Substantive Procedures — Perform Substantive Tests And Analytical Procedures - CPA Aud

SECTION 1

Historical Context & Motivation

The evolution of substantive procedures in auditing reflects a century-long effort to move from cursory checks of bookkeeping accuracy to rigorous, evidence-based assurance over financial statements. In the earliest days of the profession, auditors performed near-complete verifications of every transaction—a brute-force approach that became impractical as businesses scaled in size and complexity. The profession's response was to develop a layered assurance framework in which tests of details and analytical procedures work together to detect material misstatements in account balances, transaction classes, and disclosures.

1930s • McKesson & Robbins Scandal

Massive inventory fraud at McKesson & Robbins revealed that auditors relying solely on management representations without independent substantive testing left critical misstatements undetected. The SEC subsequently mandated direct confirmation and physical inspection procedures.

1972 • SAS No. 1 Codification

The AICPA codified existing auditing standards into Statement on Auditing Standards No. 1, formally distinguishing between tests of controls and substantive tests of details, laying the conceptual groundwork for the modern risk-based audit.

1988 • SAS No. 56 — Analytical Procedures

SAS No. 56 established analytical procedures as a required element in planning and overall review stages of every audit, and as a permissible substantive procedure during fieldwork—formalizing ratio analysis and trend analysis as audit evidence.

2002 • Sarbanes-Oxley Act & PCAOB Formation

In response to Enron and WorldCom, the Sarbanes-Oxley Act created the PCAOB, which elevated the role of substantive procedures for public-company audits and integrated them tightly with internal-control evaluations under AS 2110 and AS 2301.

2010–Present • Clarified Auditing Standards (AU-C)

The AICPA's Clarified Auditing Standards (AU-C 330, AU-C 520) redrafted requirements for substantive procedures and analytical procedures in a converged format aligned with the International Standards on Auditing (ISAs), reinforcing the risk-based approach.

The central question these developments address is straightforward yet profound: How can an auditor obtain sufficient appropriate evidence that financial statement amounts are free from material misstatement, without verifying every single transaction? Substantive procedures—comprising both tests of details and substantive analytical procedures—are the profession's answer.

SECTION 2

Core Principles & Definitions

Under the risk-based audit model, the auditor first assesses the risk of material misstatement (RMM) at the assertion level—combining inherent risk and control risk—and then designs further audit procedures whose nature, timing, and extent are responsive to those assessed risks. Substantive procedures are one of the two categories of further procedures (the other being tests of controls). Unlike tests of controls, which evaluate the operating effectiveness of internal controls, substantive procedures directly target the dollar amounts and disclosures in the financial statements.

Substantive Tests of Details

Procedures applied to individual transactions, account balances, or disclosures—such as confirmations, vouching, tracing, inspection of documents, and recalculation—that provide direct evidence about financial statement assertions.

Substantive Analytical Procedures

Evaluations of financial information through analysis of plausible relationships among financial and non-financial data. The auditor develops an expectation and investigates significant deviations from that expectation.

Assertions

Management representations embodied in the financial statements—existence/occurrence, completeness, valuation/allocation, rights and obligations, and presentation and disclosure—that the auditor tests through substantive procedures.

Detection Risk

The risk that the auditor's procedures fail to detect a material misstatement. Because audit risk = RMM × detection risk, substantive procedures must be designed to reduce detection risk to an acceptably low level given the assessed RMM.

Sufficient Appropriate Evidence

The standard of proof the auditor must achieve. Sufficiency is the quantity of evidence (influenced by RMM and quality), while appropriateness is the relevance and reliability of that evidence in supporting the assertion being tested.

✦

KEY TAKEAWAY

Think of substantive procedures like a quality-control inspector at a manufacturing plant. Tests of details are like pulling individual widgets off the assembly line and measuring them against specifications. Substantive analytical procedures are like comparing yesterday's yield rate to today's—if the ratio is off, something in the process has gone wrong. Both approaches look for defects, but one drills into individual items and the other surveys the production landscape for anomalies.

SECTION 3

Visual Explanation — The Substantive Procedures Framework

This diagram shows how the auditor flows from risk assessment at the top, through the design decision point, down into the two branches of substantive procedures—tests of details on the left and substantive analytical procedures on the right—before converging into the final evaluation of results.

