The AUD section tests auditing and attestation subject matter on the Uniform CPA Examination, which NASBA confirms is required for U.S. CPA licensure. The AICPA publishes the exam's blueprint — the version effective January 1, 2026 — and its resource page confirms AUD's format: two multiple-choice testlets of 39 questions each, then three task-based simulation testlets. NASBA's page verifies the administrative path: a jurisdiction must declare you eligible before you apply, and score release timing varies. Technical teaching below is grounded in PCAOB AS 1105 on audit evidence and AS 3105 on opinion departures; the exam areas those sources do not cover are flagged for study in the blueprint and current standards themselves.
What AUD covers — and which version applies
AUD is the Auditing and Attestation section of the Uniform CPA Examination, which candidates must pass to qualify as U.S. CPAs. The applicable content authority is the CPA Exam Blueprints, with the version effective January 1, 2026 currently published, and AUD runs in five testlets: two multiple-choice testlets of 39 questions each, then three task-based simulation testlets.
NASBA's CPA Exam page confirms the exam's role: it helps ensure that only qualified individuals become licensed U.S. CPAs, and passing it is required for candidates seeking licensure. AUD is one of that exam's sections, and the AICPA's exam resource page lists AUD's testlet structure alongside the other sections.
The AICPA resource page points you to the CPA Exam Blueprints as the content authority. The Blueprints detail the minimum level of knowledge and skills required for initial licensure, organize content by Area, Group, and Topic with score weightings, and include sample task statements, skill levels, and the number of each item type. The version effective January 1, 2026 is currently published, and Blueprints are typically updated one to two times per year — so download the current one before you build a study sequence.
Plan around the format as well as the content. Each section is delivered in five testlets: the first two are multiple-choice questions, and the last three are task-based simulations, which are condensed work products you complete rather than simple select-one answers. A published pronouncements policy also governs when new auditing standards become testable — generally the later of the first quarter after their mandatory effective date or six months after issuance — which matters if you study while a standard is changing.
Use these four areas as the top level of your study map. Review, compilation, preparation and attestation engagements sit within the blueprint’s detailed scope; they are not additional top-level areas. Match practice to the listed tasks and skill levels without assuming that every task will appear on your sitting.
| Official AUD content area (January 2026 blueprint) | Score allocation |
|---|---|
| I. Ethics, Professional Responsibilities and General Principles | 15–25% |
| II. Assessing Risk and Developing a Planned Response | 25–35% |
| III. Performing Further Procedures and Obtaining Evidence | 30–40% |
| IV. Forming Conclusions and Reporting | 10–20% |
Sources used: Learn what to study for the CPA Exam | Resources | AICPA & CIMA; CPA Exam - NASBA; AICPA Uniform CPA Examination Blueprints effective January 2026
The verified administrative path: eligibility, application, and scores
You must be declared eligible by a jurisdiction before applying, and the NASBA Candidate Guide is the official starting point. CPA Examination Services handles application processing, credential evaluations, and score reporting for state boards, and score release timing varies by jurisdiction.
These logistics come directly from the NASBA CPA Exam page and are the most reliably verifiable part of your preparation. Eligibility is jurisdiction-specific: each state board of accountancy sets its own education and other requirements, and you cannot apply for a section until a jurisdiction declares you eligible. Because those requirements vary, verify your own path with your board or through NASBA's jurisdiction pages rather than relying on generalized summaries.
On scores, the source is explicit that release is not uniform — NASBA does not receive all scores at the same time, and some jurisdictions do not release scores through its website. Build slack into any timeline that depends on a score arriving by a date.
- Read the NASBA Candidate Guide before applying; it is the official orientation document for candidates.
- Complete the Pathway to CPA Exam Quiz if you are unsure how to begin the application process.
- Expect application processing and credential evaluation to run through NASBA CPA Examination Services on behalf of your state board.
- Some jurisdictions apply through the CPA Portal, NASBA's online application system.
- Track status with the NASBA CPA Mobile App, which offers applications, status updates, alerts, and jurisdiction-specific guidance.
