AUD has a 2025 cumulative pass rate of 48.21% according to AICPA data. That places it firmly in the middle of the six CPA exam sections by difficulty, well above FAR and BAR but below REG, ISC, and TCP. The pass rate suggests a section that is challenging but passable for well-prepared candidates.
What the pass rate does not capture is why AUD specifically catches so many candidates off guard. The reason is not content volume or calculation complexity. AUD is the only exam section that tests evaluation, the highest-level skill, in addition to the other three, making it arguably one of the more demanding sections despite its middle-tier pass rate. Candidates who study AUD the same way they studied FAR, by working through content modules and drilling MCQs on rules, frequently discover on exam day that the exam is asking something different from what they prepared for. Crush The CPA Exam
The mindset shift that changes AUD preparation is recognizing that this section tests judgment, not recall. The exam does not primarily ask what a standard says. It asks what an auditor should do given a specific set of circumstances, why a particular procedure is appropriate, and what conclusion follows from a given set of evidence. Building that judgment-based capability requires a different preparation approach from content-heavy sections.
This guide covers the four AUD content areas with their blueprint weights, the specific topics that produce the most difficulty, and what a preparation approach that builds genuine auditor judgment actually looks like.
Table of Contents
- AUD at a Glance: Format and Blueprint Overview
- The Fundamental Difference: Why AUD Tests Judgment, Not Rules
- Area I: Ethics, Professional Responsibilities, and General Principles (15-25%)
- Area II: Assessing Risk and Developing a Planned Response (25-35%)
- Area III: Performing Further Procedures and Obtaining Evidence (30-40%)
- Area IV: Forming Conclusions and Reporting (10-20%)
- The Topics Most Candidates Underinvest In
- How to Study AUD: Building Judgment, Not Just Knowledge
- Key Takeaways
- FAQ
Key Takeaways
| Point | Details |
|---|---|
| AUD is the only section that tests Evaluation | Evaluation is the highest skill level in the AICPA’s framework. It requires deductions, judgments, and decisions, not just recall or application. |
| Area III carries the most weight | Performing Further Procedures and Obtaining Evidence (30-40%) is the largest content area and should anchor the majority of study time. |
| Area II is the conceptual foundation for everything | Risk assessment (25-35%) underpins every other area. Understanding audit risk before studying evidence and procedures makes the rest of AUD significantly more coherent. |
| Sampling is consistently underinvested | Attribute and variable sampling appear in both MCQs and simulations and are among the most commonly missed topics due to under-preparation. |
| SSARS and SSAE content is not optional | Compilations, reviews, preparations, and agreed-upon procedures appear on the exam. Candidates who skip them sacrifice accessible points. |
| Document review simulations require specific practice | These simulations present multiple exhibits and require candidates to evaluate whether evidence supports management’s assertions, a skill that MCQ practice does not build. |
AUD at a Glance: Format and Blueprint Overview
AUD is a four-hour exam consisting of 78 MCQs across two testlets of 39 questions each, and 7 task-based simulations across three TBS testlets. MCQs and TBSs each account for 50% of the total score. A passing score of 75 is a scaled score, not a raw percentage.
The four content areas and their 2026 blueprint weights per the AICPA AUD Blueprint are as follows:
| Content Area | Blueprint Weight | Primary Focus |
|---|---|---|
| Area I: Ethics, Professional Responsibilities, and General Principles | 15-25% | AICPA Code of Professional Conduct, independence, professional skepticism, engagement acceptance, documentation |
| Area II: Assessing Risk and Developing a Planned Response | 25-35% | Audit planning, understanding the entity, internal controls, risk of material misstatement, fraud risk |
| Area III: Performing Further Procedures and Obtaining Evidence | 30-40% | Audit evidence, tests of controls, substantive procedures, sampling, specific risk areas, written representations |
| Area IV: Forming Conclusions and Reporting | 10-20% | Audit opinions, modified reports, attestation engagements, SSARS engagements, compliance reporting |
Area III is the largest content area and the one that should anchor the majority of preparation time. Area II is the conceptual foundation that makes Area III intelligible. A candidate who understands risk assessment deeply will find that evidence and procedure questions follow logically from that foundation. A candidate who jumps to Area III without Area II will find that the evidence questions feel arbitrary rather than purposeful.
