You’re on a roll
Create a free account to save your ACCA progress, track your accuracy by topic, and pick up right where you left off.
Free Questions › ACCA › Advanced Audit and Assurance
Free ACCA Advanced Audit and Assurance Practice Questions & Answers
300 exam-style Advanced Audit and Assurance questions. Pick your answer, hit Check answer, and see the worked solution — free to start, no signup.
100% free · No login to startQuestion 271
What is 'audit committee effectiveness' and how does it relate to audit quality?
Select an option first.
Correct answer: B — An effective audit committee enhances audit quality by: providing a knowledgeable, independent forum where auditors can raise concerns without management pressure, reviewing and challenging the audit plan and findings, overseeing the selection and independence of auditors, reviewing and approving the financial statements before approval by the full board, and monitoring internal audit and risk management
Explanation: B is correct. Audit committee role in enhancing audit quality: the auditor communicates with the audit committee under ISA 260. A strong audit committee: (1) challenges management's significant accounting judgements independently of management; (2) supports the auditor in raising issues with management; (3) monitors whether the auditor is truly independent; (4) oversees the quality of internal audit. A: strong positive relationship. C: best practice for all entities of significant size. D: management prepares financial statements; the audit committee reviews them.
Question 272
What is 'the role of internal audit in sustainability reporting'?
Select an option first.
Correct answer: B — Internal audit increasingly reviews sustainability reporting processes — evaluating: the completeness and accuracy of sustainability data collection, the appropriateness of the reporting methodology, compliance with the chosen reporting framework (GRI, TCFD), and the effectiveness of controls over sustainability data. Internal audit's work can support the external sustainability assurance provider's assessment of controls
Explanation: B is correct. Internal audit and sustainability: as sustainability reporting matures, internal audit is applying its risk-based assurance approach to sustainability processes. Benefits: year-round monitoring (rather than point-in-time external assurance), identifying weaknesses in data collection, and providing management with early warning of sustainability reporting errors. External assurance providers may use the work of internal audit (similar to the financial audit relationship). A and C are wrong. D: sustainability data quality requires governance oversight.
Question 273
What is a 'Reasonable Assurance engagement on sustainability' under ISSA 5000?
Select an option first.
Correct answer: B — Under ISSA 5000, reasonable assurance on sustainability requires: a comprehensive risk assessment of the sustainability information, designing and performing procedures to respond to those risks (similar in breadth to ISAs for financial audits), gathering sufficient appropriate evidence on all material elements of the sustainability report, and expressing a positive conclusion. This is more demanding than limited assurance and represents the direction of travel for sustainability assurance
Explanation: B is correct. ISSA 5000 reasonable assurance: analogous to a financial statement audit in terms of the level of evidence required. The risk-based approach means: identify material topics, assess risks of material misstatement, design procedures, execute, and form a positive conclusion. Currently less common than limited assurance for sustainability (partly because the practice is less developed), but CSRD and other regulations are driving toward reasonable assurance. A: covers all sustainability information. C: covers all sustainability topics. D: not yet mandatory globally (CSRD requires limited assurance initially).
Question 274
What is 'the concept of an audit of internal controls' (as required by SOX 404)?
Select an option first.
Correct answer: B — SOX Section 404(b) requires auditors of large US listed companies (SEC registrants) to provide an independent opinion on the effectiveness of internal control over financial reporting (ICFR) — this is a separate opinion from the financial statement opinion. The auditor must: test controls (not just identify them), evaluate the design and operating effectiveness of significant controls, and express an opinion on whether ICFR is effective
Explanation: B is correct. SOX 404(b) audit: a significant US requirement. The auditor performs a risk-based assessment of ICFR and tests controls over significant accounts and disclosures. Material weakness (a deficiency where there is a reasonable possibility of material misstatement): must be reported and leads to an adverse ICFR opinion. The standards are set by PCAOB (AS 2201). A: only required for large US-listed companies. C: a material weakness leads to an adverse ICFR opinion. D: IT controls are one component.
Question 275
What is a 'pre-issuance review' and why does it differ from an engagement quality review?
Select an option first.