The framework above illustrates the sequential logic embedded in AU-C 330 (and the PCAOB's AS 2301 for issuers). The auditor begins at the top by assessing the risk of material misstatement for each relevant assertion—say, the existence assertion for accounts receivable or the valuation assertion for goodwill. That assessed risk dictates how aggressively the auditor must design substantive procedures. When RMM is assessed as higher, the auditor tilts toward more detailed tests of details—perhaps confirming a larger sample of receivable balances—rather than relying heavily on analytical procedures alone. Conversely, when RMM is lower and internal controls are strong, substantive analytical procedures may suffice for some assertions. Regardless of the assessed risk, however, AU-C 330 mandates that the auditor perform substantive procedures for every material account balance and disclosure—an auditor can never rely solely on tests of controls.

SECTION 4

How Substantive Analytical Procedures Work — The Five-Step Model

Substantive analytical procedures follow a disciplined methodology codified in AU-C 520. Although they lack the item-level granularity of tests of details, when performed with precision they can be remarkably efficient and effective, especially for income statement accounts where high-volume, predictable relationships exist. The key is that the auditor must build an independent expectation—not simply accept management's figures at face value—and then rigorously investigate any difference that exceeds a predetermined threshold.

AUDIT RISK MODEL

AR = IR × CR × DR

Where AR = Audit Risk (set by the firm, typically 5%), IR = Inherent Risk, CR = Control Risk, DR = Detection Risk. The auditor manipulates DR by calibrating the nature, timing, and extent of substantive procedures. If IR × CR (i.e., RMM) is high, DR must be set low, requiring more persuasive substantive evidence.

TOLERABLE DIFFERENCE (THRESHOLD)

Threshold = Performance Materiality × (1 − Confidence Factor)

When designing a substantive analytical procedure, the auditor sets a threshold for investigation. Differences between the auditor's independent expectation and the recorded balance that exceed this threshold must be investigated further. A tighter threshold (smaller tolerable difference) corresponds to a lower tolerable detection risk.

SIMPLE EXPECTATION MODEL (PAYROLL EXAMPLE)

Expected Payroll = Avg. Headcount × Avg. Salary × Pay Periods

The auditor independently obtains headcount from HR records, salary data from approved pay scales, and pay period count from the calendar. Comparing this expectation to recorded payroll expense can detect misstatements in aggregate without examining every paycheck.

Step 1 — Develop the Expectation: The auditor formulates an independent expectation of the recorded amount using reliable financial and/or non-financial data. The more precise the expectation, the more persuasive the evidence.
Step 2 — Define the Threshold: The auditor determines the amount of difference from the expectation that can be accepted without further investigation, often expressed as a percentage of performance materiality.
Step 3 — Compare Expected to Recorded: The auditor computes the difference between the independently developed expectation and the recorded amount in the general ledger.
Step 4 — Investigate Significant Differences: If the difference exceeds the threshold, the auditor inquires of management, obtains corroborating evidence, and evaluates whether the difference signals a misstatement.
Step 5 — Evaluate and Document: The auditor concludes on whether the recorded balance is materially correct, documents the data sources, expectation model, threshold, comparison, and any investigation results.

SECTION 5

Classifying Substantive Tests by Assertion

Selecting the right substantive procedure depends on which financial statement assertion the auditor is testing. A single account balance like accounts receivable can be tested for existence (do the receivables really exist?), valuation (are they recorded at net realizable value?), completeness (are all receivables captured?), and rights (does the entity own them?). Different assertions call for different procedures, because the direction of testing changes with the nature of the risk. For instance, testing for existence involves selecting items from the books and confirming back to real-world evidence, whereas testing for completeness requires starting with real-world evidence and tracing forward to the books.

This matrix maps each of the five categories of management assertions (left column) to representative tests of details (center column) and analytical procedures (right column). Note that some assertions—particularly rights and obligations—are better served by inspection-based tests of details rather than analytical approaches.

💡

Direction of Testing

A foundational concept in audit evidence is the direction of testing. To test for existence (overstatement), the auditor selects from the recorded population (the books) and vouches back to supporting evidence. To test for completeness (understatement), the auditor selects from the source population (e.g., receiving reports) and traces forward to the books. Choosing the wrong direction renders a procedure ineffective for the targeted assertion.

SECTION 6

Worked Example — Substantive Analytical Procedure for Payroll Expense

Consider a scenario in which you are auditing the payroll expense of Apex Manufacturing Co. for the fiscal year ended December 31, 20X4. The recorded payroll expense is $12,480,000. Your risk assessment indicates a moderate risk of material misstatement for the payroll expense assertions. You decide to apply a substantive analytical procedure rather than testing individual paychecks because payroll is a high-volume, predictable account driven by stable relationships between headcount, salary levels, and pay periods.