The Fundamental Difference: Why AUD Tests Judgment, Not Rules
Every CPA exam section tests application to some degree. AUD is distinct because it goes beyond application to evaluation, and it does so across a larger proportion of its content than any other section.
The practical meaning of this distinction: on FAR, a lease accounting question presents a set of facts and asks for the correct journal entry or calculation. There is a right answer derivable from applying specific rules to specific inputs. On AUD, a question might present a set of facts about an audit client, describe a potential risk area, and ask which audit procedure is most appropriate in that context. Multiple procedures might be defensible. The question is testing whether the candidate understands not just what procedures exist but which one is most relevant given the specific combination of risk factors presented.
AUD feels subjective. There is less “calculate X” and more “which procedure is most appropriate in this scenario.” Candidates who excel at math but struggle with judgment-based questions find AUD harder than expected. CPA Tutoring
This characteristic of AUD has a direct implication for how to study it. Memorizing audit procedures in isolation does not build the judgment to apply them correctly in unfamiliar scenarios. Understanding why each procedure exists, what assertion it addresses, what risk condition it responds to, and when it would be more or less appropriate builds the judgment that the exam actually tests.
The candidates who pass AUD on the first attempt are disproportionately those who approach the section by asking why after every concept rather than what. Why does an auditor send accounts receivable confirmations? Because external confirmation addresses the existence and valuation assertions more directly than internal documentation alone. Why does a higher inherent risk require lower detection risk? Because the overall audit risk model requires that total audit risk be held below an acceptable threshold, and detection risk is the only component the auditor can directly control. Understanding these relationships, rather than memorizing the model elements, makes audit risk questions navigable regardless of how the scenario is framed.
Area I: Ethics, Professional Responsibilities, and General Principles (15-25%)
Area I covers the professional and ethical framework within which auditors operate. This includes independence requirements, professional skepticism, engagement acceptance, and the standards set by multiple regulatory bodies.
Independence is the most heavily tested topic within Area I and one of the most nuanced. Independence requirements differ across regulatory frameworks: the AICPA Code of Professional Conduct governs most CPAs in public practice, while the PCAOB standards apply to auditors of public companies, SEC independence rules apply in certain contexts, the GAO Yellow Book applies to government audits, and DOL rules apply to employee benefit plan audits. AUD questions frequently present scenarios involving specific relationships or financial interests and ask whether independence is impaired under a specified framework. Knowing the framework hierarchy and the differences between them is essential for answering these questions correctly.
Professional skepticism is a concept that appears throughout AUD content, not just in Area I. The AICPA defines professional skepticism as an attitude that includes a questioning mind and critical assessment of audit evidence. AUD questions test whether candidates understand that professional skepticism requires more than neutrality. It requires active questioning of evidence that seems inconsistent, of management explanations that are not corroborated, and of conditions that increase the risk of material misstatement or fraud.
Engagement acceptance covers the preconditions for accepting an audit engagement: the auditor’s assessment of management integrity, the determination that the financial reporting framework is acceptable, and the agreement on the terms of engagement documented in an engagement letter. These topics produce straightforward MCQ questions that reward organized study of the professional standards.
Ethics content under the AICPA Code of Professional Conduct covers the fundamental principles (integrity, objectivity, professional competence and due care, confidentiality, and professional behavior), the conceptual framework for evaluating threats to independence and objectivity, and the specific rules governing CPAs in various professional roles. Ethics questions appear throughout all AUD testlets, not just in the first content area.
Area II: Assessing Risk and Developing a Planned Response (25-35%)
Area II is the conceptual heart of AUD. It covers how an auditor moves from accepting an engagement to developing a plan that addresses the specific risks of material misstatement identified for a particular client. Every subsequent evidence and procedure decision flows from the risk assessment performed here.