Correct answer: B — A pre-issuance review (also called a hot review or pre-signing review) is an informal quality control check conducted internally before the audit report is signed — typically by a partner not involved in the engagement, but not meeting the formal requirements of an EQR. An EQR is a formal regulatory requirement for listed entities and must meet the specific requirements of ISQM 2 (independence of reviewer, documented evaluation of key judgements)
Explanation: B is correct. Pre-issuance review vs EQR: pre-issuance = informal quality check, not regulated, typically for any complex engagement. EQR = formal regulatory requirement for listed entities and other high-risk engagements as identified by the firm's QM system. The EQR reviewer must be specifically qualified and cannot be involved in the engagement. The EQR must be documented. A: different levels of formality and regulatory requirements. C: pre-issuance reviews are not universally mandatory. D: EQR must be completed before the audit report is signed.
Get the full ACCA question bank — free
Drop your email and we'll send you fresh ACCA practice questions, fully worked solutions and exam-deadline reminders. No spam — unsubscribe in one click.
Want to save your score and take a full mock exam? Create a free account →
Question 276
What is the significance of 'Wirecard' and other corporate scandals for audit reform?
Select an option first.
Correct answer: B — High-profile corporate failures (Enron/WorldCom leading to SOX 2002, Carillion 2018, Wirecard 2020) exposed significant audit failures — Wirecard: €1.9bn of cash did not exist despite clean audit opinions from EY for years. These failures have accelerated audit reform: strengthened regulator oversight, increased focus on audit quality, mandatory firm rotation, enhanced scepticism requirements, expanded fraud detection responsibilities, and calls for operational separation of audit and consulting
Explanation: B is correct. Audit failures: (1) EY failed to confirm Wirecard's cash balances with the banks directly (fundamental procedure). (2) Carillion: auditors did not challenge management's aggressive contract accounting. These cases demonstrate: inadequate scepticism, failure to challenge management, and insufficient evidence gathering. Reform response: BEIS audit reform legislation in UK, SEC enforcement in US, PCAOB enhanced inspection. A: multiple scandals have driven reform. C: auditors have been found to be partly responsible in major failures. D: individual auditors and firms have faced liability.
Question 277
What are 'ESG ratings' and why might they create confusion with assurance?
Select an option first.
Correct answer: B — ESG ratings (from agencies like MSCI, Sustainalytics, S&P Global) are scoring systems that assess a company's ESG performance based on publicly available data — they are NOT assurance engagements. Unlike assurance (which verifies reported data against stated criteria), ESG ratings apply proprietary methodologies that vary between agencies, often producing inconsistent scores for the same company. The absence of standards and independence creates confusion about their reliability
Explanation: B is correct. ESG ratings vs assurance: key differences — assurance: independent practitioner, stated criteria (GRI, ISSB), formal conclusion. ESG ratings: third-party analyst, proprietary methodology, no formal assurance standard. Problems: companies can receive very different ratings from different agencies for the same ESG performance. Assurance provides a formal opinion; ESG ratings provide an analyst's score. A: fundamentally different purposes and processes. C: ESG ratings can be inconsistent. D: rating agencies produce them voluntarily based on public data.
Question 278
What is the 'concept of reasonable and honest management' and how does it affect the audit?
Select an option first.
Correct answer: B — Professional standards assume that the majority of management is honest — auditors are not required to approach every engagement as if management is deliberately dishonest. However, professional scepticism requires that auditors do not blindly trust management without evidence. The challenge: assuming honesty without verification is naive; assuming dishonesty without evidence is unfair and inefficient. The right balance: trust but verify
Explanation: B is correct. Professional scepticism balance: ISA 200 states that scepticism neither assumes management is dishonest nor assumes they are honest. Auditors design procedures based on risk assessment — where management integrity is high and controls are strong, the bar for evidence may be slightly lower; where there are integrity concerns, the bar rises significantly. A and C represent the two extremes — both are wrong. D: the assumption of reasonable management affects the scope and depth of scrutiny applied to management's representations.
Question 279
What is the 'Audit Profession of the Future' and what skills are required?
Select an option first.
