Advanced Auditing, Assurance and Professional Ethics · Audit Evidence

SA 500 Audit Evidence: Sufficient Appropriate

Updated 5 October 2026 · Fact-checked

Audit evidence is the information the auditor uses to reach conclusions for the opinion. Sufficiency is the quantity of evidence. Appropriateness is its quality: relevance and reliability. To solve a question, identify the assertion, judge relevance, rate reliability, decide if the quantity is enough, and conclude in provision-facts-conclusion form.

Understand SA 500 Audit Evidence: Sufficient Appropriate

Audit evidence is all the information the auditor uses to arrive at conclusions on which the audit opinion is based. It includes information in the accounting records and information from other sources. Accounting records alone are not enough. You must support them with other evidence.

Evidence must be sufficient and appropriate. Sufficiency measures the quantity of evidence. Appropriateness measures its quality, which means its relevance and its reliability. The two are linked. Better quality evidence reduces the quantity you need. But a large quantity of weak evidence does not make up for poor quality.

Relevance asks whether the evidence relates to the assertion being tested. A procedure may be relevant to one assertion and not to another. For example, inspecting subsequent receipts from debtors helps test existence of receivables. It does not test completeness of sales. Reliability depends on the source and nature of the evidence and the circumstances in which it is obtained.

General indicators of reliability are widely taught. Evidence is more reliable when it comes from independent external sources. It is more reliable when the entity's related controls are effective. It is more reliable when obtained directly by the auditor rather than by inference. It is more reliable in documentary form than oral form, and original documents are more reliable than photocopies or scanned copies. These are generalisations. They can be affected by circumstances, so apply them with judgment.

The auditor decides how much evidence is enough using professional judgment. Factors include the assessed risk of material misstatement (higher risk needs more evidence) and the quality of the evidence (higher quality needs less). If you cannot obtain sufficient appropriate evidence, you must consider the effect on the opinion, which may lead to a modified opinion.

Key rules to remember

Sufficiency: Sufficiency = quantity of audit evidence; Affected by the assessed risk of material misstatement and by the quality of the evidence.
Appropriateness: Appropriateness = relevance + reliability; It is the quality of evidence. Evidence must be both relevant and reliable to be appropriate.
Risk and quantity link: Higher assessed risk → more evidence needed; higher quality → less evidence needed; Quality does not fully replace quantity, and quantity cannot cure poor quality.
Reliability indicators: External > internal; effective controls > weak controls; direct > indirect; documentary > oral; original > copy; These are generalisations, not absolute rules. Circumstances can change the ranking.
Information from the entity: Test accuracy and completeness of information used as evidence; When using information produced by the entity, evaluate whether it is sufficiently reliable for the auditor's purposes.

How to solve SA 500 Audit Evidence: Sufficient Appropriate questions

Use this method for any question that asks whether evidence is sufficient or appropriate, or asks you to compare evidence.

1Identify the financial statement item and the assertion being tested, such as existence, completeness, valuation or rights.
2State the rule briefly: audit evidence must be sufficient (quantity) and appropriate (relevance and reliability).
3Test relevance: does the evidence relate to that assertion and to the direction of possible misstatement?
4Test reliability: check source (external or internal), form (documentary or oral), original or copy, directly obtained or not, and strength of controls.
5Judge sufficiency: link quantity to the assessed risk of material misstatement and to the quality of the evidence.
6Apply to the facts given, naming what is weak or missing.
7Conclude: say whether the evidence is sufficient appropriate, what further procedures are needed, and the effect on the opinion if evidence cannot be obtained.

Quickest way: Relevance, Reliability, Quantity check

When to use it: Use this for short MCQs and for the opening lines of a descriptive answer when time is tight.

Ask: right assertion? That is relevance.
Ask: who produced it, in what form, and how did I get it? That is reliability.
Ask: is the risk high and is the sample or coverage small? That is sufficiency.
If one of the three fails, the evidence is not sufficient appropriate.
Write the conclusion in one line: provision, facts, conclusion.

