AUD7312: Auditing 3B Study Notes (MANCOSA / UNISA / CUT-Aligned)

These study notes provide an integrated, exam‑oriented guide to AUD7312: Auditing 3B, aligned to common syllabus themes at South African universities such as MANCOSA, UNISA (e.g. AUE3703, AUE4861) and Central University of Technology (e.g. AUD501, AUD601). The focus is on higher‑level auditing topics: advanced assurance concepts, detailed audit procedures, audit evidence and documentation, group audits, and current issues in South African auditing practice. The notes are suitable for students preparing for MANCOSA Bachelor of Commerce in Accounting modules, as well as those searching for terms like “AUD7312 study notes”, “UNISA auditing 3B exam notes” and “CUT auditing 3B past paper prep”.

1. Advanced Assurance Framework and South African Context

1.1 Role of Auditing 3B in the BCom (Accounting) Curriculum

In the MANCOSA: Bachelor of Commerce in Accounting and in similar programmes at UNISA and CUT, Auditing 3B (often coded as AUD7312, AUE3703, AUD601) builds on foundational modules such as Auditing 1A, 1B, 2A and 2B. At this level, the focus shifts from basic definitions to application and evaluation, which is the level often examined in:

UNISA AUE3703 / AUE4861 Advanced Auditing
CUT AUD601 – Advanced Auditing
MANCOSA Auditing 3A and Auditing 3B

Core outcomes for Auditing 3B typically include:

Applying International Standards on Auditing (ISAs) and International Standard on Quality Management (ISQM 1) in practical scenarios.
Understanding assurance engagements beyond statutory audits (e.g. reviews, agreed‑upon procedures, other assurance).
Interpreting and evaluating audit reports and modified opinions.
Applying risk‑based audit planning in complex and group structures.
Integrating South African regulatory requirements, including the Companies Act 71 of 2008, Public Audit Act, and IRBA Code of Professional Conduct.

Examiners at MANCOSA, UNISA and CUT frequently design questions that require students to link theory with the South African business environment, including references to:

Independent Regulatory Board for Auditors (IRBA).
Johannesburg Stock Exchange (JSE) listing rules.
King IV Report on Corporate Governance.

Understanding this context is essential for tackling case‑study‑style questions common in Auditing 3B exams.

1.2 Types of Assurance Engagements (ISA/ISAE Framework)

Auditing 3B students must be able to classify and compare assurance engagements as defined in the IAASB Framework for Assurance Engagements, and link this to South African practice.

Key classification dimensions:

Nature of engagement:
- Assurance engagement vs non‑assurance engagement.
- Examples of non‑assurance: compilation engagements (ISRS 4410), tax return preparation, bookkeeping.
Level of assurance:
- Reasonable assurance (high but not absolute).
- Limited assurance (moderate).
- No assurance (e.g. agreed‑upon procedures).
Subject matter:
- Historical financial information (e.g. statutory audits, reviews).
- Non‑financial information (e.g. sustainability reports, B‑BBEE scorecards).
- Processes and controls (e.g. internal control reports).
Type of conclusion:
- Positive form (“In our opinion, the financial statements present fairly…”).
- Negative form (“Nothing has come to our attention that causes us to believe…”).

Common engagement types (with typical SA usage):

Engagement Type	Standard(s)	Level of Assurance	Typical South African Use Cases
Audit of financial statements	ISA 200–805	Reasonable	Companies Act audits; JSE‑listed entities; public entities
Review of financial statements	ISRE 2400 (Revised)	Limited	Companies not requiring audit but needing limited assurance
Agreed‑upon procedures (AUP)	ISRS 4400 (Revised)	None (procedures only)	B‑BBEE score verification; specific grant verifications
Compilation engagement	ISRS 4410 (Revised)	None	SME financial statement preparation
Other assurance engagements (non‑financial)	ISAE 3000 (Revised)	Reasonable or Limited	Sustainability reports, greenhouse gas statements, etc.

Exam tip (typical UNISA / MANCOSA / CUT question style):
A scenario may provide an extract from an engagement letter and ask you to identify the type of engagement, the assurance level, and the applicable standard, then to justify your answer with reference to key phrases (e.g. “perform procedures agreed with management” → AUP under ISRS 4400).

1.3 Reasonable vs Limited Assurance – Practical Distinctions

Mastery of the difference between reasonable and limited assurance is critical for questions in Auditing 3B, especially for modules like UNISA AUE3703, MANCOSA Auditing 3B and CUT AUD601.

