Audit and Assurance · External audits
Reasonable vs Limited Assurance and Types of Engagement
Updated 11 October 2026 · Fact-checked
Reasonable assurance is a high but not absolute level of assurance, given in an audit as a positive opinion. Limited assurance is a moderate level, given in a review as negative-form wording. Agreed-upon procedures give no assurance: the practitioner reports only factual findings. Match the engagement to the level of assurance.
Understand Reasonable vs Limited Assurance and Types of Engagement
An assurance engagement is one where a practitioner gives a conclusion that increases the confidence of intended users in the subject matter. Users might be shareholders, lenders or regulators. The subject matter could be financial statements, but it could also be controls, sustainability data or compliance.
The key idea is the level of assurance. No practitioner can give absolute assurance, because of inherent limitations such as sampling, judgement and the possibility of collusion. So there are two levels. Reasonable assurance is high. Limited assurance is lower, but still meaningful.
The level drives the work. For reasonable assurance, the practitioner reduces engagement risk to an acceptably low level. This needs extensive procedures: risk assessment, tests of controls where relied on, and substantive procedures. For limited assurance, engagement risk is higher but still acceptable. The work is mainly enquiry and analytical procedures, so it is cheaper and quicker.
The level also drives the wording of the conclusion. Reasonable assurance gives a positive opinion, such as "the financial statements give a true and fair view". Limited assurance gives a negative-form conclusion, such as "nothing has come to our attention that causes us to believe the statements are not prepared in accordance with the framework".
Not every engagement gives assurance. In an agreed-upon procedures engagement, the practitioner performs procedures agreed with the client and reports the factual findings. The users draw their own conclusions. Compilation is also not assurance: the accountant assembles information from management's records and gives no opinion.
Key rules to remember
- Five elements of an assurance engagement
- Three-party relationship + appropriate subject matter + suitable criteria + sufficient appropriate evidence + written assurance report
- The three parties are the practitioner, the responsible party and the intended users. Learn all five; questions often ask which is missing.
- Reasonable assurance
- High level of assurance → positive opinion → engagement risk reduced to an acceptably low level
- Example: statutory audit of financial statements. Not absolute assurance.
- Limited assurance
- Moderate level of assurance → negative-form conclusion → engagement risk acceptable but higher
- Example: review of financial statements. Work is mainly enquiry and analytical procedures.
- No assurance
- Agreed-upon procedures or compilation → report of factual findings only (or no opinion)
- No conclusion on reliability is given. Use of the report is usually restricted to the parties who agreed the procedures.
How to solve Reasonable vs Limited Assurance and Types of Engagement questions
Use this method for any question on assurance levels or engagement types.
- 1Read the scenario and identify who wants what, and why. Note the users and the subject matter.
- 2Decide whether the user needs a conclusion at all. If they only want facts reported, it is agreed-upon procedures. If they want the accounts assembled, it is compilation.
- 3If a conclusion is needed, decide the level. High confidence for a wide group of users or a legal requirement points to reasonable assurance. A narrower need for lower cost points to limited assurance.
- 4Name the engagement: audit for reasonable assurance, review for limited assurance.
- 5State the form of the conclusion: positive opinion or negative-form conclusion, or factual findings only.
- 6Describe the nature of the work that fits: extensive evidence gathering versus enquiry and analytical procedures.
- 7Link back to the question requirement. If asked for the five elements, test the scenario against each one and say which is present or missing.
Quickest way: Three-question shortcut
When to use it: Use in Section A or OT case questions where you must pick the engagement or assurance level quickly.
- Ask: is a conclusion given? If no, it is agreed-upon procedures or compilation (no assurance).
- If yes, ask: is it a positive opinion? If yes, reasonable assurance (audit). If it says nothing has come to attention, limited assurance (review).
- Check the options for the wording trap: a limited assurance engagement still gives assurance, and an audit never gives absolute assurance.
Common mistakes in Reasonable vs Limited Assurance and Types of Engagement
Saying an audit gives absolute or guaranteed assurance.
Students hear that audits are "reliable" and assume no risk remains.
Fix: Always say reasonable assurance is high but not absolute, because of inherent limitations such as sampling and judgement.
