ACCA AA Audit Risk vs Business Risk: The Mistake That Costs You Marks (June 2026)
The answer the examiner wants — but rarely gets
If you write business risks when the question asks for audit risks, you score zero. The ACCA AA examiner has flagged this in report after report — yet candidates keep doing it in the June sitting.
It is the single biggest source of wasted effort in the audit risk question. You can write a beautiful, well-structured paragraph about why the client's market is shrinking — and pick up no marks at all because that is a business risk, not an audit risk.
Why it happens
The scenario in an AA risk question reads like a business case. Falling demand, a new supplier, a covenant breach, an IT migration. Your brain naturally lists what is going wrong with the company. That is exactly the trap.
The examiner is not asking what could damage the business. They are asking what could go wrong in the financial statements as a result of those events — and specifically, what could cause a material misstatement that the auditor might fail to detect.
The three terms — and what AA actually examines
Business risk is the risk that the entity fails to meet its objectives. It is a broader concept that sits in the AAA syllabus. If your AA answer talks about "the company may lose customers" or "profitability will decline" — stop. That is business risk.
Risk of material misstatement (RoMM) is the combination of inherent risk and control risk. It exists at the financial statement level, or more usefully for your answer, at the assertion level — completeness, existence, valuation, classification, cut-off, rights and obligations.
Audit risk is RoMM combined with detection risk — the risk the auditor issues the wrong opinion. In the AA exam, when a question says "identify and explain the audit risks," the examiner wants RoMM, linked to a specific balance and a specific assertion.
Wrong vs right — same scenario
Scenario: The client launched a new product line three months before year-end. Inventory of the new product is held at the warehouse and represents 15% of total inventory.
Wrong answer (business risk dressed up): "The new product line is risky because the company has no track record of selling it. Customers may not buy the product, leaving the company with unsold stock and damaging profitability." Zero marks. That is a commercial concern about the entity, not a financial-statement risk.
Right answer (audit risk): "Inventory of the new product line is at risk of being overstated. With no sales history, net realisable value may be below cost. Per IAS 2, inventory should be held at the lower of cost and NRV — there is a risk the valuation assertion is misstated and inventory is overstated in the statement of financial position." Full marks.
Same scenario fact. Two completely different answers. One is paid; the other is not.
What to do in the next four weeks
1. Pre-load a sentence stem and use it every time. "There is a risk that [balance] is overstated/understated because [scenario fact], affecting the [assertion] assertion." Force every risk you write into that shape. If it does not fit, it is not an audit risk.
2. Drop the words "may decline," "could lose," "damage to reputation." These are tells. They mean you are writing about the business, not the financial statements. Replace them with overstated, understated, omitted, misclassified, recognised too early, recognised too late.
3. For every risk, name the assertion. Examiners in the March/June 2025 AA report flagged a "lack of assertion links" as a recurring loss of marks. Completeness, existence, valuation, classification, cut-off, rights and obligations — pick one and write it.
The numbers
AA pass rates have hovered around 39% for the last several sittings. The examiner is not making the paper harder — they are continuing to award marks for the same things they always have. Audit risks tied to balances and assertions. Not paragraphs of commercial commentary.
Walk into the June exam with that one rule and you will outscore most of the room.