4.1 Assertions and Risk Assessment

Uniform CPA Examination Exam

Track your progress as you read

Finished sections get a check mark.

1 Chapter 1: CPA Exam Structure and Licensure Rules

1.1 CPA Evolution Model 1.2 Eligibility, Credit Window, and Scheduling Rules 1.3 Scoring, Pass Rates, and Blueprints

2 Chapter 2: CPA Scoring, Interface, and Exam Strategy

Score Scale and Testlets MCQ/TBS Weighting by Section Sample Test Interface Tools Exam-Day Time Management

3 Chapter 3: AUD Ethics, Independence, and Engagement Acceptance

3.1 Professional Responsibilities and Independence 3.2 Engagement Acceptance and Continuance 3.3 Audit Documentation and Quality Management 3.4 Audit Risk Foundations

4 Chapter 4: AUD Risk Assessment, Controls, and Evidence

4.1 Assertions and Risk Assessment 4.2 Internal Control Design and Operating Effectiveness 4.3 Substantive Procedures and Audit Evidence 4.4 Sampling, Analytics, and Estimates

5 Chapter 21: AUD Sampling, Analytics, and Accounting Estimates

21.1 Audit Sampling Risk and Sample Design 21.2 Substantive Analytical Procedures 21.3 Estimates, Fair Value, and Specialists 21.4 Data Analytics, Exceptions, and Follow-Up

6 Chapter 22: AUD Integrated Audits, IT Controls, and SOC Reliance

22.1 ICFR Integrated Audit Framework 22.2 IT General Controls and Application Controls 22.3 Service Organizations, SOC Reports, and CUECs 22.4 Control Deficiencies and Material Weaknesses

7 Chapter 5: AUD Reporting, Attestation, and Review Engagements

5.1 Audit Opinions and Modifications 5.2 Emphasis, Other Matter, and Going Concern 5.3 Review, Compilation, and Preparation Engagements 5.4 Attestation and Government Auditing Signals

8 Chapter 36: AUD Workbook - From Risk to Report

36.1 Risk-Assertion-Procedure Drill 36.2 Evidence Reliability Drill 36.3 Control Deficiency Classification Drill 36.4 Report Modification Decision Drill

9 Chapter 6: FAR Financial Statements and Reporting Framework

6.1 Conceptual Framework and Standard Setting 6.2 Financial Statement Presentation 6.3 Cash Flow Statement and Disclosures 6.4 Not-for-Profit Reporting Basics

10 Chapter 7: FAR Balance Sheet Accounts and Rollforwards

7.1 Cash, Receivables, and Reconciliations 7.2 Inventory and Cost Flow Errors 7.3 Property, Equipment, and Intangibles 7.4 Debt, Equity, and Contingencies

11 Chapter 8: FAR Selected Transactions and Measurement Models

8.1 Revenue Recognition: Five-Step Model 8.2 Leases, Income Taxes, and Impairment 8.3 Business Combinations and Consolidations 8.4 Accounting Changes, Errors, and Subsequent Events

12 Chapter 32: FAR Revenue, Leases, and Income Taxes Deep Dive

32.1 Revenue Contract Modifications and Variable Consideration 32.2 Lease Classification and Lessee Accounting 32.3 Deferred Tax Assets, Liabilities, and Valuation Allowances 32.4 Simulation Workflows for Revenue, Lease, and Tax Exhibits

13 Chapter 31: FAR Financial Instruments, Fair Value, and Derivatives

31.1 Financial Asset Classification and Measurement 31.2 Fair Value Hierarchy and Disclosures 31.3 Derivatives, Hedge Accounting, and Embedded Features 31.4 Foreign Currency and Comprehensive Income Signals

14 Chapter 24: FAR Consolidations, Equity Method, and Intercompany Workpapers

24.1 Consolidation Decision and Noncontrolling Interest 24.2 Acquisition-Date Measurement and Goodwill 24.3 Equity Method Income, Dividends, and Impairment 24.4 Intercompany Inventory, Debt, and Fixed Asset Eliminations

