This guide develops accounting, audit, tax and systems judgment for United States CPA candidates. Each concept explains a rule or distinction, resolves an original example and identifies a specific error to avoid. The groups follow the examination's Core and Discipline sections, with foundational accounting before analysis and planning applications.
Financial Accounting and Reporting (FAR)
1. The Accounting Equation and Transaction Effects
Assets equal liabilities plus equity. Analyze the economic event before choosing accounts: borrowing creates an obligation, earning revenue increases equity through income, and owner contributions increase equity without creating revenue. Double-entry bookkeeping preserves the equation, but balanced debits and credits do not establish correct classification.
Worked example: A company borrows $18,000 in cash. Assets and liabilities each increase $18,000; equity and revenue remain unchanged.
Mistake to avoid: Recording loan proceeds as revenue because the bank balance increased.
Reference: Candidate Guide
2. Accruals, Deferrals and Period-End Adjustments
Accrual accounting separates recognition from cash movement. An accrual records an earned or incurred item before its cash settlement. A deferral initially records an asset or liability because recognition belongs to a later period. Determine which period received the benefit or satisfied the obligation before preparing an adjustment.
Worked example: A $9,600 insurance premium covers twelve months beginning October 1. At December 31, expense is $2,400 and prepaid insurance is $7,200.
Mistake to avoid: Expensing the entire premium immediately merely because it was paid.
Reference: Candidate Guide
3. Revenue and Distinct Performance Obligations
Revenue analysis identifies promised goods or services, determines which promises are distinct, and allocates the transaction price using relative standalone selling prices. Recognition follows satisfaction of each obligation. A customer's payment and the seller's performance can occur at different times, so collecting cash does not establish that all revenue has been earned.
Worked example: A $1,200 bundle contains delivered equipment and future support with standalone prices of $1,000 and $500. Allocate $800 to equipment and $400 to support.
Mistake to avoid: Assigning the entire bundle price to the item delivered first.
Reference: Candidate Guide
4. Receivables and the Allowance for Credit Losses
Receivables are presented net of an allowance for expected credit losses under the applicable accounting requirements. Distinguish the required ending allowance from the adjustment needed to reach it. When a previously provided-for receivable is written off, both the receivable and allowance decrease; the write-off does not create another expense.
Worked example: Required allowance is $6,500, and the existing allowance has a $2,000 credit balance. Record a $4,500 expense and allowance increase.
Mistake to avoid: Recording the full required allowance as expense without considering its existing balance.
Reference: Candidate Guide
5. Inventory Cost Flow and Ending Inventory
Inventory cost-flow assumptions allocate available costs between cost of goods sold and ending inventory. They need not describe the physical movement of individual units. Under FIFO, the earliest costs enter cost of goods sold first, leaving later costs in ending inventory. Keep unit quantities and unit costs separate throughout the calculation.
Worked example: Inventory contains 100 units at $8 and 100 at $11. Selling 120 units under FIFO produces $1,020 cost of goods sold and $880 ending inventory.
Mistake to avoid: Using the newest unit cost for every unit sold under FIFO.
Reference: Candidate Guide
6. Depreciation as Cost Allocation
Depreciation allocates an asset's depreciable cost over its estimated useful life; it does not measure changes in market value. For straight-line depreciation, subtract estimated residual value from cost and divide by useful life. Apply appropriate timing conventions and distinguish accumulated depreciation from the current period's depreciation expense.
Worked example: Equipment costs $53,000, has a $5,000 residual value and a six-year life. A full year's depreciation is $8,000, leaving a $45,000 carrying amount after one year.
Mistake to avoid: Depreciating residual value or treating carrying amount as an appraisal.
Reference: Candidate Guide
7. Bond Discounts and Effective Interest
Under the effective-interest method, interest expense equals the beginning carrying amount multiplied by the effective periodic interest rate. Cash interest follows the contractual coupon. For a bond issued at a discount, expense exceeds cash interest, and the difference increases the liability's carrying amount toward its maturity value.
Worked example: A bond begins the annual period at $95,000. At a 6% effective rate, expense is $5,700. With $5,000 cash interest, discount amortization is $700 and ending carrying amount is $95,700.
Mistake to avoid: Applying the effective rate to face value instead of beginning carrying amount.
Reference: Candidate Guide
8. The Indirect Operating Cash Flow Reconciliation
The indirect method reconciles net income to operating cash flow by adjusting noncash items and operating asset and liability changes. An increase in receivables generally reduces operating cash flow relative to income; an increase in operating payables generally increases it. Identify the nature of each balance before applying a sign.
