Substantive Procedures vs Tests of Controls ACCA AA
Substantive Procedures vs Tests of Controls in ACCA AA: How to Tell Them Apart (With Examples)
Written by Vicky Sarin, CA | INSEAD
25+ years in audit practice and professional exam coaching. I've reviewed hundreds of AA scripts where this single confusion — tests of controls vs substantive procedures — is the number one reason candidates lose marks they should have had.
If I could fix one thing that would immediately improve every AA candidate's mark, it would be this: knowing which type of procedure the question is asking for, and writing the right one. In both the December 2025 and March/June 2025 AA exam sittings, the examining team flagged the identical problem — candidates given substantive procedure requirements wrote tests of controls instead, and scored zero for those points.
This isn't a knowledge gap. Most students understand both concepts in theory. The problem is application under exam pressure. This guide gives you a permanent mental model to tell them apart instantly, with worked examples from the exact scenarios where candidates lost marks in 2025.
💡 The Short Version
• A test of control asks: "Is this control actually working?" It tests the operation of a client procedure — not the numbers in the financial statements.
• A substantive procedure asks: "Is this balance or transaction correct?" It tests amounts, completeness, existence, valuation — the financial statements themselves.
• In December 2025 (Quirky Quadbikes Co), many candidates wrote "reviewing that joiner forms have been authorised" as a substantive procedure for payroll — this is a test of control and scored zero.
• In March/June 2025 (Pimento Co and Harper Co), candidates lost marks on PPE additions and purchases for the same mix-up.
• Substantive procedures are always required — even when controls are strong. You can reduce the extent of testing, but you cannot replace substantive procedures with tests of controls.
📋 Table of Contents
The Core Difference — One Question Separates Them
Tests of Controls: What They Are and How to Write Them
Substantive Procedures: What They Are and How to Write Them
How to Write a Well-Described Procedure (The Detail Rule)
Worked Examples by Topic: Payroll, PPE, Purchases, Inventory
Mistakes That Cost Candidates Marks in 2025
The Core Difference — One Question Separates Them
When I teach this topic, I give students one question to ask themselves before writing any procedure. It works without fail:
THE ONE QUESTION
"Am I testing whether a control is working — or am I testing whether a number in the financial statements is correct?"
Control working = Test of Control | Number correct = Substantive Procedure
That's it. Everything else flows from that question. A test of control looks at the client's processes and procedures — did someone authorise this? Was this form signed? Is the reconciliation being performed? A substantive procedure looks at the financial statements themselves — is this balance the right amount? Does this transaction exist? Has everything been included?
The reason students mix them up is that both procedures can look at the same document. You might inspect a payroll listing for a test of control (checking for authorisation signatures) or for a substantive procedure (recalculating gross to net pay). The document is the same — the purpose is completely different. And the purpose is what the examiner marks.