Substantive Analytical Procedure — Payroll Expense

1
Step 1 — Develop the Independent Expectation

From the HR department, you independently obtain the monthly headcount schedule and verify it against approved hiring and termination documentation. Average headcount for 20X4 was 200 employees. From approved pay scales (not management's payroll records), you determine the average annual salary was $60,000. The company runs biweekly payrolls (26 pay periods). Your independent expectation: 200 × $60,000 = $12,000,000.

Expected Payroll = $12,000,000
2
Step 2 — Define the Threshold for Investigation

Performance materiality for the engagement is $500,000. Given the moderate RMM, you set the investigation threshold at 50% of performance materiality, which is $250,000. Any difference between expected and recorded payroll that exceeds $250,000 requires further investigation.

Threshold = $250,000
3
Step 3 — Compare Expected to Recorded

Recorded payroll expense per the general ledger is $12,480,000. The difference is $12,480,000 − $12,000,000 = $480,000. This exceeds the $250,000 threshold, so investigation is required.

Difference = $480,000 > $250,000 threshold → Investigate
4
Step 4 — Investigate the Difference

Upon inquiry, management explains that a mid-year across-the-board 4% raise was implemented effective July 1, adding approximately $240,000 to the second-half payroll (200 × $60,000 × 4% × 6/12 = $240,000). Additionally, $180,000 of overtime was incurred due to a production surge in Q4. You corroborate the raise by inspecting the board-approved compensation resolution and verify overtime through production logs and time records. The explained difference ($240,000 + $180,000 = $420,000) accounts for most of the $480,000 variance; the remaining $60,000 falls within the threshold and is consistent with normal pay-period timing differences.

Explained variance = $420,000; Unexplained residual = $60,000 (within threshold)
5
Step 5 — Evaluate and Document

You conclude that the recorded payroll expense of $12,480,000 is not materially misstated. The $60,000 residual is well within performance materiality and is consistent with expected payroll-timing variability. You document the HR headcount data source, the approved pay scales, the expectation model, the threshold calculation, management's explanations, the corroborating evidence obtained, and your conclusion.

Conclusion: Payroll expense is fairly stated — no material misstatement detected

SECTION 7

Tests of Details vs. Substantive Analytical Procedures — Strengths & Limitations

The auditor's choice between tests of details and substantive analytical procedures (or a combination of both) depends on several factors: the nature of the assertion, the assessed risk, the predictability of the account, and the availability of reliable data for developing expectations. Neither category of procedure is inherently superior; each has distinct strengths that make it more effective under certain conditions. Understanding these trade-offs is critical for designing an efficient and effective audit plan.

Dimension	Tests of Details	Substantive Analytical Procedures
Evidence Level	High — directly inspects individual items and source documents	Moderate — relies on plausible relationships rather than item-level verification
Best for Assertions	Existence, rights & obligations, valuation of complex estimates	Completeness, overall reasonableness, income statement accounts with predictable patterns
Efficiency	Lower — time-intensive; requires sampling, document inspection, third-party communication	Higher — can cover large populations quickly using aggregated data and ratios
When RMM Is High	Typically required as the primary procedure or to supplement analytical procedures	Generally insufficient alone; must be supplemented with tests of details
Data Dependency	Requires access to underlying documents, confirmations, or physical assets	Requires reliable, independent data and predictable relationships between variables
Key Limitation	Expensive and time-consuming; sampling risk inherent in any sample-based approach	May not detect misstatements that maintain plausible relationships (e.g., proportional overstatement of revenue and receivables)

Comparison of the two categories of substantive procedures across six key dimensions

✦

KEY TAKEAWAY

In practice, most engagements use a blended approach. Think of it like due diligence on a commercial real estate acquisition: you would not rely solely on a financial model projecting cash flows (the analytical procedure equivalent), nor would you inspect every bolt in the building (the tests-of-details equivalent). Instead, you run the model to identify areas of concern and then drill into the specific leases, inspection reports, and title records that matter most. The audit works the same way—analytical procedures cast a wide net for anomalies, and tests of details provide item-level confirmation where the risk demands it.

