Launch offer — 25% off with code LAUNCH-25 See plans →
Try now → N
📚 Learn/ / SA 230 - Audit Documentation
Microlesson · 5-min read

Definition, Objectives, Purpose, Content, Timing, Audit File Assembly, Changes, SQC 1 Requirements

## SA 230: Audit Documentation

Audit documentation is the written record of everything the auditor did, found, and concluded. It is the backbone of audit quality and accountability.

---

### Definition

Audit documentation = the record of:

  • Audit procedures performed
  • Relevant audit evidence obtained
  • Conclusions the auditor reached

It may be recorded on paper, electronic, or other media.

> Important: Audit documentation is NOT a substitute for the entity's own accounting records.

---

### Objective of the Auditor

Prepare documentation that provides:

1. A sufficient and appropriate record as the basis for the audit report.

2. Evidence that the audit was planned and performed in accordance with Standards on Auditing.

---

### Why Document? — Purposes of Audit Documentation

#Purpose
aHelp the engagement team plan and perform the audit
bEnable direction, supervision, and review of audit work
cMake the engagement team accountable for its work
dRetain a record of matters of continuing significance to future audits
eEnable external inspections under legal/regulatory requirements
fEnable quality control reviews per SQC 1

---

### What Does Audit Documentation Include?

  • Correspondence (including email) on significant matters
  • Checklists
  • Letters of confirmation and representations
  • Analyses
  • Audit program
  • Issues Memoranda
  • Summaries of significant matters

---

### Timing

Audit documentation must be prepared on a timely basis (i.e., during or close to the time the work is performed).

> Documentation prepared after the audit is less accurate than documentation prepared during the audit.

---

### Form, Content & Extent

The standard requires documentation sufficient for an experienced auditor with no prior connection to the audit to understand:

1. The nature, timing, and extent of audit procedures performed

2. The results of procedures and audit evidence obtained

3. Significant matters and conclusions reached, including significant professional judgements

What must be recorded for each procedure:

  • Identifying characteristics of items/matters tested
  • Who performed the work and when
  • Who reviewed the work, when, and the extent of review

Additional requirements:

  • Document discussions with management, TCWG, and others (nature, when, with whom)
  • If information is inconsistent with the final conclusion on a significant matter, document how the inconsistency was resolved

Factors affecting form, content & extent:

Factor
Size and complexity of the entity
Nature of audit procedures performed
Identified Risks of Material Misstatement (RoMM)
Significance of audit evidence obtained
Nature and extent of exceptions identified
Audit methodology and tools used
Need to document a conclusion not readily determinable from the work itself

---

### Audit File

Audit file = one or more folders (physical or electronic) containing the complete audit documentation for a specific engagement.

Assembly process:

  • The auditor must assemble the audit file and complete the administrative process on a timely basis after the audit report date.
  • This assembly is an administrative process only — it does not involve performing new audit procedures or drawing new conclusions.

Time limit: ≤ 60 days after the date of the auditor's report.

---

### Changes to Audit Documentation

Changes during final assembly are permitted only if administrative in nature:

✅ Allowed changes:

  • Deleting or discarding superseded documentation
  • Sorting, collating, and cross-referencing workpapers
  • Signing off on completion checklists
  • Documenting audit evidence that was already obtained, discussed, and agreed before the audit report date

❌ After assembly is complete, the auditor must not delete or discard any audit documentation before the end of the retention period.

---

### SQC 1 Requirements

SQC 1 (Quality Control for Firms that Perform Audits and Reviews of Historical Financial Information, and Other Assurance and Related Services) requires firms to establish policies and procedures for:

#### 1. Retention Period

  • Ordinarily no shorter than 7 years from the date of the auditor's report
  • Or if later, from the date of the group auditor's report

#### 2. Completion Memorandum

The auditor may prepare a completion memorandum (summary) describing:

  • Significant matters identified during the audit
  • How those matters were addressed

This facilitates effective and efficient review and inspection, especially for large and complex audits.

#### 3. Ownership of Audit Documentation

Unless otherwise specified by law or regulation, audit documentation is the property of the auditor.

The auditor may, at their discretion, make portions available to clients — provided:

> Such disclosure does not undermine the validity of the work performed or the independence of the auditor or personnel.

Worked example

### Example 1

60-Day Rule Application:

An auditor signs the audit report on 31 March 2025. The final audit file must be assembled and completed by 29 May 2025 (60 days later). After that date, the auditor may not delete any documentation. If the auditor discovers a minor workpaper was misfiled, they can still re-file it administratively, but cannot add new analysis or change conclusions.

### Example 2

Identifying Characteristics — What to Record:

The auditor selects 15 purchase invoices for testing. Documentation must include: invoice numbers (identifying characteristic), amount range tested, who selected and tested each invoice (e.g., 'AB — Audit Associate'), date of testing, and who reviewed the workpaper (e.g., 'PQ — Audit Manager, 15 Feb 2025'). Simply writing 'tested 15 invoices — no exceptions' is insufficient.

### Example 3

Inconsistency Documentation:

During testing, the auditor finds one large customer balance that appears uncollectable. Management insists it will be collected and provides a post-balance sheet receipt. The auditor concludes the balance is collectible. The documentation must specifically record: (a) the initial concern, (b) the evidence reviewed (the receipt), (c) why the auditor accepted management's position despite the initial red flag — not just the final conclusion.

### Example 4

Ownership in Practice:

A company's new management requests copies of all audit workpapers from the previous year's audit. The auditor may provide summaries or selected workpapers but is not obliged to hand over the entire audit file. Before sharing, the auditor assesses whether sharing would compromise the independence of the audit or reveal confidential methods — if so, sharing should be declined or limited.

⚠️ Common exam mistakes

  • Confusing the 60-day assembly deadline with the 7-year retention period — these are two separate requirements.
  • Believing that post-assembly changes to the audit file are always prohibited — administrative changes (sorting, discarding superseded docs) are permitted; what is prohibited is adding new procedures or altering conclusions.
  • Thinking audit documentation belongs to the client — it belongs to the auditor (subject to law/regulation).
  • Documenting only conclusions without recording who performed and reviewed the work and when — this makes the file non-compliant with SA 230.
  • Treating the completion memorandum as mandatory — SA 230/SQC 1 say the auditor 'may consider it helpful', making it best practice but not an absolute requirement.
  • Assuming audit documentation is a substitute for the entity's accounting records — SA 230 explicitly states it is not.
Bare-Act text Paras 5–6 (Definition & Objective), Para 8 (Form, Content & Extent), Para 14 (Audit File), SQC 1 (Retention & Ownership) · SA 230 — Audit Documentation (ICAI) & SQC 1 — Quality Control for Firms · click to expand
Audit documentation refers to the record of audit procedures performed, relevant audit evidence obtained and conclusions the auditor reached. The auditor shall prepare audit documentation that is sufficient to enable an experienced auditor, having no previous connection with the audit, to understand: (a) The nature, timing and extent of audit procedures performed; (b) The results of the audit procedures performed and the audit evidence obtained; and (c) Significant matters arising during the audit and the conclusions reached thereon, and significant professional judgements made in reaching those conclusions. The completion of the final audit file should be not more than 60 days after the date of auditor's report. The retention period for audit engagements is ordinarily no shorter than 7 years from the date of the auditor's report, or if later, the date of the group auditor's report.
Now that you've read this — what's next?
Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.
🔥 Drill 5 Qs on this → ✍️ Adaptive practice →
Start 15-min diagnostic