Corporate Accounting and Auditing · Audit Engagement, Audit Program, Audit Documentation and Audit Evidence

Audit Evidence: Sufficiency and Appropriateness under SA 500

Updated 10 October 2026 · Fact-checked

Audit evidence is all the information the auditor uses to reach conclusions on which the audit opinion is based. It includes information in the accounting records and other information. Sufficiency is the quantity of evidence. Appropriateness is its quality: relevance and reliability. You need both to support the opinion.

Understand Audit Evidence: Nature, Sufficiency and Appropriateness

Audit evidence is the information the auditor uses to reach the conclusions on which the audit opinion rests. SA 500 says it includes information contained in the accounting records underlying the financial statements and other information. Accounting records alone are not enough. They are needed, but the auditor must also test them against other information.

Think of evidence as two things: how much you have and how good it is. Sufficiency measures the quantity of evidence. Appropriateness measures its quality, meaning its relevance and its reliability. Relevance asks: does this evidence relate to the assertion being tested? Reliability asks: can I trust it? Both are needed. A huge pile of weak evidence does not make up for poor quality.

The two are linked. The higher the assessed risk of material misstatement, the more evidence you need. The better the quality of evidence, the less quantity you need. But more quantity cannot cure poor quality.

Reliability depends on the source and nature of the evidence and the circumstances in which it is obtained. In general:
- Evidence from independent external sources is more reliable than evidence from within the entity.
- Internal evidence is more reliable when the related controls are effective.
- Evidence the auditor obtains directly is more reliable than evidence obtained indirectly or by inference, such as inquiry about the operation of a control.
- Evidence in documentary form, on paper or electronic, is more reliable than oral representations.
- Original documents are more reliable than photocopies or faxes.

The auditor uses professional judgment to decide whether enough appropriate evidence has been obtained to reduce audit risk to an acceptably low level. If information from one source is inconsistent with another, or doubts arise about its reliability, the auditor must determine what changes or additions to the audit procedures are needed and consider the effect on other aspects of the audit.

Key rules to remember

Audit evidence (SA 500): Audit evidence = information in accounting records + other information; Accounting records alone are not sufficient evidence for an opinion.
Sufficiency: Sufficiency = quantity of evidence; Affected by assessed risk of misstatement and by the quality of the evidence.
Appropriateness: Appropriateness = relevance + reliability (quality); Evidence must relate to the assertion tested and be trustworthy.
Risk and quantity: Higher assessed risk → more evidence needed; higher quality → less evidence needed; Quantity cannot compensate for poor quality.
Reliability hierarchy: External independent > internal with good controls > internal with weak controls; direct > indirect; documentary > oral; original > copy; These are general rules, and exceptions exist depending on circumstances.

How to solve Audit Evidence: Nature, Sufficiency and Appropriateness questions

Use this method for any question on the nature, sufficiency, appropriateness or reliability of audit evidence.

1Identify what the question asks: meaning, sufficiency versus appropriateness, reliability factors, or a case to judge.
2Define audit evidence in one line, mentioning accounting records and other information.
3Separate the two concepts: sufficiency as quantity, appropriateness as quality (relevance and reliability).
4For a case, list each piece of evidence and note its source (external or internal), form (documentary or oral), and how it was obtained (direct or indirect).
5Judge each piece using the reliability rules and say which is more reliable and why.
6Link to risk: state how the assessed risk affects how much evidence is needed.
7Conclude: say whether evidence is sufficient and appropriate, and what further procedures the auditor should do if not.

Quickest way: Two-word test: Quantity and Quality

When to use it: For MCQs and short differences where time is tight.

Ask: is the question about how much? Answer is sufficiency.
Ask: is it about how good, relevant or reliable? Answer is appropriateness.
For reliability comparisons, rank by: external over internal, direct over indirect, document over oral, original over copy.
If options say more quantity can make up for poor quality, reject them.

