An audit is an evidence-based exercise. The auditor examines evidence, forms conclusions from the evidence and expresses an opinion based on the conclusions. When the evidence is not available, the auditor cannot form conclusions. When the auditor cannot form conclusions, the opinion is affected.
The inability to obtain sufficient appropriate audit evidence is as serious as discovering an actual misstatement, and in some contexts it is more serious, because a known misstatement can be quantified, communicated and corrected. An unknown misstatement, hidden behind an evidence gap, can be anything: the truth behind the gap may be benign (the records were lost in a fire) or catastrophic (the records were destroyed because they documented fraud). The auditor does not know. The auditor cannot conclude. The opinion must reflect that uncertainty.
What creates an evidence gap
Evidence gaps arise from four sources, each with different implications for the audit opinion.
Source 1: Circumstances beyond management’s control. A natural disaster destroyed the inventory records. A fire at a third-party warehouse eliminated the stock confirmation documentation. A vendor in another country went bankrupt and its records are inaccessible. These are genuine circumstances where the evidence once existed but is no longer available.
The auditor’s response: perform alternative procedures. Can the inventory be counted now and rolled back to the year-end date? Can the warehouse operator’s insurance records corroborate the stock position? Can the vendor’s other customers provide indirect evidence of the transaction volumes? If alternative procedures provide sufficient evidence, the gap is closed and the opinion is unaffected. If they do not, the gap remains and the opinion is modified (qualified or disclaimer, depending on the materiality and pervasiveness of the affected balance).
Source 2: Limitations imposed by management. Management refuses to allow the auditor to attend the inventory count. Management will not provide access to the minutes of a board meeting where a significant transaction was discussed. Management declines to confirm the terms of a related-party arrangement. Management instructs a subsidiary’s local auditor not to share working papers with the group auditor.
Management-imposed limitations are the most serious type of evidence gap because they suggest that management does not want the auditor to see what the evidence would reveal. SA 705 requires the auditor to consider: why has management imposed this limitation? Is the limitation related to a matter that could involve fraud, error or non-compliance? Would a reasonable person conclude that the limitation was imposed to prevent the auditor from discovering something adverse?
A management-imposed limitation, by its nature, is more likely to result in a disclaimer (rather than a qualified opinion) because the auditor cannot assess what the evidence would have shown, and the management’s unwillingness to provide it suggests the impact could be material and pervasive.
Source 3: Timing limitations. The auditor was appointed after the year-end inventory count and could not attend. The auditor was appointed after a significant transaction was completed and the documentation was not retained. The auditor’s engagement began too late to perform certain procedures within the relevant time window.
Timing limitations are typically not management-imposed (the company may have changed auditors for legitimate reasons). The auditor applies alternative procedures. The opinion is modified only if the alternative procedures are insufficient and the affected balance is material.
Source 4: Inherent limitations. Some balances involve inherent uncertainty that no amount of audit evidence can eliminate. Litigation provisions (the outcome depends on a court’s future decision), fair value estimates for illiquid assets (no active market exists to validate the value), insurance claim reserves (the ultimate claims experience is unknown). These are not evidence gaps in the traditional sense: the evidence exists but is inherently insufficient to produce certainty.
The auditor’s response: evaluate management’s methodology, assumptions and disclosures. If the methodology is reasonable, the assumptions are supportable and the uncertainty is adequately disclosed, the opinion is unmodified (the inherent uncertainty is the user’s risk, not the auditor’s failure). If the methodology is flawed, the assumptions are indefensible or the uncertainty is not disclosed, the issue becomes a misstatement or a disclosure omission, not an evidence gap.
The decision framework for evidence gaps
Step 1: Identify the gap. What balance, transaction or disclosure cannot be verified? What evidence is missing? Why is it missing?
Step 2: Perform alternative procedures. Can the auditor obtain sufficient evidence through other means? Subsequent events testing, roll-back or roll-forward calculations, third-party confirmations, analytical procedures, management representations corroborated by other evidence?
Step 3: Assess the result. If alternative procedures provide sufficient evidence, the gap is closed. If they do not, the gap remains.
Step 4: Assess materiality and pervasiveness. How large is the affected balance relative to the financial statements? Could the undetected misstatement, if any, be both material and pervasive?
Step 5: Determine the opinion. Possible effects material but not pervasive: Qualified (“except for our inability to verify…”). Possible effects material and pervasive: Disclaimer (“we do not express an opinion because…”).
Why evidence gaps matter beyond the audit
A lender evaluating a company’s financial statements needs to know whether the auditor verified every material balance. A qualified opinion for scope limitation tells the lender: the auditor could not verify this balance, which means the lender cannot rely on it. The lender must independently assess the balance (through its own verification, a separate engagement or enhanced monitoring) or accept the risk that the balance may be misstated.
A disclaimer tells the lender: the auditor could not verify the financial statements to the extent necessary to form any opinion. The financial statements are effectively uncertified. The lender is making a lending decision without audited financial information.
Understanding the difference between an evidence gap (the auditor cannot verify) and a misstatement finding (the auditor has verified and found a problem) is essential for any user who relies on the audit opinion to make decisions.
Northrop Management advises companies, audit committees and lenders on audit evidence requirements, scope limitation resolution and the implications of modified opinions for credit and regulatory decisions.
Business@NorthropIndia.com | +91 92899 25657