Worked example: Net income is $28,000, depreciation $4,000, receivables increase $6,000 and operating payables increase $2,000. Operating cash flow is $28,000.
Mistake to avoid: Applying working-capital adjustments to financing liabilities such as bank borrowings.
Reference: Candidate Guide
9. Donor Restrictions and Nonprofit Net Assets
For nonprofit reporting, distinguish donor restrictions from management's internal designations. A donor's purpose or time restriction affects net asset classification. A board's decision to reserve resources ordinarily does not create a donor restriction. For an unconditional contribution, separately assess recognition and whether the resources belong in net assets with donor restrictions.
Worked example: A donor gives $30,000 solely for next year's literacy program. The unconditional gift increases net assets with donor restrictions; a board-designated emergency reserve does not.
Mistake to avoid: Treating every internally earmarked amount as donor-restricted.
Reference: Candidate Guide
10. Governmental Funds and Government-Wide Measurement
Governmental-fund statements emphasize current financial resources and use modified accrual accounting. Government-wide statements emphasize economic resources and use accrual accounting. These different measurement perspectives can produce different treatments of the same transaction. Governmental funds should also be distinguished from proprietary funds, which use a different reporting model.
Worked example: Equipment costing $70,000 is generally an expenditure in governmental-fund statements and a capital asset in government-wide statements when capitalization criteria are met.
Mistake to avoid: Assuming every government statement uses the same measurement focus and accounting basis.
Reference: Candidate Guide
Auditing and Attestation (AUD)
11. Objectivity and Independence
Objectivity concerns judgment free from improper influence; independence adds engagement-specific requirements concerning relationships and circumstances. Assess both actual impartiality and how informed observers would view the relationship. Some independence restrictions cannot be resolved through disclosure or an additional reviewer, so identify the applicable rule before selecting a response.
Worked example: An audit team member owns shares directly in the audit client. Confidence in impartial judgment does not resolve the independence problem; assess and address the prohibited interest under applicable requirements.
Mistake to avoid: Assuming a signed conflict disclosure makes any financial relationship acceptable.
Reference: Candidate Guide
12. Professional Skepticism and Contradictory Evidence
Professional skepticism combines a questioning mind with critical evaluation of evidence. Neither management's confidence nor an initially plausible explanation eliminates the need to investigate contradictions. Consider whether evidence is independent, authentic and consistent with other facts, and adjust procedures when information challenges the original assessment.
Worked example: Management attributes falling receivables to collections, but bank receipts have not increased. The explanation remains uncorroborated; investigate write-offs, credits and transfers.
Mistake to avoid: Accepting the first plausible explanation without checking evidence that contradicts it.
Reference: Candidate Guide
13. Materiality Beyond Amount Alone
Materiality considers whether a misstatement could influence users' decisions in context. Evaluate magnitude, nature and circumstances, both individually and collectively. Performance materiality helps address aggregation risk during audit work; it is not permission to ignore all smaller errors. Qualitative factors can make a relatively small misstatement significant.
Worked example: An unsupported $4,000 entry converts a $2,000 loss into a $2,000 profit. Its effect on the reported result warrants qualitative evaluation despite its modest size.
Mistake to avoid: Automatically dismissing an error solely because it falls below a numerical benchmark.
Reference: Candidate Guide
14. Audit Risk and Detection Risk
Audit risk reflects the risk of an inappropriate opinion when financial statements are materially misstated. Inherent risk and control risk contribute to the risk of material misstatement. Detection risk concerns whether audit procedures fail to detect it. Higher assessed misstatement risk generally requires procedures designed to achieve lower detection risk.
Worked example: Complex estimates lack effective review controls. The auditor needs more persuasive evidence, potentially including independent assumptions and specialists, rather than relying on routine arithmetic checks.
Mistake to avoid: Treating inherent risk as something the auditor can reduce by performing more testing.
Reference: Candidate Guide
15. Assertions and the Direction of Testing
Assertions connect financial statement information to specific audit objectives. Testing recorded entries against supporting evidence helps address occurrence or existence. Following relevant source evidence into accounting records helps address completeness. Procedure direction matters, but the source population, transaction circumstances and evidence reliability also determine what the procedure can establish.
Worked example: To investigate omitted payables, select unmatched receiving reports and subsequent payments, then check whether the related obligations were recorded at year-end.
