How do you audit a financial statement to find discrepancies?

Understanding Financial Discrepancies

A financial discrepancy occurs when reported numbers fail to align with underlying accounting records, supporting documentation, or expected operational realities. Finding these deviations requires systematically verifying the mathematical accuracy, classification, and existence of reported figures against independent evidence. Auditors approach this task with professional skepticism, recognizing that errors can stem from simple clerical mistakes, systemic accounting failures, or deliberate management fraud. The objective is not merely to check arithmetic but to evaluate whether the financial statements present a fair view of the entity's economic position. Materiality thresholds guide this process, determining which discrepancies warrant investigation and which are immaterial to the overall audit opinion. An auditor must understand the client's industry, regulatory environment, and internal controls to effectively identify areas where discrepancies are likely to occur. Without this foundational context, reviewing raw financial data is an exercise in futility.

Also worth reading: What are the essential internal controls for SMBs to prevent fraud and financial discrepancies? · What are the definitive forensic accounting best practices for auditing financial discrepancies? · What are the hidden risks of financial audits and how do they expose corporate discrepancies?

The Core Audit Framework

The process of finding discrepancies follows a structured framework designed to reduce audit risk to an acceptably low level. Auditors begin by assessing inherent risk, which is the susceptibility of an account balance to material misstatement before considering controls. They then evaluate internal controls to determine their design and operating effectiveness, which dictates the extent of substantive testing required. Substantive testing involves directly verifying account balances and transactions, providing the primary evidence for identifying discrepancies. This framework relies heavily on the concepts of assertions, such as existence, completeness, valuation, and rights and obligations. For every account, the auditor designs procedures to test these specific assertions. A failure in internal controls often signals that discrepancies are more probable, requiring larger sample sizes during testing. The framework is iterative, meaning findings during substantive testing may necessitate a reassessment of control risk.\n ## Risk Assessment and Materiality

Determining materiality is a quantitative and qualitative judgment that dictates the threshold for what constitutes a reportable discrepancy. Quantitative materiality is often set at a percentage of net income before taxes, typically ranging from 5% to 10%, or a percentage of total assets, usually 1% to 5%. Qualitative factors, however, can render even small discrepancies material if they mask a change in earnings trends, conceal an illegal act, or affect regulatory compliance. Risk assessment involves identifying specific risks of material misstatement at the financial statement and assertion levels. Auditors use historical data, industry trends, and discussions with management to pinpoint high-risk areas like revenue recognition or complex financial instruments. A high-risk assessment for a specific account directly influences the nature, timing, and extent of audit procedures. For instance, if revenue is deemed high risk due to aggressive sales targets, the auditor will perform more extensive cutoff testing near year-end. This targeted approach ensures audit resources are concentrated where discrepancies are most likely to materialize.

Substantive Testing Procedures

Substantive testing is the mechanical engine of discrepancy detection, divided into analytical procedures and tests of details. Analytical procedures involve comparing recorded amounts to the auditor's expectations based on historical trends, industry data, or predictive models. A large, unexplained variance between the expected amount and the recorded amount is a red flag requiring investigation. Tests of details are more direct and involve verifying individual transactions and account balances. Vouching traces a recorded item back to supporting documentation, such as an invoice or receiving report, to verify existence and accuracy. Tracing moves in the opposite direction, taking a source document and ensuring it is recorded in the books, testing for completeness. Confirmation is a specific test of detail where the auditor obtains written verification directly from a third party, such as a bank or customer. The selection of items for testing relies on sampling methodologies, often focusing on high-value items or items exhibiting unusual characteristics. When discrepancies are found during sampling, the auditor must project the misstatement to the entire population to determine its materiality.

Common Types of Financial Discrepancies

Discrepancies manifest in various forms, each pointing to different underlying causes within the financial reporting system. Cut-off errors are frequent, where transactions are recorded in the wrong accounting period, artificially inflating or deflating revenue and expenses. Classification errors occur when an expense is recorded in the wrong account, such as booking a capital expenditure as a routine operating expense. Valuation discrepancies arise when assets are not properly written down for impairment or when inventory is valued above its net realizable value. Related-party transactions often present discrepancies when they are not conducted at arm's length or are inadequately disclosed in the financial statement footnotes. Unrecorded liabilities represent a completeness failure, where obligations exist but have not been entered into the accounting system. Revenue recognition discrepancies are particularly problematic, involving premature recognition of sales or fictitious revenue entries. Detecting these specific types of errors requires the auditor to design targeted procedures, such as reviewing post-year-end cash receipts to verify cut-off or analyzing repair and maintenance accounts for improperly capitalized costs.

