ACCA AA: Audit Risk vs Business Risk - The Mistake Killing Your Pass Mark (June 2026)

The mistake

Half of AA scripts confuse audit risk with business risk — and the examiner has been saying so for years. If your risk sentence doesn't end in an account balance and an assertion, you've written a business risk and the marker can't give you the mark.

What the examiner actually said

Across the March/June 2025 and Sept/Dec 2024 AA examiner reports, the same point keeps appearing: candidates spot the right issue in the scenario but then describe the risk to the company instead of the risk to the auditor. The examining team is explicit — "the most common mistake in this area is that students write business risk instead of audit risk."

The fix is mechanical. Every audit risk must link to a financial statement line and the assertion that's threatened. No assertion, no mark.

The textbook example

Take a scenario where receivables are struggling to pay.

Business risk (zero marks in an audit risk question): "The company faces cash flow pressure and may struggle to pay suppliers."

Audit risk (full marks): "Trade receivables may be overstated because the loss allowance is insufficient. This threatens the valuation assertion for receivables."

Same scenario point. Two completely different answers. The examiner only rewards the second one in an audit risk requirement.

The auditor response trap

The second mark in every risk-and-response pair is just as easy to lose. Markers see this constantly: candidates write the response that management should take, not the response the auditor should take.

Wrong: "Management should review credit terms and chase outstanding balances."

Right: "The auditor should review post year-end cash receipts and the aged receivables analysis to assess whether the loss allowance is adequate."

If your sentence starts with "the company should" or "management should", you're writing the wrong answer. Every response opens with "the auditor will" or "the audit team should".

The structure that scores

Every risk paragraph in Section B has the same skeleton:

Scenario point → account affected → over/understated → assertion at risk → auditor response.

Drop any one of those five and you're capped on marks. Hit all five and you're collecting the full 2 marks per risk every time, with no time wasted on padding.

What to do this week

1. Take any past AA Section B risk question. Rewrite every risk you've previously attempted so each sentence ends with "...therefore [account] may be over/understated, threatening the [assertion] assertion." If you can't finish the sentence, it's a business risk — bin it.

2. Self-mark only on whether each response starts with "the auditor". Anything starting with "management" or "the company" is a zero. Be brutal.

3. Drill the seven assertions until they're automatic: existence, completeness, valuation, rights and obligations, classification, accuracy, cut-off. You should be able to attach one to any account in under two seconds.

Bottom line

AA pass rates have hovered around 39–44% across recent sittings — and the gap between pass and fail is often this single mistake repeated across six or seven risks. June 2026 is one month away. Fix the structure tonight and you've already shifted ten marks.