Side-by-Side Comparison
| Dimension | Test of Control | Substantive Procedure |
|---|---|---|
| Definition | An audit procedure designed to evaluate whether a client's internal control is operating effectively in preventing, detecting, or correcting material misstatements | An audit procedure designed to detect material misstatements at the assertion level — directly testing the amounts and disclosures in the financial statements |
| Purpose | Assess whether the system of internal control can be relied upon, so the auditor can plan the extent of substantive testing | Directly obtain evidence that a balance, transaction, or disclosure is correct, complete, or properly valued |
| What it tests | The operation of a client process — whether someone did something, approved something, checked something | The financial statement balance or transaction — whether the number is right, the item exists, everything is included |
| Evidence gathered | Indirect evidence — if controls work, misstatements are less likely, but no direct confirmation of a balance's accuracy | Direct evidence — confirms the actual amount, existence, completeness, or valuation of a specific balance |
| When performed | Only when the auditor plans to rely on internal controls — not always required | Always required, regardless of control strength — the extent may vary but they cannot be eliminated |
| Two types | Inspection of documents for evidence of control performance; observation, enquiry, re-performance of control | Tests of detail (vouch, confirm, recalculate, agree); substantive analytical procedures (ratio analysis, trend comparison) |
| Payroll example | "Inspect a sample of joiner forms for evidence of HR authorisation before payroll access was granted" — this tests whether the control is working | "Recalculate gross to net pay for a sample of employees and agree to the payroll listing to confirm payroll expense is accurately calculated" — this tests whether the number is right |
| ISA reference | ISA 330 The Auditor's Responses to Assessed Risks | ISA 330 The Auditor's Responses to Assessed Risks |
| 2025 exam warning | D25: candidates wrote tests of controls for a substantive procedures requirement — "where this occurred... the majority of procedures listed were tests of controls rather than substantive procedures and so no credit was given" | MJ25: "candidates must ensure that they can distinguish between a substantive procedure and a test of control as many candidates lose marks by giving tests of control when the requirement specifies substantive procedures" |
Tests of Controls: What They Are and How to Write Them
A test of control is how the auditor checks that a client's internal control is actually being applied — not just documented, but operating effectively in practice. The key word is operating. The control exists on paper. You're checking it works in real life.
There are four ways to test a control in AA:
| Method | What It Means | Mark Strength | Example |
|---|---|---|---|
| Inspection | Examining physical documents or records for evidence that a control was performed | Strong — D25 confirms "inspection is likely to provide strong evidence" | "Inspect a sample of purchase orders for evidence of management authorisation signatures before goods were ordered" |
| Re-performance | Independently performing a control the client is supposed to perform, to check it produces the same result | Strong — provides the most direct evidence the control works correctly | "Re-perform a sample of bank reconciliations independently and compare to management's completed reconciliations" |
| Enquiry | Asking client staff how controls operate — useful but weak on its own as it relies on management assertions | Weak alone — should be corroborated with inspection or re-performance | "Enquire of the HR manager the procedure for authorising payroll rate changes and corroborate with inspection of a sample of change forms" |
| Observation | Watching a control being performed — only reliable at the moment of observation | Moderate — D25 confirms observation is only credited where more reliable evidence isn't available (e.g., inventory count) | "Observe the inventory count procedures to confirm that count teams are operating independently of warehouse staff" |
⚠️ The "Check" Problem
Starting a test of control with the word "check" is a trap. "Check that joiner forms are authorised" — half a mark at best. The D25 examiner report is explicit: "A test which starts with 'check' is unlikely to provide sufficient detail as to how exactly the auditor will test the control." Replace "check" with "inspect a sample of... for evidence of..." or "re-perform..." and your answer immediately becomes more specific and more credible.⚠️ The Purpose Problem
Your test of control must actually provide evidence that the specific control is working. In D25, many candidates wrote "review if the bank reconciliation is authorised" for a segregation of duties control. The examiner rejected this: it doesn't confirm the reconciliation was performed by a different person — it only confirms it was signed. A valid test would be: "Inspect a sample of bank reconciliations and confirm the preparer and reviewer are different individuals by checking the signatures against the HR payroll team list."Substantive Procedures: What They Are and How to Write Them
Substantive procedures test the financial statements directly. They answer the question: "Is this balance correct?" There are two types in AA:
Two Types of Substantive Procedures
1. Tests of Detail — These test individual transactions or balances directly: vouch to source documents, confirm with third parties, recalculate figures, inspect physical assets, cast records. They produce direct evidence that a balance exists, is complete, and is correctly valued.
2. Substantive Analytical Procedures — These compare balances, ratios, or trends to expectations (prior year, budget, industry). They are particularly important for payroll (D25 specifically flags analytical review as "an important source of evidence") and for any balance where independent data exists to compare against. Crucially, if your analytical procedure identifies a significant variance, you must state you will investigate it or discuss with management — without follow-up, it earns only ½ mark.
