The modern audit approach is risk-based: effort goes where material misstatement is most likely, not spread evenly across every line item.
1 The stages
Engagement acceptance
Integrity, independence and capability
Planning
Understanding the entity and its environment
Materiality
What counts as material?
Risk assessment
Where is misstatement likely?
Response
Tests of controls and substantive procedures
Completion
Final evaluation and issuing the opinion
Every stage feeds the next — weak planning shows up on the last day
2 Engagement acceptance
Before signing, the firm decides whether to take the client on at all. It considers:
- Management integrity, the entity’s reputation and its history.
- Independence: are there relationships or services that would impair the firm’s independence?
- Competence and resources: do we have the sector expertise and enough time?
- Communication with the predecessor auditor to learn why the change is happening.
On acceptance, an engagement letter is signed setting out the scope, the responsibilities, the fee and any limitations — none of that is left to a verbal understanding.
3 Materiality
Information is material if omitting or misstating it could influence the economic decisions of users of the statements. It is set as an estimated amount, usually based on a benchmark appropriate to the entity — revenue, total assets, or profit before zakat and tax — tempered by professional judgement.
| Level | What is it? | Its effect |
|---|---|---|
| Materiality for the statements as a whole | The threshold at which a misstatement is material | Drives the extent of procedures and sample sizes |
| Performance materiality | A lower amount used during execution | Reduces the risk that small errors accumulate |
| Clearly trivial threshold | Below which items are not accumulated | Stops the file filling with differences that have no effect |
Materiality is not only an amount
Some misstatements are material by their nature, however small the amount: undisclosed related party transactions, an amount that turns a loss into a profit, or a breach of law.
4 Assessing the risks of material misstatement
The auditor develops an understanding of the entity, its environment and its internal control system in order to identify where material misstatement is likely — both at the level of the statements as a whole and at the level of each assertion in each line item:
| Item | Likely risk | Response |
|---|---|---|
| Revenue | Early recognition near year end | Cut-off testing, contracts and shipping documents |
| Inventory | Incorrect quantities or valuation | Attending the physical count and testing pricing |
| Trade receivables | Inadequate allowance for doubtful debts | Ageing analysis, confirmations and subsequent receipts testing |
| Accrued expenses | Incomplete recording | Searching for unrecorded liabilities after period end |
5 Response and completion
- Tests of controls: performed when the auditor intends to rely on the operating effectiveness of controls.
- Substantive procedures: tests of details of balances and transactions, plus substantive analytical procedures.
- Accumulating identified misstatements, discussing them with management and requesting correction.
- Reviewing subsequent events and evaluating the going concern assumption.
- The management representation letter, then forming the opinion and issuing the report.
A trading company with large revenues and strong, well-documented controls over the sales cycle.
The decision: the auditor tests the effectiveness of the sales controls; if they prove effective, they reduce the extent of detailed testing and settle for fewer substantive procedures.
And the reverse: if the controls are weak or undocumented, extended substantive procedures are unavoidable — meaning more time and a higher fee. Which is why it is said that weak internal control costs the organisation twice: once in risk and once in audit fees.
Lesson summary
- An audit is a staged process: acceptance, planning, materiality, risk assessment, response, completion.
- Acceptance comes before everything and covers integrity, independence and competence.
- Materiality drives the extent of work, and some misstatements are material by their nature.
- The approach is risk-based: effort where misstatement is likely.
- Strong controls reduce the extent and cost of substantive procedures.
6 Test your understanding
Three quick questions
Pick the answer you believe is correct and you will see the result immediately.
1. A small amount, but it turns the year’s result from a loss into a profit. Is it material?
Materiality is quantitative and qualitative together; anything that flips the result or conceals a breach is material however small.
2. When does the auditor perform tests of controls?
If they do not intend to rely on them, they move straight to extended substantive procedures.
3. What is the purpose of contacting the predecessor auditor before acceptance?
The contact may reveal disagreements over accounting treatments or scope limitations that inform the acceptance decision.