ISA 230 Audit Documentation: What Auditors Must Record

ISA 230 Audit Documentation is the international auditing standard that governs the records an auditor must keep — commonly known as working papers. Good documentation is the backbone of a quality audit, providing the evidence that the work was properly done. This practical guide explains what ISA 230 covers, the purposes of audit documentation, what it must contain, and why it matters — in plain language. It's a core auditing topic, relevant to ACCA study. (Always refer to the standard for authoritative requirements.)

What is ISA 230?

ISA 230 deals with the auditor's responsibility to prepare audit documentation for an audit of financial statements. Audit documentation — the "working papers" — is the record of the audit procedures performed, the relevant audit evidence obtained, and the conclusions the auditor reached. It is the tangible proof of the work behind the audit opinion, and ISA 230 sets out what is required to make that record adequate.

The purposes of audit documentation

ISA 230 identifies two primary purposes for documentation: it provides evidence of the basis for the auditor's conclusion about achieving the overall objectives of the audit, and evidence that the audit was planned and performed in accordance with the ISAs and applicable legal and regulatory requirements. Beyond these, good documentation serves several other important functions:

• Assisting the engagement team to plan and perform the audit.
• Enabling supervision and review of the work.
• Providing a record of matters of continuing significance for future audits.
• Enabling quality reviews and inspections, whether internal or external.
• Supporting accountability for the work done.

What must documentation contain?

The guiding principle of ISA 230 is the "experienced auditor" test: documentation must be sufficient to enable an experienced auditor, with no previous connection to the audit, to understand:

• The nature, timing and extent of the audit procedures performed;
• The results of those procedures and the audit evidence obtained; and
• The significant matters arising, the conclusions reached on them, and the significant professional judgements made in reaching those conclusions.

Documentation should also record who performed the work and the date it was completed, and who reviewed it and when.

What working papers look like in practice

In practice, audit documentation includes a wide range of records: the audit plan and risk assessments; analyses and schedules; records of the procedures performed and their results; copies of, or extracts from, the entity's records; correspondence and confirmations; checklists; and notes of significant matters and how they were resolved. Increasingly, working papers are held in electronic audit software rather than on paper. Whatever the form, the test is the same — the documentation must clearly show what was done, what was found, and why the auditor reached the conclusions they did, so that the work can be understood and reviewed by someone coming to it fresh.

Assembly and retention

ISA 230 also addresses the practical handling of the file. The auditor must assemble the final audit file on a timely basis after the date of the auditor's report (the standard indicates this is ordinarily no more than 60 days afterwards). After assembly, the auditor must not delete or discard documentation before the end of its retention period (ordinarily no shorter than five years from the date of the report), and any later changes must themselves be documented — preserving the integrity of the record.

Why ISA 230 matters

ISA 230 matters because audit documentation is what demonstrates that an audit was actually performed to the required standard. The saying "if it isn't documented, it wasn't done" captures the reality that the working papers are the evidence of the audit's quality. Good documentation supports the audit opinion, enables effective review, and stands up to scrutiny by regulators and in any dispute. For auditors, preparing clear, sufficient documentation is a fundamental discipline and a regularly examined topic.

Frequently asked questions

What is ISA 230?

The international auditing standard on audit documentation — the working papers recording the procedures performed, evidence obtained and conclusions reached in an audit.

What are the purposes of audit documentation?

Primarily to provide evidence of the basis for the auditor's conclusion and that the audit was performed in accordance with the ISAs. It also supports planning, review, future audits, inspections and accountability.

What must audit documentation contain?

Enough for an experienced auditor with no previous connection to understand the nature, timing and extent of procedures, their results and the evidence obtained, and the significant matters, judgements and conclusions — plus who did and reviewed the work, and when.

How long must audit documentation be kept?

The final file is assembled on a timely basis (ordinarily within 60 days of the report), and retained for a period that is ordinarily no shorter than five years from the date of the auditor's report.

Build your auditing skills with Learnsignal

Standards like ISA 230 are central to auditing. Learnsignal's tutor-led ACCA courses develop the audit knowledge the ISAs require — with clear teaching and exam-focused practice. (Always refer to the latest text of the standard for authoritative requirements.)