ISA Standards Interview Questions & Answers

Q: What are the International Standards on Auditing (ISAs)?

ISAs are professional standards issued by the IAASB (International Auditing and Assurance Standards Board) that set the requirements and guidance for auditing financial statements. They promote consistent, high-quality audits worldwide, covering objectives, planning, evidence, and reporting. Many jurisdictions adopt them directly or base national standards on them.

Q: What is the overall objective of an audit under ISA 200?

ISA 200 states the auditor's overall objectives are to obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement (from fraud or error), enabling an opinion on whether they are prepared, in all material respects, in accordance with the applicable framework, and to report accordingly.

Q: What is the difference between reasonable assurance and absolute assurance?

Reasonable assurance is a high, but not absolute, level of assurance—an audit reduces risk to an acceptably low level but cannot guarantee the statements are error-free. Absolute assurance is unattainable due to inherent limitations: use of judgment, testing/sampling, inherent control limitations, and the nature of audit evidence being persuasive rather than conclusive.

Q: What is the structure of the ISA standards (the numbering series)?

ISAs are grouped by series: 200-299 general principles and responsibilities; 300-499 risk assessment and response; 500-599 audit evidence; 600-699 using the work of others; 700-799 audit conclusions and reporting; 800-899 specialized areas. This structure follows the audit process from objectives through evidence to reporting.

Q: What does ISA 315 (Revised) require regarding risk assessment?

ISA 315 requires the auditor to identify and assess the risks of material misstatement through understanding the entity and its environment, the applicable financial reporting framework, and the system of internal control. This includes identifying risks at the financial-statement and assertion levels to design responsive audit procedures.

Q: What does ISA 330 address?

ISA 330 deals with the auditor's responses to assessed risks—designing and performing further audit procedures (tests of controls and substantive procedures) whose nature, timing, and extent respond to the risks identified under ISA 315. Higher assessed risk demands more persuasive evidence and more extensive procedures.

Q: What is ISA 240 about?

ISA 240 covers the auditor's responsibilities relating to fraud in an audit of financial statements. It requires professional skepticism, discussion among the team about fraud susceptibility, risk assessment procedures focused on fraud, a presumed risk of fraud in revenue recognition, and specific responses including addressing management override of controls.

Q: What does ISA 500 establish about audit evidence?

ISA 500 requires the auditor to obtain sufficient (quantity) and appropriate (quality—relevance and reliability) audit evidence to draw reasonable conclusions supporting the opinion. It guides how to design and perform procedures to gather evidence and how to evaluate evidence, including from management's experts or external sources.

Q: What does ISA 700 (and 701) cover in reporting?

ISA 700 governs forming an opinion and the standard form of the auditor's report on financial statements. ISA 701 introduces Key Audit Matters (KAMs)—those of most significance in the current-period audit—communicated in the reports of listed entities to increase transparency about areas of significant auditor attention.

Q: How do ISAs relate to national auditing standards like US GAAS or PCAOB standards?

ISAs are international; many countries adopt them (sometimes with modifications) as national standards. In the US, private-company audits follow AICPA GAAS (closely aligned with ISAs via the Clarity/convergence project), while public-company audits follow PCAOB standards, which differ in areas like reporting and independence. Auditors apply the framework required in their jurisdiction/engagement.

What are the International Standards on Auditing (ISAs)?

Beginner

ISAs are professional standards issued by the IAASB (International Auditing and Assurance Standards Board) that set the requirements and guidance for auditing financial statements. They promote consistent, high-quality audits worldwide, covering objectives, planning, evidence, and reporting. Many jurisdictions adopt them directly or base national standards on them.

Real-world example An audit firm applies ISAs across its international engagements so audits in different countries follow a common quality baseline.

Common follow-ups: Who issues the ISAs? | How are ISAs adopted nationally?

Audit Objectives & Types Audit Evidence & Procedures ISA Standards

What is the overall objective of an audit under ISA 200?

Beginner

ISA 200 states the auditor's overall objectives are to obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement (from fraud or error), enabling an opinion on whether they are prepared, in all material respects, in accordance with the applicable framework, and to report accordingly.

Real-world example The auditor plans and performs work to reach reasonable assurance so they can express an opinion under ISA 200.

Common follow-ups: What is reasonable assurance? | What does 'in all material respects' mean?

Audit Report & Opinions Audit Risk & Materiality ISA Standards

What is the difference between reasonable assurance and absolute assurance?

Beginner

Reasonable assurance is a high, but not absolute, level of assurance—an audit reduces risk to an acceptably low level but cannot guarantee the statements are error-free. Absolute assurance is unattainable due to inherent limitations: use of judgment, testing/sampling, inherent control limitations, and the nature of audit evidence being persuasive rather than conclusive.

