Audit and Assurance · Audit procedures

Sufficient Appropriate Audit Evidence: ISA 500 for ACCA Audit and Assurance

Updated 11 October 2026 · Fact-checked

Audit evidence is the information the auditor uses to reach conclusions for the opinion. It must be sufficient (enough in quantity) and appropriate (relevant and reliable in quality). More evidence cannot make up for poor quality. Reliability depends on source, form, and how the evidence was obtained.

Understand Sufficient Appropriate Audit Evidence

Auditors must give an opinion on the financial statements. They cannot do that on a hunch. They need audit evidence: the information used to reach conclusions on which the opinion is based. It includes accounting records and other information, such as confirmations, documents and observation.

Evidence has two qualities. Sufficiency is about quantity: have you got enough? Appropriateness is about quality: is it relevant and reliable? The two are linked. The higher the risk of material misstatement, the more evidence you need. Better quality evidence reduces the quantity needed. But a large amount of weak evidence does not fix poor quality.

Relevance means the evidence relates to the assertion or control being tested. For example, selecting items from the goods despatched notes and tracing them to sales invoices and the sales ledger tests completeness of revenue. Selecting items from the sales ledger or sales invoices and tracing them back to the goods despatched notes tests occurrence. The same document can be relevant for one assertion and useless for another.

Reliability depends on the circumstances. These general points are usually true, but not always:

Evidence from independent external sources is more reliable than evidence from inside the entity.
Internally generated evidence is more reliable when the related controls are effective.
Evidence obtained directly by the auditor (inspection, observation, reperformance) is more reliable than evidence obtained indirectly or by inference (enquiry).
Documentary evidence is more reliable than oral evidence.
Original documents are more reliable than photocopies, faxes or scans.

If evidence from different sources is inconsistent, or the reliability of information is doubtful, the auditor must determine what changes or additions to procedures are needed and consider the effect on other parts of the audit. Cost is not a valid reason to skip a necessary procedure, though the auditor may consider the cost against the usefulness of the information.

Key rules to remember

Components of audit evidence: Appropriate = Relevant + Reliable; Sufficient = Enough quantity; Sufficiency is about quantity. Appropriateness is about quality. Always address both.
Link between risk and quantity: Higher assessed risk of material misstatement → more evidence needed; Better quality evidence reduces the quantity required, but cannot remove the need for enough.
Reliability guide: source: External independent > Internal with strong controls > Internal with weak controls; A general guide only. Always consider the circumstances.
Reliability guide: method: Auditor's direct evidence > Indirect evidence > Enquiry alone; Inspection, observation and reperformance beat oral explanations.
Reliability guide: form: Documentary > Oral; Original > Copy; Photocopies, scans and faxes can be altered, so are less reliable.

How to solve Sufficient Appropriate Audit Evidence questions

Use this method for any question asking you to assess, compare or improve audit evidence.

1Identify the assertion or balance being tested, so you can judge relevance.
2List the evidence available and its source: external or internal, and who produced it.
3Judge reliability using source, form (documentary or oral, original or copy) and whether the auditor obtained it directly.
4Consider the controls over internal evidence. Strong controls raise reliability.
5Comment on sufficiency: how much evidence there is compared with the risk and the size of the balance.
6Conclude on whether the evidence is sufficient and appropriate, and say what further procedure you would perform.
7Link back to the scenario facts. Generic statements earn few marks.

Quickest way: Source, form, directness, then quantity

When to use it: Use it in Section A and OT case questions that ask which evidence is most or least reliable.

Look for the external, independent source first.
If sources are equal, prefer written over oral and original over copy.
Prefer what the auditor did or saw themselves over what management told them.
Check the question wording: 'most reliable' or 'least reliable'.
For sufficiency questions, ask whether risk is high and the amount tested is small.

Common mistakes in Sufficient Appropriate Audit Evidence

Treating sufficient and appropriate as the same thing.
Both sound like 'good enough' evidence.
Fix: Sufficient is quantity. Appropriate is quality (relevance and reliability). State both separately.
Saying more evidence can compensate for poor quality.
Students assume volume solves everything.
Fix: Quantity depends partly on quality, but weak evidence stays weak. Get better evidence, not just more.
Treating the reliability hierarchy as always true.
Students memorise the list as absolute rules.
Fix: Use words like 'generally' and consider the circumstances. For example, an external document can be unreliable if the source lacks independence or competence.
Ignoring relevance to the assertion.
Students focus on how reliable the document is.
Fix: Ask which assertion the procedure addresses. A reliable document tested in the wrong direction proves nothing for that assertion.
Relying on enquiry of management alone.
It is quick and easy in practice.
Fix: Enquiry alone is not sufficient. Corroborate it with inspection, observation or external evidence.
Giving cost or time as a reason to accept weaker evidence.
Students think about practical pressure on the audit team.
Fix: Difficulty or cost is not a valid basis for omitting a necessary procedure.

