SA 200 sets out the overall objectives of an independent auditor and the nature of an audit conducted in accordance with the Standards on Auditing — specifically, to obtain reasonable assurance that the financial statements as a whole are free from material misstatement, and to report in accordance with the auditor's findings. Reasonable assurance is a high, but not absolute, level of assurance — the standard is explicit that an audit has inherent limitations meaning even a properly planned and performed audit may fail to detect a material misstatement, and that this is not, by itself, a failure of the audit.
Where the inherent limitations actually come from
- The use of testing — most audit conclusions rest on sampling or targeted testing rather than examining every single transaction, with full-population testing as a practical exception rather than the default.
- The inherent limitations of internal control — even a well-designed control system has inherent limits, including the possibility of management override.
- The persuasive, rather than conclusive, nature of most audit evidence — evidence supports a conclusion, it rarely proves one with certainty.
- The use of judgment in gathering and evaluating evidence, and in forming conclusions — different, equally competent auditors could reasonably reach somewhat different judgments on the same evidence.
- Fraud, in particular, being specifically designed to be concealed — SA 200 acknowledges a well-planned fraud by management may not be detected even by an audit performed with due professional care.
"Reasonable assurance" is a defined technical term in the Standards, not a hedge or a disclaimer — it describes a specific, high level of assurance that is less than certainty, and every other Standard on Auditing is written against this baseline rather than against a promise of finding every misstatement.
What SA 200 requires the auditor to maintain throughout
| Concept | What it means in practice |
|---|---|
| Professional skepticism | A questioning mind, alert to conditions that may indicate misstatement, and a critical assessment of evidence — neither assuming management is dishonest, nor assuming they're honest without basis |
| Professional judgment | Applying relevant training, knowledge and experience to make informed decisions appropriate to the specific circumstances — used throughout the audit, not only at points of genuine ambiguity |
How we think about this
Every other SA — materiality, risk assessment, sampling, estimates — operates inside the boundary SA 200 sets: reasonable, not absolute, assurance, achieved through persuasive rather than conclusive evidence. Understanding that boundary is what stops an audit team from either over-promising what an opinion means, or under-performing the specific skepticism and judgment the standard actually requires within that boundary.
This is practical guidance written for audit teams, not an authoritative statement of any standard or statute. Standards, forms and timelines change. Check the current text issued by the ICAI and the relevant authority before relying on anything here in an audit file.
Related resources
- Internal audit & IFCSA 240: the auditor's responsibilities relating to fraudSA 240 doesn't make the auditor a fraud investigator. It requires planning and performing the audit as if fraud could exist, and documenting that you did.
- Audit workflow & automationSA 315: identifying and assessing the risks of material misstatementA risk assessment that doesn't name a specific assertion isn't a risk assessment under SA 315 — it's a general impression written down.
- Audit workflow & automationSA 300: planning an audit, and why the strategy comes before the planThe strategy answers "what kind of audit is this." The plan answers "who does what, when." SA 300 keeps them as two different documents on purpose.
Free tools, no signup
Each one reads a file entirely in your browser — or, for two of them, just answers a few questions — and nothing is ever uploaded.
- Purchase register checkDuplicate payments, round-sum amounts, weekend-dated invoices, incomplete records.
- GSTR-2B reconcilerMatches your purchase register against GSTR-2B — missing invoices either side, amount mismatches.
- Bank reconciliation checkerMatches your cash book against a bank statement — what's outstanding on each side.
- Fixed asset register checkDuplicate asset codes, missing location or useful life, negative net book value.
- Payroll red-flag scannerBank accounts shared across employees, and records missing an ID, PAN or salary.
- CARO applicability checkerAnswer a few questions about the company and see which CARO 2020 clauses likely apply.
- MSME payment delay checkerMSME-flagged invoices paid — or still unpaid — beyond the 45-day Section 22 limit.
- Related-party transaction screenerTransactions above a threshold you set with no approval reference, grouped by counterparty.
- Depreciation useful life checkerCompares a useful life in use against the Schedule II, Part C indicative figure.
- Materiality calculatorOverall and performance materiality against PBT, revenue, assets or equity, with reasoning shown.
- Sample size calculatorStatistical sample size for a test of controls or a substantive test of detail.