- Do not assume a score release date: NASBA notes scores do not all arrive at the same time and some jurisdictions do not release scores via its website.
Sources used: CPA Exam - NASBA
Audit procedures and what each one provides
AS 1105 classifies audit procedures by purpose: risk assessment procedures, tests of controls, and substantive procedures, which include tests of details and substantive analytical procedures. The named procedures — inspection, observation, inquiry, confirmation, recalculation, reperformance, and analytical procedures — each carry known limitations, and inquiry alone is never enough to conclude on an assertion or a control.
AS 1105 sorts procedures into risk assessment procedures and further audit procedures, with further procedures split into tests of controls and substantive procedures. The same physical act can serve more than one purpose, so classification follows the procedure's purpose — and when a procedure serves several purposes, the auditor must achieve each objective.
Each named procedure has a signature limitation. Observation shows a process was performed, but only at the moment observed, and being watched can change how people perform. Inquiry ranges from formal written questions to informal oral ones, and evaluating the responses is part of the procedure itself. Recalculation checks mathematical accuracy; reperformance independently re-executes procedures or controls that company personnel originally performed. Analytical procedures study plausible relationships among financial and nonfinancial data and investigate significant differences from expected amounts.
A limitation worth emphasizing in practice questions: inquiry alone is never sufficient. AS 1105 states that inquiry of company personnel, by itself, does not provide sufficient evidence to reduce audit risk for a relevant assertion or to support a conclusion about control effectiveness. Confirmation is the contrast case — a confirmation response is a direct written communication to the auditor from the confirming party, which is why it carries real weight for existence assertions.
Sources used: AS 1105: Audit Evidence | PCAOB
Evidence: sufficiency versus appropriateness
Sufficiency is the quantity of audit evidence; appropriateness is its quality, meaning relevance plus reliability. Under AS 1105, the quantity needed rises with assessed risk, and collecting more of the same type of evidence cannot compensate for poor quality.
AS 1105 defines audit evidence as all the information the auditor uses in arriving at the conclusions on which the opinion is based — including information that contradicts management's assertions, not only information that supports them. Sufficiency measures quantity. The quantity needed increases as the risk of material misstatement increases, and it decreases as the quality of the evidence rises.
Appropriateness measures quality, and it has two components. Relevance is the relationship between the evidence and the assertion or control objective being tested, and it depends on how the procedure was designed and timed and on the level of detail needed. Reliability depends on the nature and source of the evidence and the circumstances of obtaining it. AS 1105 states general patterns — a knowledgeable source independent of the company outranks internal-only sources; evidence obtained directly by the auditor outranks indirect evidence; original documents outrank copies, whose reliability depends on controls over the conversion. Treat these as tendencies, not absolute rules.
Internally generated evidence is not automatically unusable. When using information produced by the company, AS 1105 requires the auditor to test its accuracy and completeness — or the controls over them — and to evaluate whether the information is precise and detailed enough for the audit's purpose. Quality and quantity also trade off: relevant evidence from a less reliable source, or less relevant evidence from a more reliable one, may need to be supplemented rather than discarded. And when evidence from one source conflicts with another, or reliability is in doubt, the auditor must resolve the matter and consider the effect on the rest of the audit.
Worked example: to test the existence of recorded receivables, an auditor compares the client's aged receivable listing, reconciled to the general ledger, with confirmations returned directly to the auditor by customers. The confirmations are generally more reliable for existence because they come directly from an independent source. The listing is not worthless — it is relevant evidence whose accuracy and completeness the auditor can test — but on its own it is management-produced information about a management-prepared balance. Weighing the two is a judgment about source, assertion, and controls, not a rule that internal documents never count.
Practice exercise
An auditor wants evidence supporting the existence of recorded inventory. Procedure A: inspect the client's perpetual inventory records, reconciled to the general ledger and covering every location. Procedure B: attend the physical count at the largest warehouse, test-count items, and trace counts to the final inventory listing. Which procedure better supports existence, and why does the more comprehensive-looking option fall short?