Common mistakes in SA 500 Audit Evidence: Sufficient Appropriate

Treating sufficiency and appropriateness as the same thing.
Both words sound like 'enough', so students blur them.
Fix: Remember: sufficiency is quantity, appropriateness is quality (relevance and reliability).
Saying more evidence can make up for poor quality evidence.
Students assume a large volume compensates for weakness.
Fix: State that quantity needed depends on risk and quality, but a large quantity of unreliable evidence does not become appropriate.
Stating reliability rankings as absolute, such as 'external evidence is always reliable'.
Notes list the indicators without the qualification.
Fix: Say they are generalisations and that circumstances can matter, for example an external source that is not independent or knowledgeable.
Ignoring relevance to the specific assertion.
Students focus on how reliable a document is, not on what it proves.
Fix: Always name the assertion first, then check the evidence addresses it.
Forgetting the consequence when evidence is not obtainable.
Answers stop at describing the evidence.
Fix: End with the effect on the opinion: consider whether a modified opinion is needed.

Worked examples

Example 1

While auditing trade receivables of Alpha Ltd, the auditor relies only on photocopies of sales invoices provided by the sales manager to conclude that receivables exist. The assessed risk of material misstatement for receivables is high. Is the evidence sufficient appropriate?

Show the solution

Provision: audit evidence must be sufficient (quantity) and appropriate (relevance and reliability) to support the opinion.
Assertion: existence of receivables.
Relevance: sales invoices show that a sale was recorded, but they do not by themselves show that the customer owes the amount on the balance sheet date. Relevance is limited.
Reliability: the copies come from an internal source, are photocopies rather than originals, and were provided by management rather than obtained directly. Reliability is low.
Sufficiency: the risk is high, so more evidence is needed, and the quality is low, so even more is required.
Conclusion: the evidence is not sufficient appropriate.

Answer: The evidence is not sufficient appropriate. The auditor should obtain external confirmations from debtors, examine original documents and subsequent receipts, and, if sufficient appropriate evidence cannot be obtained, consider the effect on the opinion.

Example 2

For inventory of Beta Ltd, the auditor attends the physical count and observes it directly. For the valuation of inventory (cost and net realisable value), the auditor obtains only a written representation from management that inventory is stated at the lower of cost and net realisable value, and relies on it alone. Comment on the evidence.

Show the solution

Provision: evidence must be relevant and reliable, and enough for the assessed risk. A written representation under SA 580 is not a substitute for other sufficient appropriate audit evidence the auditor can reasonably expect to be available.
Existence of inventory: the auditor's direct observation of the count is relevant and reliable because it is obtained directly by the auditor.
Valuation: the representation is relevant to valuation, but it is an internal statement from the party whose figures are being audited. It is not sufficiently reliable on its own.
Sufficiency: valuation needs further procedures such as checking costs to purchase invoices and comparing cost with net realisable value using subsequent selling prices.
Conclusion: evidence on existence is appropriate, but evidence on valuation is insufficient.

Answer: Direct observation is good evidence for existence. For valuation, reliance on a management representation alone is inappropriate, because it cannot replace other sufficient appropriate evidence. The auditor should test cost and net realisable value with independent documents and subsequent sales before concluding.

Exam tips

Write the definition of sufficiency and appropriateness in one line each at the start of the answer.
Always mention both relevance and reliability when asked about appropriateness.
In case scenarios, name the assertion before judging the evidence.
Qualify reliability indicators with 'generally' and note that circumstances matter.
Close with the effect on the opinion when the evidence is lacking.

Practice questions from Audit Evidence

SA 500 Audit Evidence: Sufficient Appropriate in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

SA 500 Audit Evidence: Sufficient Appropriate: frequently asked questions

What is the difference between sufficiency and appropriateness of audit evidence?

Sufficiency is the quantity of audit evidence. Appropriateness is its quality, made up of relevance and reliability. Both are needed to support the opinion.

Can more evidence make up for poor quality evidence?

No. The quantity needed depends on the assessed risk and on quality, but a large amount of unreliable evidence does not become appropriate.

Is external evidence always more reliable than internal evidence?

No. External evidence is generally more reliable, but this depends on circumstances such as the independence and knowledge of the source. Treat it as a generalisation.

What happens if the auditor cannot get sufficient appropriate evidence?

The auditor considers the effect on the opinion. This may lead to a modified opinion, depending on how material and pervasive the matter is.