The most common substantive procedure verbs in AA are: agree, cast, recalculate, confirm, trace, vouch, inspect, attend, compare, review — but always with a source document and a purpose attached. "Inspect" on its own is not a substantive procedure. "Inspect a sample of sales invoices and agree the amounts to the sales day book to confirm the accuracy of revenue recorded" is.
A quick rule I give my students: every substantive procedure answer should have three parts — the action (what you do), the source document (what you look at), and the purpose (what the evidence tells you about the assertion).
✅ Vicky's Formula for Substantive Procedures:
[Verb] + [sample/selection] + [source document] + [what you compare it to or what you're testing for]
Example: "Recalculate [verb] gross to net pay for a sample of employees [selection] from the payroll listing [source document] and agree deductions to current statutory tax tables to confirm accuracy [purpose]."
📚 Build This Skill with Structured Practice
The only way to permanently fix this confusion is scenario-based practice with feedback. Our ACCA AA Online Course at Eduyush includes full mock exams across all AA question types — controls, substantive procedures, audit risk, and reporting — with model answers you can compare directly. Read the How to Pass ACCA AA guide for the complete study plan.
How to Write a Well-Described Procedure (The Detail Rule)
Whether you're writing a test of control or a substantive procedure, the examiner marks on the same principle: enough detail to demonstrate you understand what you're doing and why. Both examiner reports use the phrase "well-described" — and the D25 report is specific about what that means.
Vague = half a mark or no mark. Specific = full mark. Here's the pattern in every subject area:
| ❌ Vague (½ Mark or Zero) | ✅ Well-Described (1 Mark) |
|---|---|
| "Agree to bank ledger and bank statements." (D25 — no purpose stated) | "Agree net pay figures from the payroll listing to the bank ledger and bank statements to confirm that the amounts paid to employees match the payroll records." |
| "Recalculate gross to net pay for a sample of employees." (D25 — no agreement to underlying records) | "Recalculate gross to net pay for a sample of employees and agree the resulting figures to the payroll summary to confirm payroll expense is accurately calculated." |
| "Compare total purchases to prior year." (MJ25 — no investigation stated) | "Perform analytical procedures comparing total purchases and other expenses to prior year and budget; investigate any significant differences with management to confirm completeness." |
| "Review board minutes." (D25 — no purpose specified) | "Review board minutes for the full year to identify any additional bonus payments or remuneration arrangements not included in the draft financial statements, to assess completeness of directors' bonuses disclosed." |
| "Obtain written representations." (D25 — inappropriate for a non-judgemental balance) | Written representations are only appropriate for judgemental balances. For payroll and purchases, use direct evidence — recalculations, third-party bank statements, analytical procedures. |
| "Inspect inventory count sheets." (no stated purpose) | "Inspect a sample of completed inventory count sheets and trace the quantities recorded to the final inventory listing to confirm that count results have been accurately transferred." |
Notice the pattern: every well-described procedure names the specific document, specifies a sample or selection where relevant, and ends with what it confirms or tests. That ending — the purpose — is what moves an answer from ½ mark to 1 mark in the vast majority of cases.
Worked Examples by Topic: Payroll, PPE, Purchases, Inventory
The best way to embed the distinction is to see it applied across the main topic areas that come up in AA Section B. For each topic, I'll show you what a test of control looks like side by side with what a substantive procedure looks like — for the same underlying balance.
Payroll — D25 Quirky Quadbikes Co (5 marks substantive procedures)
This was the exact scenario in December 2025 where candidates lost marks. The requirement asked for substantive procedures for payroll expense. Many candidates wrote controls tests instead, particularly focused on the joiner forms deficiency from the earlier part of the question — and scored zero.
