Selecting Audit Procedures by Nature, Timing, and Extent

Feb 7, 2025

How risk drives the nature, timing, and extent of audit procedures.

On this page

The detailed audit plan is built by deciding the nature, timing, and extent of procedures. These three dimensions respond to assessed risk. A higher-risk assertion may require more persuasive evidence, work closer to year-end, expanded coverage, or a combination of all three.

The exam frequently tests whether the auditor changed the right dimension. Increasing sample size is not always the best answer. Sometimes the auditor should change the procedure itself, perform the work later, add external evidence, or involve a specialist.

Nature of Procedures

Nature means the type and quality of procedure selected. Different procedures provide different levels of relevance and persuasiveness.

Procedure	Typical strength	Common use
Inquiry	Least persuasive alone	Understanding processes or explanations
Observation	Useful but limited to the moment observed	Watching inventory count or control performance
Inspection	Persuasive when documents are reliable	Contracts, invoices, board minutes, shipping documents
External confirmation	Strong when received directly by the auditor	Cash, receivables, debt, legal matters
Recalculation	Strong for mathematical accuracy	Interest, depreciation, allocation calculations
Reperformance	Strong for control or process execution	Reperforming a reconciliation or matching control
Analytical procedures	Useful for relationships and expectations	Planning analytics or substantive analytics when appropriate

If risk increases, the auditor often changes the nature of evidence toward more direct, external, or independently generated evidence.

Timing of Procedures

Timing means when procedures are performed. The auditor may perform procedures at interim, at year-end, or after year-end.

Timing choice	When it may be appropriate	Limitation
Interim testing	Lower risk, stable controls, predictable activity	Requires roll-forward procedures
Year-end testing	Higher risk, material balances, volatile activity	More work is concentrated near reporting deadlines
Post-year-end testing	Subsequent events, contingencies, collectibility, cutoff evidence	Evidence must still relate to the period under audit
Surprise timing	Fraud risk or misappropriation concern	Must be purposeful and documented

Higher risk often pushes procedures closer to year-end because there is less unaudited time between the procedure date and the financial statement date.

Extent of Procedures

Extent means how much work is performed. It includes sample size, number of locations, transaction coverage, time period covered, component involvement, and depth of review.

Extent decision	Higher-risk response
Sample size	Increase sample size or use targeted selections
Locations	Add high-risk locations or components
Period covered	Expand cutoff window or roll-forward work
Populations	Test full population when analytics or automation make it feasible and relevant
Review depth	Increase senior review or specialist involvement

Extent should be increased only after the nature and timing of the procedure are appropriate. A larger sample of weak evidence may still be insufficient.

Control Reliance and Substantive Work

Control effectiveness affects nature, timing, and extent. If controls are designed, implemented, and operating effectively, the auditor may be able to perform more interim work, reduce some tests of details, or use substantive analytics where appropriate. If controls are weak, the auditor usually performs more substantive procedures, often closer to year-end.

    flowchart TD
	    A["Assessed risk and control reliance"] --> B{"Controls effective and reliance planned?"}
	    B -- "Yes" --> C["Test controls and design appropriate substantive procedures"]
	    B -- "No" --> D["Increase substantive nature, year-end timing, or extent"]
	    C --> E["Evaluate sufficiency of evidence"]
	    D --> E

Control reliance never eliminates the need for substantive procedures. It affects the mix of work.

Roll-Forward Procedures

When procedures are performed at interim, the auditor must address the period from the interim date to year-end. Roll-forward work may include inquiry, analytics, testing transactions after the interim date, testing controls over the remaining period, or performing year-end procedures on material changes.

Interim testing is less suitable when:

The account is high risk.
Significant year-end transactions are expected.
Controls over the remaining period are weak.
Management override or fraud risk is elevated.
The balance is volatile or subject to significant estimation.

Examples

Risk	Nature response	Timing response	Extent response
Receivables collectibility concern	Confirm balances and review subsequent cash receipts	Perform closer to year-end	Expand high-risk customer selections
Revenue cutoff risk	Inspect shipping documents and contracts	Test around year-end	Expand cutoff window
Inventory at multiple warehouses	Observe counts and test cost/valuation	Attend year-end counts	Add high-risk locations
Weak IT access controls	Validate reports and test transactions directly	Increase year-end work	Expand populations affected by unreliable reports

The strongest answer matches the risk to the dimension that actually improves evidence.

