CA Final · Advanced Auditing, Assurance and Professional Ethics

Audit Evidence for CA Final Advanced Auditing: SA 500 and SA 505

Audit evidence is all the information the auditor uses to reach conclusions on which the opinion is based. Under SA 500 it must be sufficient (quantity) and appropriate (relevance and reliability). To solve questions, identify the assertion, judge the source's reliability, pick the right procedure, and conclude. For confirmations, apply SA 505.

What this chapter covers

This chapter explains what the auditor must collect before forming an opinion. SA 500 sets the core test: evidence must be sufficient and appropriate. Sufficiency is about quantity. Appropriateness is about quality, which has two parts: relevance and reliability. The chapter then covers how the auditor judges the reliability of the information, including information from the entity's own records and from external sources.

Next come the audit procedures used to gather evidence: inspection, observation, external confirmation, recalculation, reperformance, analytical procedures and inquiry. You must know what each one is, what it is good for, and where it is weak. SA 505 then deals in detail with one of these procedures, external confirmation, including how to design requests, what to do when management refuses to let you confirm, and what to do about non-responses and exceptions.

This chapter is a base for almost everything else in the paper. Risk assessment, sampling, analytical procedures, written representations, using the work of experts, and the audit of specific items all depend on how you obtain and evaluate evidence. If you understand this chapter well, the later standards feel like applications of the same logic.

Audit evidence is a core concept in Paper 3, and the ideas in it appear inside many other chapters and case scenarios. Questions are usually application-based: a short scenario gives you a source of information or a confirmation problem, and you must judge reliability or decide the next step. These are the questions where a clear, structured answer in provision-facts-conclusion form earns full credit. The chapter is also compact, so the effort you put in pays back quickly, and it helps your MCQ accuracy across the paper.

Audit Evidence: topics in the order to study them

1SA 500 Audit Evidence: Sufficient AppropriateStart here because it defines evidence and the sufficiency and appropriateness test that every other topic uses.
2Reliability of Audit Evidence and Information UsedStudy this next because it explains how to judge quality, which is the harder half of appropriateness and the usual basis for case questions.
3Audit Procedures for Obtaining Audit EvidenceOnce you can judge evidence, learn the tools used to collect it and the assertions each one suits.
4SA 505 External Confirmation ProceduresConfirmation is one specific procedure with its own standard, so it comes after the general procedures.
5Positive Confirmations, Non-Responses and ExceptionsFinish with what happens after requests go out, since it builds on the SA 505 process and is often tested through scenarios.

How to prepare Audit Evidence

Aim to understand the logic first, then practise applying it to short scenarios. Do not rely on memorised lists alone.

Read SA 500 and write in your own words what sufficient and appropriate mean, and how they relate to each other and to the risk of misstatement.
Make a one-page note on reliability: how source, form, controls and circumstances affect it. Add short examples for each point.
Build a table in your notebook of each audit procedure, with what it is, a simple example, and the assertion it best supports. Note which procedures are weak on their own.
Read SA 505 and list the steps in order: decide to confirm, design the request, send it, handle responses, and evaluate results. Add the management refusal case.
Practise 5 to 8 case scenarios on confirmations, covering positive and negative requests, non-response, and exceptions. Write each answer as provision, facts, conclusion.
Attempt the chapter's MCQs after the written practice, and review every wrong answer to find whether the error was in the rule or in applying it to the facts.

Common mistakes in Audit Evidence

Treating sufficiency and appropriateness as the same idea.
Fix: Link sufficiency to quantity and appropriateness to quality. Collecting more weak evidence does not fix a quality problem.
Calling any evidence from outside the entity reliable.
Fix: Check whether the external source is independent and knowledgeable, and whether the auditor received it directly. Reliability depends on the circumstances.
Relying on inquiry as the only procedure in an answer.
Fix: Pair inquiry with inspection, observation, recalculation or confirmation, and explain which assertion each covers.
Letting management handle confirmation requests.
Fix: Remember that the auditor must maintain control over selecting, sending and receiving confirmations, so the evidence stays independent.
Accepting a non-response or exception without follow-up.
Fix: For non-response, perform alternative procedures. For an exception, find the cause and decide whether it indicates a misstatement or a control deficiency.
Writing generic answers that skip the facts of the case.
Fix: Use provision, facts, conclusion. Name the specific source or procedure in the case and state a clear conclusion.

Last-day revision: Audit Evidence

Audit evidence includes information in accounting records and other information, such as from external sources.
Sufficiency measures the quantity of evidence; appropriateness measures its quality.
Appropriateness has two parts: relevance and reliability.
A higher risk of misstatement means more evidence is needed; better quality evidence can reduce the quantity needed, but not remove the need for quality.
Evidence from independent external sources is generally more reliable than evidence from within the entity.
Evidence obtained directly by the auditor is more reliable than evidence obtained indirectly or by inference.
Documentary evidence in original form is more reliable than photocopies or scanned copies.
Inquiry alone is not enough to support an assertion or the operating effectiveness of controls.
The procedures are inspection, observation, external confirmation, recalculation, reperformance, analytical procedures and inquiry.
Under SA 505, the auditor controls the confirmation request, its sending and the receipt of the response.
If management refuses to allow a confirmation, the auditor asks why, seeks evidence on whether the reasons are valid, and considers the effect on the audit.
Treat a non-response to a positive confirmation as a prompt for alternative procedures, and treat an exception as something to investigate.

Audit Evidence practice questions

Audit Evidence in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit Evidence: frequently asked questions

What is the difference between sufficient and appropriate audit evidence?

Sufficient refers to the quantity of evidence. Appropriate refers to its quality, meaning its relevance and reliability. Both are needed, and more of one does not make up for a lack of the other.

How should I study SA 500 and SA 505 together?

Learn SA 500 first, since it gives the general test for evidence. Then treat SA 505 as a detailed application of one procedure, external confirmation, and use the SA 500 reliability points to judge the responses.

How are audit evidence questions asked in the exam?

They often appear as short case scenarios, in both MCQs and written answers. You are asked to judge the reliability of a source, pick a suitable procedure, or decide what to do about a confirmation issue.

What should I do if a confirmation request gets no reply?

Perform alternative audit procedures to get the relevant evidence, such as examining later receipts or shipping documents for a receivable. Then evaluate whether the evidence you now have is sufficient and appropriate.