Show answer
Procedure B generally better supports existence. The counts are evidence the auditor obtains directly, and AS 1105 treats directly obtained evidence as more reliable than indirect evidence. The perpetual records, however complete and reconciled, are information produced by the company; using them as audit evidence would first require testing their accuracy and completeness or the controls over them. Their comprehensiveness is a matter of quantity, while existence turns on the quality of the source.
This is the sufficiency-versus-appropriateness distinction from AS 1105: quantity cannot substitute for quality. The option that looks most thorough is internal, while the observation ties the evidence to the auditor's own direct work. Note the limits — the records remain relevant to completeness and valuation questions, and the observation covers only the point in time and location visited, so the auditor would still judge whether the combination of procedures is sufficient.
- Reliability generally rises with independence and directness: external over internal-only sources, directly obtained over indirect, originals over copies.
- Relevance ties each procedure to a specific assertion — for example, existence, completeness, or valuation.
- More of the same type of evidence cannot make up for poor quality; higher-quality evidence reduces how much corroboration you need.
- When sources conflict or reliability is doubtful, resolve it and assess the effect on other audit areas.
Sources used: AS 1105: Audit Evidence | PCAOB
Selecting items for testing: all items, specific items, or sampling
AS 1105 gives three means of selecting items: selecting all items, selecting specific items, and audit sampling. Testing specific items — key items or all items over a threshold — is not sampling, and its results cannot be projected to the population. Only sampling, applied to less than 100 percent of items for the purpose of evaluating a characteristic of the balance or class, supports projection.
When designing tests of details or tests of controls, AS 1105 requires the auditor to determine how items will be selected so that the evidence, combined with other relevant evidence, meets the procedure's objective. The choice among the three alternatives depends on the nature of the procedure, the characteristics of the control or account, and the evidence needed.
Selecting all items (100 percent examination) fits a small number of large-value items, a response to a significant risk where other selection means fall short, or a procedure that can be automated across the entire population. Selecting specific items targets key items — suspicious, unusual, risk-prone, or error-prone entries — or all items over a set amount to verify a large share of an account.
The trap is projection. Applying procedures to specific selected items does not constitute audit sampling, and the results cannot be projected to the entire population. Audit sampling is the application of a procedure to less than 100 percent of the items in an account or class of transactions for the purpose of evaluating some characteristic of that balance or class — that purpose is what licenses projection.
Practice exercise
An auditor tests the 25 largest sales invoices for proper authorization and finds three exceptions. A colleague proposes projecting the resulting exception rate to the full year's sales population. What is wrong with that, and what selection approach would support a projection?
Show answer
The 25 largest invoices were selected as specific items, not as an audit sample, so their results cannot be projected to the whole population. To evaluate a characteristic of the entire population, the auditor would need audit sampling — applying the procedure to less than 100 percent of the items for the purpose of evaluating that characteristic of the balance or class.
The three exceptions are still useful evidence about the items tested and may raise questions worth pursuing, but quantifying a population exception rate requires sampling. The distinction turns on the purpose of the selection, not the number of items examined.
Sources used: AS 1105: Audit Evidence | PCAOB
Selecting the opinion type with a two-question grid
Ask two questions: is the issue a misstatement or a scope limitation, and is it material but not pervasive or material and pervasive? AS 3105 defines the resulting opinions: qualified (fair presentation except for the effects of the matter), adverse (statements do not present fairly), and disclaimer (no opinion expressed).
AS 3105 supplies the definitions. A qualified opinion states that, except for the effects of the matter to which the qualification relates, the financial statements present fairly in all material respects; it applies when a scope restriction or lack of sufficient appropriate evidence prevents an unqualified opinion that stops short of a disclaimer, or when a departure from the framework is material but the auditor has not concluded an adverse opinion is required. An adverse opinion states the statements do not present fairly. A disclaimer states the auditor does not express an opinion.