Manual Verification vs Automated Data Analysis

The methodology for finding discrepancies has shifted significantly with the availability of advanced technology, though manual verification remains a component of modern audits. Manual verification relies on human judgment to select samples, inspect documents, and evaluate the appropriateness of accounting treatments. It is highly flexible and well-suited for evaluating complex, non-routine transactions that require professional judgment. Automated data analysis, conversely, uses software to test entire populations of data rather than relying on samples. This approach can identify anomalies, duplicate payments, and policy violations with a speed and accuracy impossible to achieve manually. However, automated tools require clean, structured data and a well-defined logic to be effective. A common limitation of automated analysis is the garbage-in, garbage-out principle, where errors in the underlying data skew the results. The following table compares the two approaches across several operational dimensions.

When a discrepancy is identified, the audit process shifts from detection to investigation and resolution. The auditor must first determine if the exception is an isolated error or indicative of a systemic problem. This involves inquiring with management and examining additional documentation to understand the root cause of the misstatement. Management is often asked to propose corrections for the identified discrepancies. If management corrects the error, the auditor re-performs the necessary procedures to confirm the correction is accurate. If a discrepancy remains uncorrected, the auditor must evaluate its materiality, both individually and in aggregate with other uncorrected misstatements. If the aggregate uncorrected misstatements exceed the materiality threshold, the auditor will require a adjustment to the financial statements before issuing an unqualified opinion. Refusal by management to make necessary adjustments results in a qualified or adverse audit opinion. The investigation process must be thoroughly documented, detailing the nature of the discrepancy, the procedures performed, and the final resolution.

Documentation and Reporting Findings

Proper documentation is the backbone of a defensible audit, providing the evidence that supports the findings and the final opinion. Audit workpapers must detail the procedures performed, the evidence obtained, and the conclusions reached regarding every identified discrepancy. The documentation should be sufficient to allow an experienced auditor with no prior connection to the audit to understand the work performed and the rationale for the conclusions. When discrepancies are deemed material and remain uncorrected, they must be communicated to those charged with governance, typically the audit committee or board of directors. The communication should clearly describe the nature of the discrepancy, its quantitative and qualitative effects, and the auditor's recommendation for correction. For public companies, certain material discrepancies may also require reporting to regulatory bodies. The final audit report will explicitly state whether the financial statements are free from material misstatement. The reporting phase is the culmination of the entire process, translating the technical findings into a clear opinion for investors and stakeholders.

Common Mistakes in Discrepancy Detection

Several common mistakes can undermine the effectiveness of an audit and allow material discrepancies to go undetected. One frequent error is over-reliance on internal controls without performing sufficient substantive testing, particularly when control deficiencies are not properly identified. Another mistake is failing to maintain professional skepticism, where auditors accept management explanations without obtaining corroborating evidence. Inadequate sampling methodologies can also lead to missed discrepancies, especially if the sample size is too small or the selection process is not truly random. Failing to properly evaluate the qualitative aspects of a discrepancy is a critical error, as a small monetary error can be material if it masks fraud or affects compliance. Overlooking related-party transactions is another common pitfall, as these transactions often lack normal commercial substance and are difficult to identify. Finally, poor documentation of the investigation process can render the audit findings indefensible if the conclusions are later challenged. Avoiding these mistakes requires strict adherence to auditing standards and a constant critical evaluation of the evidence gathered.

When to Act and Associated Costs

The timing of audit procedures is a strategic decision that impacts the likelihood of detecting discrepancies. Interim testing is often performed several months before year-end to identify control issues early, allowing for remediation before the final audit. However, substantive procedures for final account balances are typically performed after the fiscal year-end to ensure the figures are final. Acting promptly when a discrepancy is suspected is essential to preserve evidence and prevent the alteration of records. The cost of an audit varies widely based on the size and complexity of the entity, the condition of its records, and the level of risk involved. A small business audit might cost between $5,000 and $20,000, while a large multinational corporation can expect to pay millions in audit fees. The cost of not finding a material discrepancy, however, can be far higher, leading to restatements, regulatory fines, and loss of investor confidence. Investing in robust internal controls and clean accounting systems can reduce the time required for the audit, ultimately lowering the cost of the external review.