| ❌ Test of Control (Zero Marks in D25 Payroll Requirement) | ✅ Substantive Procedure (1 Mark Each) |
|---|---|
| "Review that joiner forms have been authorised." — tests whether the HR control is working, not whether the payroll number is right. This was the exact example cited in the D25 examiner report as scoring zero. | "Cast the payroll records to confirm the total payroll expense has been accurately totalled, and agree the total to the amount recorded in the financial statements." |
| "Inspect a sample of overtime forms for evidence of line manager approval." — tests the authorisation control, not the payroll figure. | "Recalculate gross to net pay for a sample of employees from the payroll listing and agree tax deductions to current PAYE/statutory tables to confirm the accuracy of net pay calculations." |
| "Check that bank account changes have been authorised." — tests whether the change management control exists, not whether payments are correct. | "Agree net pay amounts for a sample of employees from the payroll listing to bank statements and the bank ledger to confirm that payments have been made for the amounts recorded." |
| "Review exception reports and confirm management has investigated flagged items." — tests the exception control, not the payroll balance. | "Compare total monthly payroll expense to the prior year and budget, and investigate any significant differences to identify unusual fluctuations that may indicate errors or fraud." |
| "Confirm that leavers are removed from payroll promptly after their leaving date." — this is a control objective, not a substantive test. | "Select a sample of leavers during the year from HR records and confirm that their names are absent from the payroll listing in the month following their departure, to test for ghost employees or continued payments post-leaving." |
PPE Additions — MJ25 Type
PPE additions are consistently tested in AA Section B. The MJ25 examiner report flagged candidates providing generic procedures for PPE additions rather than focusing on the specific assertion. The key assertion for additions is existence (did it actually happen?) and valuation (is it at the right cost under IAS 16?).
| ❌ Test of Control / Generic (Limited Marks) | ✅ Targeted Substantive Procedure (1 Mark) |
|---|---|
| "Check that capital expenditure has been authorised." — tests the capital authorisation control. | "Vouch a sample of PPE additions from the asset register to purchase invoices and confirm that amounts capitalised agree to the invoiced cost, to test the valuation of additions." |
| "Review that all additions have been reviewed by management." — a control review, not a financial statement test. | "Physically inspect a sample of new assets to confirm they exist and are in use by the business at the year end, to test the existence assertion for PPE additions." |
| "Ensure all PPE is depreciated." — a management objective, not an auditor procedure. | "Recalculate the depreciation charge for a sample of new PPE additions using the rates stated in the accounting policies and agree to the depreciation charge in the financial statements, to test accuracy." |
| "Inspect the asset register." (no stated purpose) | "Review the asset register for any items that appear to be repairs or maintenance in nature and confirm that these have been expensed to the income statement rather than capitalised, to test the classification assertion." |
Purchases and Other Expenses — D25 Flatiron & Co / MJ25
A consistent trap in purchases questions: candidates list trade payables tests instead of purchases tests. These are different balances with different purposes. The D25 examiner report explicitly flags this: "agreeing amounts to the purchase ledger/payables account is a payables test, not a purchases test." The purchases substantive procedure tests the expense in the income statement, not the creditor on the balance sheet.
| ❌ Wrong Procedure for Purchases (Payables Test or Control Test) | ✅ Correct Substantive Procedure for Purchases (1 Mark) |
|---|---|
| "Agree purchase invoices to the purchase ledger." — this tests the payables balance, not the purchases expense. | "Cast the list of purchases and agree the total to the purchases figure in the income statement to confirm completeness and accuracy of the expense recorded." |
| "Check that purchase orders are authorised before orders are placed." — tests the purchasing control, not the purchases figure. | "Select a sample of purchases from the purchases listing and vouch to purchase invoices and goods received notes (GRNs) to confirm that the goods or services were received and the amounts are accurately recorded." |
| "Agree purchase invoices to the payables account." — payables test, not purchases. | "Perform cut-off testing by selecting a sample of GRNs around the year end and confirming that purchases have been recorded in the correct period — using the GRN date, not the invoice date, as the source." |
| "Compare purchases to budget." (MJ25 — no follow-up stated) | "Compare total purchases and other expenses to prior year and budget on a monthly basis; investigate and obtain explanations from management for any significant fluctuations to confirm completeness of expenses recorded." |
Inventory — Continuous Count System (D25 Flatiron & Co)
This question type trips students up because the requirement asks for "audit procedures" — meaning both tests of controls and substantive procedures are needed. When a question uses the general term "audit procedures" (not specifying which type), you need both. When it specifies "substantive procedures," you must exclude controls tests entirely.
