Corporate Accounting and Auditing · Brief Introduction to Auditing Standards

SA 200 to SA 299: General Principles and Responsibilities

Updated 10 October 2026 · Fact-checked

SA 200 to SA 299 are the Standards on Auditing that set the general principles and responsibilities of the auditor. They cover overall objectives (SA 200), engagement terms (SA 210), quality control (SA 220), documentation (SA 230), fraud (SA 240), laws and regulations (SA 250) and communication with those charged with governance (SA 260).

Understand SA 200 to SA 299: General Principles and Responsibilities

The SA 200 series is the foundation of every audit. It tells you what the auditor is trying to achieve, what management must do, and how the auditor must run the engagement. Think of it as the rulebook that applies before you test a single balance.

SA 200 sets the overall objectives of the auditor and requires the audit to be conducted in accordance with the SAs. The official text says an audit is conducted on the premise that management and, where appropriate, those charged with governance have responsibilities that are fundamental to the audit. The SAs do not impose responsibilities on management and do not override laws that govern those responsibilities. The audit does not relieve management or those charged with governance of their responsibilities. The financial statements are prepared and presented by management, with oversight from those charged with governance.

SA 210 deals with agreeing the terms of the audit engagement, normally recorded in an engagement letter. SA 220 deals with quality control for an audit of financial statements. It works with SQC 1, which sets the firm's own responsibility for quality control policies, including ethical requirements and independence. SA 220 recognises that the engagement team may rely on the firm's systems unless information suggests otherwise. SQC 1 also lists criteria for deciding which engagements other than listed-entity audits need an engagement quality control review: the nature of the engagement including public interest, unusual circumstances or risks, and whether laws or regulations require a review.

SA 230 covers audit documentation. The official text says the auditor need not document separately, for example in a checklist, that each objective was achieved. But documenting a failure to achieve an objective helps the auditor judge whether that failure stopped the overall objectives from being met.

SA 240 deals with the auditor's responsibilities relating to fraud, SA 250 with consideration of laws and regulations, and SA 260 with communication with those charged with governance. SA 200 notes that the auditor may have other communication and reporting duties to users, management, those charged with governance or outside parties. These may come from the SAs or from law.

Key rules to remember

Responsibility split (SA 200): Management and TCWG prepare the financial statements; the auditor forms and reports an opinion on them; The audit does not relieve management or those charged with governance of their responsibilities.
SA 200 and the law: SAs do not override laws and regulations governing management's responsibilities; Applies to responsibilities of management and those charged with governance.
SA 230 and objectives: No separate checklist needed per objective; document any failure to achieve an objective; The failure record helps assess whether overall objectives were still achieved.
SA 220 and SQC 1: SQC 1 = firm-level quality control; SA 220 = engagement-level quality control for an audit; Engagement team may rely on the firm's systems unless information suggests otherwise.
EQCR criteria (SQC 1, non-listed audits and other engagements): Nature and public interest + unusual circumstances or risks + legal requirement; These are criteria a firm considers when choosing engagements for engagement quality control review.
Standards and their subject: SA 200 objectives; SA 210 terms; SA 220 quality control; SA 230 documentation; SA 240 fraud; SA 250 laws and regulations; SA 260 communication with TCWG; Useful for matching-type MCQs.

How to solve SA 200 to SA 299: General Principles and Responsibilities questions

Use this method for any question on the SA 200 series, whether it is an MCQ, a short note or a scenario.

1Identify which standard the question is about from the keywords: objectives, terms, quality control, documentation, fraud, laws, governance communication.
2State the core rule of that standard in one or two plain sentences.
3Separate the roles: what management or those charged with governance must do, and what the auditor must do.
4Apply the rule to the facts given in the scenario, naming the specific fact that triggers it.
5Check for a link to a related standard, such as SQC 1 with SA 220 or SA 260 with SA 240.
6Conclude clearly with what the auditor should do or whether the statement is correct, and give a one-line reason.

Quickest way: Standard-to-keyword matching

When to use it: Use for the 2-mark MCQs and for starting a short note when time is tight.