Mistake to avoid: Testing only recorded payables and concluding that unrecorded obligations do not exist.
Reference: Candidate Guide
16. Evidence Sufficiency, Relevance and Reliability
Sufficiency concerns evidence quantity; appropriateness concerns relevance and reliability. Evidence must address the actual assertion and risk. External evidence can be persuasive, but the auditor must evaluate authenticity and maintain appropriate control over confirmation procedures. A confirmation nonresponse provides no affirmative agreement with the recorded balance.
Worked example: A customer does not answer a receivable confirmation. The auditor considers suitable alternative procedures, such as checking subsequent receipts and supporting sales documents.
Mistake to avoid: Counting unanswered confirmations as evidence that customers accepted their balances.
Reference: Candidate Guide
17. Control Design and Operating Effectiveness
A control must first be capable of addressing the identified risk and then operate effectively over the relevant period. A walkthrough can support understanding and implementation, but does not by itself demonstrate consistent operation. Tests of controls should examine how, by whom and with what evidence the control was performed.
Worked example: A supervisor's approval appears on invoices, but the supervisor never checks supporting receipts. The signature does not establish an effective review of delivery.
Mistake to avoid: Equating the presence of an approval mark with evidence that a meaningful review occurred.
Reference: Candidate Guide
18. Sampling, Projection and Population Boundaries
A sampling conclusion depends on the defined population, selection method and audit objective. Targeted testing of unusual items differs from representative sampling. Evaluate identified errors, projected misstatement where appropriate, and sampling risk. A projection is an estimate of population misstatement, not an exact count of every error.
Worked example: In a suitable equal-item sample, 4 of 80 tested invoices contain the same $25 overstatement. For 800 invoices, a simple projection is $1,000, before evaluating sampling risk.
Mistake to avoid: Projecting results from deliberately selected suspicious invoices as though they were representative.
Reference: Candidate Guide
19. Misstatements, Evidence Limitations and Audit Opinions
Distinguish a known financial statement misstatement from an inability to obtain sufficient appropriate evidence. Under the relevant reporting standards, materiality and pervasiveness guide the resulting modification. Material, pervasive known misstatement supports an adverse opinion; a material, pervasive evidence limitation can support a disclaimer. The cause of the problem matters.
Worked example: Management materially and pervasively misstates consolidated statements despite adequate audit evidence. An adverse opinion addresses the known misstatement; a disclaimer would describe a different problem.
Mistake to avoid: Selecting an opinion solely from the size of the issue without identifying its cause.
Reference: Candidate Guide
20. Audit, Review and Compilation Assurance
A financial statement audit provides reasonable assurance; a review provides limited assurance under applicable standards. A compilation provides no assurance. These engagements have different objectives and procedures, so their reports cannot be interpreted interchangeably. Reasonable assurance is high but not absolute, and a review is not simply an unfinished audit.
Worked example: A lender requests an audit, but the business supplies a compilation report. The report provides no assurance and therefore does not satisfy an audit requirement.
Mistake to avoid: Assuming a CPA's association with financial statements always conveys audit assurance.
Reference: Candidate Guide
Taxation and Regulation (REG)
21. Reconciling Book Income to Taxable Income
Financial reporting income and taxable income follow different recognition and measurement rules. Build a reconciliation by identifying each difference and its direction. An expense recognized in the books but disallowed for tax is generally added back; qualifying income excluded from taxation is generally subtracted. Use the stated tax treatment rather than inventing it.
Worked example: Book income is $82,000, including a $3,000 expense stipulated to be nondeductible and $2,000 of stipulated tax-exempt income. Taxable income is $83,000.
Mistake to avoid: Subtracting a nondeductible book expense again instead of adding it back.
Reference: Candidate Guide
22. Tax Deductions and Tax Credits
A deduction reduces the income subject to tax; a credit reduces tax liability under its applicable conditions. A deduction's benefit depends on the relevant marginal rate. Credits can have eligibility, limitation and refundability rules, so their face amount does not always equal an immediately usable cash benefit.
Worked example: At an assumed 24% marginal rate, a $1,000 fully usable deduction saves $240. A $1,000 fully usable credit reduces tax by $1,000.
Mistake to avoid: Comparing a deduction and credit as equal benefits merely because their stated amounts match.
Reference: Candidate Guide
23. Marginal and Average Tax Rates
The marginal rate measures the tax effect of an additional increment of taxable income. The average rate divides total tax by the relevant income measure. Progressive brackets apply different rates to different portions of income; entering a higher bracket does not ordinarily reprice all previously taxed income.
