Skip to main content
Regulatory Council
The state of ai impact assessment
Category: Internal Controls & Audit

Substantive Testing

Also known as: Substantive Procedures, Substantive Audit Procedures
Simply put

Substantive testing is a set of audit procedures used to examine an organization's financial statements, transactions, balances, and disclosures to determine whether they contain errors. Auditors typically collect and evaluate supporting evidence, often by checking sample records, to gain confidence that the reported financial information is accurate. It is generally regarded as a critical part of the overall audit process.

Formal definition

Substantive testing comprises audit procedures designed to detect material misstatements at the assertion level in account balances, classes of transactions, and disclosures. In many auditing frameworks it is distinguished from tests of controls: rather than evaluating the operating effectiveness of controls, substantive procedures gather evidential matter directly supporting financial statement assertions. Substantive procedures typically include substantive analytical procedures, which, per PCAOB AS 2305, are used to obtain evidential matter about particular assertions related to account balances or classes of transactions, and tests of details, which examine supporting documentation and sampled records for errors. The nature, timing, and extent of substantive testing generally vary with assessed risk and the assurance obtained from other procedures; readers should note that specific requirements depend on the applicable auditing standards and jurisdiction.

Why it matters

Substantive testing is central to the audit process because it provides direct evidence about whether an organization's financial statements, transactions, balances, and disclosures are free from material misstatement. While tests of controls evaluate whether an organization's internal controls are operating effectively, substantive procedures gather evidential matter that supports financial statement assertions directly. This distinction matters: even where controls appear robust, auditors typically still perform some level of substantive testing to obtain assurance about the accuracy of the reported figures themselves.

For stakeholders who rely on audited financial statements, including investors, regulators, lenders, and boards, the credibility of those statements depends in part on the quality of the substantive work performed. Substantive testing is the mechanism through which auditors detect errors in supporting documentation and sampled records, whether those errors arise from mistake or misstatement. Because the nature, timing, and extent of these procedures generally vary with assessed risk, weak or insufficiently rigorous substantive testing can leave material misstatements undetected.

It should be noted that substantive testing reduces, but does not eliminate, the risk that a material misstatement goes undetected, since procedures are typically applied to samples rather than entire populations. The specific requirements governing substantive procedures depend on the applicable auditing standards and jurisdiction, and readers should verify particular obligations against the relevant primary standards.

Who it's relevant to

External and Financial Statement Auditors
Auditors performing financial statement audits rely on substantive testing to gather evidential matter directly supporting financial statement assertions. They design the nature, timing, and extent of both substantive analytical procedures and tests of details based on assessed risk and the assurance obtained from other procedures, in line with the applicable auditing standards.
Internal Auditors
Internal audit functions may apply substantive procedures to examine transactions, balances, and supporting documentation for errors as part of their assurance activities. This helps them evaluate whether reported financial information is accurate and identify issues that warrant management attention.
Finance and Accounting Teams
Those responsible for preparing financial statements benefit from understanding substantive testing because auditors will examine their transactions, balances, and disclosures against supporting documentation. Well-organized records and evidence facilitate the audit and support the confirmation that the organization's financial status is accurately reported.
Audit Committees and Boards
Members charged with oversight of the audit process should understand substantive testing as a critical component through which auditors obtain assurance over the accuracy of financial statements. This informs their ability to challenge audit scope and evaluate whether the level of assurance obtained is appropriate to the assessed risks.

Inside Substantive Testing

Tests of Details
Procedures that examine individual transactions, account balances, or disclosures directly, such as vouching recorded amounts to supporting documentation, confirming balances with third parties, or recalculating figures. These tests seek direct evidence about the existence, accuracy, completeness, or valuation of specific items.
Substantive Analytical Procedures
Evaluations of financial or operational information through analysis of plausible relationships among data, including trend analysis, ratio analysis, and comparison against expectations. Their effectiveness typically depends on the predictability of the relationship, the reliability of the underlying data, and the precision of the expectation developed.
Assertions Addressed
Substantive testing is generally designed to obtain evidence about management assertions embedded in financial statements or records, such as existence or occurrence, completeness, accuracy, valuation, rights and obligations, and presentation. The specific procedure selected typically depends on which assertion carries the greater risk of material misstatement.
Relationship to Control Testing
Substantive testing focuses on detecting misstatements in the amounts or information themselves, whereas tests of controls evaluate whether a control operates effectively. The two are often complementary; the extent of substantive work commonly varies with the assessed reliability of relevant controls, though in some approaches substantive procedures are performed regardless.
Sampling and Extent
Because testing entire populations is often impractical, substantive testing frequently relies on sampling or on selecting items above a threshold. The extent of testing is typically influenced by assessed risk, materiality, and the strength of other evidence, and results from a sample are generally used to draw inferences about the wider population.
Evidence and Documentation
Substantive procedures are intended to generate sufficient and appropriate evidence to support a conclusion, and that evidence and the work performed are typically documented to make the basis for conclusions traceable and reviewable.