| Test of Control (for Continuous Count) | Substantive Procedure (for Continuous Count) |
|---|---|
| "Inspect a sample of monthly inventory count schedules and confirm that all inventory lines are counted at least once per year, per the count programme." | "Perform test counts during an observed continuous count — count a sample of items and trace from physical count to inventory records, and vice versa, to assess whether the records agree to physical quantities." |
| "Review the internal audit reports on the continuous count system to assess whether testing confirmed the system is operating as designed." | "Review the level and nature of adjustments made each month between the count results and the inventory records to assess whether the adjustments are at a reasonable level or indicate systemic recording errors." |
| "Review the inventory count instructions to assess whether they are sufficiently detailed to ensure counts are conducted consistently and accurately." | "Cast the final inventory listing and agree the total to the amount disclosed in the financial statements to confirm the inventory balance has been accurately transferred." |
Mistakes That Cost Candidates Marks in 2025
Both examiner reports from 2025 are remarkably consistent. The same errors appeared in December and March/June. Here are the ones you need to specifically avoid:
⚠️ 2025 Examiner-Flagged Mistakes
1. Writing tests of controls when asked for substantive procedures. D25 (payroll): "the majority of procedures listed were tests of controls rather than substantive procedures and so no credit was given." MJ25 (PPE, purchases): "many candidates lose marks by giving tests of control when the requirement specifies substantive procedures."
2. The joiner form trap (D25). The earlier part of the Quirky Quadbikes question was about controls deficiencies, including joiner forms. Many candidates then wrote "reviewing that joiner forms have been authorised" as a substantive procedure for payroll — scoring zero. Don't carry a model from one part of the question into a different requirement type.
3. Payables tests for purchases requirements. D25 (Flatiron & Co): agreeing purchase invoices to the purchase ledger tests trade payables, not purchases expense. The assertion and the account are different — write for the account the requirement specifies.
4. Analytical procedures without follow-up. D25 and MJ25 both flag this: "having compared purchases to prior year or budget, any significant fluctuations must be investigated." Without the investigation step, analytical review earns only ½ mark.
5. Irrelevant tests imported from rote learning. D25 (payroll): "many candidates included irrelevant tests such as obtaining written representations, reviewing disclosures, or recalculating bonuses, despite there being no reference to bonuses within the scenario." D25 (purchases): "obtaining written representations when purchases and other expenses is not a judgemental account balance" scores zero. Written representations are only appropriate for judgemental balances.
6. Starting tests of controls with "check." The examiner explicitly states: "A test which starts with 'check' is unlikely to provide sufficient detail." Use inspect, re-perform, review, enquire — and always state what document and what you're looking for.