Reasonable assurance (e.g. external audit):

Objective: Reduce audit risk to an acceptably low level to express a positive opinion.
Extent of work: Extensive; includes tests of controls (if relying on them), substantive procedures (analytical and tests of details).
Form of conclusion: “In our opinion, the financial statements present fairly, in all material respects…”.
Evidence: Persuasive but not conclusive; must be sufficient and appropriate to support the opinion.
Examples in SA: Statutory audits of medium‑large companies under the Companies Act; audits of public entities by the Auditor‑General South Africa.

Limited assurance (e.g. review engagement):

Objective: Reduce risk to a level that is acceptable for a negative conclusion.
Extent of work: Primarily inquiry and analytical procedures; usually no tests of controls or detailed tests of transactions and balances, unless indicated by findings.
Form of conclusion: “Based on our review, nothing has come to our attention that causes us to believe…”.
Evidence: Less than for an audit; focus on plausibility rather than full verification.
Examples in SA: Review of financial statements of small to medium‑sized entities not required to have an audit under the Companies Act (e.g. certain private companies with lower public interest scores).

Key comparison points tested in exams:

Nature, timing and extent of procedures.
Type of opinion and assurance level.
Cost vs benefit implications for the client.
Impact on user confidence and perceived credibility.

A common exam requirement is to advise the directors of a small company whether to choose an audit or a review, and to justify based on public interest, funders’ requirements, and cost‑benefit considerations.

1.4 Regulatory Environment: IRBA, Companies Act and King IV

Auditing 3B modules at South African institutions (UNISA, MANCOSA, CUT) consistently test knowledge of the regulatory environment.

Independent Regulatory Board for Auditors (IRBA):

Statutory body governing registered auditors in South Africa.
Issues:
- Code of Professional Conduct for Registered Auditors.
- South African Auditing Practice Statements (SAAPS).
- Guidance on audit firm rotation and independence.
Oversees:
- Registration of auditors.
- Inspection of audit firms.
- Disciplinary processes.

Companies Act 71 of 2008:

Determines which companies are subject to audit, review or neither, based on the public interest score (PIS).
Requires:
- Appointment of a registered auditor for certain categories (e.g. public companies, state‑owned companies).
- Rotation of auditors for some entities.
Provides the legal basis for:
- Directors’ responsibilities relating to financial statements.
- Access rights of the auditor to information and explanations.

King IV Report on Corporate Governance:

Applies on an apply and explain basis.
Emphasises:
- Role of the audit committee (appointment of external auditor, oversight of financial reporting, internal audit).
- Combined assurance model.
- Ethical and effective leadership.
Frequently referenced in JSE Listing Requirements and in exam questions concerning governance, independence and audit committees.

Public Audit Act (for public sector):

Governs the mandate of the Auditor‑General South Africa (AGSA).
Introduces concepts like regularity audits, performance audits, and compliance with laws and regulations.

Exam style links:

A question may ask you to identify the legal/regulatory requirements applicable to a particular entity type (e.g. JSE‑listed, private, SOE).
You may be required to discuss the role of the audit committee in relation to the external auditor, referencing King IV.

1.5 Ethics and Independence: IRBA Code and Practical Issues

Auditing 3B places strong emphasis on ethical requirements and independence, as prescribed by the IRBA Code of Professional Conduct and aligned with the IESBA Code.

Fundamental principles:

Integrity
Objectivity
Professional competence and due care
Confidentiality
Professional behaviour

Independence of mind and appearance:

Independence of mind: Ability to express an opinion without being affected by influences that compromise professional judgment.
Independence in appearance: Avoidance of situations that would cause a reasonable and informed third party to doubt the auditor’s integrity, objectivity or professional scepticism.

Common threats to independence (often tested in scenario‑based questions):

Self‑interest threat (e.g. direct financial interest in the client, fear of losing fees, outstanding fees).
Self‑review threat (e.g. providing bookkeeping services and then auditing the same numbers).
Advocacy threat (e.g. representing the client in a legal dispute).
Familiarity threat (e.g. long association with a client, close family members in senior positions at the client).
Intimidation threat (e.g. threats of dismissal, litigation, or withholding of payments).

Safeguards:

At the firm level: quality control policies, firm rotation policies, staff rotation on engagements.
At the engagement level: second partner review, removing particular individuals from the team, additional oversight by the EQCR (Engagement Quality Control Reviewer).
Through legislation: mandatory audit firm rotation for certain entities (as required by IRBA from a specified date), restrictions on non‑audit services.

Example of a typical exam scenario:

You are given the profile of a senior partner at a firm audited a MANCOSA‑linked entity for 15 years and whose spouse has recently become CFO of the client. Required:
- Identify and explain threats to independence.
- Propose appropriate safeguards or state if the engagement should be declined.