Correct answer: B — Future auditors require a combination of: technical auditing skills (applying ISAs, professional judgement), data analytics and technology skills (using AI, data extraction, and analysis tools), sustainability knowledge (ESG reporting frameworks, ISSA 5000), communication skills (reporting complex findings clearly), sector-specific expertise (financial services, healthcare, technology), and global knowledge (multi-jurisdictional regulatory environments)
Explanation: B is correct. Future audit skills: technology automates routine procedures (transaction testing, reconciliations) but elevates the importance of professional judgement (interpreting results, challenging management). The auditor's role evolves: from checker to analyser and adviser. New competencies: data literacy (understanding AI outputs), sustainability knowledge (assuring ESG data), and cyber risk expertise. A: technology will replace routine tasks but elevate the role. C: audit is becoming more complex (technology, sustainability, globalisation). D: professional qualifications remain essential.
Question 280
What is the 'audit of a charity' (specific considerations)?
Select an option first.
Correct answer: B — Specific considerations for charity audits: fund accounting (restricted vs unrestricted funds — restricted funds must only be used for their designated purpose), income recognition (donation legacies, grants — timing and conditions), charitable objectives compliance, trustee responsibilities and governance, going concern (reliance on donations which may be volatile), and disclosure of remuneration (trustees usually unremunerated — any payment requires special justification)
Explanation: B is correct. Charity audit specifics: restricted funds — the auditor checks that restricted donations have been spent on their designated purpose (e.g., funds raised for a specific project must not be used for general operations). Governance: trustees must act in the charity's best interests — any conflicts of interest or self-dealing are audited carefully. Income recognition: legacies recognised when the charity becomes entitled (not just when received). A: specific considerations apply. C: thresholds vary by jurisdiction but many smaller charities require audit. D: many charities have significant going concern vulnerability.
Question 281
What is the 'concept of rotation between audit and internal audit' and ethical implications?
Select an option first.
Correct answer: B — Moving from the internal audit team to the external audit team (or vice versa) creates independence and familiarity threats — if a former internal auditor recently joined the external audit firm, they may have inside knowledge that creates an advocacy threat, or their prior work (internal audit work product) may be reviewed by the external audit team, creating a self-review threat
Explanation: B is correct. Rotation between audit roles: the IESBA Code requires that former employees of a client who join the audit firm must not be on the engagement team for a 'cooling off' period. Similarly, audit team members moving to work for the client may have access to confidential information — conflicts of interest and cooling-off periods apply. Former internal audit staff joining the external audit team: their knowledge of the client may be useful but creates familiarity/self-review threats if they audit their own prior work. A and C: restrictions exist. D: significant ethical implications.
Question 282
What is 'the concept of access to information' and the auditor's rights?
Select an option first.
Correct answer: B — In most jurisdictions, auditors of companies have statutory rights to: access all books, accounts, documents, and records of the company; require information and explanations from officers of the company; and receive information from subsidiary companies as required. Denial of access is an audit scope limitation — if pervasive, leads to a disclaimer of opinion
Explanation: B is correct. Statutory access rights (e.g., CA 2006 s.499 UK): the auditor is entitled to access all records necessary for the audit. Refusing access: constitutes an obstruction of the audit, may be a criminal offence, and results in a scope limitation which must be communicated to TCWG and reflected in the audit report (qualified or disclaimer). A and C: statutory rights exist independently of management consent. D: access rights apply to all statutory audit clients.
Question 283
What is 'assurance on non-financial key performance indicators (KPIs)' and the growing demand for it?
Select an option first.
Correct answer: B — Companies increasingly report non-financial KPIs (employee satisfaction scores, customer retention rates, accident frequency rates, training hours, diversity statistics) alongside financial results. Stakeholders demand independent assurance over these metrics because: they influence investment and lending decisions, management may have incentives to overstate positive metrics, and inconsistent measurement methodologies make comparison difficult without verification
Explanation: B is correct. Non-financial KPI assurance: the assurance provider defines the criteria (how is the metric defined and calculated?), tests the underlying data and calculation, and provides a conclusion. Growing demand: ESG investors, employees, NGOs, and regulators increasingly rely on non-financial information. Challenges: subjective metrics (employee wellbeing), inconsistent measurement, and lack of universal standards (though GRI and ISSB are developing these). A: relevant for all sectors. C: relevant across all sectors. D: many non-financial metrics are subjective and inconsistently measured.
Question 284
What is a 'regulatory investigation' and what is the auditor's role?
