Study guide
21.4 Data Analytics, Exceptions, and Follow-Up
Uniform CPA Examination Exam
Track your progress as you read
Finished sections get a check mark.
1 Chapter 1: CPA Exam Structure and Licensure Rules
1.1 CPA Evolution Model 1.2 Eligibility, Credit Window, and Scheduling Rules 1.3 Scoring, Pass Rates, and Blueprints
2 Chapter 2: CPA Scoring, Interface, and Exam Strategy
Score Scale and Testlets MCQ/TBS Weighting by Section Sample Test Interface Tools Exam-Day Time Management
3 Chapter 3: AUD Ethics, Independence, and Engagement Acceptance
3.1 Professional Responsibilities and Independence 3.2 Engagement Acceptance and Continuance 3.3 Audit Documentation and Quality Management 3.4 Audit Risk Foundations
4 Chapter 4: AUD Risk Assessment, Controls, and Evidence
4.1 Assertions and Risk Assessment 4.2 Internal Control Design and Operating Effectiveness 4.3 Substantive Procedures and Audit Evidence 4.4 Sampling, Analytics, and Estimates
5 Chapter 21: AUD Sampling, Analytics, and Accounting Estimates
21.1 Audit Sampling Risk and Sample Design 21.2 Substantive Analytical Procedures 21.3 Estimates, Fair Value, and Specialists 21.4 Data Analytics, Exceptions, and Follow-Up
6 Chapter 22: AUD Integrated Audits, IT Controls, and SOC Reliance
22.1 ICFR Integrated Audit Framework 22.2 IT General Controls and Application Controls 22.3 Service Organizations, SOC Reports, and CUECs 22.4 Control Deficiencies and Material Weaknesses
7 Chapter 5: AUD Reporting, Attestation, and Review Engagements
5.1 Audit Opinions and Modifications 5.2 Emphasis, Other Matter, and Going Concern 5.3 Review, Compilation, and Preparation Engagements 5.4 Attestation and Government Auditing Signals
8 Chapter 36: AUD Workbook - From Risk to Report
36.1 Risk-Assertion-Procedure Drill 36.2 Evidence Reliability Drill 36.3 Control Deficiency Classification Drill 36.4 Report Modification Decision Drill
9 Chapter 6: FAR Financial Statements and Reporting Framework
6.1 Conceptual Framework and Standard Setting 6.2 Financial Statement Presentation 6.3 Cash Flow Statement and Disclosures 6.4 Not-for-Profit Reporting Basics
10 Chapter 7: FAR Balance Sheet Accounts and Rollforwards
7.1 Cash, Receivables, and Reconciliations 7.2 Inventory and Cost Flow Errors 7.3 Property, Equipment, and Intangibles 7.4 Debt, Equity, and Contingencies
11 Chapter 8: FAR Selected Transactions and Measurement Models
8.1 Revenue Recognition: Five-Step Model 8.2 Leases, Income Taxes, and Impairment 8.3 Business Combinations and Consolidations 8.4 Accounting Changes, Errors, and Subsequent Events
12 Chapter 32: FAR Revenue, Leases, and Income Taxes Deep Dive
32.1 Revenue Contract Modifications and Variable Consideration 32.2 Lease Classification and Lessee Accounting 32.3 Deferred Tax Assets, Liabilities, and Valuation Allowances 32.4 Simulation Workflows for Revenue, Lease, and Tax Exhibits
13 Chapter 31: FAR Financial Instruments, Fair Value, and Derivatives
31.1 Financial Asset Classification and Measurement 31.2 Fair Value Hierarchy and Disclosures 31.3 Derivatives, Hedge Accounting, and Embedded Features 31.4 Foreign Currency and Comprehensive Income Signals
14 Chapter 24: FAR Consolidations, Equity Method, and Intercompany Workpapers
24.1 Consolidation Decision and Noncontrolling Interest 24.2 Acquisition-Date Measurement and Goodwill 24.3 Equity Method Income, Dividends, and Impairment 24.4 Intercompany Inventory, Debt, and Fixed Asset Eliminations
