting issues.
What to do instead
Emphasis-of-matter is only for matters appropriately presented or disclosed that are fundamental to users' understanding and that do not require modification. If the matter causes a modified opinion, use the basis-for-modification section, not an emphasis-of-matter paragraph. Place the emphasis-of-matter paragraph after the basis-for-opinion section and state that the opinion is not modified in respect of the matter.
Reading the date of the auditor's report as the date fieldwork began or the date the financial statements were issued, and failing to recognize the subsequent-events responsibility that runs from year-end to the report date.
Candidates memorize 'report date' without connecting it to the dual-dating rule and the period of auditor responsibility for subsequent events.
What to do instead
The report date is the date the auditor obtained sufficient appropriate evidence, typically the last day of fieldwork. Auditor responsibility for subsequent events extends from the date of the financial statements to the report date. If a subsequent event occurs after the report date but before issuance, the auditor may dual-date the report to limit responsibility to the later event.