ACCA AAA: What ISA 600 (Revised) Actually Changed for Group Audits

ISA 600 (Revised), effective for audits of financial statements for periods beginning on or after 15 December 2023, represents one of the more substantial standard-level changes tested in ACCA Advanced Audit and Assurance (AAA) — building directly on the evidence-specificity habits candidates should already have developed at Audit and Assurance (AA). It's not simply a refresh of existing group audit guidance — it changes how group auditors are required to identify which components matter and rebuilds the framework around active risk assessment rather than a mechanical size test.

What changed: from a size-based test to a risk-based determination

Under the previous version of ISA 600, a common (though not universally required) approach to identifying which components needed detailed audit attention leaned heavily on quantitative benchmarks — broadly, whether a component was individually financially significant based on its size relative to the group. ISA 600 (Revised) moves away from a benchmark-driven approach and requires the group engagement team to identify "significant risks of material misstatement" through a structured risk assessment process applied at the group level, considering qualitative factors alongside size. A component that's small in absolute terms can still be identified as carrying significant risk — for example, because of the nature of its transactions, prior history of misstatement, or its role in a specific significant risk area like revenue recognition or goodwill.

This shift matters for AAA scenario questions specifically because it removes the shortcut of simply calculating a percentage-of-group-assets or percentage-of-group-revenue figure and using that alone to justify scoping decisions. Questions increasingly expect candidates to identify why a component might carry elevated risk — unusual transactions, a history of accounting estimates going wrong, operating in a jurisdiction with weaker regulatory oversight — rather than relying on a size threshold as the sole justification for scoping decisions.

Two-way communication and challenging component auditor conclusions

ISA 600 (Revised) also strengthens the requirements around communication between the group engagement team and component auditors, making clear that this needs to be a genuine two-way exchange rather than a one-directional set of instructions issued downward. The group engagement team is expected to actively seek out and evaluate information from component auditors that might affect the group audit — not simply issue a group audit instruction and wait for a completed component audit file to be returned.

This extends specifically to areas like goodwill and investment classification, where the standard expects the group engagement team to critically evaluate component auditor conclusions rather than accepting them without independent challenge. A component auditor's assessment that an impairment isn't required, for example, needs to be evaluated by the group team against the group-level view of that cash-generating unit or investment, not simply accepted because a qualified component auditor signed off on it locally.

The concept AAA questions keep testing: who actually owns the opinion

Perhaps the most consistently tested conceptual point is that the group engagement partner retains overall responsibility for the group audit opinion, even where component auditors perform the underlying fieldwork on individual components. This isn't new to the revised standard in principle, but ISA 600 (Revised) makes the evidencing requirement around this more explicit — the group team must be able to demonstrate, through documented evaluation of component auditor work, that they've genuinely exercised that overall responsibility rather than simply relying on component sign-offs by default.

Candidates sometimes get this backwards in AAA scripts, treating the component auditor as bearing primary responsibility for their portion of the audit with the group auditor performing a lighter oversight role. The standard's framing is the reverse: the group engagement partner's responsibility for the group opinion is total and non-delegable, and reliance on component auditor work has to be actively justified and evidenced, not assumed as a default relationship.

How this plays out in exam scenarios

AAA scenarios built around ISA 600 (Revised) typically present a group structure with components of varying size and risk profile, then ask candidates to identify appropriate audit responses. Strong answers explicitly separate the question of "which components carry significant risk" (a risk-based judgement, not purely a size calculation) from "what evidence does the group team need from or about each component's audit" (which scales with the assessed risk, not with component size alone), and explicitly address the group engagement partner's ongoing responsibility for evaluating, not just collecting, component auditor conclusions.

Frequently asked questions

When did ISA 600 (Revised) become effective?

For audits of financial statements for periods beginning on or after 15 December 2023.

Did ISA 600 (Revised) remove the size-based test for identifying significant components entirely?

It shifted the emphasis away from a purely quantitative benchmark toward a risk-based determination that considers qualitative factors alongside size, meaning a small component can still be identified as significant if it carries elevated risk.

Who bears ultimate responsibility for the group audit opinion under ISA 600 (Revised)?

The group engagement partner retains overall, non-delegable responsibility for the group opinion, even where component auditors perform detailed fieldwork — reliance on their work must be actively evaluated and evidenced, not simply assumed.

ISA 600 (Revised) rewards AAA candidates who can articulate why a component matters, not just how big it is — and who consistently frame the group engagement partner as retaining full, evidenced responsibility for the group opinion rather than delegating meaningful ownership to component auditors. Learnsignal's ACCA AAA course covers ISA 600 (Revised) and other current auditing standards in depth.