Qualified wording has its own rules: the report must include a phrase such as 'except for' or 'with the exception of,' and vaguer phrases such as 'subject to' are not acceptable. For scope limitations, the choice between qualifying and disclaiming depends on the auditor's assessment of the importance of the omitted procedures — the nature and magnitude of the potential effects and their significance to the financial statements. Pervasiveness is judged from those effects, not assumed from the account involved.
Worked scenario with the facts made explicit: a client refuses to let the auditor observe any physical inventory count, inventory is a large proportion of total assets, and every inventory amount flows from the records the auditor cannot verify. That is a scope limitation — no misstatement is alleged — and the potential effects are material and pervasive, so the grid points to a disclaimer. Contrast a case where the unobserved count covers one warehouse out of several, inventory is material, and alternative procedures verify most of the balance: the limitation is material but confined, supporting a qualified opinion instead. Nature first, then severity, with severity established by the facts.
| Issue | Material but not pervasive | Material and pervasive |
|---|---|---|
| Misstatement (departure from the framework) | Qualified opinion | Adverse opinion |
| Scope limitation (insufficient evidence) | Qualified opinion | Disclaimer of opinion |
Sources used: AS 3105: Departures from Unqualified Opinions and Other Reporting Circumstances | PCAOB
External information as evidence: relevance and reliability together
When you plan to use information from outside the company as audit evidence, you must evaluate both its relevance and its reliability, regardless of whether management used it in preparing the financial statements. Reliability factors work in combination — source expertise, regulatory oversight, independence from the company, directness of access, processing complexity, and any review or verification — and restrictions or disclaimers reduce what the evidence can support.
Companies increasingly hand auditors data from external sources: exchange prices, industry statistics, census data, even social media reviews. PCAOB staff guidance on AS 1105 is clear that once you plan to use external information as evidence, you evaluate its relevance and reliability whether or not the company relied on it for its own reporting.
The reliability factors combine rather than override each other. Information from a source with proven expertise, or subject to regulatory oversight such as stock exchanges and government statistical agencies, generally ranks above data from aggregators with little or no oversight. A source the company can influence ranks below an independent one, information obtained directly by the auditor ranks above information extracted from company systems, and heavily aggregated or adjusted data carries more error risk than original data. Relevance has its own checks — disaggregated data is often more relevant than combined figures, and the age of the information matters, as with census data applied to a population that has since shifted.
Two closing habits come from the standards themselves. If evidence from one source conflicts with another, or you have doubts about its reliability, AS 1105 requires procedures to resolve the matter and an assessment of the effect on the rest of the audit. And when third-party evidence carries restrictions, limitations, or disclaimers, evaluate their effect on reliability before relying on it.
Sources used: AS 1105: Audit Evidence | PCAOB; Evaluating Relevance and Reliability of Audit Evidence Obtained from External Sources (Oct. 7, 2021)
Complete self-check drill with worked answers
Name the governing concept — the assertion, the selection method, or the nature and severity of the reporting issue — before reading the answers. These six items check the distinctions taught above; they are study checks, not a readiness score or a prediction of your exam result.
Run the drill cold, writing your concept before checking the answers. If evidence items (1–4) give you trouble, revisit the evidence sections above; for reporting items (5–6), revisit the opinion grid. The free AUD practice questions linked at the end of this guide give you more repetition in the same style.
Practice exercise
Work each item by naming the governing concept first. (1) An auditor is choosing between customer confirmations returned directly to the auditor and the client's own reconciled receivable listing to test receivables — which assertion is at stake, and which procedure is generally more reliable for it? (2) An auditor asks management whether a control operated and plans to conclude on the control's effectiveness from the inquiry alone — what is the flaw? (3) An auditor examines the 20 largest inventory items and wants to project the exception rate to the whole warehouse population — what is the problem? (4) For a valuation assertion, the auditor can use a year-end price from a stock exchange or a figure compiled by a social-media data aggregator — which is generally more reliable, and which factors decide it? (5) A client bars the auditor from every inventory count location; inventory is a large share of total assets, and the amounts flow entirely from records the auditor cannot verify, with no alternative procedures able to cover the gap — which report type do the facts support? (6) The auditor identifies a material departure from the reporting framework whose effect is confined to one account, with no indication the problem reaches further — which opinion fits?
