Key Principles of International Auditing Standards

Why This Matters

International Auditing Standards (ISAs) form the backbone of audit practice worldwide, and understanding them is essential for anyone working in international financial reporting. You're not just being tested on what each standard says—you're being tested on how these standards work together to create a systematic approach to audit quality. The ISAs represent a logical progression from planning and risk assessment through evidence gathering to opinion formation and reporting, and exam questions frequently ask you to connect these phases.

Think of the ISAs as a risk-based framework where every step builds on the previous one. Auditors first establish their objectives and independence, then plan based on identified risks, gather evidence to address those risks, and finally form and communicate their opinion. Don't just memorize standard numbers—know what phase of the audit each standard addresses and how it connects to the auditor's ultimate goal of providing reasonable assurance that financial statements are free from material misstatement.

---

Foundation and Objectives

Before auditors can execute any procedures, they need clarity on their fundamental purpose and ethical obligations. These foundational standards establish the "why" behind everything auditors do.

ISA 200: Overall Objectives of the Independent Auditor

• Reasonable assurance is the core objective—auditors aim to obtain sufficient confidence that financial statements are free from material misstatement, whether due to fraud or error
• Independence and objectivity are non-negotiable prerequisites; without them, the audit opinion loses its value to financial statement users
• Professional skepticism underpins all audit work—auditors must maintain a questioning mind and critically assess evidence throughout the engagement

---

Planning and Risk Assessment

Effective audits don't happen by accident—they require systematic planning that responds to the specific risks each entity presents. The planning standards create the roadmap for how auditors will allocate their time and resources.

ISA 300: Planning an Audit of Financial Statements

• Audit strategy and plan must specify the nature, timing, and extent of procedures—this isn't optional documentation but the foundation for audit quality
• Entity complexity drives planning decisions; higher-risk entities require more extensive procedures and potentially specialized expertise
• Coordination requirements apply when using other auditors or specialists—the lead auditor remains responsible for the overall opinion

ISA 315: Identifying and Assessing Risks of Material Misstatement

• Understanding the entity and its environment is mandatory before auditors can identify where misstatements might occur—this includes industry conditions, regulatory factors, and internal controls
• Inherent risk and control risk must both be assessed; inherent risk exists regardless of controls, while control risk reflects the possibility that controls won't prevent or detect misstatements
• Documentation of risk assessment is required—auditors must show their work, creating a clear trail from identified risks to planned responses

ISA 320: Materiality in Planning and Performing an Audit

• Materiality represents the threshold above which misstatements could influence user decisions—it's the auditor's filter for what matters
• Performance materiality is set lower than overall materiality to reduce the risk that undetected misstatements aggregate to a material amount
• Qualitative factors matter alongside quantitative thresholds—a small misstatement involving fraud or regulatory compliance may be material regardless of dollar amount

---

Evidence and Procedures

Once risks are identified and materiality established, auditors must design procedures that generate sufficient, appropriate evidence. This is where audit planning translates into actual work performed.

ISA 330: The Auditor's Responses to Assessed Risks

• Tailored responses must link directly to assessed risks—higher-risk areas demand more persuasive evidence and more extensive testing
• Tests of controls and substantive procedures work together; if controls are strong and tested, substantive testing can be reduced (but never eliminated)
• Ongoing evaluation is required throughout the audit—auditors must adapt their approach if new risks emerge or planned procedures prove ineffective

ISA 500: Audit Evidence

• Sufficient and appropriate evidence is the standard—sufficiency relates to quantity, appropriateness relates to quality and relevance
• Evidence reliability varies by source; external confirmations and auditor-generated evidence generally outrank internally-produced documents
• Professional judgment determines how much evidence is enough—there's no universal formula, making this a frequent exam topic

ISA 520: Analytical Procedures

• Analytical procedures evaluate financial information by analyzing relationships among data—comparing current-year ratios to prior years or industry benchmarks
• Required at planning and review stages—these procedures help identify unexpected relationships that may indicate misstatement risk
• Investigation of deviations is mandatory when actual results differ significantly from expectations—auditors can't ignore anomalies

---

Special Considerations and Judgments

Some audit areas require heightened attention because they involve significant uncertainty or judgment. These standards address situations where standard procedures may not be sufficient.

ISA 570: Going Concern

• Going concern evaluation is required on every audit—auditors must assess whether the entity can continue operating for at least 12 months from the financial statement date
• Management's assessment must be evaluated critically, including the reasonableness of assumptions and the adequacy of supporting evidence
• Disclosure requirements apply when material uncertainty exists—even if the entity is likely to survive, users need to know about significant doubts

---

Reporting and Communication

The audit culminates in the auditor's report, which communicates findings to financial statement users. These standards govern how auditors translate their work into meaningful opinions.

ISA 700: Forming an Opinion and Reporting on Financial Statements

• Opinion formation requires evaluating all evidence obtained against the applicable financial reporting framework (IFRS, local GAAP, etc.)
• Clear opinion expression is mandatory—users must understand whether financial statements are fairly presented, and if not, why
• Report structure follows a standardized format to ensure consistency and comparability across audits globally

ISA 720: The Auditor's Responsibilities Relating to Other Information

• Other information includes annual reports, management commentary, and similar documents that accompany audited financial statements
• Consistency review is required—auditors must identify any material inconsistencies between other information and the audited statements
• Reporting obligations arise if material misstatements exist in other information—auditors can't ignore misleading narrative even if the numbers are correct

---

Quick Reference Table

---

Self-Check Questions

1. Which two standards work together to determine where auditors focus their efforts and how much misstatement matters? Explain how they interact.

2. An auditor discovers that management's discussion in the annual report contradicts information in the audited balance sheet. Which ISA governs this situation, and what is the auditor's responsibility?

3. Compare and contrast inherent risk and control risk under ISA 315. How does an auditor's assessment of each affect the nature of procedures under ISA 330?

4. If an FRQ asks you to explain why an auditor increased substantive testing for inventory despite strong internal controls, which standards would you reference and what reasoning would you provide?

5. Under ISA 570, what triggers an auditor's obligation to ensure disclosure in the financial statements? How does this standard interact with ISA 700's reporting requirements?