The audit risk model is the foundational framework: Audit Risk equals Inherent Risk multiplied by Control Risk multiplied by Detection Risk. The model describes the relationship between the risks the auditor cannot control (inherent and control risk, which together produce the risk of material misstatement) and the risk the auditor can control through the nature, timing, and extent of further audit procedures (detection risk).
The exam tests the model not by asking candidates to state it but by presenting scenarios that require them to identify how a change in one component affects the others. If inherent risk is assessed as high and control risk is assessed as high, the auditor must set detection risk very low to achieve an acceptably low overall audit risk. That means more extensive substantive procedures. Understanding this chain of logic makes risk model questions straightforward regardless of how they are presented.
Understanding the entity and its environment covers the procedures an auditor performs to gain sufficient understanding to identify and assess the risks of material misstatement: inquiries of management, analytical procedures applied to financial data, observation and inspection, and engagement team discussions. This area also covers the five components of internal control under the COSO framework: control environment, risk assessment, control activities, information and communication, and monitoring.
Fraud risk is a specific high-tested area within risk assessment. The auditor is required to specifically assess the risk of material misstatement due to fraud, including the risk of management override of controls and the risk of fraudulent financial reporting. The three elements of the fraud triangle (incentive or pressure, opportunity, and rationalization) and the specific procedures the auditor performs in response to identified fraud risk are both tested.
Significant risks are risks that the auditor identifies as requiring special audit consideration. They always require substantive procedures regardless of the assessment of internal controls, and they typically require direct tests of details rather than reliance on analytical procedures alone. Understanding what makes a risk significant and how the audit response differs is consistently tested in AUD.
Area III: Performing Further Procedures and Obtaining Evidence (30-40%)
Area III is the largest content area in AUD and the one that most directly tests the judgment-based capabilities that distinguish well-prepared AUD candidates from underprepared ones.
Audit evidence covers the nature, sufficiency, and appropriateness of evidence gathered through audit procedures. Appropriateness has two dimensions: relevance (does the evidence address the specific assertion being tested?) and reliability (how trustworthy is the source?). External evidence obtained directly by the auditor is more reliable than internally generated evidence. Original documents are more reliable than copies. Evidence obtained from knowledgeable independent sources is more reliable than evidence obtained solely from management.
The types of evidence (inspection, observation, inquiry, confirmation, recalculation, reperformance, analytical procedures) and which type applies to which assertion is foundational knowledge within this area. Every evidence procedure exists because it addresses one or more financial statement assertions (existence, completeness, accuracy, valuation, cutoff, classification, and for balance sheet items: rights and obligations). Organizing evidence knowledge around assertions rather than around procedures in isolation makes AUD evidence questions significantly more manageable. CPA Tutoring
Tests of controls versus substantive procedures is a distinction that appears throughout Area III. Tests of controls evaluate whether internal controls are designed and operating effectively. Substantive procedures detect material misstatements at the assertion level regardless of internal control performance. Understanding when the auditor relies on controls, when they perform only substantive procedures, and how the mix of procedures responds to the risk assessment from Area II is the applied knowledge that AUD simulations test most directly.
Sampling is consistently among the most under-studied topics in AUD and one of the most frequently missed on the exam. In Audit Sampling, there are two main subsections: Attribute Sampling and Variable Sampling. Both sampling techniques are frequently tested. Attribute sampling is used in tests of controls to estimate the deviation rate in a population. Variable sampling is used in substantive tests to estimate the monetary value of a population or to test whether a stated amount is fairly presented. Understanding the purpose of each method, how sample size is determined (and what factors increase or decrease it), and how results are evaluated and projected to the population is the specific knowledge AUD sampling questions require. My Accounting Course
Document review simulations are an AUD-specific simulation format that requires particular preparation. These are unlike any other sim format. They present candidates with multiple documents, which might include excerpts from financial statements, working papers, audit evidence, or management representations, and ask whether the evidence presented supports or does not support specific management assertions. Preparing for this format requires practicing with multi-exhibit simulations under time pressure, not just understanding the underlying concepts. CPA Tutoring
Written representations and subsequent events are lower-weight topics within Area III but ones that appear consistently enough to warrant specific preparation. Written representations are management’s formal acknowledgment to the auditor of specific assertions and responsibilities. Subsequent events require the auditor to consider events occurring after the balance sheet date but before the audit report is issued, and potentially to evaluate events discovered after the report is issued.