Select an option first.
Correct answer: B — When a regulatory authority investigates a company (e.g., FCA, Competition and Markets Authority, environmental regulators), the auditor's role is: (1) Identify any regulatory investigation as a contingent liability in the audit, (2) Ensure adequate disclosure in the financial statements, (3) Consider whether the investigation affects going concern, (4) Report to appropriate parties if the breach relates to matters requiring mandatory reporting (e.g., money laundering in regulated firms)
Explanation: B is correct. Regulatory investigation audit implications: the auditor identifies regulatory correspondence through: management inquiry, review of legal expenses, board minute review, and solicitor's letter. The investigation may require: provisioning for potential fines (if probable and estimable), disclosure as a contingent liability (if possible), and going concern assessment (if the potential fine could threaten survival). A: auditors are independent — not investigators for regulators (though some jurisdictions require reporting). C: confidentiality obligations prohibit secret disclosure. D: can have significant financial statement implications.
Question 285
What is 'the audit of public sector financial statements' — specific features?
Select an option first.
Correct answer: B — Public sector audits have specific features: the reporting framework may differ (e.g., Government Financial Reporting Manual in the UK, IPSAS internationally), the purpose extends beyond shareholder accountability to public accountability (Parliament, taxpayers), the auditor may have additional reporting responsibilities (report to Parliament, regulators, value for money studies), and materiality may be different (lower for compliance matters — public accountability requires scrutiny of even small misuses of public funds)
Explanation: B is correct. Public sector audit specifics: IPSAS (International Public Sector Accounting Standards) may apply instead of IFRS. The auditor considers: compliance with budget appropriations (funds spent as authorised), regularity (transactions properly authorised), value for money (economy, efficiency, effectiveness). Reporting to Parliament/legislature is an additional responsibility. A: many differences exist. C: private firms can audit public sector bodies. D: going concern is less commonly an issue but still relevant.
Question 286
What is 'assurance on an opening balance sheet' — used in a business combination?
Select an option first.
Correct answer: B — In a business combination, the acquiring company may require assurance over the opening balance sheet of the acquired entity — confirming that assets and liabilities are correctly stated at fair value at the acquisition date. This supports the purchase price allocation (IFRS 3) and confirms that the goodwill calculation is based on accurate data. Typically performed as a specific assurance engagement by the reporting accountant
Explanation: B is correct. Opening balance sheet assurance: separate from the statutory audit. The reporting accountant examines: the fair value of assets and liabilities at the acquisition date, the purchase price allocation to identified intangibles, and whether accounting policies are consistent with the acquirer's. This provides the acquirer with confidence in the goodwill figure and the initial recognition of the acquired business. A: can be subject to assurance. C: the statutory auditor may perform it but it is a separate engagement. D: relevant for all sizes of acquisition.
Question 287
What is the 'independent business review' (IBR) and in what context is it performed?
Select an option first.
Correct answer: B — An independent business review is performed at the request of lenders or creditors when a borrower is in financial difficulty — typically involves reviewing: the trading performance and cash generation of the business, the management team and operational controls, the financial forecast and funding requirements, options available to the business (refinancing, restructuring, disposal), and covenant compliance. Provides lenders with an independent assessment to inform their decision on continued support
Explanation: B is correct. IBR: a specialist non-statutory assignment. Most commonly commissioned by banks when a borrower is breaching covenants or approaching financial distress. The practitioner (often a Big Four or specialist restructuring firm) provides an independent view of the business's viability and prospects. No formal assurance opinion is expressed — findings are reported in a factual report. A: very different from a statutory audit. C: IBRs are triggered by financial distress, not fraud. D: IBR provides factual findings, not audit assurance.
Question 288
What is 'assurance on emissions trading schemes' and why is it growing?
Select an option first.
Correct answer: B — As carbon markets (e.g., EU Emissions Trading System, UK ETS) require companies to report verified GHG emissions, independent assurance is mandatory — verification of the number of allowances surrendered against actual emissions is required before allowances can be traded. Assurance providers must: understand the relevant monitoring plan, verify activity data (fuel consumption, production volumes), apply emissions factors, and confirm that reported emissions are accurate
Explanation: B is correct. Emissions verification: regulated under the EU ETS (Directive 2003/87/EC as amended) and national regulations. Accredited verifiers check: monitoring plan compliance, data collection completeness, calculation accuracy. The verification statement (signed by the accredited verifier) is submitted to the regulator before allowance surrender. A: mandatory for all ETS-regulated facilities. C: applies to aviation, heavy industry, power generation, and other sectors. D: financial and accounting expertise is required alongside technical knowledge.