Worked example: Under hypothetical brackets, the first $20,000 is taxed at 10% and the next $10,000 at 20%. Total tax is $4,000, the average rate is 13.33%, and the marginal rate is 20%.
Mistake to avoid: Applying the highest reached bracket rate to the entire income amount.
Reference: Candidate Guide
24. Adjusted Basis, Amount Realized and Recognized Gain
Adjusted tax basis tracks an investment after required increases and decreases. Realized gain generally compares amount realized with adjusted basis. Recognized gain is the portion included under applicable tax rules, which may differ when a valid nonrecognition provision applies. Determine selling costs and other relevant components before calculating the result.
Worked example: An asset with $19,000 adjusted basis sells for $27,000 with $1,000 selling costs. Amount realized is $26,000 and realized gain is $7,000; absent an exception, that gain is recognized.
Mistake to avoid: Using original purchase cost after depreciation or assuming every realized gain receives deferral.
Reference: Candidate Guide
25. Current Deductions and Capitalized Expenditures
A business expenditure may be currently deductible, capitalized into an asset's basis, or subject to a specific rule. Payment alone does not determine treatment. Identify what was acquired, whether the expenditure creates or improves an asset, and the applicable recovery mechanism. Financial accounting capitalization and tax capitalization require separate evaluations.
Worked example: A problem stipulates that a $12,000 expenditure must be capitalized and permits $2,400 of first-year recovery. The current deduction is $2,400, not $12,000.
Mistake to avoid: Deducting an entire cash outlay without evaluating capitalization and recovery requirements.
Reference: Candidate Guide
26. Supporting a Tax Return Position
A tax position requires a factual basis and analysis of applicable authority. Separate authoritative requirements from commentary, and distinguish uncertainty in the facts from uncertainty in interpretation. Professional responsibilities may affect whether a position can be recommended or signed and whether disclosure is needed; disclosure alone does not cure every unsupported position.
Worked example: A client requests a business deduction for a personal vacation. Receipts prove payment, but do not establish a qualifying business expense; the proposed deduction lacks the needed factual support.
Mistake to avoid: Treating possession of a receipt as sufficient proof of deductibility.
Reference: Candidate Guide
27. Confidentiality and Authorized Disclosure
Access to client information does not automatically permit its use or disclosure. Identify the purpose, recipient, consent and applicable professional or legal requirements. Confidentiality is not absolute where a valid exception or duty applies, but a convenient request is not itself an exception. Share only information appropriate to the authorized purpose.
Worked example: A client's lender asks for the client's tax return. The request alone does not authorize release; verify appropriate authorization before providing confidential information.
Mistake to avoid: Assuming a longstanding business relationship substitutes for client authorization.
Reference: Candidate Guide
28. Contract Formation and Agreement Evidence
Contract analysis begins with the proposed terms, offer, acceptance and the governing legal framework. Determine whether the parties actually agreed and whether other formation requirements apply. Common-law and sales-of-goods rules can differ, particularly for changed acceptance terms. An invoice or payment is evidence, but must be interpreted in context.
Worked example: Under an assumed common-law mirror-image rule, a buyer responds to an offer by demanding a different price. That response is a counteroffer, not acceptance of the original terms.
Mistake to avoid: Applying one contract rule to every transaction without identifying the governing framework.
Reference: Candidate Guide
29. Actual and Apparent Authority in Agency
Actual authority concerns permission the principal gives the agent. Apparent authority concerns manifestations attributable to the principal that can reasonably lead a third party to believe the agent has authority. The agent's unsupported claim of power is different from the principal's conduct. Evaluate the relationship and facts under the governing law.
Worked example: A principal introduces an employee as the purchasing representative authorized for routine orders. That introduction can support apparent authority; the employee's private claim alone cannot establish it.
Mistake to avoid: Treating whatever an agent says about their authority as binding proof.
Reference: Candidate Guide
30. Legal Form, Ownership and Tax Classification
Analyze legal organization, ownership, governance and tax classification as separate questions. A business's name or owner count does not establish every answer. Formation documents identify the legal arrangement; applicable tax rules and valid elections determine tax treatment. A change in tax treatment does not automatically change contractual responsibilities or management powers.
Worked example: A business has three owners and uses 'company' in its name. Those facts are insufficient to select its tax return treatment; formation records and relevant elections are needed.
