Audit and Assurance · Audit procedures

Audit Documentation and Working Papers under ISA 230

Updated 11 October 2026 · Fact-checked

Audit documentation (working papers) is the auditor's record of the procedures performed, evidence obtained and conclusions reached. ISA 230 requires it to be sufficient for an experienced auditor with no prior link to the audit to understand the work. It supports the opinion, shows ISA compliance and belongs to the audit firm.

Understand Audit Documentation and Working Papers

Audit documentation is the record of the audit work. It shows what you did, what evidence you got and what you concluded. Without it, nobody can check that the audit was done properly. Working papers are the individual documents that make up the audit file.

ISA 230 sets the standard. The test is this: documentation must let an experienced auditor, with no previous connection to the audit, understand the nature, timing and extent of procedures performed, the results and evidence obtained, and the significant matters and judgements made. If that person would have to ask you questions, the file is not good enough.

Documentation has several purposes. It provides the basis for the auditor's report and evidence that the audit was planned and performed in line with ISAs and legal requirements. It helps the team plan and supervise the work and be accountable for it. It supports review by managers and partners, quality control reviews, and external inspections. It also keeps a record of matters of continuing importance for future audits.

Content depends on the audit, but a file typically holds the engagement letter, planning documents and risk assessment, the audit strategy and plan, materiality, records of systems and tests of controls, substantive test results, correspondence, written representations, summaries of significant matters and the completion review. For each test, a good working paper records who did the work, when, what was tested, the items selected, how they were identified, the results, and the conclusion. It should also show who reviewed it and when.

The working papers are the property of the audit firm, not the client. The firm may choose to share parts of them, but the client has no automatic right to them. The auditor must keep the file confidential. After the report date, the file must be assembled promptly (ISA 230 refers to a period not longer than 60 days) and then retained, normally for a period set by the firm's quality management policy and by law or regulation; ISA 230 does not set a fixed number of years. After assembly, the auditor must not delete or discard documentation until the retention period ends. Changes after assembly are allowed only in limited cases and must be documented.

Key rules to remember

ISA 230 documentation test: Documentation is enough if an experienced auditor with no previous connection to the audit can understand it; Covers nature, timing and extent of procedures, results and evidence, and significant matters and judgements.
Ownership: Working papers = property of the audit firm; The client has no automatic right of access. Confidentiality still applies.
File assembly: Final audit file assembled promptly after the report date (not more than 60 days); Assembly is administrative. No new audit evidence or conclusions should be added to it.
Retention: Retention period = longer of firm policy and legal or regulatory requirement; ISA 230 gives no fixed number of years. Do not quote one as an ISA rule.
Specific items to record: Who performed the work, date completed, who reviewed, date of review, items tested and their identifying features; These show accountability and let the work be re-performed.

How to solve Audit Documentation and Working Papers questions

Use this method for any question on audit documentation, whether it asks for purpose, content, ownership or retention.

1Read the requirement and note the verb: explain, list, state, or advise. Check whether it asks for purpose, content, ownership, retention or a mix.
2Anchor your answer to the ISA 230 test: an experienced auditor with no previous connection must understand the work.
3If the question is about purpose, give separate points: support for the opinion, evidence of ISA compliance, planning and supervision, review and quality control, future audits.
4If it is about content, tie each item to the scenario: planning, risk assessment, tests, results, conclusions, significant matters and review sign-off.
5For ownership and retention, state that the file belongs to the firm, confidentiality applies, the file is assembled promptly and kept for the required period.
6Apply the point to the facts given, for example a client demanding the file or a junior who left the file incomplete. Say what the auditor should do.
7Make each point a short, separate line with a reason, so the marker can award one mark per point.

Quickest way: Purpose, Content, Ownership, Retention check

When to use it: Use for objective test questions and for short written parts when time is tight.

Ask which of four ideas the question tests: purpose, content, ownership or retention.
Purpose: think support the opinion, show ISA compliance, help review.
Content: think what, who, when, result, conclusion, reviewer.
Ownership: the firm owns it, not the client.
Retention: no fixed ISA number of years; follow firm policy and law. Assembly is within 60 days.
Eliminate options that say the client owns the file or that documents may be discarded freely after the report.