Question 289
What is the 'materiality of going concern disclosures' — why even small going concern risks should be disclosed?
Select an option first.
Correct answer: B — Going concern disclosures are qualitatively material — even if the probability of failure is moderate, the disclosure is material to users because: the consequences of failure (losing a pension, losing a business relationship, losing an investment) are severe, users have a right to know when management believes there is significant doubt about the entity's survival, and hiding going concern doubts from users is contrary to faithful presentation
Explanation: B is correct. ISA 570 / IAS 1: the going concern disclosure is qualitatively material even if the probability of actual failure is less than 50% — because users need this information to make informed decisions. The auditor evaluates: is the disclosure sufficiently prominent? Is the uncertainty described clearly? Are management's mitigating actions realistic and supported by evidence (e.g., bank refinancing commitments)? A: even non-imminent uncertainty requires disclosure. C: transparency serves investors, even if temporarily unsettling. D: the assessment is at least 12 months from the financial statement date.
Question 290
What is the 'concept of professional behaviour' in the IESBA Code?
Select an option first.
Correct answer: B — Professional behaviour requires accountants to: comply with relevant laws and regulations, behave in a manner consistent with the profession's responsibility to act in the public interest, avoid any actions that could bring discredit to the profession, and not make misleading claims about services offered or qualifications held
Explanation: B is correct. IESBA Code — professional behaviour (the fifth fundamental principle): relates to the reputation of the profession as well as the individual. Examples of unprofessional behaviour: misrepresenting qualifications, accepting engagements beyond competence without adequate supervision, making disparaging or unfounded statements about competitors, or engaging in activities that are illegal. A: professional behaviour requires independence of judgement, not compliance with management. C: applies in all professional interactions. D: applies to all professional accountants.
Question 291
What is the 'accountability gap' in sustainability reporting and how does assurance address it?
Select an option first.
Correct answer: B — The accountability gap is the difference between the sustainability impacts a company has on the world and what is reported and verified — companies may report selectively (positive impacts prominently, negative impacts minimised) and without independent verification. Sustainability assurance: provides independent evidence that reported information is accurate and complete, reduces selective reporting, and holds companies accountable to their stakeholders (employees, communities, environment)
Explanation: B is correct. Accountability gap: occurs when: companies report only positive ESG metrics, quantification methods are self-defined, and no independent party verifies the claims. Assurance reduces (not eliminates) the gap: limited assurance = narrow procedures; reasonable assurance = more comprehensive. The gap remains partly because: (1) some sustainability impacts are qualitative and difficult to verify; (2) standards are still evolving; (3) assurance is still limited in scope compared to financial audits. A: covers all ESG dimensions. C: all ESG dimensions. D: assurance reduces but cannot eliminate the gap.
Question 292
What is the 'concept of the engagement partner's final review' of the completed audit?
Select an option first.
Correct answer: B — Before signing the audit report, the engagement partner must review: that the overall audit strategy was followed and updated as needed, that significant risks were addressed with appropriate procedures, that sufficient appropriate evidence was gathered for each material assertion, that all uncorrected misstatements have been properly considered, that going concern has been assessed, that written representations have been received, and that the proposed opinion is appropriate and properly worded
Explanation: B is correct. Final partner review (ISA 220): the engagement partner is personally responsible for the audit and the opinion. Their final review covers the entire audit file — not just a summary. The partner must be satisfied that: (1) the audit plan was executed, (2) significant issues were resolved appropriately, (3) evidence supports the conclusions, (4) the report is correctly worded. A: the review is much broader than just the report. C and D are wrong — the partner reviews the whole engagement.
Question 293
What is 'active knowledge management' in an audit firm and why does it matter?
Select an option first.
