How Do You Answer Audit Risk Questions in ACCA AA?

Audit risk is the single most important — and most heavily examined — topic in ACCA AA. A typical question asks you to 'describe several audit risks and explain the auditor's response to each', and it can be worth 16 or more marks. Yet it's where capable students routinely fall short, because they write down what they know instead of what the marking scheme rewards. The good news: the marks follow a rigid, predictable formula.

How the marks are actually split

For each risk and response, marks are typically awarded like this:

• ½ mark for identifying a valid audit risk from the scenario.
• ½ mark for explaining it — stating the assertion affected, or whether an amount is over- or understated.
• 1 mark for an appropriate auditor's response.

That means the response is worth as much as identifying and explaining the risk combined. It also means vague, generic points are worth almost nothing.

Rule 1: Explain the risk, don't just name it

Naming an issue ('there is a risk with inventory') earns the ½ identification mark at best. To get the explanation mark you must say what it does to the financial statements: is inventory overstated? Are provisions understated? Which assertion — valuation, cut-off, completeness — is at risk? A tip from the examiners: only say an amount is 'misstated' if it could genuinely be both over- and understated; otherwise commit to a direction.

Rule 2: A response is audit work — not management's job

This is where the biggest, most avoidable marks are lost. 'Recalculate the inventory', 'adjust the financial statements', 'correct the treatment' — these are all things management does, not the auditor. Your response must describe what the audit team will do to address the risk: inspect, recalculate to verify, request external confirmation, review the non-current asset register, perform cut-off testing on goods dispatched and goods received notes, or enquire of the company's lawyer. 'Discuss with management' on its own is never enough.

Rule 3: Audit risk, not business risk

A threat to the company's reputation, cash flow or customer relationships is a business risk. It only becomes an audit risk when it could cause a misstatement in the financial statements. 'Outsourcing could damage the company's reputation' earns nothing; 'the outsourced receivables function increases the risk that receivables are misstated because controls sit outside the entity' is an audit risk.

Rule 4: Give exactly the number asked for — and no more

If the question wants eight risks, give eight. The scenario always contains more issues than marks available, and there's no credit for a ninth or tenth. Writing extra risks just burns time you needed for your responses — and the response is where the marks are.

What separates a pass from a fail

ACCA publishes examiner-marked answers to exactly this kind of question, and the contrast is stark. The weaker script identifies the right issues but loses mark after mark by explaining business risks, getting the direction of misstatement wrong, and offering management's actions as 'responses'. The stronger script scores nearly double from the same scenario — not because it knows more, but because every point states the effect on the financial statements and every response is genuine audit work. Same knowledge, very different marks.

The takeaway

Audit risk questions reward a disciplined format, not encyclopaedic knowledge: identify the risk, explain its effect on the financial statements, and give a response that is audit work. Master that pattern and this becomes the most reliable source of marks in the paper.

The catch is that you can't tell whether your answer follows the formula just by reading it back — it always feels complete to the person who wrote it. The 50% Club marks your practice AA answers against the official ACCA scheme, showing you exactly where you've slipped into business risk, given management's job as a response, or missed the financial-statement effect — so you walk into the exam writing answers that actually score.