Common mistakes in Audit Evidence: Nature, Sufficiency and Appropriateness

Treating sufficiency and appropriateness as the same thing.
Both sound like 'enough good evidence'.
Fix: Sufficiency is quantity only. Appropriateness is quality, made of relevance and reliability.
Saying a large quantity of evidence can make up for poor quality.
Students assume more is always better.
Fix: State that quantity depends on risk and quality, but it cannot cure weak or irrelevant evidence.
Treating audit evidence as only the accounting records.
Records are the most visible source.
Fix: Write that evidence is accounting records plus other information such as confirmations, inspection and inquiry.
Ranking internal evidence as always less reliable than external.
Memorising the rule without its condition.
Fix: Say internal evidence is more reliable when related controls are effective, and weaker when controls are weak.
Ranking oral inquiry above documents.
Management explanations feel convincing.
Fix: Documentary evidence is generally more reliable than oral representations, so corroborate inquiry with documents.
Giving a one-line answer to a 'distinguish' question.
Rushing under time pressure.
Fix: Give 3 to 4 points in a two-column style: meaning, measures, depends on, effect of risk.

Worked examples

Example 1

Distinguish between sufficiency and appropriateness of audit evidence under SA 500.

Show the solution

Define sufficiency: it is the measure of the quantity of audit evidence.
Define appropriateness: it is the measure of the quality of audit evidence, that is, its relevance and reliability.
Influence: the quantity needed is affected by the assessed risk of misstatement and by the quality of the evidence.
Relationship: higher quality reduces the quantity required, but more quantity cannot make up for poor quality.
Conclusion: the auditor needs both to support the opinion.

Answer: Sufficiency is about quantity. Appropriateness is about quality, comprising relevance and reliability. Higher risk needs more evidence, better quality needs less, but quantity cannot cure poor quality. Both are required for the audit opinion.

Example 2

While auditing a trading company, the auditor has three pieces of evidence for trade receivables of Sharma Traders Ltd: (a) a direct bank-style confirmation received by the auditor from the customer, (b) a photocopy of a sales invoice from the company's files, (c) the accountant's oral statement that the customer will pay. Rank them by reliability and explain.

Show the solution

Item (a): obtained directly by the auditor from an independent external source, in documentary form. Most reliable.
Item (b): documentary but internal, and a photocopy rather than an original. Less reliable. Its reliability improves if controls over invoicing are effective.
Item (c): oral, internal and indirect. Least reliable.
Ranking: (a) first, (b) second, (c) third.
Next step: use (b) and (c) only as supporting evidence, and corroborate (c) with documents such as subsequent receipts.

Answer: Order of reliability: (a) external confirmation, then (b) photocopied internal invoice, then (c) oral statement. The oral statement alone is not appropriate evidence for the balance.

Exam tips

For 'distinguish' questions, write at least three points and use the words quantity and quality.
Learn the five reliability rules as a list and add the condition for internal evidence: effective controls.
In case questions, label each evidence by source, form and manner of obtaining before ranking it.
Remember that accounting records are part of audit evidence but not enough on their own.
In MCQs, reject options that say quantity can compensate for poor quality or that oral evidence outranks documents.

Practice questions from Audit Engagement, Audit Program, Audit Documentation and Audit Evidence

Audit Evidence: Nature, Sufficiency and Appropriateness in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit Evidence: Nature, Sufficiency and Appropriateness: frequently asked questions

What is audit evidence under SA 500?

It is the information the auditor uses to reach the conclusions on which the audit opinion is based. It includes information in the accounting records and other information. The auditor must gather enough appropriate evidence to support the opinion.

What is the difference between sufficiency and appropriateness of audit evidence?

Sufficiency measures the quantity of evidence. Appropriateness measures its quality, meaning its relevance and reliability. Both are required, and extra quantity cannot make up for poor quality.

Which audit evidence is more reliable?

Generally, evidence from independent external sources, obtained directly by the auditor, in documentary form and in original, is more reliable. Internal evidence is more reliable when related controls are effective.

Does a higher risk of misstatement need more evidence?

Yes. The higher the assessed risk of material misstatement, the more audit evidence is needed. The auditor uses professional judgment to decide when the evidence is enough to reduce audit risk to an acceptably low level.