Mistake to avoid: Inferring tax classification solely from a business name or informal description.
Reference: Candidate Guide
Business Analysis and Reporting (BAR)
31. Fixed, Variable and Mixed Costs
Within a relevant operating range, total fixed cost remains approximately constant, while total variable cost changes with activity. A mixed cost contains both components. Fixed cost per unit changes as volume changes. Before projecting costs, identify the activity driver and whether capacity limits or step costs invalidate the assumed relationship.
Worked example: Monthly cost equals $7,000 plus $3 per unit. At 2,000 units, total cost is $13,000 and average cost is $6.50 per unit.
Mistake to avoid: Treating a fixed cost per unit as constant when production volume changes.
Reference: Candidate Guide
32. Contribution Margin and Break-Even Volume
Contribution margin equals sales less variable costs and supports fixed costs before creating operating profit. For a single product with stable assumptions, break-even units equal fixed costs divided by contribution margin per unit. A multiproduct calculation additionally depends on the assumed sales mix, which must remain relevant to the decision.
Worked example: Selling price is $75, variable cost is $45 and fixed costs are $36,000. Contribution margin is $30 per unit, so break-even volume is 1,200 units.
Mistake to avoid: Dividing fixed costs by selling price rather than contribution margin.
Reference: Candidate Guide
33. Relevant Costs and Opportunity Costs
A relevant cost is a future amount that differs between alternatives. Sunk costs do not change with the decision. Opportunity cost is the benefit sacrificed by choosing one option over another. Allocated fixed costs matter only to the extent the decision changes them; capacity constraints can make opportunity costs decisive.
Worked example: A special order brings $9,000 and requires $6,000 of incremental costs. With idle capacity and no displaced sales, it adds $3,000 despite an unchanged $2,000 fixed-cost allocation.
Mistake to avoid: Rejecting an order because it fails to cover fixed allocations that will continue anyway.
Reference: Candidate Guide
34. Flexible Budgets and Volume Effects
A flexible budget recalculates expected costs or revenue at actual activity using budgeted relationships. It separates the effect of activity volume from differences in prices, efficiency or spending. Comparing actual results only with a static budget can label a predictable volume-driven change as poor performance.
Worked example: Budgeted variable cost is $4 per unit with $10,000 fixed cost. At 3,000 actual units, flexible cost is $22,000. Actual cost of $23,200 creates a $1,200 unfavorable spending difference.
Mistake to avoid: Calling all spending above the original budget unfavorable without adjusting for actual output.
Reference: Candidate Guide
35. Material Price and Quantity Variances
Price and quantity variances explain different causes of direct-material cost differences. A price variance compares actual and standard prices for the relevant actual quantity. A usage variance compares actual quantity used with the standard quantity allowed for actual output. State whether the price variance is calculated at purchase or usage.
Worked example: Using 900 kilograms at $6 instead of 850 kilograms allowed at $5 gives a $900 unfavorable price variance and $250 unfavorable usage variance on a usage basis.
Mistake to avoid: Using planned output rather than actual output to determine the allowed material quantity.
Reference: Candidate Guide
36. Net Present Value and Cash Flow Timing
Net present value compares discounted incremental cash inflows and outflows using a rate consistent with their timing and risk. Cash flow, rather than accounting profit alone, drives the calculation. Include relevant taxes, working capital and terminal proceeds when specified, and avoid including financing costs twice through both cash flows and the discount rate.
Worked example: An investment costs $10,000 and returns $6,000 at each of two year-ends. At 10%, NPV is $6,000/1.10 + $6,000/1.21 - $10,000 = $413.22.
Mistake to avoid: Adding undiscounted receipts when comparing investments with different payment dates.
Reference: Candidate Guide
37. The Cash Conversion Cycle
The cash conversion cycle estimates the interval between paying suppliers and collecting customer cash. It equals inventory days plus receivable days minus payable days, using consistently defined measures. A shorter cycle can reduce funding needs, but changes must be evaluated alongside supplier relationships, customer credit risk and inventory availability.
Worked example: Inventory days are 42, receivable days 28 and payable days 35. The cycle is 35 days, indicating cash is tied up across that operating interval.
Mistake to avoid: Adding payable days when calculating the cycle or assuming shorter payment periods improve liquidity.
Reference: Candidate Guide
38. Ratio Interpretation and Denominator Choice
A ratio needs a defined numerator, denominator and comparison period. Average balance-sheet amounts often better match a full-period income measure than ending balances. Interpret trends and peer comparisons with accounting policies, business models and unusual events in mind. A favorable ratio can result from a shrinking denominator rather than stronger operations.