Common questions

Answers to the questions practitioners most commonly ask about Substantive Testing.

Is substantive testing the same as testing controls?
No. These address different objectives and are frequently confused. Testing controls (often called controls testing or tests of controls) evaluates whether a control is designed and operating effectively to modify risk. Substantive testing, by contrast, seeks direct evidence about the accuracy and completeness of the underlying transactions, balances, or assertions themselves, independent of whether controls functioned. In many audit frameworks the two are complementary: reliance on controls may reduce, but does not typically eliminate, the extent of substantive procedures required, and the mix depends on the auditor's risk assessment and professional judgment.
Does passing substantive testing guarantee that the financial statements or records are free of error?
No. Substantive testing is designed to obtain reasonable assurance, not absolute assurance. Because procedures are often applied on a sample basis and rely on judgment, sampling risk and non-sampling risk remain. Results reduce the likelihood of undetected material misstatement but cannot guarantee that records are entirely free of error or fraud. Conclusions should be read as supporting a level of assurance appropriate to the engagement's scope and materiality thresholds, not as a certification of correctness.
How do you determine the appropriate extent or sample size for substantive testing?
The extent typically depends on the assessed risk of material misstatement, the level of assurance sought, materiality, and any reliance placed on related controls. In many methodologies, higher assessed risk or lower planned reliance on controls leads to more extensive substantive procedures, while effective controls may permit a reduced extent. Sampling approaches, tolerable error, and expected error rates also inform sample size. The specific parameters are matters of professional judgment and should be documented and aligned with the applicable auditing or assurance standards, which vary by jurisdiction and engagement type.
What types of procedures fall under substantive testing?
Substantive procedures are often grouped into tests of details and substantive analytical procedures. Tests of details examine individual items such as transactions, account balances, or disclosures, and may involve inspection, recalculation, confirmation with third parties, or vouching to supporting documentation. Substantive analytical procedures evaluate plausible relationships among data to identify unexpected variances warranting further inquiry. The appropriate combination depends on the nature of the assertion being tested and the quality of available evidence.
When should substantive testing be performed relative to the reporting period?
Timing depends on the engagement's risk assessment and practical considerations. Some substantive procedures may be performed at an interim date, with additional work extending conclusions to period-end, while others are performed at or after period-end. Performing procedures before the period closes can introduce a gap that may require further evidence covering the intervening period. The choice generally reflects a balance between efficiency and the reliability of the evidence obtained, and should be consistent with applicable standards.
How should substantive testing be documented?
Documentation typically records the objective of the procedure, the population and sampling basis, the items examined, the evidence obtained, any exceptions or errors identified, and the conclusions reached. Adequate documentation is generally expected to allow an experienced reviewer with no prior connection to the work to understand what was done and how conclusions were supported. Specific documentation requirements vary by the applicable auditing or assurance framework and by jurisdiction, and should be verified against the relevant primary standards.

Common misconceptions

Substantive testing and tests of controls are interchangeable ways to check the same thing.
They serve different purposes. Tests of controls assess whether a control operates effectively, while substantive testing seeks direct evidence about whether the amounts or information are materially misstated. Evidence about a control operating does not, by itself, confirm the accuracy of a specific balance.
Passing substantive testing guarantees the records are free of error or that the organization is compliant.
Substantive testing typically relies on sampling and professional judgment and is designed to detect material misstatement, not to eliminate the possibility of any error. It provides a reasonable, not absolute, basis for a conclusion, and undetected misstatements can remain.
Analytical procedures are a lightweight shortcut that can always replace detailed testing.
Substantive analytical procedures can provide effective evidence, but their reliability generally depends on the predictability of the relationship analyzed, the quality of the underlying data, and the precision of the expectation. For higher-risk or less predictable areas, tests of details are often needed.

Best practices

Align each substantive procedure to the specific assertion and the assessed risk of material misstatement, concentrating effort where the risk is greatest rather than applying uniform testing across all areas.
Assess the reliability of data used in analytical procedures before relying on it, and develop expectations with sufficient precision to make meaningful differences investigable.
Consider the interaction between control reliance and substantive extent, documenting the rationale for how the strength or weakness of relevant controls influenced the nature, timing, and extent of substantive work.
Define and document the sampling approach, including population, selection method, and thresholds, so that conclusions drawn about the wider population are transparent and defensible.
Retain sufficient and appropriate evidence and clear working papers so that another qualified reviewer could follow the basis for each conclusion.
Investigate and corroborate significant or unexpected differences and exceptions rather than accepting explanations at face value, and escalate matters that may require further legal or professional judgment.
Promotional banner highlighting failures found in PCI audits and how to spot the gaps