Skip to content
All articles

CPA AUD Study Guide: Blueprint, Topics and a Study Plan

AUD is the only CPA section with an Evaluation component, which is why it feels revisable and then returns a 71. How to study a section that rewards judgement.

By Prepito Editorial Team

7 min read
CPA AUD Study Guide: Blueprint, Topics and a Study Plan

AUD is the section candidates most often describe as the one they cannot revise for. The material feels readable, the practice questions feel fair, and then the score comes back at 71.

There is a structural reason for that, and it is visible in the Blueprint. AUD is the only CPA section with an Evaluation component. Every other section tops out at Analysis. AUD asks you to judge whether something is sufficient, appropriate or reasonable, and no amount of knowing the standards produces that skill on its own.

This guide covers what is on the blueprint, why AUD's questions behave differently from FAR's, and how to study a section that rewards judgement over computation.

What AUD covers

AreaWeightWhat sits inside it
I. Ethics, Professional Responsibilities and General Principles15 to 25%Independence, the AICPA Code, engagement acceptance, quality management, documentation, communication with those charged with governance
II. Assessing Risk and Developing a Planned Response25 to 35%Understanding the entity, internal control, materiality, risk of material misstatement, fraud risk, planning the audit
III. Performing Further Procedures and Obtaining Evidence30 to 40%Tests of controls, substantive procedures, sampling, confirmations, estimates, related parties, subsequent events
IV. Forming Conclusions and Reporting10 to 20%Audit opinions and their modifications, emphasis and other-matter paragraphs, reports on other engagements

Areas II and III together are 55 to 75% of the exam, and they are one continuous idea rather than two topics: you assess a risk, then you design a procedure that responds to it. Almost every substantial AUD question is somewhere on that chain, and candidates who study procedures as a list divorced from the risks that motivate them find those questions nearly unanswerable.

Area IV is small in weight and large in visibility. Reporting is the part of auditing everyone has seen, so candidates over-invest in it. Twenty percent at the very top of the range is worth securing, but not at the expense of the risk-and-response chain that is three times the size.

The Evaluation component is the whole difficulty

AUD's skill allocation is roughly 30 to 40% Remembering and Understanding, 30 to 40% Application, 15 to 25% Analysis, and 5 to 15% Evaluation.

Compare that to FAR, which has no Evaluation at all and puts only 5 to 15% at the Remembering and Understanding level. The two sections are near mirror images, and they need to be studied differently.

The higher recall component is why AUD feels approachable early: there genuinely is more that can be learned outright. The Evaluation component is why it stops feeling approachable around the 70 mark. Evaluation questions ask whether the evidence obtained was sufficient, whether a conclusion was appropriate, whether a response was adequate. Those have defensible answers, but not answers you can derive from a formula.

How the exam is built

ItemAUD
Length4 hours
Multiple choice questions78
Task-based simulations7
Score weighting50% MCQ, 50% TBS
Testing availabilityContinuous, as a Core section
2026 pass rate48.65% cumulative
Skill allocationRemembering and understanding 30 to 40%, application 30 to 40%, analysis 15 to 25%, evaluation 5 to 15%
Passing score75 on a 0 to 99 scale
Credit window30 months from the score release of your first passed section, adopted board by board

78 multiple choice questions is the most of any Core section, and it changes the time arithmetic completely. At roughly a minute and a quarter each, the MCQ testlets consume about a hundred minutes, leaving around two hours for seven simulations. AUD is a pace problem in a way FAR is not: there are simply a lot of questions to read, and AUD questions are wordy.

Why AUD questions behave differently

This is the part worth more than any topic list, because it is what candidates repeatedly fail to adjust to.

The qualifier is the question. AUD stems are full of words like "most likely", "least likely", "best", "primary" and "first". These are not padding. Several options will be things an auditor might legitimately do; the question is which one the standards point to first, or which one most directly addresses the risk described. Reading the stem twice is not a luxury in AUD.

Facts are given for a reason. When a question tells you the client is a first-year audit, or that the CFO resigned mid-year, or that inventory is held at a third-party location, that detail is the hinge. In FAR the numbers are the question; in AUD the circumstances are.

Two right answers usually means you missed a distinction. If you find yourself unable to separate two options, the distinction is nearly always between a test of controls and a substantive procedure, between sufficiency and appropriateness of evidence, or between what the auditor does and what management does. Those three confusions account for a large share of lost AUD marks.

The topics that decide the result

The risk-to-response chain

Understand the entity, identify what could go materially wrong, assess the risk, then design a procedure proportionate to it. If you can articulate why a specific procedure answers a specific risk, most of Areas II and III becomes tractable. If you have memorised procedures without their risks, it does not.

Internal control and tests of controls

The most reliably confused topic in the section. A test of controls asks whether the control operated; a substantive test asks whether the balance is right. Whether you can rely on controls changes how much substantive work you need, which is the link candidates miss.

Evidence: sufficiency and appropriateness

Sufficiency is quantity, appropriateness is quality, and appropriateness splits into relevance and reliability. Nearly every Evaluation-level question in AUD is testing one of those four words. Learning them as a precise vocabulary rather than as synonyms for "good evidence" is worth real marks.