Worked examples

Example 1

During the audit of a trade receivables balance, the auditor has: (1) a signed confirmation received directly from a customer, (2) a photocopy of a sales invoice held by the client, (3) the finance director's verbal statement that the customer will pay. Rank the evidence from most to least reliable and explain why.

Show the solution

Item 1 is external and written, and it is good evidence of the existence of the balance. Its reliability still depends on the auditor controlling the request and the response. Provided they do, it is the most reliable.
Item 2 is documentary but internal and a photocopy. It is less reliable, as copies can be altered and the source is the client.
Item 3 is oral and from management, who have an interest in the result. It is the least reliable.
Item 1 is good evidence of the existence of the receivable, but it gives less assurance on valuation or recoverability. A customer can confirm a balance and still not pay, so valuation needs further procedures, such as testing subsequent receipts. Item 3 says little about the valuation of the balance unless supported.

Answer: Most to least reliable: customer confirmation, photocopied invoice, finance director's verbal statement. The confirmation is external and written, and it is reliable provided the auditor controls the request and the response. The verbal statement is oral and from an interested party.

Example 2

An audit junior tested 5 purchase invoices out of several thousand for a high-risk client. All 5 were correctly recorded. The junior concludes the audit evidence for purchases is sufficient and appropriate. Comment.

Show the solution

Sufficiency: 5 items out of several thousand is very small, especially for a high-risk client. Higher risk requires more evidence.
Appropriateness: the invoices are external documents, which is generally reliable. Purchase invoices are relevant to occurrence, accuracy and classification. But the junior selected invoices that were already recorded, so the test cannot show whether liabilities are missing. Completeness of liabilities is tested by starting from independent sources and tracing to the ledger.
The conclusion ignores the risk level and the assertions being tested.
The junior should increase the sample size and perform tests linked to completeness. These should start from independent sources, such as supplier statements and post year-end payments, and trace the items to the purchases ledger to check the liabilities are recorded in the correct period. The junior should also document the basis for conclusions.

Answer: The conclusion is not supported. The evidence is insufficient because the sample is too small for a high-risk area, and it may not be appropriate for all assertions, notably completeness. Completeness needs tests that start from independent sources, such as supplier statements or post year-end payments, and trace to the ledger. More items and additional procedures are needed.

Exam tips

In written answers, always say 'sufficient' and 'appropriate' separately. Markers look for both words.
Qualify reliability statements with 'generally'. An exam scenario often includes an exception, such as a weak-control environment making internal documents less reliable.
In OT questions, read for the assertion being tested before choosing the best evidence.
When asked to improve evidence, name a specific procedure (for example, a receivables confirmation or attending the inventory count) and link it to the scenario.
Do not forget that evidence obtained for one purpose can contradict other evidence. Say the auditor must investigate and may need extra procedures.

Sufficient Appropriate Audit Evidence in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Sufficient Appropriate Audit Evidence: frequently asked questions

What is the difference between sufficient and appropriate audit evidence?

Sufficiency measures the quantity of evidence. Appropriateness measures its quality, meaning how relevant and reliable it is. You need both to support an opinion.

What makes audit evidence reliable?

Reliability is affected by the source, form and how it was obtained. Evidence is generally more reliable if it is external and independent, documentary, an original, obtained directly by the auditor, and from an entity with effective controls.

Which ISA deals with audit evidence?

ISA 500 Audit Evidence deals with what constitutes audit evidence and the auditor's responsibility to design and perform procedures to obtain sufficient appropriate evidence. ISA 330 and others cover specific areas.

Can the auditor use cost as a reason to accept less evidence?

No. The difficulty or cost of obtaining evidence is not a valid basis for omitting a necessary procedure. The auditor may weigh the cost against the usefulness of the information, but must still obtain enough appropriate evidence.