An auditor downloads 220,000 sales transactions, joins them to the shipping system, and finds 4,300 invoices with no matching shipment. The exam question is not whether the analytic was clever. It is whether the auditor first proved the extract was complete, then decided whether the 4,300 exceptions were evidence or just a list to investigate.
HIGH-FREQUENCY: ADA refers to automated tools and techniques that process, organize, structure, or present data so the auditor can use the resulting information as evidence. The Blueprint phrasing matters: "to generate useful information that can be used as evidence" is the test. If the output cannot be tied to a relevant assertion, it is exploration, not evidence.
ADA spans four mindsets:
- Descriptive: "what happened?" Trend lines on revenue, ratio comparisons, journal-entry frequency by user
- Diagnostic: "why did it happen?" Variance decomposition, drill-down from a flagged ratio to underlying transactions
- Predictive: "what is likely to happen?" Regression forecasts, models that estimate an allowance from aging buckets
Common mistakes
- Treating an exception list as evidence without investigation. A 4,300-item list is the start of audit work, not the end. Trap: "ran the analytic, identified exceptions, concluded the account is fairly stated"; the conclusion is unsupported.
- Skipping data reliability before the analytic. The exam describes an auditor running Benford's Law on a journal-entry file and asks what should have happened first. Answer: reconcile the extract to control totals and test completeness and accuracy.
- Confusing risk-assessment ADA with substantive ADA. A trend line showing a Q4 spike is a risk-assessment output: it directs further testing. It is not evidence revenue is misstated or fairly stated. The trap treats the visualization as a conclusion.
Bottom line
- ADA (Audit Data Analytics) uses automated tools to process, organize, structure, or present data to generate information used as audit evidence.
- Four mindsets: descriptive (what happened), diagnostic (why), predictive (what will happen), prescriptive (what to do).
- ADA can serve as risk assessment, substantive procedure, or test of controls; the role determines what counts as sufficient appropriate evidence.
- Common techniques include trend, regression, ratio, exception, full-population, journal-entry, and system joins.
Exam shortcut
When a question describes ADA producing a long exception list, the answer almost always involves investigation of the exceptions, not a conclusion from the list itself. Memory aid: "Signal, not summary". ADA produces signals; investigation produces conclusions. When a question asks what the auditor should do before running the analytic, the answer is test the completeness and accuracy of the source data. AU-C 500 treats data reliability as a precondition.
The full lesson (about 1,935 words, 13 min read) adds 1 worked example, all 5 common mistakes, a self-check, free in the app.
Learning objectives
- III.A3
Browse all free CPA AUD lessons or jump into free CPA AUD practice questions.