2. Risk‑Based Audit Planning and Strategy (Advanced Level)

2.1 Understanding Business Risk and Audit Risk in Complex Entities

Auditing 3B requires going beyond basic audit risk formula and linking business risks to risk of material misstatement (RMM) in the financial statements.

Business risk:

Risk that an entity will fail to achieve its objectives, which could affect financial reporting.
Sources: economic environment, technology changes, regulation, competition, financing, operations.

Audit risk model (ISA 200, ISA 315):

Audit Risk (AR) = Inherent Risk (IR) × Control Risk (CR) × Detection Risk (DR).
Inherent risk: Susceptibility of an assertion to misstatement before considering controls.
Control risk: Risk that misstatement will not be prevented or detected and corrected by internal controls.
Detection risk: Risk that the auditor’s procedures will not detect a misstatement.

In an AUD7312 / AUE3703 exam setting, you may be required to:

Identify business risks in a case study (e.g. online retailer expanding into Africa; manufacturing company with complex supply chain).
Link each business risk to specific financial statement assertions and account balances (e.g. inventory existence, revenue occurrence).
Assess the effect on audit risk and plan responses (more substantive work, additional controls testing, use of experts, etc.).

2.2 Detailed Risk Assessment Procedures (ISA 315 (Revised 2019))

ISA 315 (Revised) introduces a more structured approach to risk assessment. Advanced modules like Auditing 3B, AUE3703 and AUD601 expect familiarity with:

Risk assessment procedures:

Inquiries of management, internal audit, and others within the entity.
Analytical procedures (ratio analysis, trend analysis, comparisons with budgets/industry).
Observation and inspection:
- Observation of processes (e.g. inventory counts).
- Inspection of documents (e.g. contracts, board minutes).

Obtaining an understanding of:

The entity and its environment (industry, regulation, market conditions).
The entity’s internal control system, including:
- Control environment.
- Entity’s risk assessment process.
- Information system and communication.
- Control activities.
- Monitoring activities.
IT environment:
- General IT controls.
- Application controls.
- Use of off‑the‑shelf packages vs customised systems.
- Cybersecurity risks (increasingly exam‑relevant).

Risk identification and assessment process:

Identify events and conditions that may give rise to RMM.
Assess likelihood and magnitude.
Identify significant risks requiring special audit consideration (e.g. revenue recognition in complex multi‑element contracts, management override of controls, related party transactions).

Example (case‑style):

A JSE‑listed construction company recognises revenue using long‑term contracts. The exam may ask you to:

Identify significant risks (e.g. incorrect percentage of completion estimates).
State which assertions are affected (e.g. accuracy, valuation, cut‑off).
Propose planned audit responses (e.g. testing estimates and assumptions, reviewing contract terms, recalculating revenue).

2.3 Materiality and Performance Materiality in Practice

Materiality is a fundamental concept that is heavily tested at third‑year level in courses like AUD7312 and AUE3703.

Overall materiality (for the financial statements as a whole):

Usually determined using a benchmark such as:
- 5% of profit before tax (for profit‑oriented entities with stable earnings).
- 0.5%–1% of total revenue.
- 1%–2% of total assets or equity.
The benchmark depends on the nature of the entity (e.g. non‑profit, financial institution).

Performance materiality:

Amount set at less than overall materiality to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds materiality.
Often determined as a percentage of overall materiality (e.g. 50%–75%, depending on risk).

Tolerable misstatement for specific account balances:

Used to guide the extent of substantive testing on particular accounts.

Qualitative aspects:

Some misstatements may be material by nature even if the amount is small (e.g. related party transactions not disclosed; breach of solvency requirements; fraud by senior management).

Exam application (numerical and narrative):

A typical question for MANCOSA or UNISA might provide:

Profit before tax: R8 million.
Total assets: R60 million.
Revenue: R120 million.

You may be asked to:

Select an appropriate benchmark and percentage (e.g. 5% of profit before tax = R400 000).
Determine overall materiality (R400 000).
Set performance materiality (e.g. 70% of R400 000 = R280 000).
Explain the reasons for your choices and how they would change if the entity’s risk profile is higher (e.g. high susceptibility to fraud).

2.4 Audit Strategy and Detailed Audit Plan

After assessing risks and materiality, the auditor develops an overall audit strategy and a detailed audit plan.

Overall audit strategy (ISA 300):

Sets the scope, timing and direction of the audit.
Considers:
- Use of component auditors (for group audits).
- Role of internal audit.
- Use of experts (e.g. valuers, actuaries, IT specialists).
- Locations to visit.
- Deadlines and reporting requirements (e.g. to JSE, regulators, funders).

