AUD evidence-framework coverage for procedure types, sampling, evidence sources, analytics, and documentation.
This chapter introduces the evidence framework that supports the rest of AUD. It explains what makes evidence sufficient and appropriate, how different procedures produce different forms of support, and how the results are documented.
Evidence questions are strongest when they are tied to assertions. The auditor does not gather evidence in the abstract; the procedure must address what could be wrong, how persuasive the source is, and whether the file supports the conclusion reached. Sufficiency is about quantity, while appropriateness is about relevance and reliability.
| Evidence decision | What to evaluate | Common AUD trap |
|---|---|---|
| Test of controls or substantive procedure | Whether the objective is control operating effectiveness or direct misstatement detection. | Using a control test to prove an account balance without substantive support. |
| Procedure type | Inspection, observation, inquiry, confirmation, recalculation, reperformance, and analytics produce different support. | Treating inquiry alone as strong evidence for a material assertion. |
| Evidence source | External, independent, and direct evidence is generally more reliable than internal or indirect evidence. | Ignoring source reliability when two procedures address the same assertion. |
| Sampling approach | Sample design must match the population, objective, and risk. | Increasing sample size without fixing a poorly defined population. |
| Documentation | Working papers must show work performed, evidence obtained, and conclusions reached. | Assuming undocumented work can support the audit opinion. |
| Step | Audit decision | Why it matters |
|---|---|---|
| 1. Start with the assertion | Identify whether the risk relates to existence, completeness, valuation, rights and obligations, presentation, or occurrence. | The assertion determines which procedure can actually reduce audit risk. |
| 2. Match the procedure to the risk | Choose inspection, observation, inquiry, confirmation, recalculation, reperformance, analytical procedures, or a substantive test. | A procedure can be valid in general but weak for the specific assertion being tested. |
| 3. Evaluate reliability | Consider source independence, direct knowledge, objectivity, timeliness, and control over the evidence. | AUD questions often turn on why one evidence source is more persuasive than another. |
| 4. Decide the extent of testing | Adjust sample size, population coverage, or procedure mix for risk, materiality, and expected deviation or misstatement. | More testing is not automatically better if the design does not address the right population. |
| 5. Document the conclusion | Link the work performed to the evidence obtained, exceptions found, and conclusion reached. | Unsupported or undocumented conclusions do not provide an audit basis. |