ACCA AA Audit Risk 2026: The 'Fact vs Risk' Mistake Costing You Easy Marks

Stating a fact from the scenario is not identifying an audit risk. That single confusion is throwing away the easiest marks in the whole AA exam.

The audit risk question is the biggest in AA — and the examiner keeps reporting that candidates lose marks not because they don't know the topic, but because they don't answer in the way the marks are awarded.

How the marks actually split

Each audit risk is worth two marks, and they come in three pieces: ½ mark for identifying the risk, ½ mark for explaining it, and 1 mark for the auditor's response. Miss the explanation and you've capped yourself at a quarter of the available marks before you've even reached the response.

"Copy and paste" is not identification

The AA examiner is blunt about this: candidates use the copy-and-paste function to lift a fact from the scenario and assume the risk is identified. It isn't. Simply restating what the scenario told you earns nothing. To identify a risk you have to use the specific information in the scenario — not a general statement that could apply to any company.

Explaining means naming the account and the assertion

This is where most marks leak away. To score the explanation half-mark, you must state the specific area of the financial statements impacted plus one of: an assertion (valuation, cut-off, completeness etc.), a reference to over/understated, or a reference to inherent/control/detection risk. No account, no assertion — no mark.

Don't hedge your bets

A repeated warning in recent examiner reports: "misstated" only earns the mark if the balance could genuinely go either way. If a balance is clearly at risk of overstatement, writing "misstated" scores zero. You cannot cover yourself by offering both directions — the examiner reads that as not knowing which it is.

Worked example: wrong vs right

Scenario: A new product line has sold poorly and inventory is being discounted below cost to clear it.

Wrong (½ mark at best): "The inventory has been discounted so there is a risk that inventory is misstated."

That repeats the scenario, names no assertion, and hedges with "misstated".

Right (full 2 marks): "Under IAS 2, inventory is held at the lower of cost and net realisable value. As the new line is being sold below cost, inventory is at risk of being overstated and the valuation assertion misstated. Response: review post year-end sales prices for this line to confirm NRV and recalculate any required write-down."

Same knowledge. One scores a quarter, the other scores full.

What to do in the exam

1. Build every point in three moves. Identify using a scenario-specific fact, explain by naming the account and assertion (or over/understated), then give a response that matches that exact risk. Three moves, two marks.

2. Commit to a direction. Decide whether the balance is overstated or understated and say so. Only use "misstated" when the risk genuinely runs both ways.

3. Make the response specific. "Discuss with management" earns nothing. The response must be an audit procedure that addresses the risk you just explained — and it carries the full 1 mark, so it's worth the effort.

Bottom line

AA passed at 46–47% across the 2025 sittings — and the gap between passing and failing is rarely the technical knowledge. It's whether you turn facts into risks the way the mark scheme demands. Identify, explain, respond. Do all three, every time, and the biggest question in the paper becomes the easiest.