Audit plan:

More detailed documentation of the nature, timing and extent of audit procedures.
Includes:
- Specific risk responses for each significant risk and assertion.
- Allocation of staff and budgeted hours.
- Timetable for interim and final fieldwork.

Linking risks to procedures:

Each identified RMM should have a corresponding planned response.
For example, if there is a significant risk of overstatement of revenue:
- Increase substantive testing of revenue transactions.
- Perform cut‑off testing at year‑end.
- Test IT controls over invoice generation.

Exam perspective:

Students may be required to:

Prepare an outline audit strategy for a given entity (e.g. a MANCOSA student accommodation company expanding rapidly).
Indicate:
- Reliance on internal controls or not.
- Extent of analytical procedures vs tests of details.
- Interim vs year‑end work.

2.5 Use of Internal Audit and Experts

Advanced auditing exams often test the auditor’s ability to evaluate the work of others.

Internal audit (ISA 610):

The external auditor may use the work of internal audit if:
- Internal audit is objective and competent.
- The work is relevant to the external audit.
The external auditor must:
- Evaluate internal audit’s organisational status, policies, procedures, and technical competence.
- Re‑perform some of the work on a sample basis to test reliability.
The external auditor remains responsible for the audit opinion and cannot delegate overall responsibility.

Use of experts (ISA 620):

External expert: an individual or organisation with expertise in a field other than accounting or auditing (e.g. actuary, valuer, engineer).
The auditor must:
- Evaluate the expert’s competence, capabilities and objectivity.
- Understand the expert’s work and assumptions.
- Evaluate whether the expert’s findings are reasonable and consistent with other evidence.

Typical exam requirements:

Discuss whether and how the external auditor of a company (e.g. a mining company listed on the JSE) can rely on:
- The internal audit department’s work on inventory counts.
- A valuation expert’s report on mineral reserves.

Candidates must show understanding of the limitations of using such work and the need for professional scepticism.

3. Audit Evidence, Procedures and Documentation (Deep Dive)

3.1 Nature and Reliability of Audit Evidence (ISA 500)

In Auditing 3B, the emphasis moves from memorising evidence types to evaluating reliability and applying them to complex scenarios.

Characteristics of sufficient and appropriate evidence:

Sufficiency: Quantity of evidence (affected by materiality, risk, quality of evidence).
Appropriateness: Quality of evidence; relevance (relation to assertion) and reliability (source and nature).

Hierarchy of reliability (general rule):

External evidence obtained directly by the auditor (e.g. bank confirmations) – highest reliability.
External evidence held by the client (e.g. supplier statements).
Internal evidence generated within the client but verified with external data.
Internal evidence only (e.g. internally generated reports with no external corroboration) – lower reliability.
Oral representations – least reliable; support but do not replace other evidence.

Types of audit procedures (ISA 500):

Inspection of records or documents.
Inspection of tangible assets.
Observation (e.g. observing inventory counts).
Inquiry (seeking information from knowledgeable persons).
Confirmation (direct written responses from third parties).
Recalculation (checking mathematical accuracy).
Reperformance (independent execution of procedures).
Analytical procedures (evaluations of relationships between financial and non‑financial data).

Exam application:

Students are often asked, in UNISA AUE3703 or MANCOSA Auditing 3B exams, to:

Match appropriate evidence types to assertions (occurrence, completeness, accuracy, cutoff, classification, existence, rights and obligations, valuation, presentation).
Critically evaluate whether evidence obtained in a case study is sufficient and appropriate to support a conclusion.

3.2 Tests of Controls vs Substantive Procedures

Tests of controls:

Evaluate the operating effectiveness of internal controls in preventing, or detecting and correcting, misstatements.
Examples:
- Inspecting evidence of authorisation on purchase orders.
- Reperforming bank reconciliations.
- Testing IT application controls.

Substantive procedures:

Detect material misstatements at the assertion level.
Include tests of details and substantive analytical procedures.
Examples:
- Confirming receivables.
- Vouching transactions to source documents.
- Recalculating depreciation.

Link to reliance on controls:

If internal controls are effective, the auditor may choose to rely on them and reduce the extent of substantive procedures.
If controls are weak, more extensive substantive testing is required.

Exam contrasts:

A common question type across AUD7312, AUE3703 and AUD601 is:

Describe the differences between tests of controls and substantive procedures.
Provide examples for a particular transaction cycle (e.g. sales, purchases, payroll).