Area IV: Forming Conclusions and Reporting (10-20%)
Area IV covers the auditor’s reporting responsibilities across audit, attestation, and accounting and review service engagements. While it carries the lowest blueprint weight of the four areas, the reporting content produces enough exam questions that treating it as optional creates a meaningful exposure.
Audit opinions and modified reports cover the conditions that require modifications to the standard unmodified opinion: material misstatements that result in a qualified or adverse opinion, scope limitations that result in a qualified opinion or disclaimer of opinion, and emphasis-of-matter or other-matter paragraphs added for specific circumstances without modifying the opinion itself. Understanding the type of modification, the language used, and the conditions that trigger each is both MCQ and simulation content.
Attestation engagements under the AICPA’s Statements on Standards for Attestation Engagements (SSAEs) cover examination, review, and agreed-upon procedures engagements. These engagements apply to subject matters other than historical financial statements, such as internal control over financial reporting, compliance, or prospective financial information.
SSARS engagements cover the services CPAs perform that are not audits: preparations, compilations, and reviews of historical financial statements. Each has distinct requirements, different levels of assurance provided (or not provided), and different report language. Do not skip SSARS and SSAE material. Compilations, reviews, preparations, and agreed-upon procedures each have distinct rules. These questions are not the majority of the exam, but they are easy points if you know them and lost points if you don’t. CPA Tutoring
The Topics Most Candidates Underinvest In
Based on blueprint weights, difficulty patterns, and the areas that consistently catch prepared candidates off guard, the following topics receive less preparation time than they deserve:
Sampling. Both attribute and variable sampling are tested in MCQs and simulations. The mechanics of sample size determination and result evaluation require applied understanding, not just definitional knowledge. Many candidates give sampling one quick pass and move on. The exam does not treat it that way.
SSARS engagements. The tendency to de-prioritize compilations, preparations, and reviews because they are not full audits leaves candidates exposed in an area that produces accessible points for anyone who covers it deliberately.
The audit risk model applied to scenarios. Understanding the model definition is not sufficient. Candidates must be able to work through scenarios that change one or more risk components and identify the correct directional effect on detection risk and the resulting change in audit procedures.
Document review simulations. These simulations require a specific preparation approach that most MCQ-focused study plans do not address. Candidates who have never practiced with multi-exhibit document review simulations before exam day are encountering the format for the first time under maximum pressure.
For candidates who want structured guidance on the specific AUD topics that are producing difficulty, the CPA tutoring services at Andrew Katz Tutoring include AUD-specific preparation with a focus on the judgment-based reasoning skills that the exam actually tests. Candidates can review rates and packages before scheduling a consultation.
How to Study AUD: Building Judgment, Not Just Knowledge
Given AUD’s unique emphasis on evaluation and professional judgment, the preparation approach that works is different from the content-heavy study strategy that works for FAR.
Lead with Area II before Area III. Risk assessment is the foundation that makes evidence and procedure decisions coherent. Starting with audit procedures before understanding the risk assessment model that determines when and why they are used produces surface-level knowledge that breaks down under scenario-based questions. Two weeks on Area II before beginning Area III is not time wasted. It is the foundation that makes Area III stick.
Ask why after every concept. After learning any audit procedure or standard, ask why it exists and what specific problem it solves. Why do auditors perform analytical procedures in the planning stage? To identify areas of unexpected variance that might indicate elevated risk. Why is confirmation of accounts receivable a strong evidence source for the existence assertion? Because the confirmation response comes from an independent external party rather than from management-generated documentation. This reasoning habit builds the judgment that AUD questions require.
Practice with scenario variation. After studying a concept, work through MCQs that present it in multiple different scenarios. AUD questions are designed to test whether candidates can apply knowledge to unfamiliar situations. A candidate who has only seen one version of an audit risk scenario will struggle when the exam presents a variation with different facts. Deliberate exposure to scenario variation during preparation is the preparation equivalent of what the exam will demand on test day.
