ACCA AA Audit Risk: The Mistake Costing You Marks in June 2026
The bottom line
If you write business risk when the question asks for audit risk, you score zero on that point. Every recent ACCA AA examiner's report flags this as the single biggest reason candidates fail to turn scenario knowledge into marks.
Why it keeps happening
Audit risk is the risk of misstatement in the financial statements. Business risk is a risk to the company's operations or commercial future. The two often share the same trigger — a new bonus scheme, a covenant, a fraud — but only one of them belongs in your AA answer.
The Sept/Dec 2025 examiner's report is blunt: candidates use the copy-and-paste function to lift facts from the scenario, then call them risks. Stating a fact is not identifying a risk. The report also calls out vague audit procedures — "check", "review", "ensure" — and mixing tests of controls with substantive procedures.
What the examiner actually rewards
Three steps, every single risk, no exceptions.
1. Identify — name the financial statement area at risk (revenue, inventory, going concern, provisions).
2. Explain — say why it is likely to be misstated and attach an assertion: overstatement, valuation, completeness, cut-off, existence.
3. Respond — give a specific auditor procedure, written so a junior could pick up the file and do it.
Wrong answer vs right answer
Scenario: Directors receive a bonus tied to year-end revenue.
Wrong (this is what loses marks): "There is a risk that the directors will manipulate revenue to get their bonuses." That is the trigger, not the audit risk. It does not name the financial statement impact, the assertion, or what the auditor will do about it.
Right: "Revenue may be overstated at year end as directors are incentivised to recognise sales early to maximise bonuses. There is a specific risk that cut-off is incorrect, with post year-end sales recorded in the current period. Response: inspect a sample of sales invoices either side of year-end and agree to despatch notes to confirm the period in which control passed."
Same trigger. One scores nothing. One scores three marks.
What to do this week
1. Write ten audit risks longhand. Do not type them. The examiner specifically blames the copy-paste function. Writing forces you to phrase the risk in financial statement language rather than scenario language.
2. Ban these verbs: "check", "review", "ensure". Replace them with inspect, recalculate, agree to, trace to, confirm with, observe, enquire of. The examiner calls out vague verbs by name in every recent report.
3. Attach an assertion to every risk. Overstatement, completeness, valuation, existence, cut-off, classification. If you cannot name the assertion, your "risk" is still just a fact from the scenario.
The numbers
AA pass rates: 47% in March 2025, 44% in June 2025, 46% in December 2025. Roughly half the room fails every sitting, and the examiner's reports describe the same mistakes each time. The paper is not getting harder — the technique gap is staying the same. Close it and you are already ahead of half the candidates.
One month to June 2026. Drill the three-step framework until it is automatic. That is the exam.