3.3 Substantive Analytical Procedures (ISA 520)

Advanced modules require deeper understanding of analytical procedures:

Types:

Comparisons of current period with:
- Prior periods.
- Budgets or forecasts.
- Industry data.
Ratio analysis:
- Liquidity ratios (current ratio, quick ratio).
- Profitability ratios (gross margin, net profit margin).
- Activity ratios (inventory days, receivable days).
Trend analysis:
- Revenue growth trends.
- Seasonal variations.

Key considerations for effective analytical procedures:

Reliability of data used (source, accuracy, completeness).
Plausibility and predictability of relationships.
Precision of expectations.
Level of aggregation (more detailed data often provides stronger evidence).

When used:

Risk assessment procedures (required).
Substantive procedures (optional but often efficient).
Overall review at completion stage (required).

Example (exam‑style for a retail chain):

Gross profit margin decreased from 40% to 33% while revenue increased.
Possible explanations:
- Increased discounts or markdowns.
- Theft or shrinkage.
- Change in product mix.
- Errors in inventory valuation.

You may be asked to:

Identify possible explanations.
Propose further audit procedures to investigate.

3.4 Detailed Procedures for Key Areas (Revenue, Receivables, Inventory, PPE)

Auditing 3B exam questions frequently focus on the most material balances and classes of transactions.

3.4.1 Revenue and Receivables

Primary assertions:

Occurrence: Recorded revenue actually took place.
Completeness: All revenue that took place is recorded.
Accuracy: Amounts are recorded correctly.
Cut‑off: Recorded in the correct accounting period.
Existence (for receivables): Debtors exist.
Valuation (for receivables): Debtors are not overstated (allowance for expected credit losses is adequate).

Example procedures:

Occurrence:
- Vouch a sample of recorded sales to:
  - Approved customer orders.
  - Delivery notes.
  - Invoices.
Completeness:
- Trace a sample of delivery notes to invoices and sales journal.
- Reconcile total sales per ledger to VAT returns and bank deposits.
Cut‑off:
- Examine sales before and after year‑end to ensure correct period recognition.
Existence and valuation of receivables:
- Send debtors confirmations (positive or negative).
- Review post year‑end receipts.
- Assess age analysis and evaluate allowance for expected credit losses.

3.4.2 Inventory

Assertions:

Existence: Inventory physically present.
Completeness: All inventory on hand is recorded.
Rights and obligations: Entity owns the inventory.
Valuation: Lower of cost and net realisable value, appropriate cost allocation.

Key procedures:

Attend inventory counts:
- Observe counting procedures.
- Perform test counts.
- Evaluate controls over movement during count.
Reconcile count sheets to inventory records.
Inspect for obsolete or damaged inventory.
For valuation:
- Test cost using purchase invoices and overhead allocation methods.
- Compare cost to NRV using recent selling prices.

3.4.3 Property, Plant and Equipment (PPE)

Assertions:

Existence, rights and obligations, valuation, completeness, presentation.

Procedures:

Inspect significant assets physically (e.g. buildings, vehicles).
Verify ownership:
- Title deeds for properties.
- Registration documents for vehicles.
Recalculate depreciation.
Test for impairment indicators.
Examine repairs and maintenance accounts to identify capitalisable items.

Exam scenario link:

In a UNISA AUE3703 or MANCOSA Auditing 3B exam, a case may describe a manufacturing entity with large investments in PPE and ask:

Describe substantive procedures you would perform to verify the existence, rights and valuation of PPE.

3.5 Audit Documentation (ISA 230) and Working Papers

Requirements of ISA 230:

Prepare audit documentation that is sufficient to enable an experienced auditor, having no previous connection with the audit, to understand:
- The nature, timing and extent of procedures performed.
- The results of the procedures and obtained evidence.
- Significant matters arising and conclusions reached.
Document who performed the work, the date, and who reviewed it.

Forms of documentation:

Permanent file: Information continuing from year to year (e.g. incorporation documents, loan agreements, organisational charts).
Current file: Year‑specific documentation (e.g. working trial balance, current year audit programmes, evidence for balances).

Working paper types:

Narrative notes.
Checklists.
Schedules and analyses.
Flowcharts.
Copies of documents (e.g. contracts, minutes).

Quality aspects:

Clarity and completeness: Enough detail for another auditor to replicate work.
Cross‑referencing: Linking between working papers and financial statement line items.
Timely preparation: Prepared and filed on a timely basis.

Exam angle:

Explain the purpose of audit working papers.
Describe the consequences of inadequate documentation (e.g. inability to demonstrate compliance with ISAs, disciplinary action by IRBA).