Study ethics in parallel, not as a standalone block. Ethics content appears throughout all four AUD content areas and in every testlet. Studying the AICPA Code and independence rules as a standalone block at the beginning of preparation and then not returning to them produces knowledge that fades. Integrating ethics review throughout the entire preparation period keeps independence rules and professional conduct standards fresh through exam day.
For candidates who are unsure whether their AUD preparation approach is producing the judgment-based capability the exam requires, the guide on 10 signs you need a CPA tutor covers the specific indicators that the current approach is not building toward a passing score.
Recommended Reading
- CPA Review Course vs CPA Tutor: Do You Actually Need Both in 2026?
- 10 Signs You Need a CPA Tutor (Not Just a Review Course)
- What Is the Hardest CPA Exam Section? 2025 Pass Rates and Study Strategy
- CPA Exam Study Schedule for Working Professionals: 8-Week Template
Key Takeaways
| Point | Details |
|---|---|
| AUD uniquely tests Evaluation | It is the only CPA exam section that goes beyond Application and Analysis to require genuine judgment-based evaluation under professional standards. |
| Area III is the largest and most tested area | Performing Further Procedures and Obtaining Evidence (30-40%) should anchor the majority of preparation time. |
| Area II is the conceptual prerequisite | Risk assessment must be understood before evidence and procedures make strategic sense rather than appearing as arbitrary lists. |
| Sampling is consistently undertested | Both attribute and variable sampling appear in MCQs and simulations and require applied understanding, not just definitional recall. |
| SSARS and SSAE content produces accessible points | Candidates who skip compilations, reviews, and agreed-upon procedures leave easy points on the table. |
| Document review simulations require format-specific practice | Multi-exhibit simulations cannot be prepared for through MCQ drilling alone. |
FAQ
Why is AUD harder than its pass rate suggests?
AUD’s 48% pass rate is mid-tier among CPA exam sections, but the section is uniquely demanding because it tests evaluation, the highest cognitive skill level in the AICPA’s framework. It requires professional judgment applied to realistic scenarios rather than rule application to defined inputs. Candidates who prepare by memorizing standards frequently find the exam tests something different from what they studied.
What is the most important content area in AUD?
Area III (Performing Further Procedures and Obtaining Evidence) carries the most blueprint weight at 30-40% and should anchor the majority of study time. However, Area II (Assessing Risk and Developing a Planned Response) is the conceptual foundation for Area III. Both areas must be understood deeply, with Area II studied first.
How many hours should I study for AUD?
Most preparation guidelines suggest 110 to 140 hours for AUD. Candidates with active audit experience may need fewer hours because the professional judgment being tested aligns with their daily work. Candidates without audit backgrounds should budget toward the higher end of the range and allocate extra time to building the conceptual frameworks that audit experience would otherwise provide.
Do I need audit experience to pass AUD?
No. Many candidates without audit backgrounds pass AUD on their first attempt. What audit experience provides is a practical frame of reference that makes the judgment-based questions more intuitive. Candidates without that background can compensate through deliberate preparation that emphasizes understanding why audit procedures and standards exist rather than just what they require.
Should I sit for AUD before or after FAR?
Most preparation advisors recommend sitting FAR first. If choosing ISC as the discipline section, which builds directly on AUD content, sitting AUD second and ISC shortly afterward maximizes content overlap while the material is fresh. Candidates with active audit backgrounds sometimes prefer sitting AUD early while the professional judgment framework is current.
What makes AUD simulations different from other sections?
AUD simulations frequently involve document review, where candidates are presented with multiple exhibits such as financial statement excerpts, working papers, or evidence descriptions and must evaluate whether the evidence supports or contradicts specific assertions. This format requires a different preparation approach from calculation-based simulations and cannot be adequately prepared for through MCQ practice alone.
Looking for structured help with AUD preparation, particularly the judgment-based reasoning skills the exam requires? Visit the CPA tutoring services page at Andrew Katz Tutoring, review rates and packages, or browse the blog for more CPA exam strategy resources.