Audit Evidence: Types, Sources, and Key Characteristics
What Is Audit Evidence?
Audit evidence is the information an auditor gathers and evaluates to form a reasoned opinion on whether a company’s financial statements are free from material misstatement. Its scope and quality requirements are set out in SA 500, “Audit Evidence” (the Indian equivalent of ISA 500), which requires auditors to obtain sufficient appropriate audit evidence before expressing an opinion. This evidence supports not just the figures in the financial statements but also the company’s compliance with applicable accounting standards and corporate governance requirements. Common examples include bank reconciliations, management accounts, payroll records, bank statements, invoices, and receipts.
What Audit Evidence Must Support: The Financial Statement Assertions
Every piece of audit evidence exists to test one or more management assertions embedded in the financial statements. Understanding these assertions is what separates a checklist approach to evidence-gathering from a risk-based one:
- Existence: the asset, liability, or transaction recorded actually exists or occurred.
- Completeness: all transactions and balances that should be recorded have been recorded, with nothing omitted.
- Valuation and allocation: assets, liabilities, and equity are included at appropriate amounts, with valuation or allocation adjustments correctly recorded.
- Rights and obligations: the company holds or controls the rights to assets, and liabilities are genuinely its obligations.
- Presentation and disclosure: items are classified, described, and disclosed in accordance with the applicable financial reporting framework.
An auditor selects evidence types and procedures based on which of these assertions carries the highest risk of misstatement for a given account balance.
Types of Audit Evidence by Nature
Visual Evidence
Oral Evidence
- Management representations and confirmations
- Interviews with employees and process owners
Documentary Audit Evidence
- Rent agreements
- Purchase orders
- Sales invoices
- Fixed deposit certificates
Types of Audit Evidence by Source: Internal and External Audit Evidence
External Audit Evidence
- Quotations and confirmations obtained directly from third parties
Internal Audit Evidence
- Goods received note (GRN)
- Debit note
- Credit note
As a general rule, evidence obtained directly from independent external sources is considered more reliable than evidence generated internally by the company being audited — a principle that shapes how auditors weigh the evidence below.
How Auditors Actually Obtain Evidence: The Seven Core Procedures
SA 500 sets out seven procedures auditors use, individually or in combination, to gather the evidence above. Knowing these helps finance teams anticipate what an audit will actually involve:
- Inspection: examining records, documents, or physical assets, for example, reviewing a signed contract or physically inspecting inventory. (See our note on audit walkthroughs, which combine inspection with process observation.)
- Observation: watching a process or procedure as it is performed, such as observing a year-end stock count.
- External confirmation: obtaining a direct written response from a third party, a bank confirmation, or a customer balance confirmation are the most common examples.
- Recalculation: independently checking the mathematical accuracy of documents or records, such as re-computing depreciation.
- Reperformance: the auditor independently carrying out a procedure or control that was originally performed by the company, such as re-running a bank reconciliation.
- Analytical procedures: evaluating financial information through analysis of plausible relationships among both financial and non-financial data. See our detailed guide to SA 520 analytical procedures.
- Inquiry: seeking information from knowledgeable persons within or outside the company, often used alongside other procedures rather than on its own, given its inherently persuasive rather than conclusive nature.
Characteristics That Determine Audit Evidence Quality
Under SA 500, all audit evidence is ultimately judged against two overarching characteristics:
- Sufficiency is a measure of quantity. It asks whether enough evidence has been gathered to support the auditor’s conclusion, which depends on the assessed risk of misstatement and the quality of the evidence itself. Sufficiency is closely tied to the auditor’s materiality assessment under SA 320 higher risk or higher materiality generally demands more evidence.
- Appropriateness, a measure of quality, made up of two components:
- Relevance: how directly the evidence relates to the specific assertion being tested and the objective of the audit procedure.
- Reliability: how much the evidence can be trusted, which depends heavily on its source (external evidence generally outranks internally generated evidence) and its nature (evidence obtained directly by the auditor, such as through observation or recalculation, is generally more reliable than evidence obtained orally or through management representation alone).
A common misconception is treating sufficiency and appropriateness as substitutes for each other. A large volume of low-quality evidence does not compensate for a lack of reliable evidence, and vice versa. Both must be satisfied together, which is also why fraud risk considerations under ISA 240 can require auditors to seek more persuasive evidence than they otherwise would for the same account balance.
How MBG Corporate Services Can Help
Whether you’re preparing for a statutory audit, responding to auditor evidence requests, or strengthening documentation ahead of year-end, our internal audit and financial reporting and assurance teams help companies build the evidence trail auditors need, reducing fieldwork friction and audit query cycles. Our audit support services are designed specifically to help finance teams prepare complete, well-organized evidence packages before the audit begins, rather than assembling them reactively during fieldwork.