Worked example: Net income is $24,000; assets rise from $180,000 to $220,000. Using average assets, return on assets is $24,000/$200,000 = 12%.
Mistake to avoid: Comparing ratios calculated with different denominator conventions as though they were equivalent.
Reference: Candidate Guide
39. Consolidation and Intercompany Inventory Profit
Consolidated statements present a controlled group as a single economic entity. Intercompany sales do not create group revenue, and profit remaining in inventory held within the group is unrealized from the group's perspective. Elimination restores the inventory's group cost; the underlying separate-company records can remain unchanged.
Worked example: A subsidiary sells inventory costing $12,000 to its parent for $16,000. If half remains unsold externally, eliminate $2,000 of unrealized profit from consolidated inventory.
Mistake to avoid: Retaining intercompany markup because the separate entities completed a sale.
Reference: Candidate Guide
40. Sensitivity Analysis and Scenario Analysis
Sensitivity analysis changes one assumption while holding others constant to show its individual effect. Scenario analysis changes a coherent set of assumptions together. Neither assigns probabilities automatically. Use plausible relationships: changing sales volume may also affect variable cost, working capital and capacity rather than only revenue.
Worked example: A 200-unit sales decrease with a $25 contribution margin reduces operating profit by $5,000 if fixed costs and other assumptions remain unchanged.
Mistake to avoid: Calling a one-variable sensitivity result a forecast of the most likely outcome.
Reference: Candidate Guide
Information Systems and Controls (ISC)
41. Control Objectives and Preventive or Detective Responses
A control should address a defined risk to a specific objective. Preventive controls seek to stop a failure; detective controls identify one that has occurred. Neither classification establishes effectiveness by itself. Assess coverage, timing and follow-up, because a detected exception can remain unresolved without an assigned response.
Worked example: Duplicate-invoice rejection prevents repeat processing, while a daily duplicate-payment report detects exceptions after processing. Both address duplicate payment risk at different points.
Mistake to avoid: Treating a report's existence as sufficient control without reviewing and resolving its exceptions.
Reference: Candidate Guide
42. Segregating Duties and Compensating Reviews
Separate functions that allow one person to initiate, authorize, execute and conceal a transaction. Incompatible access can undermine an otherwise sensible procedure. When staffing limits separation, a compensating review must be sufficiently independent, precise and supported by evidence to address the actual risk rather than merely add another signature.
Worked example: One employee creates vendors and releases payments. An independent reviewer checks new vendor bank details and corresponding payments against trusted documentation to address the combined exposure.
Mistake to avoid: Assuming two different job titles provide segregation when both users retain the same system permissions.
Reference: Candidate Guide
43. Least Privilege and the Access Lifecycle
Least privilege grants the access needed for assigned responsibilities. Manage permissions through hiring, transfers and departures, with particular attention to privileged accounts. Authentication establishes who is accessing a system; authorization determines what that identity may do. Periodic reviews should examine actual permissions and continuing business need.
Worked example: An employee moves from purchasing to analytics. Removing purchasing approval rights prevents accumulated access, even though the employee remains with the organization.
Mistake to avoid: Reviewing only active employment status while ignoring obsolete permissions from earlier roles.
Reference: Candidate Guide
44. General IT Controls and Application Controls
General IT controls support the environment in which applications operate, including access and system changes. Application controls address particular processing risks, such as invalid amounts or duplicate records. An automated control's reliability can depend on protected configuration, relevant access restrictions and controlled changes to its program logic.
Worked example: An application blocks payments above an approval limit, but administrators can change that limit without review. The automated check exists, yet its supporting control environment is deficient.
Mistake to avoid: Relying on an automated rule without evaluating who can alter it.
Reference: Candidate Guide
45. Controlled System Changes
A system change should have a justified request, authorization, appropriate testing and controlled release. Separate approval to develop from evidence that the completed change works. Tests should cover intended behavior and relevant failure conditions. Emergency changes require proportionate controls and subsequent review rather than an unrestricted exemption from oversight.
Worked example: A payment update passes ordinary transactions but fails when an invoice contains a credit. Release should wait until that failure is corrected and retested.
Mistake to avoid: Accepting a successful normal transaction as proof that all relevant processing conditions work.
