Audit Planning & Materiality

Why this topic matters

Planning sets the direction for the whole audit. Auditing and Attestation (AUD) Area II (Assessing Risk and Developing a Planned Response, 25–35%) tests the audit risk model, materiality levels, the overall strategy and audit plan, and required planning activities. The guidance is in generally accepted auditing standards (GAAS), codified in the clarified auditing standards sections (AU-C) — mainly AU-C 300 (planning) and AU-C 320 (materiality).

Planning activities

• Preliminary engagement activities: perform acceptance and continuance procedures, evaluate compliance with ethical and independence requirements, and establish the terms of the engagement.
• Overall audit strategy: sets the scope, timing, and direction of the audit — characteristics of the engagement, reporting objectives and deadlines, significant factors, and the nature and timing of resources.
• Audit plan: more detailed — the nature, timing, and extent of risk assessment procedures, further audit procedures at the assertion level, and other required procedures.
• Direction and supervision of team members and review of their work.
• Consider the need for specialists, the use of internal auditors, and component auditors.

Planning is continuous and iterative: the strategy and plan are updated as the audit progresses. The engagement partner and other key members must participate in planning, including the required discussion of susceptibility to material misstatement (including fraud).

The auditor may discuss elements of planning with management to coordinate the audit, but the strategy and plan remain the auditor's responsibility, and discussing detailed procedures could compromise effectiveness.

The audit risk model

Audit risk (AR) is the risk that the auditor expresses an inappropriate opinion when the financial statements are materially misstated.

Component	Meaning	Auditor controls it?
Inherent risk (IR)	Susceptibility of an assertion to material misstatement before considering controls	No — assessed
Control risk (CR)	Risk that controls will not prevent, or detect and correct, a material misstatement	No — assessed
Detection risk (DR)	Risk that the auditor's procedures will not detect an existing material misstatement	Yes — set through the nature, timing, and extent of substantive procedures

AR = IR × CR × DR, where the risk of material misstatement (RMM) = IR × CR. Rearranged: DR = AR ÷ (IR × CR).

The relationship between RMM and detection risk is inverse: higher RMM → lower acceptable detection risk → more persuasive substantive procedures (more reliable nature, timing at or near year-end, larger extent). Detection risk can never be zero because of sampling risk and non-sampling risk (human error or inappropriate procedures).

Materiality

Misstatements are material if, individually or in aggregate, there is a substantial likelihood they would influence the judgment of a reasonable user. Materiality is a matter of professional judgment, considering both quantitative size and qualitative nature.

Levels of materiality

Level	Purpose	Typical approach
Overall (financial statement) materiality	Used to evaluate whether the statements as a whole are fairly presented	A percentage of a benchmark
Specific materiality	Lower amounts for particular classes, balances, or disclosures users are sensitive to (related party transactions, executive compensation)	Below overall materiality
Performance materiality	Set below overall materiality to reduce to an acceptably low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality	Often 50–75% of overall materiality, depending on risk and expected misstatements
Tolerable misstatement	Performance materiality applied to a particular sampling procedure	≤ performance materiality
Clearly trivial threshold	Misstatements below this need not be accumulated	A small fraction of overall materiality

Common benchmarks

Entity	Benchmark	Illustrative range
Profit-oriented, stable earnings	Pretax income from continuing operations	About 5%
Volatile earnings or near break-even	Total revenue or total assets	About 0.5–1% of revenue or 1–2% of assets
Not-for-profit organization	Total revenue or total expenses	About 0.5–2%
Asset-based (investment fund)	Net assets	About 1%

Qualitative factors that can make small misstatements material

• It changes a loss into income (or vice versa), or affects compliance with debt covenants or regulatory requirements.
• It masks a change in earnings trends or hides a failure to meet analysts' expectations.
• It involves fraud or illegal acts, or increases management's compensation.
• It affects segment information that is important to operations.

Revising materiality

Revise materiality when new information would have led to a different amount initially — for example, actual results differ significantly from those anticipated. If lowered, reconsider performance materiality and the nature, timing, and extent of further procedures. Document all materiality levels and any revisions.

Using the work of others in planning

• Auditor's specialist (valuation, actuarial, information technology): consider competence, capabilities, and objectivity; agree on the scope of work.
• Internal audit: may reduce, but not eliminate, the external auditor's work; the external auditor remains solely responsible for the opinion.
• Service organizations: determine whether a System and Organization Controls (SOC) 1 report is needed.

How it is tested

• Compute maximum acceptable detection risk.
• Identify the purpose of performance materiality and the clearly trivial threshold.
• Choose an appropriate benchmark for an entity.
• Distinguish the overall audit strategy from the audit plan.