15 Chapter 9: FAR Governmental Accounting and Fund Reporting
9.1 Governmental Fund Types and Basis 9.2 Government-Wide Statements and Reconciliations 9.3 Budgetary Accounting and Encumbrances 9.4 Governmental and NFP Comparison Traps
16 Chapter 23: FAR Not-for-Profit and Special Reporting Topics
23.1 Not-for-Profit Net Assets and Restrictions 23.2 Contributions, Conditional Gifts, and Agency Transactions 23.3 Functional Expenses and Statement Presentation 23.4 Interim, Segment, and EPS Reporting Traps
17 Chapter 37: FAR Workbook - Journal Entries, Rollforwards, and Reconciliations
Adjusting Entry Workflow Account Rollforward Workflow Reconciliation and Error Correction Drill Statement Presentation Workpaper Drill
18 Chapter 10: REG Tax Procedure, Ethics, and Business Law
10.1 Tax Practice Ethics and Preparer Responsibilities 10.2 IRS Procedure, Statutes, and Penalties 10.3 Contracts, Agency, and Business Entities 10.4 Secured Transactions, Bankruptcy, and Priority
19 Chapter 11: REG Individual Federal Tax Workflows
11.1 Gross Income, Exclusions, and Adjustments 11.2 Filing Status, Dependents, and Deductions 11.3 Credits, Payments, and AMT Concepts 11.4 Retirement, Passive Activity, and Loss Limitations
20 Chapter 12: REG Property Transactions and Entity Taxation
12.1 Basis, Realized Gain, Recognized Gain, and Character 12.2 C Corporations and Shareholder Transactions 12.3 S Corporations, Partnerships, and Basis 12.4 Entity Tax Simulations and K-1 Workflows
21 Chapter 25: REG Entity Choice, Basis, and Owner Tax Consequences
25.1 C Corporation, S Corporation, and Partnership Comparison 25.2 Formation Contributions and Built-In Gain 25.3 Distributions, Redemptions, and Liquidations 25.4 Loss Limits: Basis, At-Risk, and Passive Rules
22 Chapter 26: REG Property Tax, Character, and Deferral Transactions
26.1 Capital, Ordinary, and Section 1231 Character 26.2 Depreciation Recapture and Unrecaptured Gain 26.3 Like-Kind Exchanges, Involuntary Conversions, and Installment Sales 26.4 Related-Party, Wash-Sale, and Imputed-Interest Traps
23 Chapter 33: REG Trusts, Estates, Gifts, and Exempt Organizations
33.1 Trust and Estate Income Tax Basics 33.2 Gift, Estate, and Beneficiary Planning Concepts 33.3 Tax-Exempt Organizations and Unrelated Business Income 33.4 Fiduciary K-1 and Distribution Simulation Workflows
24 Chapter 38: REG Workbook - Tax Return Schedules and Basis Workpapers
38.1 Individual Return Classification Drill 38.2 Property Basis and Character Workpaper 38.3 Pass-through K-1 and Owner Basis Workpaper 38.4 Business Law Issue Spotting Drill
25 Chapter 13: BAR Business Analysis, Economics, and Forecasting
13.1 Financial Statement Analysis and Ratios 13.2 Variance, Forecasting, and Budgeting 13.3 Cost Accounting and Performance Management 13.4 Economics, Finance, and Decision Models
26 Chapter 14: BAR Technical Accounting and Advanced Reporting
14.1 Revenue, Leases, and Complex Arrangements 14.2 Derivatives, Hedges, and Fair Value 14.3 Business Combinations and Consolidations 14.4 SEC Reporting and Public Company Context
27 Chapter 15: BAR State and Local Government Analysis
15.1 Governmental Fund Analysis 15.2 Government-Wide Conversion Workflows 15.3 Budgetary Reconciliation and CAFR/ACFR Reading 15.4 Government Simulation Strategy
28 Chapter 16: ISC Information Systems and Data Management