Reference: Candidate Guide
46. Data Validation and Processing Reconciliations
Validation checks whether data meets defined conditions; reconciliation checks whether expected data passed through processing accurately and completely. Record counts, monetary control totals and rejected-item reports answer different questions. A balanced monetary total can conceal offsetting errors, while a matching record count does not establish correct amounts.
Worked example: A source file has 240 invoices totaling $96,000. The import contains 238 totaling $95,200. Two records and $800 require investigation through the rejection log and source detail.
Mistake to avoid: Declaring an import complete because the system reports that the job finished.
Reference: Candidate Guide
47. Encryption and Key Management
Encryption protects data confidentiality by making it unreadable without the relevant key. Its effectiveness depends on key protection, authorized use and the data's state. It does not independently establish data accuracy, recipient legitimacy or endpoint security. Data encrypted during transmission may still be exposed after an authorized system decrypts it.
Worked example: A database is encrypted, but an unauthorized user obtains an account that can read decrypted records. Encryption does not compensate for the access-control failure.
Mistake to avoid: Treating encrypted storage as proof that every route to sensitive data is protected.
Reference: Candidate Guide
48. SOC 1 and SOC 2 Report Purposes
SOC 1 reports address service-organization controls relevant to user entities' internal control over financial reporting. SOC 2 reports address controls against applicable Trust Services Criteria. Select a report based on the risk and objective, then read its scope, covered system, exceptions and user responsibilities; the report name alone is insufficient.
Worked example: An auditor evaluates outsourced payroll's effect on financial reporting. A relevant SOC 1 report addresses that objective more directly than a SOC 2 report limited to security.
Mistake to avoid: Assuming every SOC report answers the same assurance question.
Reference: Candidate Guide
49. Type 1 and Type 2 Reporting
For SOC reporting, distinguish evidence about design at a specified date from evidence about operation over a specified period. A Type 2 report includes testing of operating effectiveness over its covered period; a Type 1 report does not provide that period-based operating conclusion. Evaluate timing gaps and relevant complementary user entity controls.
Worked example: A Type 1 report dated June 30 does not establish that a control operated consistently from January through December.
Mistake to avoid: Extending a report's assurance beyond its stated date, period or covered controls.
Reference: Candidate Guide
50. Recovery Objectives and Tested Restoration
A recovery point objective concerns the tolerable age of recovered data; a recovery time objective concerns the targeted time to restore a service. Backups support recovery but do not prove usable restoration. Test dependencies, integrity and access, and compare demonstrated recovery capability with the organization's stated objectives.
Worked example: Daily backups alone may leave almost 24 hours of data unavailable after failure. They cannot demonstrate compliance with a two-hour recovery point objective.
Mistake to avoid: Treating successful backup creation as evidence that the required restoration time and data currency are achievable.
Reference: Candidate Guide
Tax Compliance and Planning (TCP)
51. Permanent Differences and Timing Differences
A permanent book-tax difference does not reverse through later tax treatment of the same item. A temporary difference reflects timing or measurement differences with future tax consequences. In planning, distinguish eliminating tax from shifting its timing. A current deduction advantage can reverse later, and accounting for deferred taxes requires a separate assessment.
Worked example: A stipulated nondeductible $2,000 expense creates a permanent difference. A $2,000 deduction taken earlier for tax than for books creates a timing difference that may reverse.
Mistake to avoid: Calling every current reduction in taxable income a permanent tax saving.
Reference: Candidate Guide
52. Separate Book and Tax Depreciation Schedules
Track book carrying amount and adjusted tax basis separately when depreciation methods differ. The current deduction difference affects the book-tax reconciliation; the accumulated difference explains the remaining basis gap. Do not change book depreciation merely to match a tax deduction, because the schedules serve different measurement purposes.
Worked example: An asset costs $40,000. First-year book depreciation is $8,000 and stipulated tax depreciation is $14,000. Book carrying amount is $32,000, tax basis $26,000, and the current difference is $6,000.
Mistake to avoid: Confusing the current year's depreciation difference with the accumulated basis difference in later years.
Reference: Candidate Guide
53. Pass-Through Ownership Basis Rollforwards
An owner's tax basis in a pass-through interest can change through contributions, allocated income, distributions and losses, with entity-specific rules for debt and other adjustments. Maintain a chronological rollforward. Tax basis is distinct from financial statement equity and market value, and it does not by itself establish that every loss is deductible.
Worked example: Under stipulated simplified rules, beginning basis of $15,000 plus $4,000 contributed and $6,000 allocated income, less a $7,000 distribution, leaves $18,000 before losses.
