Launch offer — 25% off with code LAUNCH-25 See plans →
Microlesson · 5-min read

Sufficiency and Appropriateness of Audit Evidence

## Sufficiency and Appropriateness of Audit Evidence

These two concepts together determine how much evidence the auditor needs to form an opinion.

ConceptMeasuresRelates to
SufficiencyQuantity of audit evidenceHow many items, transactions, or confirmations
AppropriatenessQuality of audit evidenceRelevance + Reliability

### The inverse relationship

> Higher quality evidence → less quantity needed.

> Lower quality evidence → more quantity needed.

### Three factors affecting the auditor's judgement on sufficiency

#### 1. Materiality

  • Less material assertion → less evidence required.
  • More material assertion → more evidence required.

#### 2. Risk of Material Misstatement (RMM)

RMM = Inherent Risk × Control Risk (at the assertion level)

Risk ComponentDefinition
Inherent Risk (IR)Susceptibility of an assertion to material misstatement before considering any controls
Control Risk (CR)Risk that a material misstatement will not be prevented or detected and corrected by internal controls
  • Lower RMM → less evidence needed.
  • Higher RMM → more evidence needed.

#### 3. Size and Characteristics of the Population

  • Small, homogeneous population → less evidence needed.
  • Large, heterogeneous population → more evidence needed.

Worked example

### Example 1

Sufficiency vs Appropriateness trade-off: An auditor receives a signed external bank confirmation (high quality/appropriateness). She needs fewer confirmations to be satisfied than if she were relying solely on internally prepared bank reconciliations (lower quality).

### Example 2

Materiality effect: Trade payables of ₹10 lakh in a company with total assets of ₹1,000 crore are immaterial — the auditor may need only limited testing. But a single lease liability of ₹400 crore (material) warrants extensive evidence.

### Example 3

RMM effect: An account with high inherent risk (e.g., estimates like warranty provisions) and weak controls (high control risk) has high RMM — the auditor must gather more and better evidence compared to a routine, well-controlled account.

### Example 4

Population effect: Testing petty cash vouchers (small, homogeneous amounts) requires a smaller sample than testing sales invoices across multiple product lines and geographies (large, heterogeneous population).

⚠️ Common exam mistakes

  • Saying 'sufficiency is about quality' — sufficiency is about quantity; appropriateness is about quality.
  • Ignoring the inverse relationship: students sometimes think more evidence is always better regardless of quality.
  • Confusing Inherent Risk and Control Risk — IR exists before controls are applied; CR is the failure of controls to catch misstatements.
  • Treating RMM as a single risk rather than the product of two components (IR and CR).
Reference:
Now that you've read this — what's next?
Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.
Start 15-min diagnostic