Correct answer: B — Audit firms manage knowledge across engagements to: capture lessons learned from complex audit issues (methodology notes, precedents for accounting judgements), share expertise across the firm (technical queries answered centrally), maintain current industry knowledge (sector briefings, regulatory updates), and train staff efficiently (learning from past audit experiences). Active knowledge management improves audit quality across the firm
Explanation: B is correct. Knowledge management in audit firms: particularly important in large firms with hundreds of clients across many sectors. When a technical accounting issue arises on one engagement (e.g., how to account for a complex structured product), the solution should be accessible to other teams facing the same issue. Industry knowledge databases, technical accounting guidance, audit methodology updates. A: applies to all firms though systems vary. C: applies to all sizes. D: knowledge supports judgement but cannot replace it.
Question 294
What is 'the concept of professional liability — proportionate liability'?
Select an option first.
Correct answer: B — Under proportionate liability (as exists in the UK for certain cases), where multiple parties are responsible for a loss, each defendant pays only their proportionate share of the damages — rather than joint and several liability (where any one defendant can be required to pay the full amount regardless of others' contributions). This is relevant where both management and auditors are at fault for a company's financial failure
Explanation: B is correct. Proportionate liability: in the UK, auditors can negotiate liability limitation agreements (LLAs) with audit clients that cap liability to a fair and reasonable amount. The Companies Act 2006 permits LLAs if approved by shareholders. This addresses the concern that audit firms face disproportionate exposure compared to their contribution to losses. Joint and several: the US traditionally applied this (auditor could be required to pay 100% if the company is insolvent and management cannot pay). A: under proportionate liability, the auditor pays their fair share. C: LLAs reduce but don't eliminate liability. D: significant variation across jurisdictions.
Question 295
What is the 'significance of auditor reporting developments' (ISA 701 and enhanced reporting)?
Select an option first.
Correct answer: B — The introduction of key audit matters (ISA 701) has significantly changed the audit report for listed entities — providing users with: insight into what the auditor focused on (the most significant risks), how those risks were addressed, and the outcome. Research shows users value this information; it has partly addressed the communication expectation gap. Further developments: going concern disclosures, auditor commentary on internal controls, and TCFD-aligned reporting by auditors
Explanation: B is correct. Impact of enhanced reporting: pre-ISA 701, the audit report was a standardised, largely boilerplate document. Post-ISA 701: tailored, entity-specific, informative. User research: investors value KAMs — they help understand audit focus and quality. The long-form report approach (used in some jurisdictions for PIEs) goes even further. Current debate: should auditors comment on internal control effectiveness? Should auditors report on whether management's narrative information is consistent with the financial statements? A: significant positive impact on transparency. C: contains entity-specific, valuable information. D: required for all listed entities, not just banks.
Question 296
What is the 'NOCLAR reporting consideration for professional accountants in business' vs those in public practice?
Select an option first.
Correct answer: B — NOCLAR considerations differ: Professional accountants in public practice (external auditors, public accountants): may have specific regulatory duties to report non-compliance to authorities in certain sectors (e.g., money laundering reporting, FSMA reporting for regulated firms), and can consider public interest disclosure. Professional accountants in business (finance directors, controllers): must raise concerns internally through appropriate channels (line management, audit committee, board), and may escalate to regulators if internal channels fail to address the issue
Explanation: B is correct. IESBA NOCLAR (2022 update): the code distinguishes between roles. External auditors in regulated sectors (financial services, insurance): specific mandatory reporting requirements exist. Others: consider whether it is appropriate to disclose to authorities, weigh public interest against client confidentiality. Internal accountants: the focus is on internal escalation through governance channels; external reporting considered as a last resort when internal channels are ineffective. A and C are wrong. D: PAIBs have significant NOCLAR responsibilities.
More free ACCA topics
Management Accounting401
Financial Accounting400
Corporate and Business Law400
Performance Management400
Financial Reporting400
Financial Management400
Strategic Business Reporting400
Advanced Financial Management400
Advanced Performance Management400
Advanced Taxation400
Business and Technology300
Taxation300
Audit and Assurance300
Strategic Business Leader300
Ten questions in
- The ones you miss are saved as a drill you can repeat
- Your place is kept, on this device and any other
- A streak, if that is the thing that gets you back tomorrow
Every question on this page stays free and open either way.