Mistake to avoid: Substituting an entity's book capital balance for the owner's tax basis.
Reference: Candidate Guide
54. Loss Limitations as Separate Eligibility Gates
A business loss can encounter multiple independent limitations, including basis, at-risk and passive-activity requirements where applicable. Passing one limitation does not satisfy the others. Track amounts allowed or suspended at each relevant stage, preserving their character and carryforward treatment under the rules applicable to the entity and taxpayer.
Worked example: A problem stipulates that a $12,000 loss passes the basis test, but only $8,000 passes the next limitation. At most $8,000 proceeds to further testing; it is not automatically deductible.
Mistake to avoid: Concluding that adequate basis guarantees a current deduction for the entire loss.
Reference: Candidate Guide
55. The Present Value of Tax Deferral
Deferring an unchanged tax payment can create a financing benefit because money retains value while the payment is postponed. Measure that benefit using a discount rate and realistic payment dates. Deferral is different from eliminating liability; future rates, transaction costs and recognition conditions can alter the result.
Worked example: Paying an unchanged $10,000 tax in one year rather than today has a present value of $9,259.26 at 8%, a timing benefit of $740.74.
Mistake to avoid: Describing the entire postponed tax amount as a permanent saving.
Reference: Candidate Guide
56. Two Levels of Tax and After-Tax Distributions
When a stipulated arrangement taxes income at the entity level and again when distributed, the second tax applies to the amount distributed after the first tax. Compare the combined burden with alternatives using consistent assumptions. Tax rates cannot simply be added because the two taxes may apply to different bases.
Worked example: Assume $100,000 profit, 20% entity tax and 15% tax on the remaining distribution. Total tax is $20,000 + $12,000 = $32,000; the owner retains $68,000.
Mistake to avoid: Adding the assumed rates to claim a 35% combined burden.
Reference: Candidate Guide
57. Gain Character and the Facts Behind It
The character of income or gain can affect rates, netting and limitations. Determine the asset's nature, its use, the transaction and relevant holding facts under applicable law. A transaction's label or the taxpayer's preferred rate does not decide character. Apply special recharacterization rules when the facts require them.
Worked example: Under stipulated treatments, an $8,000 gain taxed at 30% produces $2,400 tax; the same amount taxed at 15% produces $1,200. Character changes the result by $1,200.
Mistake to avoid: Assuming every gain on selling a business asset qualifies for a preferred capital-gain rate.
Reference: Candidate Guide
58. Tax Liability, Withholding and Estimated Payments
Distinguish the calculated tax liability from amounts already paid through withholding or estimated payments. Reconcile payments to the correct taxpayer and period before calculating the remaining balance or overpayment. An apparent overpayment does not itself establish refund timing, and underpayment charges require a separate analysis under applicable rules.
Worked example: Final tax liability is $17,400, withholding is $11,000 and verified estimated payments total $7,000. Payments exceed liability by $600 before other adjustments.
Mistake to avoid: Treating estimated payments as deductions from taxable income rather than payments toward tax.
Reference: Candidate Guide
59. Related-Party Transactions and Economic Substance
Identify ownership relationships and the economic substance of a transfer before evaluating its tax treatment. Related-party rules may change timing, character or recognition, so ordinary transaction assumptions may be insufficient. Documents and labels should match what actually occurred; a payment's description alone does not establish a deduction or distribution category.
Worked example: An owner calls a $20,000 withdrawal 'salary,' but no services were performed. The label does not support compensation treatment; evaluate the withdrawal's actual substance and applicable classification.
Mistake to avoid: Accepting an owner's chosen label without examining services, agreements and the transfer's purpose.
Reference: Candidate Guide
60. Taxable-Equivalent Yield and Investment Comparisons
Compare investments using after-tax returns under consistent risk and timing assumptions. When income is fully exempt from the tax being analyzed, taxable-equivalent yield equals exempt yield divided by one minus the applicable marginal rate. Additional taxes, transaction costs and differing investment risks require separate adjustments rather than an automatic preference for exempt income.
Worked example: At an assumed 20% marginal rate, a 4% exempt yield equals a 5% taxable yield. A 5.5% taxable yield retains 4.4% after tax under those assumptions.
Mistake to avoid: Choosing an exempt investment solely because its income is untaxed, without comparing net returns and risk.
Reference: Candidate Guide
Sources
Exam identity and structure verified:
Browse all study guides