CPA Path
← All sections

Core · AUD

Auditing and Attestation

AUD covers ethics and professional responsibilities, planning and risk assessment, obtaining evidence, and forming conclusions/reporting. It rewards candidates who understand the audit story end-to-end, not isolated facts.

45 flashcards15 MCQs3 high-yield notes

Time

4 hours

MCQs / TBS

78 / 7

Score weight

50% MCQ · 50% TBS

2025 pass rate

48.21%

Why it trips people up

Wording is tricky. Many wrong answers look plausible. You must apply professional skepticism and map risks → procedures → evidence → opinion.

Balanced Remembering/Understanding and Application, with Analysis/Evaluation in risk and evidence areas. AUD also uniquely tests Evaluation skills (5–15%).

Typical study load: ~80–120 hours · Pairs well with ISC

Common traps

  • Confusing management assertions with audit procedures
  • Mixing up review / compilation / audit / attestation engagements
  • Memorizing standards numbers without understanding when they apply
  • Ignoring ethics and independence until the end

How to study AUD

  1. 1

    Learn the audit process as a narrative: accept → plan → assess risk → test → conclude → report.

  2. 2

    Drill internal controls and substantive procedures until you can choose the right response to a risk.

  3. 3

    Memorize report types and modifications with flashcards, then practice identifying the correct report from scenarios.

  4. 4

    Use MCQs to train on AICPA-style language — AUD is as much reading comprehension as content.

  5. 5

    If choosing ISC, take AUD then ISC while controls language is fresh.

Blueprint content areas

Weights are AICPA blueprint ranges. Use them to prioritize — do not ignore low-weight areas entirely, but spend more reps where the exam spends more score.

Area I — Ethics, Professional Responsibilities & General Principles

15–25%
  • Ethics & independence
  • Professional skepticism & judgment
  • Nature & scope of engagements
  • Terms of engagement
  • Requirements for engagement documentation

Area II — Assessing Risk and Developing a Planned Response

25–35%
  • Planning an engagement
  • Understanding the entity & its environment
  • Understanding internal control
  • Assessing risks of material misstatement
  • Materiality
  • Planning further procedures

Area III — Performing Further Procedures and Obtaining Evidence

30–40%
  • Internal control testing
  • Substantive procedures
  • Sampling & IT considerations
  • Specific areas (inventory, litigation, estimates, related parties)
  • Evaluating sufficiency & appropriateness of evidence

Area IV — Forming Conclusions and Reporting

10–20%
  • Reports on audit engagements
  • Other reporting considerations
  • Reporting on attestation & review/compilation engagements
  • Subsequent events & omitted procedures

AUD high-yield notes

Study these, then drill the AUD flashcards and MCQs.

AUD · High-yield

Risk model & responses

AUD is a story: understand the entity → assess RMM → design responses → gather evidence → conclude/report.

  • AR = IR × CR × DR. You only control DR through procedures.
  • Higher RMM → lower DR → stronger substantive tests.
  • Risk assess at FS level and assertion level.
  • Significant risks require special audit consideration (often substantive responses).
  • Document linkages: risk → assertion → procedure → evidence.

Exam tip: When stuck between two procedures, pick the one that hits the asserted risk (existence vs completeness).

AUD · High-yield

Opinion decision tree

Materiality + pervasiveness decide qualified vs adverse. Scope limitations decide qualified vs disclaimer.

  • Unmodified: fair presentation.
  • Qualified (GAAP): material, not pervasive misstatement.
  • Adverse: material and pervasive misstatement.
  • Qualified (scope): material, not pervasive inability to obtain evidence.
  • Disclaimer: pervasive scope limitation (or required disclaimer situations).
  • EOM/OM paragraphs draw attention without changing the opinion type by themselves.

Exam tip: Memorize definitions of pervasive — many MCQs hinge on that single word.

AUD · High-yield

Fraud procedures that get tested

Fraud is never fully eliminated; auditors respond to risks, especially revenue and management override.

  • Brainstorming required among key team members.
  • Presume fraud risk in revenue recognition (rebuttable).
  • Address management override: JE testing, bias in estimates, unusual transactions.
  • Fraud triangle: incentive, opportunity, rationalization.
  • Communication duties escalate with evidence of fraud.

Exam tip: If an answer choice ignores management override, it is probably wrong for fraud risk responses.