Read the question and underline the trigger word, such as engagement letter, quality, file, fraud, or governance.
Match the trigger to its standard: terms to SA 210, quality to SA 220, file to SA 230, fraud to SA 240.
Eliminate options that put a management duty on the auditor or say the audit relieves management.
Pick the option that matches the standard's core rule and avoids words like always or only.

Common mistakes in SA 200 to SA 299: General Principles and Responsibilities

Saying the audit relieves management of responsibility for the financial statements.
Students think the auditor's opinion makes the statements the auditor's own.
Fix: Remember that management prepares and presents the statements and the audit does not relieve management or those charged with governance of their responsibilities.
Claiming SAs override laws and regulations.
Students assume standards rank above everything else.
Fix: State that SAs do not override laws and regulations governing the responsibilities of management and those charged with governance.
Writing that SA 230 needs a checklist proving every objective was met.
Students confuse good practice with the requirement.
Fix: Say separate documentation of each achieved objective is unnecessary, but a failure to achieve an objective should be documented.
Mixing up SQC 1 and SA 220.
Both deal with quality control.
Fix: Link SQC 1 to the firm's policies and SA 220 to the quality control of an individual audit engagement.
Treating the engagement quality control review as needed only for listed entities.
Students remember only the listed-entity rule.
Fix: Add that for other engagements a firm considers public interest, unusual risks and legal requirements when choosing which get a review.

Worked examples

Example 1

A company's managing director tells the auditor, 'Since you are auditing our financial statements, you are responsible for their preparation and for any errors in them.' Explain the position under SA 200.

Show the solution

State the rule: the financial statements are prepared and presented by management, with oversight from those charged with governance.
Add that an audit under the SAs is conducted on the premise that management and, where appropriate, those charged with governance have fundamental responsibilities.
Note that the SAs do not impose responsibilities on management and do not override laws governing those responsibilities.
Conclude that the audit does not relieve them of those responsibilities.

Answer: The managing director is wrong. Management prepares and presents the financial statements, and the audit does not relieve management or those charged with governance of that responsibility. The auditor's role is to form and report an opinion on them.

Example 2

During an audit, the engagement team could not obtain sufficient evidence on one planned procedure and the objective of that procedure was not achieved. The team lead asks what SA 230 requires and why it matters.

Show the solution

Recall that separate documentation of each achieved objective, such as a checklist, is not required.
Note that the failure to achieve this objective should be documented.
Explain the purpose: the record helps the auditor evaluate whether the failure prevented achieving the overall objectives of the auditor.
Add that the documentation provides evidence of the basis for the conclusion on the overall objectives.

Answer: The auditor need not tick off every achieved objective, but must document this failure. The record lets the auditor evaluate whether it prevented the overall objectives from being achieved and supports the final conclusion.

Exam tips

Learn one line of purpose for each standard from SA 200 to SA 260, since MCQs often test matching.
In written answers, split the roles of management, those charged with governance and the auditor under separate bullet points.
For quality control questions, always mention both SQC 1 at firm level and SA 220 at engagement level.
Avoid absolute words such as always or never unless the standard clearly says so.
Do not quote paragraph numbers unless you are certain; the rule stated clearly earns the marks.

Practice questions from Brief Introduction to Auditing Standards

SA 200 to SA 299: General Principles and Responsibilities in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

SA 200 to SA 299: General Principles and Responsibilities: frequently asked questions

What is the main objective of SA 200?

SA 200 sets out the overall objectives of the independent auditor and requires the audit to be conducted in accordance with the SAs. It also explains the premise that management and those charged with governance have fundamental responsibilities.

Does an audit relieve management of its responsibilities?

No. The audit does not relieve management or those charged with governance of their responsibilities for the financial statements. The auditor only forms and reports an opinion.

What is the difference between SQC 1 and SA 220?

SQC 1 deals with the quality control policies and procedures of the firm, including ethics and independence. SA 220 deals with quality control for an audit of financial statements at the engagement level.

Does SA 230 require documenting that every objective was achieved?

No. A separate record such as a checklist is unnecessary. However, documenting a failure to achieve an objective helps the auditor evaluate whether the overall objectives could still be achieved.