How to Identify Which Type the Question Is Asking For
In the AA exam, the requirement language is your guide. The examiner uses specific wording that signals exactly which type of procedure is needed. Learn to read these triggers before you write a single word:
| Requirement Language | What It Asks For | What to Write | 2025 Example |
|---|---|---|---|
| "Describe SUBSTANTIVE PROCEDURES..." | Tests of detail and/or analytical procedures that test financial statement balances directly | Agree, cast, recalculate, confirm, trace, vouch, compare with investigation — never tests of controls | D25 Quirky Quadbikes (payroll, 5 marks); D25 Flatiron (purchases, directors' bonuses, 5 marks each) |
| "Describe a TEST OF CONTROL..." (capitalised in requirements) | A procedure to test whether a specific recommended control is operating effectively | Inspect documents for evidence of control performance; re-perform; enquire + corroborate — never substantive tests of balances | D25 Quirky Quadbikes requirement (b) — 18 marks asking for deficiencies, controls, and tests of controls |
| "Describe AUDIT PROCEDURES..." | Both types may be needed — the question doesn't restrict you to one | Use both — for example in continuous count testing (D25 Flatiron req a) where controls tests and substantive tests are both valid | D25 Flatiron requirement (a) — continuous inventory count, where both types gained marks |
| "Describe CONTROL RECOMMENDATIONS..." | What management should do — not auditor procedures at all | Management actions, policy changes, process improvements — ensure they are phrased as actions, not objectives ("ensure that..." = ½ mark only) | D25 Quirky Quadbikes requirement (b)(ii) — candidates incorrectly wrote auditor tests here instead of management recommendations |
Related AA Exam tips
- Substantive Procedure vs Tests of Control
- AA Audit Risk questions
- Internal control deficiencies - how to answer
FAQ
About the Author
Vicky Sarin, CA | INSEAD
Vicky has 25+ years of experience in audit practice and professional qualification coaching, with hundreds of AA students coached to successful passes. Her teaching approach focuses on technique first — understanding the examiner's marking logic before memorising content.
For ACCA AA study materials and course options, visit the Eduyush ACCA AA course page. For a complete overview of AA study resources, visit the AA technical articles hub. Deciding whether to sit AA or AAA first? Read our FR vs Audit exam order guide. Ready for the next level? See our How to Pass ACCA AAA guide.
Popular posts
Featured product
Featured product
ACCA Books
Get 50% off original BPP & KAPLAN ACCA books. Study smarter, save bigger today!
BPP Online lectures
BPP online lectures at India pricing – under £55/subject. Learn smart, pay less.
From the blog
View all
Latest posts
FAQs
How can I prepare for the ACCA exams?
There are several ways to prepare for the ACCA exams, including studying the exam syllabus and practicing past exam questions. You can also attend review courses or hire a tutor to help you prepare. It's also a good idea to create a study schedule and stick to it, and to take breaks and pace yourself during your studies.
What should I do if I fail an ACCA exam?
If you fail an ACCA exam, you will need to re-register and pay the exam fees again. You may also want to consider reviewing the exam syllabus and studying more before attempting the exam again. It's also a good idea to talk to your tutor or mentor for guidance and to get feedback on where you may have gone wrong.
How many attempts do I have to pass the ACCA exams?
There is no limit to the number of times you can attempt the ACCA exams, but you will need to pay the exam fees each time you register. It's a good idea to carefully review the exam syllabus and consider seeking additional help if you are struggling to pass the exams after multiple attempts.
How often are ACCA exams held?
ACCA Exams are held four times a year for skill level and strategic level exams. These are held every quarter
March, June, September and December
What is the difference CA and ACCA in india?
The CA (Chartered Accountant) qualification is offered by the Institute of Chartered Accountants of India (ICAI). The ACCA qualification is offered by the Association of Chartered Certified Accountants (ACCA).
The CA qualification has been in existence for over 150 years, and is a globally recognised qualification. The ACCA qualification has been in existence for over 100 years, and is also a globally recognised qualification.
The CA qualification is available in India only, while the ACCA qualification is available in over 180 countries.
How many marks should be scored in the ACCA subjects?
The ACCA subjects are assessed on a 100-point scale. The pass mark is 50 points. A score of 60 or more is required to achieve the grades of distinction, credit, and merit.
Is Eduyush.com an ACCA RLP?
Yes. Eduyush (Yush Consultants) is anACCA Registered Learning Partnerfor DipIFR online classes. Verify our RLP status on ACCA's official directory →
Which is the hardest ACCA paper?
The hardest ACCA paper is the F5 performance management paper. This is because it requires a detailed knowledge of financial accounting and management accounting in order to pass.
Other papers that are difficult include the F7 financial reporting paper and the P2 advanced auditing and assurance paper. However, all of the ACCA papers are challenging, so it is important to thoroughly prepare for each one before sitting the exam.
Leave a comment