ACCA AAA Audit Risk 2026: Why Long Risk Lists Score Badly (SD 2025 Examiner Report)
The long list of risks is killing your AAA mark. Examiners don't reward candidates who spot ten risks — they reward the ones who take three or four and go deep. If your audit risk answer reads like a checklist, you're leaving the professional marks on the table.
Depth beats breadth — every sitting
The September/December 2025 AAA examiner's report draws the same line it always does: there's a clear gap between candidates who apply their knowledge to the scenario and those who treat the exam as a factual exercise. The examining team explicitly wants depth of evaluation of significant risks, rather than brief and untailored answers covering large numbers of risks. Ten one-line risks is a weaker answer than three risks you've actually thought about.
"Significant risks include…" scores nothing
This is the phrase that quietly costs candidates a professional mark. At AAA, all the risks you raise should be significant, so writing "significant risks include…" tells the marker nothing. Reframe it: "the most significant risk is…" or "the two most significant risks are…". That single change signals judgement instead of a data dump — and it's worth a mark.
A second professional mark is available purely for saying why you picked that risk. Justify it on likelihood or magnitude of misstatement — use the ISA language (susceptibility, uncertainty, complexity, subjectivity) plus the materiality of the balance. There's no single "correct" risk the team is hunting for; the mark is for showing the thought process.
"Increase professional scepticism" is not an answer
The report is blunt on this. Telling the marker to "apply more professional scepticism" is a mindset, not a response. Where a requirement asks what the auditor should do, they want the concrete extra procedure that scepticism leads to — the specific document to inspect, the third party to confirm with, the reconciliation to perform. And remember 20 professional marks are on offer at AAA — effectively a whole extra question — yet assumed knowledge on materiality, ethics and auditor reporting still routinely falls below the standard expected at this level.
Worked example: 2 marks vs 5 marks
Weak (scores ~1): "Revenue is a significant risk because there is a risk it could be misstated. The auditor should apply professional scepticism."
Strong (scores the professional marks): "The directors' bonus is tied to hitting a revenue target this year, creating an incentive to overstate revenue. The most significant risk is therefore the occurrence and cut-off of revenue around year end. At $4.2m, revenue is 12% of total assets and clearly material. This is the priority risk given both the high likelihood — driven by management bias — and its magnitude. The auditor should inspect a sample of post year-end credit notes and agree December sales to dispatch dates to test cut-off."
Same topic. One names the scenario driver, the assertion, the materiality, the justification and a real procedure. That's the difference between a pass and a fail answer.
What to do in your next AAA question
Cap your risks. Pick the three or four biggest and go deep on each. Calculate materiality, name the specific assertion, and resist the urge to bolt on shallow extras — they add length, not marks.
Justify your selection out loud. Finish the requirement with a short line: "the most significant risk is X, because…", ranking on likelihood and magnitude. That sentence alone can bank professional marks most candidates never claim.
Delete every generic phrase. Search your answer for "apply scepticism", "review controls", "ensure accuracy". Each one has to be replaced with a specific, scenario-driven action, or cut.
The bottom line
AAA passed just 38% in December 2025 before climbing to 42% in March 2026 — its highest in about 15 years. That rise wasn't easier papers; it was candidates writing fewer, deeper, better-justified points. Stop listing. Start evaluating.