Common mistakes in Audit Documentation and Working Papers

Saying the client owns the working papers because the client pays the fee.
Students link payment to ownership.
Fix: Remember the working papers are the property of the audit firm. The client may be given parts at the firm's discretion.
Quoting a fixed retention period such as five or seven years as an ISA 230 rule.
Memorised from local law or other sources.
Fix: Say the period is set by firm policy and law or regulation. Use the 60 days only for file assembly.
Listing purposes in vague terms such as 'to keep records'.
The word documentation feels obvious, so students write generic answers.
Fix: Give specific purposes: support the opinion, show compliance with ISAs, aid planning and supervision, enable review and inspection.
Thinking working papers only hold test results.
Students picture the substantive work only.
Fix: Include planning, risk assessment, engagement letter, correspondence, representations, significant judgements and review evidence.
Leaving out who did the work and who reviewed it.
Focus is on the numbers tested.
Fix: Always mention preparer and reviewer sign-off with dates, and the identifying features of items tested.
Adding new evidence to the file after assembly without recording it.
Students treat the file as editable at any time.
Fix: After assembly, any change must be documented with when, by whom and why, and the auditor must not delete old documentation.

Worked examples

Example 1

Explain why audit working papers are important. (5 marks)

Show the solution

Opinion support: the papers hold the evidence and conclusions behind the auditor's report.
Compliance: they show the audit was planned and performed in line with ISAs and legal requirements.
Planning and supervision: they help the team plan, direct and supervise the work and let the team be accountable for it.
Review: managers and partners use them to review the work, and they are used for quality control reviews and regulatory inspections.
Future audits: they record matters of continuing importance, such as the understanding of the entity and prior-year issues.

Answer: Working papers are important because they support the audit opinion, prove compliance with ISAs, help planning and supervision, enable review and inspection, and give a useful record for future audits.

Example 2

During the audit of Kavya Ltd, the finance director asks to take a copy of the whole audit file. A junior also says the file can be cleared from the system once the audit report is signed. Advise the audit manager. (6 marks)

Show the solution

Ownership: the working papers are the property of the audit firm, so Kavya Ltd has no automatic right to the whole file.
Response to the client: the firm may, at its discretion, release some parts, such as schedules prepared by the client, but must protect confidentiality and not hand over the file as of right.
Retention: the file must not be cleared on signing the report. ISA 230 requires it to be assembled promptly, within 60 days after the report date.
After assembly, the firm must keep it for the period set by its policy and law or regulation, and must not delete documentation before that period ends.
Late changes: if any change is needed after assembly, the firm must record the reason, who made the change and when, and who approved it.
Action: the manager should tell the junior to follow the firm's retention policy and tell the finance director the file belongs to the firm.

Answer: Refuse the request for the whole file, as the firm owns it and confidentiality applies, though selected items may be shared at the firm's discretion. The file must be assembled within 60 days of the report date and retained for the required period. It must not be discarded when the report is signed.

Exam tips

For purpose questions, give five distinct points. Do not repeat the same idea in different words.
Remember the ISA 230 test of an experienced auditor with no previous connection. It fits many scenarios.
In scenario questions, name the file owner as the audit firm and link the answer to confidentiality.
Never state a fixed retention number of years as an ISA rule. Use the 60 days only for assembly.
In objective questions, watch for options that give the client ownership or allow immediate disposal. Both are wrong.

Audit Documentation and Working Papers in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit Documentation and Working Papers: frequently asked questions

What is ISA 230 about?

ISA 230 covers the auditor's responsibility to prepare audit documentation for an audit of financial statements. It sets out what the documentation must achieve, the form and content, and the assembly of the final audit file.

Who owns audit working papers?

The audit firm owns them. The client has no automatic right to see or copy them. The firm may release parts at its discretion, and it must keep client information confidential.

How long must audit files be kept?

ISA 230 does not set a fixed number of years. The firm keeps the file for the period required by its quality management policy and by law or regulation. The file must be assembled promptly, not more than 60 days after the report date.

What should a good working paper show?

It should show what was tested, how items were selected, who did the work and when, the results, the conclusion, and who reviewed it and when. It should be clear enough for an experienced auditor with no prior link to the audit.