4. Group Audits, Reporting and Modifications of Opinion

4.1 Group Audits (ISA 600): Roles and Responsibilities

Auditing 3B covers group audits involving a parent company and one or more subsidiaries, common in courses like UNISA AUE4861, CUT AUD601 and MANCOSA Auditing 3B.

Key roles:

Group engagement partner: Responsible for direction, supervision and performance of the group audit.
Group engagement team: Performs work on group level and sometimes on significant components.
Component auditors: Audit subsidiaries, divisions or branches (may be from another firm or jurisdiction).

Responsibilities of group engagement team:

Obtain understanding of:
- Group, its components, and their environments.
- Consolidation process.
Assess risk of material misstatement of the group financial statements.
Determine significant components (by size or risk) and the nature of work to be performed.
Evaluate the competency and independence of component auditors.
Communicate clearly with component auditors (instructions, reporting responsibilities).
Evaluate:
- Component auditors’ findings.
- Consolidation adjustments.
- Events or conditions that may indicate group‑wide risks (e.g. management override).

Exam points:

Differences between significant and non‑significant components.
Types of work on components:
- Full scope audit.
- Specified audit procedures.
- Analytical procedures only (for low‑risk, small components).

4.2 Communication and Coordination in Multi‑Location Audits

In South African contexts (e.g. JSE‑listed groups with African subsidiaries), effective communication is essential.

Key elements of communication from group engagement team to component auditors:

Scope of work and identification of financial reporting framework.
Materiality levels for components.
Identified significant risks at group level relevant to components.
Requests for inter‑company balances and transactions testing.
Requirements about:
- Use of experts.
- Related party disclosures.
- Fraud considerations.

From component auditors to group engagement team:

Confirmation of compliance with ethical requirements.
Identification of significant risks at component level.
Significant misstatements, deficiencies in internal control, and law/regulation non‑compliance.
Component auditor’s opinion and any modifications.

Challenges (often exam‑tested):

Language and cultural differences.
Different regulatory environments.
Time zone and reporting deadline constraints.

Students in UNISA AUE4861 and AUD7312 may be asked to outline the matters the group auditor should consider and the information to be obtained from component auditors.

4.3 Audit Reports: Structure and Types of Opinions (ISA 700–706)

Auditing 3B students must be fully comfortable with the structure of the auditor’s report and types of modifications.

Unmodified (clean) opinion (ISA 700):

Key elements:

Title: “Independent Auditor’s Report”.
Addressee: Usually shareholders, sometimes board or other stakeholders.
Opinion section:
- Reference to financial statements (title, period).
- Statement that they present fairly, in all material respects (or give a true and fair view).
Basis for Opinion section:
- Reference to ISAs and ethical requirements.
- Statement on independence.
Key Audit Matters (KAMs) (for listed entities, per ISA 701).
Responsibilities of Management and Those Charged with Governance.
Auditor’s Responsibilities.
Other reporting responsibilities (if applicable).
Auditor’s signature, date and address.

Types of modified opinions (ISA 705):

Qualified opinion:
- Material but not pervasive misstatements or inability to obtain sufficient appropriate evidence.
Adverse opinion:
- Misstatements are both material and pervasive.
Disclaimer of opinion:
- Inability to obtain sufficient appropriate evidence and the possible effects are material and pervasive; or extreme uncertainty; or lack of independence.

Emphasis of Matter and Other Matter paragraphs (ISA 706):

Emphasis of Matter:
- Draws users’ attention to a matter presented or disclosed in the financial statements that is fundamental to their understanding (e.g. significant uncertainty, going concern emphasis).
Other Matter:
- Refers to a matter other than those presented or disclosed in the financial statements that is relevant to users’ understanding of the audit, the auditor’s responsibilities, or the auditor’s report.

4.4 Conditions Leading to Modified Opinions

Understanding the relationship between type of issue and type of opinion is crucial.

Two main dimensions:

Nature of problem:
- Misstatement of financial statements.
- Inability to obtain sufficient appropriate evidence (limitation on scope).
Severity:
- Material but not pervasive.
- Material and pervasive.

Mapping to opinions:

Nature / Severity	Material but Not Pervasive	Material and Pervasive
Financial statements misstatement	Qualified opinion	Adverse opinion
Inability to obtain sufficient appropriate evidence	Qualified opinion	Disclaimer of opinion

Examples:

Qualified opinion due to misstatement:
- Inventory not stated at lower of cost and NRV; effect is material but confined to inventory and cost of sales.
Adverse opinion:
- Financial statements prepared on a going concern basis when liquidation is likely and adequate disclosure not given; overall financial statements are misleading.
Qualified opinion due to scope limitation:
- Auditor not able to observe inventory count at one material warehouse and alternative procedures not possible.
Disclaimer of opinion:
- Significant limitation on scope, such as management’s refusal to allow access to key records, affecting multiple balances and transactions.

