AUD, Auditing and Attestation

Sources for Requirements for Engagement Documentation

Last reviewed 2026-09-14

The standards and authorities behind PocketCPA's AUD lessons on Requirements for Engagement Documentation. The topic rests on AU-C 230.

About this topic

Work that leaves no trace did not happen, as far as the standards are concerned. The file is where the audit proves itself.

Stated technically, audit documentation is the record of the audit. It carries two things: the evidence that the work was planned and performed in accordance with standards, and the basis for the opinion. The governing idea is that a knowledgeable outsider could pick up the file and understand what was done and why.

Key points

• Audit documentation must be sufficient for an experienced auditor with no prior connection to understand the work performed.
• Workpapers are the property of the auditor, not the client, but access may be required by regulators.
• The assembly period for the final engagement file is 60 days after the report release date.
• Documentation must include the identified risks, performed procedures, findings, and conclusions.

What the lessons cover

1. Purpose and sufficiency
2. What to document
3. Assembly, completion, and retention
4. Two frameworks compared
5. Departure from a requirement, and what surfaces later
6. Requirements unique to PCAOB audits (AS 1215)
7. Ownership and access

Authoritative references

Where these requirements sit, and on what evidence. The PCAOB paragraphs were read against the published standard. The AU-C numbers were read on 2026-09-07 against the AICPA's free public compilation of currently effective AU-C sections, which settles a number without reproducing the text; no AU-C text is quoted here. Each entry names the standard, then breaks it out paragraph by paragraph.

• AU-C 230, Audit Documentation.
  • .08 the sufficiency standard and the experienced-auditor benchmark.
  • .16 assembly of the final audit file and the documentation completion date, no later than 60 days following the report release date. The limit sits inside the requirement; the application guidance at .A24-.A26 contemplates only a shorter period.
  • .17 no deleting or discarding before retention ends.
  • .18 additions, with the reasons and when and by whom the change was made and reviewed.
  • Carried at section level rather than by paragraph: five-year retention, identifying characteristics, who performed and who reviewed with the date and extent of review, how inconsistencies were addressed, the departure requirement, the limits on oral explanation, and ownership of the file.
• Citation note, settled 2026-09-08. Read against the AICPA's 2026 compilation: assembly is AU-C 230.16, no deletion is .17, additions are .18, and the application guidance for assembly is .A24-.A26, not .A21 (which belongs to matters arising after the date of the auditor's report). The 60-day limit sits inside the requirement at .16, not in application guidance.
• PCAOB AS 1215, Audit Documentation.
  • .02 the written record of the basis for the conclusions.
  • .03 who reviews the file.
  • .04 detail as to purpose, source and conclusions.
  • .05 what documentation must demonstrate.
  • .06 who performed and who reviewed.
  • .06A the experienced-auditor test with its who-and-when element.
  • .07 the five factors driving nature and extent.
  • .08 contradictory information.
  • .09 post-completion-date discoveries and persuasive other evidence.
  • .09A risk assessment and linkage.
  • .10 identification of items inspected.
  • .11 the central repository.
  • .12 and .13 significant findings and the engagement completion document.
  • .14 seven-year retention.
  • .15 the 14-day completion date and the pre-release conditions.
  • .16 no deletion, additions with date, name and reason.
  • .17 post-release procedures such as those under AS 4101.
  • .18 and .19 the issuing office and other auditors.
  • .20 documentation required beyond this standard.
• PCAOB AS 2901, Consideration of Omitted Procedures After the Report Date, is where AS 1215.09 sends an auditor who cannot demonstrate that the work was done.
• Effective-date watch. The amendments to AS 1215 .09 and .11 (PCAOB Release No. 2024-005) take effect 15 December 2026 and are not yet effective, so .09 and .11 are stated above as they read now. The .15 amendment cutting assembly to 14 days is fully phased in for all registered firms.

How PocketCPA uses these sources

Every lesson is written in original words and cites the paragraph each rule comes from. No standard's text is reproduced. How lessons and questions are written and checked is set out in our methodology.

See also

• Sources for every AUD topic
• Free AUD sample questions
• The CPA exam glossary