Show answer
1. Existence; confirmations come directly to the auditor from independent customers, so they are generally more reliable than a management-prepared listing, whose accuracy and completeness would themselves need testing. 2. Inquiry of company personnel, by itself, does not provide sufficient evidence to reduce audit risk for a relevant assertion or to support a conclusion about control effectiveness — corroboration is required. 3. The 20 largest items are specific items, not an audit sample, so their results cannot be projected to the population; evaluating a characteristic of the whole balance requires sampling. 4. The exchange price is generally more reliable: the source has proven expertise and regulatory oversight while the aggregator has little or none, and independence from the company and the lower level of processing also favor the exchange data. 5. A disclaimer of opinion — the stated facts establish a scope limitation (a client-imposed restriction) under which the auditor cannot obtain sufficient appropriate evidence, and with inventory a large share of total assets the potential effects are material and pervasive to the statements taken as a whole, so the auditor does not express an opinion. 6. A qualified opinion — AS 3105 directs a qualified opinion when the auditor believes the statements contain a material departure from the framework and has not concluded that an adverse opinion is required; the stated facts make the departure material but not pervasive.
Items 1–4 apply AS 1105 and its staff guidance: the reliability hierarchy for existence, the stated limit on inquiry alone, the ban on projecting specific-item results, and the combination of reliability factors for external information. Items 5–6 apply the AS 3105 grid — nature first (scope limitation versus misstatement), then severity as established by the stated facts, selecting disclaimer or qualified opinion accordingly.
Sources used: AS 1105: Audit Evidence | PCAOB; Evaluating Relevance and Reliability of Audit Evidence Obtained from External Sources (Oct. 7, 2021); AS 3105: Departures from Unqualified Opinions and Other Reporting Circumstances | PCAOB
Career routes and what to verify next
The verified route is: confirm your jurisdiction's requirements with its board of accountancy, become declared eligible, apply through the official NASBA channels, and pass the required exam sections. This guide's evidence does not support salary figures, hiring outcomes, or claims about alternative credentials, so verify those separately.
What the evidence supports is narrow but firm: passing the Uniform CPA Examination is required for individuals seeking to qualify as U.S. CPAs, and the exam is one component of a licensure process whose education and experience requirements each state board sets. That makes your first practical step jurisdictional, not academic — confirm your board's requirements before scheduling anything, because eligibility rules determine when and whether you can sit.
The technical teaching above rests on PCAOB AS 1105 and AS 3105, which cover evidence and reporting. Exam areas the retrieved sources do not cover — ethics and professional responsibilities, risk assessment and planned response, and the review, compilation, preparation, and attestation engagement areas — need the current blueprint and the applicable professional standards. Treat this guide as one input, not full coverage of the section.
- Confirm education and experience requirements with your state board of accountancy — they are jurisdiction-specific and not covered by the retrieved source.
- Read the NASBA Candidate Guide and, if your path is unclear, the Pathway to CPA Exam Quiz before applying.
- Check the current AUD blueprint on the AICPA's exam pages so you study the version actually in force.
- Use official NASBA channels — the CPA Portal where applicable, the CPA Mobile App, and your board — for application status and score release.
- Browse the full library of study guides to support the exam's other sections.
Sources used: CPA Exam - NASBA
Sources used
Facts checked:
- Learn what to study for the CPA Exam | Resources | AICPA & CIMA
- AS 1105: Audit Evidence | PCAOB
- AS 3105: Departures from Unqualified Opinions and Other Reporting Circumstances | PCAOB
- CPA Exam - NASBA
- Evaluating Relevance and Reliability of Audit Evidence Obtained from External Sources (Oct. 7, 2021)
- AICPA Uniform CPA Examination Blueprints effective January 2026