Exam‑style tasks:

Required to identify the appropriate opinion in a given scenario and draft the opinion paragraph in correct wording.
Distinguish between when an Emphasis of Matter paragraph is appropriate and when a modification is required.

4.5 Key Audit Matters (KAMs) and South African Practice

For listed entities (e.g. JSE‑listed), auditors are required by ISA 701 to communicate Key Audit Matters.

Definition:

Those matters that, in the auditor’s professional judgment, were of most significance in the audit of the current period.

Selection criteria:

Areas of higher assessed RMM.
Significant auditor judgments and estimates.
Significant events or transactions (e.g. major acquisitions, impairments, litigation).

Structure of a KAM:

Brief description of the matter.
Why the matter was considered one of the most significant.
How the matter was addressed in the audit.

Important exam distinctions:

KAMs are not a separate opinion.
KAMs are included within an unmodified or modified opinion report; they do not in themselves modify the opinion.
Not all matters communicated with those charged with governance are KAMs.

Example KAM (for a South African mining company):

KAM: Impairment of mining assets due to commodity price declines.
Why significant: Large carrying amount; complex estimation of future cash flows.
Audit response: Evaluated assumptions, involved valuation experts, performed sensitivity analyses.

Students in courses like UNISA AUE4861 or MANCOSA Auditing 3B may be asked to draft a KAM disclosure based on a case study.

5. Current Issues, Public Sector Auditing and Exam Strategy

5.1 Public Sector Auditing in South Africa (AGSA, PFMA, MFMA)

Many South African auditing syllabi, including modules at UNISA, CUT and MANCOSA, include elements of public sector auditing.

Key institutions and legislation:

Auditor‑General South Africa (AGSA):
- Supreme audit institution mandated by the Constitution and the Public Audit Act.
- Audits national and provincial departments, municipalities, and certain public entities.
Public Finance Management Act (PFMA):
- Governs financial management in national and provincial spheres.
Municipal Finance Management Act (MFMA):
- Governs financial management in local government.

Types of audits performed by AGSA:

Financial audits:
- Provide opinions on financial statements.
Compliance audits:
- Assess compliance with laws and regulations.
Performance audits:
- Economy, efficiency and effectiveness (“value for money”).

Audit opinions in the public sector:

AGSA uses similar opinion types (unqualified, qualified, adverse, disclaimer) but often accompanied by findings on compliance and performance in audit reports.

Common exam areas:

Distinguish between private sector and public sector auditing.
Explain:
- Mandate and independence of AGSA.
- Importance of compliance with PFMA/MFMA.
- The concept of irregular, fruitless and wasteful expenditure.

5.2 Information Technology (IT) and Data Analytics in Auditing

Modern syllabi, including AUD7312 at MANCOSA and AUE4861 at UNISA, increasingly incorporate IT auditing and data analytics.

Impact of IT on auditing:

Automated controls (e.g. programmed checks, access restrictions).
Risk of IT failures and cybersecurity incidents.
Use of Computer‑Assisted Audit Techniques (CAATs).

Common CAATs:

Audit software to:
- Extract data from client systems.
- Perform recalculations.
- Select samples based on criteria.
Test data:
- Inputting dummy transactions into the client system to test IT controls.
Integrated test facilities (ITF):
- Creating fictitious entities (e.g. fake customers) within the system to test controls.

Data analytics in auditing:

Use of large data sets to:
- Identify unusual patterns.
- Perform 100% population testing for certain controls.
Examples:
- Analysing journal entries for red flags (e.g. unusual timing, unusual combinations of accounts).
- Matching invoices to deliveries and payments across the entire year.

Exam application:

Describe how CAATs can be used to test sales, purchases or payroll cycles.
Discuss advantages (e.g. efficiency, broader coverage) and limitations (e.g. need for IT skills, data integrity).

5.3 Fraud, Forensic Auditing and Professional Scepticism

Though not all modules offer full forensic auditing syllabi, fraud‑related content is common in Auditing 3B.

Fraud vs error (ISA 240):

Fraud: Intentional misstatement, including:
- Fraudulent financial reporting.
- Misappropriation of assets.
Error: Unintentional misstatement.