15 Chapter 9: FAR Governmental Accounting and Fund Reporting

9.1 Governmental Fund Types and Basis 9.2 Government-Wide Statements and Reconciliations 9.3 Budgetary Accounting and Encumbrances 9.4 Governmental and NFP Comparison Traps

16 Chapter 23: FAR Not-for-Profit and Special Reporting Topics

23.1 Not-for-Profit Net Assets and Restrictions 23.2 Contributions, Conditional Gifts, and Agency Transactions 23.3 Functional Expenses and Statement Presentation 23.4 Interim, Segment, and EPS Reporting Traps

17 Chapter 37: FAR Workbook - Journal Entries, Rollforwards, and Reconciliations

Adjusting Entry Workflow Account Rollforward Workflow Reconciliation and Error Correction Drill Statement Presentation Workpaper Drill

18 Chapter 10: REG Tax Procedure, Ethics, and Business Law

10.1 Tax Practice Ethics and Preparer Responsibilities 10.2 IRS Procedure, Statutes, and Penalties 10.3 Contracts, Agency, and Business Entities 10.4 Secured Transactions, Bankruptcy, and Priority

19 Chapter 11: REG Individual Federal Tax Workflows

11.1 Gross Income, Exclusions, and Adjustments 11.2 Filing Status, Dependents, and Deductions 11.3 Credits, Payments, and AMT Concepts 11.4 Retirement, Passive Activity, and Loss Limitations

20 Chapter 12: REG Property Transactions and Entity Taxation

12.1 Basis, Realized Gain, Recognized Gain, and Character 12.2 C Corporations and Shareholder Transactions 12.3 S Corporations, Partnerships, and Basis 12.4 Entity Tax Simulations and K-1 Workflows

21 Chapter 25: REG Entity Choice, Basis, and Owner Tax Consequences

25.1 C Corporation, S Corporation, and Partnership Comparison 25.2 Formation Contributions and Built-In Gain 25.3 Distributions, Redemptions, and Liquidations 25.4 Loss Limits: Basis, At-Risk, and Passive Rules

22 Chapter 26: REG Property Tax, Character, and Deferral Transactions

26.1 Capital, Ordinary, and Section 1231 Character 26.2 Depreciation Recapture and Unrecaptured Gain 26.3 Like-Kind Exchanges, Involuntary Conversions, and Installment Sales 26.4 Related-Party, Wash-Sale, and Imputed-Interest Traps

23 Chapter 33: REG Trusts, Estates, Gifts, and Exempt Organizations

33.1 Trust and Estate Income Tax Basics 33.2 Gift, Estate, and Beneficiary Planning Concepts 33.3 Tax-Exempt Organizations and Unrelated Business Income 33.4 Fiduciary K-1 and Distribution Simulation Workflows

24 Chapter 38: REG Workbook - Tax Return Schedules and Basis Workpapers

38.1 Individual Return Classification Drill 38.2 Property Basis and Character Workpaper 38.3 Pass-through K-1 and Owner Basis Workpaper 38.4 Business Law Issue Spotting Drill

25 Chapter 13: BAR Business Analysis, Economics, and Forecasting

13.1 Financial Statement Analysis and Ratios 13.2 Variance, Forecasting, and Budgeting 13.3 Cost Accounting and Performance Management 13.4 Economics, Finance, and Decision Models

26 Chapter 14: BAR Technical Accounting and Advanced Reporting

14.1 Revenue, Leases, and Complex Arrangements 14.2 Derivatives, Hedges, and Fair Value 14.3 Business Combinations and Consolidations 14.4 SEC Reporting and Public Company Context

27 Chapter 15: BAR State and Local Government Analysis

15.1 Governmental Fund Analysis 15.2 Government-Wide Conversion Workflows 15.3 Budgetary Reconciliation and CAFR/ACFR Reading 15.4 Government Simulation Strategy

28 Chapter 16: ISC Information Systems and Data Management

16.1 Systems Architecture and Data Flow 16.2 ERP, Accounting Systems, and Change Management 16.3 Data Governance, SQL, and Analytics 16.4 Availability, Backup, and Recovery Controls

