Common Mistakes in ACCA Audit and Assurance

Audit and Assurance (AA) is often underestimated because the underlying concepts — risk, evidence, controls — sound intuitive. In practice, candidates lose marks not because they don’t understand auditing conceptually, but because their answers aren’t precise enough to satisfy how AA is marked. Here are the mistakes that show up most often, and how to correct each one.

Mistake 1: writing vague audit procedures

The single most common way to lose marks on AA constructed-response questions is writing an audit procedure that’s too generic to be markable. “Check the invoices” or “verify the balance” doesn’t specify what you’re checking, against what, or why. A markable audit procedure names the specific document or source, the specific assertion being tested, and the specific action:

Weak: “Check a sample of receivables balances.”

Strong: “Select a sample of year-end trade receivables balances and agree the amounts to after-date cash receipts in the bank statement, to confirm existence and valuation.”

Practice writing procedures in this specific structure — action, source document, assertion being addressed — until it becomes automatic. Every ACCA AA practice question that asks for audit procedures is a chance to drill this format.

Mistake 2: confusing audit risk components

Audit risk breaks down into inherent risk, control risk, and detection risk, and candidates frequently misattribute a scenario’s risk factor to the wrong component:

• Inherent risk exists independent of controls — it comes from the nature of the transaction or balance itself (complex estimates, related party transactions, a new accounting standard).
• Control risk is the risk that a client’s internal controls fail to prevent or detect a misstatement — this depends on how the client’s systems and processes are designed and operated.
• Detection risk is the risk that the auditor’s own procedures fail to detect a misstatement that exists — this is the component the auditor directly controls, mainly by adjusting the nature, timing, and extent of audit procedures.

A common wrong answer describes a risk clearly caused by weak internal controls (control risk) but labels it inherent risk, or vice versa. Read the scenario for whether the risk factor relates to the transaction’s inherent nature or to how the client’s own systems handle it.

Mistake 3: not linking risks to a specific response

AA questions frequently ask candidates to identify audit risks and the auditor’s response to each one — and a common mistake is describing the risk correctly but giving a response too generic to actually address it. If the identified risk is “revenue may be overstated due to aggressive recognition on long-term contracts,” the response needs to name a procedure that specifically tests that risk (for example, reviewing contract terms and recalculating percentage-of-completion), not a generic statement like “perform substantive procedures on revenue.”

Mistake 4: misapplying the concept of materiality

Candidates sometimes treat materiality as a single fixed threshold rather than a judgment that varies by context. Materiality is assessed both at the overall financial statement level and, separately, for specific classes of transactions, balances, or disclosures where a smaller misstatement could still influence a user’s decisions (performance materiality). A common error is applying overall materiality uniformly to every balance, missing that some balances warrant a lower threshold because of their nature or the scrutiny they’re likely to receive.

Mistake 5: getting internal control questions backward

When asked to identify a control deficiency and recommend an improvement, candidates sometimes describe the deficiency vaguely (“there’s a lack of segregation of duties”) without specifying which duties are inappropriately combined and what could go wrong as a result, or they recommend a control that doesn’t actually address the deficiency they identified. Structure these answers the same way as audit procedures: state the specific deficiency, the specific risk it creates, and a specific, workable recommendation.

Mistake 6: confusing types of audit opinion and their triggers

Candidates sometimes correctly identify that a misstatement or scope limitation exists but select the wrong opinion type. As a quick reference:

• Unmodified opinion: no material misstatement, no scope limitation.
• Qualified opinion: a material but not pervasive misstatement or scope limitation.
• Adverse opinion: a material and pervasive misstatement.
• Disclaimer of opinion: a material and pervasive scope limitation (the auditor cannot obtain sufficient appropriate evidence).

The distinction between “material” and “material and pervasive” is where most wrong answers happen — pervasive means the effect is not confined to specific elements and either affects a substantial portion of the financial statements or is fundamental to users’ understanding.

How to practice effectively

Because AA rewards precision in written answers as much as conceptual understanding, practice writing full audit procedures and risk/response pairs rather than only reviewing them. Work through the ACCA AA question bank topic by topic, and once you’re comfortable with individual areas, move to a full timed ACCA mock exam to practice producing precise, markable answers under real time constraints.