Saying limited assurance means no assurance.
The word "limited" sounds like "none".
Fix: Limited assurance is a meaningful, moderate level. Only agreed-upon procedures and compilation give no assurance.
Writing a positive opinion for a review.
Students copy audit report wording.
Fix: A review uses a negative-form conclusion: nothing has come to our attention that causes us to believe the statements are materially misstated.
Treating agreed-upon procedures as a cut-down audit with an opinion.
Both involve testing, so they look similar.
Fix: In agreed-upon procedures the scope is set by the client and the practitioner reports factual findings only. Users form their own conclusions.
Listing the five elements from memory but not applying them to the scenario.
Students learn the list as a fact to recall rather than a test to use.
Fix: Check each element against the scenario, naming the parties, the subject matter and the criteria used.
Worked examples
Example 1
A small company's bank asks for comfort on the annual financial statements. The company is exempt from statutory audit and wants a lower-cost option. The accountant proposes a review engagement. Explain the level of assurance, the form of conclusion and the nature of the work.
Show the solution
- Level: a review gives limited assurance, which is moderate. It is lower than an audit but still gives some comfort to the bank.
- Conclusion: a negative-form statement, such as "nothing has come to our attention that causes us to believe the financial statements are not prepared, in all material respects, in accordance with the applicable framework".
- Work: mainly enquiries of management and analytical procedures. There is far less testing of transactions, balances and controls than in an audit.
- Cost: lower, because less evidence is needed. This fits the company's wish for a cheaper option.
- Limitation: the bank gets less assurance than from an audit. It should understand that the conclusion is not a positive opinion.
Answer: A review gives limited assurance. The conclusion is in negative form. The work is mainly enquiry and analytical procedures, so it costs less than an audit but gives the bank less comfort.
Example 2
A client asks its accountant to check that all supplier invoices over a set amount were approved by a manager, and to report the exceptions found. The client will decide what to do with the results. Is this an assurance engagement? Test it against the five elements.
Show the solution
- Three-party relationship: there is a practitioner and a client, but the client is both the responsible party and the only user. There is no separate intended user receiving a conclusion.
- Subject matter and criteria: the approval of invoices is identifiable, and the criteria (the approval limit) are set by the client.
- Evidence: the practitioner gathers evidence by inspecting invoices, but only to the extent agreed.
- Report: the practitioner reports factual findings (the exceptions), not a conclusion on whether controls are effective.
- Because no conclusion is given, the engagement does not provide assurance. It is an agreed-upon procedures engagement.
Answer: This is not an assurance engagement. It is agreed-upon procedures: the accountant performs the agreed checks and reports factual findings only, with no opinion or conclusion.
Exam tips
- Learn the five elements as a checklist and apply them to the scenario. Say which are present and which are missing.
- In Section C, always state three things for an engagement: level of assurance, form of conclusion and nature of work. That covers most of the marks.
- In objective questions, watch for absolute words such as "guarantee" or "no risk". They make an option wrong for any assurance engagement.
- Do not mix up review and agreed-upon procedures. A review gives a conclusion; agreed-upon procedures give findings only.
Reasonable vs Limited Assurance and Types of Engagement in other exams
The same ground in other exams, if you are preparing for more than one or want another angle on it.
Reasonable vs Limited Assurance and Types of Engagement: frequently asked questions
What is the difference between reasonable and limited assurance?
Reasonable assurance is a high level of assurance, given in an audit as a positive opinion. Limited assurance is a moderate level, given in a review as a negative-form conclusion. The audit needs far more evidence than the review.
What are the five elements of an assurance engagement?
They are a three-party relationship, an appropriate subject matter, suitable criteria, sufficient appropriate evidence and a written assurance report. The three parties are the practitioner, the responsible party and the intended users.
How is agreed-upon procedures different from an audit?
In an audit, the auditor decides the scope and gives an opinion. In agreed-upon procedures, the procedures are agreed with the client and the practitioner reports factual findings only. No assurance is given and users reach their own conclusions.
Is a review the same as an audit?
No. A review gives limited assurance using mainly enquiry and analytical procedures. An audit gives reasonable assurance using extensive testing, and it ends with a positive opinion.