16.1 Systems Architecture and Data Flow 16.2 ERP, Accounting Systems, and Change Management 16.3 Data Governance, SQL, and Analytics 16.4 Availability, Backup, and Recovery Controls
29 Chapter 17: ISC Security, Privacy, and SOC Engagements
17.1 Security Threats and Control Selection 17.2 Privacy, Confidentiality, and Compliance Frameworks 17.3 SOC 1, SOC 2, SOC 3, and Cybersecurity Reports 17.4 Service Organization Exceptions and User Controls
30 Chapter 18: TCP Individual Tax Planning and Personal Financial Issues
18.1 Nonroutine Individual Income and Estimated Tax 18.2 Passive, At-Risk, and Investment Planning 18.3 Retirement, Education, and Insurance Planning 18.4 Gift, Estate, and Beneficiary Concepts
31 Chapter 19: TCP Entity Compliance and Planning
19.1 C Corporation Tax Planning 19.2 S Corporation Basis and Distributions 19.3 Partnership Tax Planning and Allocations 19.4 Trusts, Tax-Exempt, and International Signals
32 Chapter 34: TCP International and Advanced Entity Tax Topics
34.1 International Tax Signals and Source of Income 34.2 CFC, Foreign Tax Credit, and Permanent Establishment Concepts 34.3 Consolidated Returns and Affiliated Corporations 34.4 Advanced Partnership and S Corp Planning Scenarios
33 Chapter 35: Choosing and Preparing for BAR, ISC, or TCP
35.1 Discipline Fit Matrix by Background 35.2 BAR, ISC, and TCP Blueprint and Skill Comparison 35.3 Discipline Study Plans and Practice Balance 35.4 Switching Disciplines, Retake, and Score Interpretation
34 Chapter 39: CPA TBS Research, Authoritative Literature, and Document Review
39.1 Document Review Simulation Method 39.2 Research and Authoritative Literature Workflow 39.3 Exhibit Overload and Relevant Data Selection 39.4 Written Explanation and Professional Judgment Drills
35 Chapter 20: CPA Simulations, Retakes, and Final Review
20.1 TBS Exhibit Triage and Workpaper Method 20.2 Section-Specific Final Review Plans 20.3 Score Release, Retake, and Credit Window Decisions 20.4 Four-Section Study Roadmaps
36 Chapter 40: Discipline Workbook Drills for BAR, ISC, and TCP
40.1 BAR Ratio, Variance, and Government Drill 40.2 ISC Control Evidence and SOC Drill 40.3 TCP Basis Planning and Entity Drill 40.4 Discipline Final Mock and Review Log
21.4 Data Analytics, Exceptions, and Follow-Up
Key Takeaways Explain This Topic AI
The 2026 AUD blueprint covers requesting, preparing, transforming, and evaluating the reliability of data used in planned audit procedures.
Audit data analytics can identify relationships, trends, and notable items, but the auditor must determine the appropriate audit response to the output.
Before relying on analytics output, auditors test completeness, accuracy, authenticity, and susceptibility to management bias in the source data.
Exceptions are not automatically misstatements; they may be errors, control deviations, fraud indicators, or false positives, and each requires investigation.
Good follow-up ties each exception to the affected assertion, corroborates explanations, and considers whether the finding changes the risk assessment or planned procedures.
Last updated: June 2026
Analytics Begin With Reliable Data
The 2026 AUD blueprint explicitly covers the use of data and information: data requests, preparing and transforming data, evaluating the reliability of data, and audit data analytics (ADA) . It also asks candidates to use outputs such as reports and visualizations to identify relationships, trends, or notable items, and then select the appropriate audit response.