SECTION 8

Connection to Advanced Audit Theory and PCAOB Standards

While the principles of substantive procedures apply broadly across both nonissuer audits (governed by AICPA AU-C standards) and issuer audits (governed by PCAOB standards), there are meaningful differences in emphasis and requirements. For CPA candidates, understanding both frameworks is essential because the AUD exam tests across both standard-setting bodies. Furthermore, as data analytics and continuous auditing technologies mature, the nature of substantive procedures is evolving rapidly.

Feature	AU-C Standards (Nonissuers)	PCAOB Standards (Issuers)
Primary Reference	AU-C 330 (Performing Audit Procedures), AU-C 520 (Analytical Procedures)	AS 2301 (The Auditor's Responses to the Risks of Material Misstatement), AS 2110
Substantive Procedures Requirement	Required for every material class of transactions, account balance, and disclosure regardless of assessed RMM	Same requirement; additionally, the auditor must perform substantive procedures for all relevant assertions related to significant accounts
Integrated Audit	Not required (no ICFR opinion for nonissuers)	Substantive procedures are performed alongside tests of controls in an integrated audit of financial statements and internal control (AS 2201)
Revenue Recognition	Presumed significant risk; substantive procedures required	Revenue is presumed a fraud risk (AS 2401); substantive tests of details over revenue are typically required
Data Analytics Trend	Increasing use of CAATs and data analytics as substantive analytical procedures	PCAOB has signaled growing expectation for auditors to leverage technology in substantive testing; inspection findings highlight inadequate analytics

Comparison of substantive procedure requirements under AICPA and PCAOB frameworks

Looking forward, the integration of data analytics is transforming substantive analytical procedures. Where auditors once relied on simple ratio comparisons and manual trend analysis, firms now deploy regression models, clustering algorithms, and anomaly-detection techniques across entire transaction populations. This full-population testing blurs the traditional boundary between tests of details and analytical procedures, because the auditor can identify specific outlier transactions (a tests-of-details concept) through a data-analytic technique (traditionally classified as an analytical procedure). The PCAOB's recent inspection focus areas and proposed standard updates reflect this evolution, emphasizing that auditors must understand the data, validate its integrity, and evaluate the precision of any analytical model before relying on it as substantive evidence.

SECTION 9

Practice Problems

Question 1: CONCEPTUAL

An auditor has assessed the risk of material misstatement for the completeness assertion of accounts payable as high. Explain why a substantive analytical procedure alone would likely be insufficient for this assertion and describe what additional substantive procedure the auditor should perform.

Show answer

When RMM is assessed as high, the auditor needs more persuasive evidence than analytical procedures alone typically provide. Analytical procedures evaluate plausible relationships at an aggregate level and may fail to detect specific unrecorded liabilities, particularly because completeness concerns understatement—items missing from the books will not distort the recorded ratios in an obvious way. The auditor should supplement with a test of details, specifically a search for unrecorded liabilities, which involves examining disbursements after year-end and tracing vendor invoices received after the balance sheet date back to the accounts payable subsidiary ledger to verify that all obligations existing at year-end were properly recorded. This procedure starts from external evidence (invoices, payments) and traces forward to the books, which is the correct direction for testing completeness.

Question 2: BASIC CALCULATION

An auditor sets performance materiality at $400,000. The investigation threshold for a substantive analytical procedure is set at 40% of performance materiality. The auditor's independent expectation for rent expense is $1,800,000, and the recorded rent expense is $1,990,000. Should the auditor investigate the difference? Show your calculation.

Show answer

First, calculate the threshold: $400,000 × 40% = $160,000. Next, compute the difference: $1,990,000 − $1,800,000 = $190,000. Since $190,000 exceeds the $160,000 threshold, the auditor must investigate. The investigation would involve inquiring of management about the reasons for the variance—perhaps a mid-year rent increase or a new lease—and then corroborating management's explanation by inspecting lease agreements, amendments, or landlord correspondence. Only after obtaining satisfactory corroborating evidence can the auditor conclude that the difference does not represent a material misstatement.

Question 3: INTERMEDIATE

You are auditing Gamma Corp's interest expense for the year. The company has three outstanding loans: (1) $5,000,000 at 6% for 12 months, (2) $3,000,000 at 5% for 12 months, and (3) $2,000,000 at 7% drawn on July 1 for 6 months. The recorded interest expense is $530,000. Develop an independent expectation and determine whether further investigation is warranted, assuming performance materiality is $200,000 and the threshold is 25% of performance materiality.