Real-world example An auditor gives reasonable, not absolute, assurance because they test samples and rely on persuasive evidence, not certainty.

Common follow-ups: Why can't audits give absolute assurance? | What are the inherent limitations of an audit?

Audit Risk & Materiality Audit Sampling ISA Standards

What is the structure of the ISA standards (the numbering series)?

Intermediate

ISAs are grouped by series: 200-299 general principles and responsibilities; 300-499 risk assessment and response; 500-599 audit evidence; 600-699 using the work of others; 700-799 audit conclusions and reporting; 800-899 specialized areas. This structure follows the audit process from objectives through evidence to reporting.

200s: principles/responsibilities
300s-400s: risk assessment & response
500s: evidence
600s: using others' work
700s: reporting
800s: specialized

Real-world example An auditor references ISA 315 (300s, risk assessment) during planning and ISA 700 (700s, reporting) at conclusion.

Common follow-ups: Which series covers audit evidence? | Where do reporting standards sit?

Audit Evidence & Procedures Audit Report & Opinions ISA Standards

What does ISA 315 (Revised) require regarding risk assessment?

Intermediate

ISA 315 requires the auditor to identify and assess the risks of material misstatement through understanding the entity and its environment, the applicable financial reporting framework, and the system of internal control. This includes identifying risks at the financial-statement and assertion levels to design responsive audit procedures.

Real-world example Under ISA 315 the team documents its understanding of the client's business, IT systems, and controls to pinpoint where misstatements could arise.

Common follow-ups: What are financial-statement vs assertion-level risks? | How does ISA 315 link to ISA 330?

Audit Risk & Materiality Internal Controls Evaluation ISA Standards

What does ISA 330 address?

Intermediate

ISA 330 deals with the auditor's responses to assessed risks—designing and performing further audit procedures (tests of controls and substantive procedures) whose nature, timing, and extent respond to the risks identified under ISA 315. Higher assessed risk demands more persuasive evidence and more extensive procedures.

Real-world example Having flagged revenue as a significant risk, the auditor designs targeted substantive tests under ISA 330 to respond to it.

Common follow-ups: What are the three dimensions of a response (nature, timing, extent)? | When are tests of controls required?

Audit Evidence & Procedures Internal Controls Evaluation ISA Standards

What is ISA 240 about?

Intermediate

ISA 240 covers the auditor's responsibilities relating to fraud in an audit of financial statements. It requires professional skepticism, discussion among the team about fraud susceptibility, risk assessment procedures focused on fraud, a presumed risk of fraud in revenue recognition, and specific responses including addressing management override of controls.

Real-world example Per ISA 240, the team tests journal entries and estimates for bias to address the risk of management override.

Common follow-ups: Why is revenue recognition a presumed fraud risk? | How does the auditor address management override?

Fraud & Error Responsibilities Audit Risk & Materiality ISA Standards

What does ISA 500 establish about audit evidence?

Intermediate

ISA 500 requires the auditor to obtain sufficient (quantity) and appropriate (quality—relevance and reliability) audit evidence to draw reasonable conclusions supporting the opinion. It guides how to design and perform procedures to gather evidence and how to evaluate evidence, including from management's experts or external sources.

Real-world example The auditor gathers a mix of external confirmations and inspection so the evidence is both sufficient and appropriate under ISA 500.

Common follow-ups: What makes evidence 'appropriate'? | How is reliability of evidence assessed?

Audit Evidence & Procedures Audit Sampling ISA Standards

What does ISA 700 (and 701) cover in reporting?

Advanced

ISA 700 governs forming an opinion and the standard form of the auditor's report on financial statements. ISA 701 introduces Key Audit Matters (KAMs)—those of most significance in the current-period audit—communicated in the reports of listed entities to increase transparency about areas of significant auditor attention.

Real-world example A listed company's audit report includes KAMs on goodwill impairment and revenue, as required by ISA 701.

Common follow-ups: What are Key Audit Matters? | Which entities must disclose KAMs?

Audit Report & Opinions Audit Risk & Materiality ISA Standards

How do ISAs relate to national auditing standards like US GAAS or PCAOB standards?

Advanced

ISAs are international; many countries adopt them (sometimes with modifications) as national standards. In the US, private-company audits follow AICPA GAAS (closely aligned with ISAs via the Clarity/convergence project), while public-company audits follow PCAOB standards, which differ in areas like reporting and independence. Auditors apply the framework required in their jurisdiction/engagement.

Real-world example A US firm applies PCAOB standards for an SEC registrant but ISA-aligned GAAS for a private client's audit.

Common follow-ups: How do PCAOB standards differ from ISAs? | What is the AICPA Clarity project?

Ethics & Independence Audit Report & Opinions ISA Standards