Auditor’s responsibilities:

Maintain an attitude of professional scepticism.
Make inquiries about fraud risk factors.
Identify and respond to fraud risk (especially management override of controls).
Perform mandatory procedures:
- Journal entry testing.
- Reviewing accounting estimates for bias.
- Evaluating business rationale of significant unusual transactions.

Forensic auditing (high‑level overview):

More detailed investigation, often post‑fact, focusing on discovering fraud and gathering evidence for litigation.
Involves:
- Detailed examination of records.
- Use of IT forensics.
- Interviews and interrogation.

Exam coverage:

Describe the differences between an external audit and a forensic investigation.
Discuss how an external auditor should respond if fraud is suspected, including reporting obligations (e.g. to management, those charged with governance, regulators where appropriate).

5.4 Corporate Governance, Audit Committees and Combined Assurance

Corporate governance is a prominent theme in South African auditing syllabi, referencing King IV and Companies Act requirements.

Audit committees (for certain companies):

Appointed by shareholders (for public companies and state‑owned companies).
Functions include:
- Recommend appointment of external auditor.
- Approve audit fees and terms of engagement.
- Oversee integrity of financial reporting.
- Review internal control and risk management systems.
- Monitor internal audit.

Combined assurance model (King IV):

Integration and coordination of:
- Management assurance.
- Internal assurance providers (e.g. internal audit).
- External assurance providers (e.g. external auditors, regulators).
Aim: Optimise assurance coverage and avoid duplication.

Exam focus:

Explain the role of the audit committee in relation to:
- External audit appointment, independence and quality.
- Internal audit function.
- Combined assurance coordination.

5.5 Exam Strategy for AUD7312 / AUE3703 / AUD601

Auditing 3B exams at MANCOSA (AUD7312), UNISA (AUE3703, AUE4861) and CUT (AUD601) are typically application‑heavy, requiring structured, analytical answers.

General strategies:

Read the question carefully:
- Identify verbs (e.g. “explain”, “discuss”, “evaluate”, “design audit procedures”).
- Identify the entity type (listed, SME, public sector) and industry (retail, manufacturing, financial services).
Structure your answers:
- Use headings and subheadings where allowed.
- Address each requirement separately.
- For audit procedures, use assertion‑based structure (e.g. existence, completeness, valuation).
Apply concepts to the scenario:
- Avoid generic textbook answers only.
- Tailor risks, procedures and explanations to the given case (e.g. for a South African construction company vs a financial services entity).
Use exam keywords and standards:
- Refer to relevant ISAs (e.g. ISA 315, 330, 500, 700).
- Mention South African legislation (Companies Act, PFMA, MFMA, IRBA Code, King IV) when relevant.
Time management:
- Allocate time based on marks (e.g. 1.5 minutes per mark).
- Do not over‑answer low‑mark questions at the expense of high‑mark ones.

Common question types in Auditing 3B / AUE3703:

Scenario‑based risk assessment:
- Identify and explain business risks and related audit risks.
- Design audit responses.
Audit procedure questions:
- “List and describe substantive procedures to test…” for specific balances (inventory, PPE, revenue, receivables, etc.).
- “Describe tests of controls for the sales/purchase/payroll cycle.”
Reporting questions:
- Draft or modify audit opinion paragraphs for different scenarios.
- Decide whether to include Emphasis of Matter or Other Matter paragraphs.
Ethics and independence scenarios:
- Identify threats and propose safeguards or actions (e.g. withdrawal from engagement).

Specific tips for South African students:

For queries like “AUD7312 MANCOSA exam notes”, “UNISA AUE3703 study notes” or “CUT AUD601 past exam questions”, focus your preparation on:
- IRBA independence and threats.
- South African public sector context (PFMA, MFMA, AGSA).
- King IV governance and audit committee roles.
- Risk‑based approach, group audits and reporting topics.

5.6 Integrating Auditing 3B with Professional Career Paths

For students in MANCOSA’s Bachelor of Commerce in Accounting, as well as UNISA and CUT, Auditing 3B provides foundational knowledge for:

SAICA‑accredited CTA programmes and ultimately the ITC/APC exams.
IRBA trainee auditor (RA) routes, where advanced auditing standards and ethics are central.
Internal auditing career paths, where knowledge of ISAs and King IV is highly relevant.

Key skills developed:

Critical thinking and professional scepticism when evaluating evidence.
Ability to link business models to audit risks and procedures.
Capacity to communicate complex audit findings clearly in reports and to those charged with governance.

Students who engage deeply with the AUD7312: Auditing 3B Study Notes and related modules like UNISA AUE3703 and CUT AUD601 will be better equipped not only for exams but for practical audit work in South Africa’s public and private sectors.