29 Chapter 17: ISC Security, Privacy, and SOC Engagements

17.1 Security Threats and Control Selection 17.2 Privacy, Confidentiality, and Compliance Frameworks 17.3 SOC 1, SOC 2, SOC 3, and Cybersecurity Reports 17.4 Service Organization Exceptions and User Controls

30 Chapter 18: TCP Individual Tax Planning and Personal Financial Issues

18.1 Nonroutine Individual Income and Estimated Tax 18.2 Passive, At-Risk, and Investment Planning 18.3 Retirement, Education, and Insurance Planning 18.4 Gift, Estate, and Beneficiary Concepts

31 Chapter 19: TCP Entity Compliance and Planning

19.1 C Corporation Tax Planning 19.2 S Corporation Basis and Distributions 19.3 Partnership Tax Planning and Allocations 19.4 Trusts, Tax-Exempt, and International Signals

32 Chapter 34: TCP International and Advanced Entity Tax Topics

34.1 International Tax Signals and Source of Income 34.2 CFC, Foreign Tax Credit, and Permanent Establishment Concepts 34.3 Consolidated Returns and Affiliated Corporations 34.4 Advanced Partnership and S Corp Planning Scenarios

33 Chapter 35: Choosing and Preparing for BAR, ISC, or TCP

35.1 Discipline Fit Matrix by Background 35.2 BAR, ISC, and TCP Blueprint and Skill Comparison 35.3 Discipline Study Plans and Practice Balance 35.4 Switching Disciplines, Retake, and Score Interpretation

34 Chapter 39: CPA TBS Research, Authoritative Literature, and Document Review

39.1 Document Review Simulation Method 39.2 Research and Authoritative Literature Workflow 39.3 Exhibit Overload and Relevant Data Selection 39.4 Written Explanation and Professional Judgment Drills

35 Chapter 20: CPA Simulations, Retakes, and Final Review

20.1 TBS Exhibit Triage and Workpaper Method 20.2 Section-Specific Final Review Plans 20.3 Score Release, Retake, and Credit Window Decisions 20.4 Four-Section Study Roadmaps

36 Chapter 40: Discipline Workbook Drills for BAR, ISC, and TCP

40.1 BAR Ratio, Variance, and Government Drill 40.2 ISC Control Evidence and SOC Drill 40.3 TCP Basis Planning and Entity Drill 40.4 Discipline Final Mock and Review Log

4.1 Assertions and Risk Assessment

Key Takeaways Explain This Topic AI

The 2026 AUD blueprint allocates 25-35% to Area II, Assessing Risk and Developing a Planned Response, so assertion-level risk work is central to passing.

Risk assessment links each significant class of transactions, account balance, and disclosure to relevant assertions such as existence, completeness, cutoff, valuation, and rights and obligations.

Inherent risk and control risk combine into the risk of material misstatement; detection risk is managed through the nature, timing, and extent of further procedures.

Fraud risk assessment evaluates incentives or pressures, opportunities, and rationalizations, then converts those facts into a specific planned response.

Audit data analytics can flag unusual transactions or trends, but the auditor still validates the data and designs the procedure; the output is a starting point, not a conclusion.

Last updated: June 2026

Why Assertions Drive Risk Assessment

The 2026 AICPA AUD (Auditing and Attestation) blueprint makes risk assessment a major part of the exam: Area II, Assessing Risk and Developing a Planned Response, carries a 25-35% weight, second only to evidence. AUD itself is 78 multiple-choice questions plus 7 task-based simulations, weighted 50/50, with a four-hour clock and a passing score of 75. The blueprint expects candidates to determine the risk of material misstatement at both the financial statement level and the relevant assertion level, whether the risk arises from fraud or from error.

An assertion is management's implied claim about a class of transactions, an account balance, or a disclosure. For transactions, common assertions are occurrence, completeness, accuracy, cutoff, classification, and presentation. For balances, think existence, rights and obligations, completeness, and valuation or allocation. For disclosures, focus on whether the disclosed matter occurred, is complete, is accurate, and is properly classified and presented. Every well-formed AUD answer ties a risk to a specific assertion.