Show answer

Calculate expected interest for each loan: Loan 1: $5,000,000 × 6% × 12/12 = $300,000. Loan 2: $3,000,000 × 5% × 12/12 = $150,000. Loan 3: $2,000,000 × 7% × 6/12 = $70,000. Total expected interest = $300,000 + $150,000 + $70,000 = $520,000. The threshold is $200,000 × 25% = $50,000. The difference between recorded ($530,000) and expected ($520,000) is $10,000, which is well below the $50,000 threshold. The auditor can conclude that no further investigation is needed for the interest expense analytical procedure; the $10,000 difference likely reflects minor timing or accrual differences and does not suggest material misstatement. The auditor should document the loan data sources, the calculation model, and the conclusion.

Question 4: APPLIED

Delta Industries reports revenue of $50,000,000 and accounts receivable of $8,500,000 at year-end. Prior-year figures were $45,000,000 and $6,750,000, respectively. The industry average receivables turnover is 6.5×. As the auditor, perform an analytical procedure using receivables turnover, identify the anomaly, describe the assertion(s) most at risk, and recommend the appropriate substantive test of details to follow up.

Show answer

Current-year receivables turnover = $50,000,000 ÷ $8,500,000 ≈ 5.88×. Prior-year turnover = $45,000,000 ÷ $6,750,000 ≈ 6.67×. The current-year turnover (5.88×) has declined notably from the prior year (6.67×) and is below the industry average (6.5×), indicating that accounts receivable have grown disproportionately relative to revenue. This anomaly raises concerns about the existence assertion (fictitious receivables may have been booked), the valuation assertion (old, uncollectible receivables may not be adequately reserved), and potentially the cutoff assertion (sales near year-end may have been recorded prematurely). The recommended follow-up includes sending positive confirmations to a risk-targeted sample of receivables, performing an aging analysis to evaluate the adequacy of the allowance for doubtful accounts, and testing sales cutoff by examining shipping documents and invoices around the balance sheet date to verify proper period recognition.

Question 5: CRITICAL THINKING

A client perpetrates a fraud in which both revenue and accounts receivable are overstated proportionally—fictitious sales are booked with corresponding fictitious receivables that are later written off as bad debts. Evaluate whether a substantive analytical procedure based on the gross margin percentage would detect this fraud. Then propose an audit strategy that combines analytical procedures and tests of details to maximize the probability of detection.

Show answer

A gross-margin analytical procedure would likely fail to detect this fraud because the fictitious sales and their corresponding cost of goods sold may be manufactured in proportions that preserve the historical gross margin ratio. Similarly, if the perpetrator inflates revenue and COGS proportionally, trend analysis of gross margin percentage will not reveal the anomaly—the relationships remain plausible. This is a fundamental limitation of analytical procedures: they detect anomalies in relationships, but a fraud designed to maintain those relationships can evade them. An effective strategy should layer multiple procedures: (1) Use analytical procedures on receivables turnover and days sales outstanding, which will eventually reveal the buildup of fictitious receivables before they are written off. (2) Send positive external confirmations to a sample of customers—fictitious customers or customers denying the balance will signal the fraud. (3) Perform cutoff testing around period-end, examining shipping documents to verify that recorded sales correspond to actual shipments. (4) Inspect subsequent collections—if receivables are fictitious, there will be no subsequent cash receipt. (5) Analyze the aging of receivables for unusual concentrations in specific customer accounts. The combination exploits the fact that while aggregate ratios may hold, item-level evidence will expose the mismatch between booked transactions and economic reality.

SUMMARY

Summary — Substantive Procedures in the Audit Process

Summary

Substantive procedures are the auditor's primary tools for directly testing the dollar amounts and disclosures in financial statements. They encompass two complementary categories: tests of details—which provide item-level evidence through confirmations, vouching, tracing, inspection, recalculation, and observation—and substantive analytical procedures—which evaluate aggregate plausibility through trend analysis, ratio analysis, and reasonableness tests. The risk-based audit model (AR = IR × CR × DR) governs the nature, timing, and extent of these procedures: higher assessed risk of material misstatement demands more extensive and more persuasive substantive evidence, generally tilting toward tests of details.

Substantive analytical procedures follow a five-step discipline: develop an independent expectation, define a threshold for investigation, compare expected to recorded amounts, investigate significant differences, and evaluate and document conclusions. The direction of testing is critical: test from the books to supporting evidence for existence (overstatement), and from source documents to the books for completeness (understatement). Both AICPA (AU-C 330/520) and PCAOB (AS 2301) require substantive procedures for every material account, and the growing role of data analytics is reshaping how auditors execute these procedures in practice.