Audit Standards Framework for AUD: AICPA, PCAOB, and Engagement Type

The AUD exam expects candidates to recognize which professional standards govern the engagement before choosing a procedure, report, or communication. A question may mention an audit, review, compilation, attestation engagement, issuer, nonissuer, broker-dealer, or service organization. Each label points to a different standards family.

This page is an orientation map. Use it to place the major standards families before studying the more detailed AICPA-versus-PCAOB comparison in the next appendix section.

Standards Selection Workflow

    flowchart TD
	    A["Engagement facts"] --> B{"Is it a financial statement audit?"}
	    B -->|Yes| C{"Issuer or PCAOB-covered entity?"}
	    C -->|Yes| D["PCAOB auditing standards"]
	    C -->|No| E["AICPA AU-C standards"]
	    B -->|No| F{"What service is being performed?"}
	    F --> G["Review, compilation, or preparation: SSARS / AR-C"]
	    F --> H["Attestation: SSAE / AT-C or PCAOB attestation standards"]
	    F --> I["Governmental or compliance context: identify added requirements"]

The exam workflow is not “memorize every standard number.” It is: identify the engagement, identify the standard setter, then apply the correct responsibility.

Main Standards Families

AICPA AU-C Standards

The AICPA Auditing Standards Board issues Statements on Auditing Standards for audits of nonissuers. In current practice, those requirements are organized in AU-C sections. The AU-C framework is the default standards home for many private-company, nonprofit, and other nonissuer financial statement audits.

For AUD, the most important point is how the AU-C framework organizes audit thinking:

• Overall objectives and professional responsibilities come first.
• Planning and risk assessment determine where the audit effort should focus.
• Audit evidence standards control whether procedures provide enough relevant and reliable support.
• Communication standards govern interactions with management and those charged with governance.
• Reporting standards determine the opinion and any additional paragraphs or modifications.

The AU-C label is therefore more than a citation format. It tells you the engagement is being performed under generally accepted auditing standards for a nonissuer audit unless the facts point elsewhere.

PCAOB Auditing Standards

PCAOB standards apply in the public-company audit environment and to certain other PCAOB-covered engagements, including broker-dealer contexts. The PCAOB framework includes auditing standards, attestation standards, ethics and independence rules, quality control standards, and a regulatory inspection and enforcement structure.

AUD questions commonly use PCAOB standards to test differences in public-company audits:

• audit committee communication expectations
• registered public accounting firm responsibilities
• engagement quality review
• critical audit matters in applicable issuer audit reports
• integrated audits of financial statements and internal control over financial reporting
• inspection pressure and documentation sufficiency

Do not treat PCAOB standards as merely “stricter AU-C.” Many concepts overlap, but the public-market setting changes the auditor’s responsibilities, report, and oversight environment.

Integrated Audit Placement

Internal control is part of every financial statement audit because the auditor must understand it to assess risk. The standards framework question is whether the auditor also expresses an opinion on internal control effectiveness.

In many nonissuer audits, the auditor uses internal control understanding to plan the audit but does not issue an internal control opinion. In a PCAOB integrated audit under AS 2201, the auditor audits both the financial statements and internal control over financial reporting. The objectives are related but not identical. A material weakness can produce an adverse internal control opinion even when substantive procedures support an unmodified financial statement opinion.

When It Is Not an Audit

AUD candidates often lose points by defaulting to audit logic when the engagement is not an audit. Preparation, compilation, review, examination, and agreed-upon procedures engagements are different services with different assurance levels and report language.

Use these distinctions:

Standard Numbers as Navigation Aids

Standard numbers are useful when they help you classify the topic. They are less useful when memorized without context.

The exam normally gives enough context to decide the answer without requiring a full standards library citation. Treat citations as clues about the engagement phase and standard setter.

Common Exam Traps

• Applying PCAOB integrated-audit requirements to an ordinary nonissuer audit.
• Treating a review or compilation as if it provides reasonable assurance.
• Assuming a material weakness automatically changes the financial statement opinion.
• Confusing audit evidence standards with accounting recognition rules.
• Forgetting that independence and documentation are required under both AICPA and PCAOB frameworks.
• Treating official interpretations or implementation guidance as if they override authoritative standards.

Key Takeaways

• Standards selection begins with the engagement type and entity type.
• AICPA AU-C standards usually govern nonissuer financial statement audits.
• PCAOB standards govern issuer audits and certain PCAOB-covered engagements, including important broker-dealer contexts.
• SSARS and SSAE/AT-C standards matter because AUD covers services other than audits.
• Standard numbers should help you locate the topic, not replace exam reasoning.

Review Questions