Common Exam Traps

Treating inquiry as sufficient for a high-risk assertion.
Increasing extent when the real issue is weak evidence quality.
Performing interim work for a high-risk volatile account without roll-forward procedures.
Assuming effective controls eliminate substantive procedures.
Ignoring the effect of weak controls on timing and extent.
Expanding testing to more locations without explaining why those locations affect risk.

Key Takeaways

Nature is what procedure is performed and how persuasive it is.
Timing is when the procedure is performed.
Extent is how much testing is performed.
Higher risk usually requires more persuasive evidence, later timing, greater extent, or all three.
The auditor should document why the selected mix responds to assessed risk.

Nature, Timing, and Extent Quiz

### What does nature mean in audit procedure selection? - [x] The type and quality of procedure performed - [ ] The date on which the procedure is performed - [ ] The sample size selected - [ ] The client's preferred testing schedule > **Explanation:** Nature refers to the procedure type, such as confirmation, inspection, recalculation, or inquiry. ### Which procedure generally provides highly persuasive evidence for receivables existence? - [ ] Management inquiry only - [x] External confirmations received directly by the auditor - [ ] Comparison of current and prior-year sales only - [ ] Reading the client's budget > **Explanation:** External confirmation provides evidence from an independent third party directly to the auditor. ### If controls are effective and reliance is planned, what may change? - [x] The auditor may adjust the mix and extent of substantive procedures. - [ ] The auditor eliminates all substantive procedures. - [ ] The auditor ignores assessed risk. - [ ] The auditor performs only management inquiry. > **Explanation:** Control reliance can affect the audit approach but does not eliminate substantive procedures. ### What is the purpose of roll-forward procedures? - [x] To address the period between interim testing and year-end - [ ] To avoid year-end audit work in every circumstance - [ ] To replace all testing of controls - [ ] To confirm that management prefers interim testing > **Explanation:** Roll-forward procedures bridge the unaudited period after interim work. ### Which condition most directly supports increasing the extent of testing? - [ ] Stable controls and low assessed risk - [ ] Immaterial account balance with no unusual activity - [x] Higher assessed risk of material misstatement - [ ] Management preference for smaller samples > **Explanation:** Higher risk often requires greater sample sizes, coverage, or depth. ### What is the key consideration before relying heavily on interim testing? - [x] Whether material changes could occur between interim testing and year-end - [ ] Whether the client wants the audit finished quickly - [ ] Whether the audit firm has fewer staff available at year-end - [ ] Whether the account name is short > **Explanation:** Interim testing requires consideration of the remaining period and roll-forward work. ### In a multi-location audit, what may cause the auditor to expand testing to more locations? - [x] Significant deficiencies or inconsistent reporting at one or more locations - [ ] A branch processed fewer low-risk transactions - [ ] The client wants fewer site visits - [ ] All locations have identical low-risk controls > **Explanation:** Deficiencies or inconsistencies can increase risk and justify expanded location coverage. ### Why might an auditor choose substantive testing over control testing? - [x] Controls appear weak, so testing them would not be efficient or useful for reliance. - [ ] The auditor wants to avoid obtaining evidence. - [ ] Substantive testing is prohibited when controls are weak. - [ ] The client prefers not to provide documents. > **Explanation:** If controls are expected to be ineffective, a substantive approach may be more appropriate. ### Testing an account at year-end rather than interim is primarily influenced by what factor? - [x] The risk associated with the account or assertion - [ ] The client's preferred vacation schedule - [ ] The number of pages in the audit program - [ ] The office location of the audit team > **Explanation:** Higher-risk accounts are often tested at or near year-end. ### What does extent refer to? - [ ] The type of evidence selected - [ ] Interim versus year-end timing - [x] How much testing is performed - [ ] The client's internal report title > **Explanation:** Extent includes sample size, locations, coverage, and depth of testing.

Revised on Monday, June 15, 2026

Strategy & Risk

Group Audits

Browse Auditing and Attestation (AUD)