Audit data analytics are automated tools and techniques used to discover, organize, structure, analyze, or present data to generate useful audit information. They can scan an entire journal-entry population, match sales to shipping records, identify duplicate payments, age receivables, recompute payroll, or flag unusual users posting manual entries after hours. The output is never the endpoint; it is a disciplined way to focus audit attention. The reliability of any conclusion depends entirely on the reliability of the underlying data, which the auditor must establish first under AU-C 500.
Data Request and Transformation
A strong data request is specific: it names fields, date ranges, transaction types, source systems, extraction criteria, and file format. For a journal-entry analysis the auditor may request entry number, date, posting time, preparer, approver, account, amount, description, source module, reversal flag, and period. For revenue cutoff the auditor may need invoice date, shipment date, delivery terms, customer-acceptance date, credit-memo date, and cash-receipt date.
- Data issue Why it matters Example audit response
- Incomplete extraction Analytics may miss exceptions Reconcile row counts and totals to the general ledger
- Incorrect filters Population may not match the objective Inspect query criteria; rerun with corrected dates
- Duplicate or blank keys Joins may create false results Clean keys; validate unmatched records
- Management-prepared file Bias or alteration risk Agree selected records back to source systems
- External data Relevance and authenticity risk Evaluate source, date, and consistency with other evidence
Transformation includes cleaning dates, standardizing vendor names, mapping fields, removing inappropriate duplicates, and joining tables. The auditor documents enough that another experienced auditor can understand what data was used and how the output was produced.
Exception Analysis Is Audit Work, Not a Conclusion
An exception is an item that violates the rule or expectation embedded in the analytic. It might be a true misstatement, a control deviation, a fraud indicator, a system-mapping artifact, or a false positive . AUD questions repeatedly test whether the candidate jumps too fast from exception to conclusion.
Worked example: an analytics routine flags duplicate vendor payments sharing the same vendor, invoice number, and amount. The auditor should inspect supporting invoices, payment approvals, credit memos, and subsequent refunds.
If the duplicates are real, consider whether expenses or payables are overstated and whether the control over invoice entry failed (a possible control deficiency).
If they are false positives caused by legitimate installment billing, document that conclusion and refine the query.
Notice the spread of possible meanings from one identical pattern. The CPA-level skill is determining what the output means for the audit, not mechanically recording every flagged row as an error.
Follow-Up Workflow
Tie the analytic to a specific assertion and planned procedure.
Validate the completeness and accuracy of the source data.
Review the transformation logic, joins, filters, and thresholds.
Run or inspect the output and identify notable items.
Investigate exceptions using source documents and system or external evidence.
Ask follow-up questions that address the cause , not just the description.
Classify each exception: misstatement, control deviation, fraud risk, or false positive.
Accumulate results and decide whether the risk assessment, sample design, or substantive procedures must change.
A full-population scan does not eliminate professional judgment or AU-C 530 sampling discipline when the analytic still relies on attribute thresholds the auditor must interpret. Even a complete scan can be undermined by an incomplete rule, unreliable data, or exceptions that demand human interpretation. The auditor must also guard against automation bias , the tendency to over-trust a clean-looking dashboard.
CPA Exam Signals
Expect simulation exhibits with spreadsheet extracts, pivot tables, visualizations, or exception lists. The best answer almost always addresses both data reliability and follow-up evidence. If the source data came from a client-run query, the auditor typically validates the query criteria, reconciles totals to the general ledger, and traces a selection of records back to the system of record before drawing any inference.
Output type What it can reveal Required auditor step
Journal-entry dashboard After-hours or round-dollar entries Investigate preparer, approval, and business rationale
- Three-way match report Unmatched POs, receipts, invoices Trace to documents; assess completeness or occurrence
- Receivables aging visual Deterioration in collections Reassess allowance estimate and going concern
- Duplicate-payment list Possible overstatement Inspect invoices, approvals, and refunds
Distractor answers to reject: assuming a client file is complete because it came from accounting, deleting items from documentation, or concluding fraud from a pattern alone. Analytics generate leads; professional skepticism and corroborating evidence turn leads into conclusions.