The Risk Map

If the fact pattern says... Likely assertion Focused response

Sales spike in the last two weeks of the year Occurrence and cutoff Test year-end shipments, returns, and subsequent cash receipts

Inventory is held at a third-party warehouse Existence and rights Confirm with the custodian and inspect ownership documents

New fair value model uses thin market data Valuation Test assumptions, source data, and specialist inputs

Vendor master-file changes lack review Completeness and occurrence of disbursements Test change approvals and scan for unusual payments

Many large credit memos posted after cutoff Occurrence of revenue Trace credit memos to support and recompute net sales

From Risk to Procedure

The audit risk model , AR = IR x CR x DR, is a planning discipline, not just algebra. Risk of material misstatement is the combination of inherent risk (susceptibility to misstatement before controls) and control risk (that controls fail to prevent or detect it). Detection risk is the risk that audit procedures themselves miss a material misstatement. When assessed risk of material misstatement rises, the auditor must lower acceptable detection risk: use more persuasive procedures, perform them at or near period end rather than interim, increase extent, or assign more experienced staff.

Financial statement level risks are pervasive: a weak tone at the top, going-concern pressure, a decentralized accounting function, or a fresh enterprise resource planning (ERP) implementation. Assertion-level risks are account-specific: collectability of receivables, completeness of accrued liabilities, or cutoff of revenue. A pervasive risk usually drives an overall response (more skepticism, unpredictable procedures, deploying more experienced staff); an assertion-level risk drives a single targeted procedure.

The auditor must also identify significant risks , those requiring special audit consideration, such as significant non-routine transactions, related-party dealings, complex estimates, or any presumed fraud risk in revenue recognition. For a significant risk, the auditor cannot rely on a low control risk assessment without testing those controls in the current period, and must perform substantive procedures specifically responsive to the risk. Risk assessment procedures themselves include inquiry of management and others, analytical procedures, observation, and inspection; standards prohibit relying on inquiry alone.

Fraud and Professional Skepticism

AUD questions hide fraud risk inside ordinary business facts. The fraud triangle asks the auditor to weigh incentives or pressures, opportunities, and attitudes or rationalizations. A sales bonus tied to fourth-quarter revenue (pressure), weak review of manual journal entries (opportunity), and unusual credit memos after year-end together point to a specific revenue occurrence or cutoff risk, not a vague business concern. Professional standards presume a fraud risk in revenue recognition and require the auditor to address management override of controls, including testing journal entries and reviewing accounting estimates for bias.

A planned response must match the risk. For a revenue cutoff risk, testing payroll expense does nothing. Stronger responses:

Select sales transactions in the days surrounding year-end and inspect shipping terms (FOB shipping point vs. destination).

Test subsequent returns and credit memos to see whether year-end sales reversed.

Reperform or examine manual journal entries that touch revenue, especially round-dollar or top-side entries.

Confirm a sample of large or unusual receivables and trace subsequent collections.

Data Analytics in Risk Assessment

The 2026 blueprint explicitly tests using outputs from audit data analytics (ADA) procedures, including reports and visualizations, to identify higher-risk transactions and develop planned procedures. Analytics can surface unusual margins, duplicate payments, round-dollar entries, transactions posted by unexpected users, or entries posted on weekends. The exam trap is treating the visualization as the conclusion. The auditor must first validate the reliability of the underlying data, then interpret the pattern, then decide what evidence the pattern calls for next.

• Analytic finding Possible risk Next step
• Spike in entries by one user near close Management override Examine those entries and their support
• Duplicate vendor payments Occurrence of disbursements Trace to invoices, receiving reports, and approvals
• Margin out of line with prior years Cutoff or valuation Develop a precise expectation and investigate the gap
• Exam Focus

Start every AUD risk question with three questions: What could be misstated? Which assertion is affected? Which procedure responds directly to that assertion? The correct answer is almost always the one that connects all three without jumping from a vague concern to unrelated testing. Distractors typically test the wrong assertion, reduce work when risk rose, or rely on inquiry alone.