Statutory audit planning checklist

Statutory audit planning has four core components: understanding the entity and its environment well enough to identify where misstatement is likely, setting materiality at the financial statement and performance levels, assessing risk at the assertion level for significant classes of transactions, and briefing the engagement team with a timeline that reflects the entity's actual closing schedule rather than a generic one. Each has to be documented as a judgement made for this year, not carried forward from last year's file unchanged.

Understanding the entity and its environment

This is the step most often done thinly, because for a continuing client the team already knows the business. The requirement is not to relearn the client from scratch every year — it is to update last year's understanding for what actually changed, and to record that the update happened.

• Nature of the entity: operations, ownership and governance structure, the way it is financed, and its accounting policies.
• Industry, regulatory, and other external factors, including the applicable financial reporting framework.
• Objectives, strategies, and the related business risks that could result in material misstatement.
• Measurement and review of the entity's financial performance — what management itself tracks, since that is often where pressure to misstate shows up first.
• The entity's system of internal control, to the extent relevant to the audit approach being planned.

Setting materiality

Materiality is set at two levels that get confused in practice: overall materiality for the financial statements as a whole, and performance materiality, which is set lower to reduce to an appropriately low level the probability that the aggregate of uncorrected and undetected misstatements exceeds overall materiality.

1. 01Choose a benchmarkProfit before tax is common for profit-oriented entities, but revenue or total assets may be more appropriate where earnings are volatile or the entity is not profit-driven. The choice should reflect what users of the financial statements actually focus on.
2. 02Apply a percentage, with reasoning recordedThe percentage applied is a matter of professional judgement. What matters for the file is that the reasoning for the chosen benchmark and percentage is recorded, not just the resulting figure.
3. 03Set performance materiality below itBased on the auditor's assessment of the risk of misstatement and the entity's history of corrected and uncorrected misstatements in prior periods.
4. 04Set a threshold for clearly trivial amountsBelow which misstatements need not be accumulated, because they are clearly inconsequential even in aggregate.
5. 05Revisit during the auditIf information comes to light during the audit that would have led to a different materiality judgement had it been known at planning, materiality is revised, and the effect on the nature, timing and extent of further procedures is considered.

Risk assessment at the planning stage

Planning-stage risk assessment sets the audit approach for the rest of the engagement — it determines where procedures concentrate and which risks get treated as significant. Getting this stage right is what makes the rest of the engagement efficient; getting it wrong means procedures are misallocated and the gaps surface late, when there is no time left to fix them.

• Identify significant classes of transactions, account balances, and disclosures, and the relevant assertions for each.
• Assess risk at the assertion level, not only at the financial statement level — a risk stated as "revenue may be misstated" is not specific enough to drive a procedure.
• Identify significant risks, which by definition require special audit consideration, and document why each was treated as significant.
• Consider the risk of management override of controls on every engagement — this is a presumed significant risk, not one assessed away by a clean control environment.
• Assess fraud risk specifically, including in revenue recognition, and document the discussion the engagement team had on susceptibility to fraud.
• Link each identified risk to the planned response — the procedure that addresses it — so the risk assessment actually drives the audit programme rather than sitting separately from it.

Team briefing and timeline

A planning memorandum that never reaches the team doing the fieldwork accomplishes little. The briefing is where the planning decisions — materiality, significant risks, the audit approach for each area — actually transfer to the people executing the programme.

• Walk the team through the significant risks and why each was assessed as significant, not just hand over a list.
• Communicate materiality and performance materiality explicitly — these numbers drive sample sizes and the threshold for what gets investigated, so the team needs them before fieldwork starts, not partway through.
• Assign ownership of each audit area to a named team member, matched to experience where a significant risk is involved.
• Set a timeline anchored to the entity's actual closing schedule and the statutory filing deadline, with interim milestones for fieldwork completion, review, and partner sign-off — not just a single final deadline.
• Build in time for review and query resolution before the deadline, rather than treating the deadline as the date fieldwork finishes.

Checklist: before fieldwork starts

• Engagement letter current for this year and the preconditions for the audit established.
• Understanding of the entity updated for what changed since last year, not carried forward unchanged.
• Overall materiality, performance materiality, and the clearly trivial threshold set and documented with reasoning.
• Significant risks identified, including the presumed risks of management override and fraud in revenue recognition.
• Each identified risk linked to a planned procedure.
• Team discussion on fraud and misstatement susceptibility documented.
• Areas assigned to named team members, matched to the risks involved.
• Timeline set against the entity's actual closing schedule, with milestones for review before the final deadline.