Audit opinions and reporting

Reporting is the most mechanical part of AUD and should be secured completely, because it is decidable. The opinion follows from a two-by-two grid: is the problem a misstatement or a scope limitation, and is it material or material and pervasive?

Read: Audit Opinions: Unmodified, Qualified, Adverse and Disclaimer.

Independence and ethics

Area I is rules driven and therefore cheap to secure. Independence questions in particular tend to be decidable: a specific relationship either impairs independence or does not. Learn the prohibited relationships and services properly and Area I stops being a source of loss.

A study plan

Eight to ten weeks at twelve to fifteen hours is a reasonable shape for AUD, and unlike FAR the order genuinely matters, because the section is one argument from start to finish.

WeeksFocusWhy here
1Ethics, independence, engagement acceptance, quality managementRules driven and self-contained. Secure it early and stop thinking about it.
2 to 3Understanding the entity, internal control, materiality, risk assessmentEverything in Area III responds to what you learn here. Studying procedures first is studying answers without questions.
4 to 5Further procedures, evidence, sampling, confirmations, estimatesThe largest area, and only sensible once risk is understood.
6Conclusions, opinions and reportingDecidable material. Secure it completely rather than approximately.
7Other engagements: reviews, compilations, attestation, SOC at a high levelFrequently under-studied and reliably examined.
8 to 9Simulations under time, then full mocksHalf the marks, and the place Evaluation-level questions live.

Two habits that matter more in AUD than elsewhere:

  1. Review the questions you got right for the wrong reason. In a section with plausible distractors, guessing correctly is not knowledge, and it hides a gap that will reappear on exam day. Mark them.
  2. Write down why the wrong option was wrong. AUD explanations are worth more than AUD questions. If you cannot articulate why the second-best answer is second-best, you have not learned the distinction the question was testing.

When to sit AUD

AUD is comparatively self-contained. It does not depend on FAR the way BAR does, and it does not feed a Discipline the way REG feeds TCP, which makes it the section most safely left towards the end of your credit window. Its pass rate is also modestly helped by that: candidates sitting AUD have usually sat something else first and know how the exam asks questions.

What should not be left late is your Discipline, which is only offered in the first month of each quarter. See Sequencing the CPA Exam Around the Discipline Windows.

Where to practise this

AUD rewards volume of well-explained questions more than almost any other section, because the learning happens in the explanation rather than in the answer. Prepito's AUD course covers the full blueprint with practice questions, timed simulations, full explanations and mistake review, in English.

CPA questions and written explanations are in English. Prepito’s interface is available in English and Arabic, and the AI tutor can respond in either language.

If you are planning the whole qualification, see the FAR study guide for the section most candidates take first, or the CPA programme.


Sources: AICPA CPA Exam Blueprints, AICPA guidance on Exam scoring and pass rates. Blueprint weightings are published as ranges and revised periodically; confirm the current Blueprint for your testing window. The pass rate cited is cumulative for the first two quarters of 2026.

Try 5 questions on this material

Question 1 of 5

An auditor confirms year-end accounts receivable directly with customers. Which assertion does this MOST directly address?

About the author

Prepito Editorial Team

The Prepito Editorial Team creates study guides and practice resources for accounting and finance exams.

Keep reading

CMA Exam

COSO Internal Control vs COSO ERM: 17 Principles for Controls, 20 for Risk and Strategy, and Neither Framework Replaces the Other

COSO publishes two frameworks with five components each, and says neither supersedes the other: one asks whether controls achieve operations, reporting and compliance objectives, the other whether risk is weighed when strategy is set and carried out. The two side by side, component for component, with the older eight-component ERM cube the CMA's learning outcomes still name, and how CMA Parts 1 and 2, BAR and AUD test them, while CIA Part 1 tests the same concepts without naming either.

Prepito Editorial Team8 min read
CIA Exam

CIA Part 1 Study Guide: Internal Audit Fundamentals, Its Four Sections and Their Weights, and a Study Plan

Part 1 is the longest CIA paper, 125 questions in 150 minutes, and the same exam earns the Internal Audit Practitioner designation. What its four 2025 sections test (foundations 35%, ethics and professionalism 20%, governance, risk and control 30%, fraud 15%), what the IIA's verbs ask of you now that the syllabus prints no cognitive levels, and a twelve-week plan built on the weights.

Prepito Editorial Team10 min read
CPA Exam

SQL on the CPA ISC Exam: The Blueprint Asks You to Read a Query and Judge Whether Its Data Set Is Complete, Not to Write One

The ISC Blueprint gives SQL queries one representative task, at Application level: examine a standard query, with its commands, clauses, operators, aggregate and string functions, and decide whether the rows it returns are relevant and complete. That is an auditor's question, not a programmer's. The article teaches the keywords that carry the marks, the joins and WHERE filters that silently drop records, and the keys and normalisation tested beside them.

Prepito Editorial Team9 min read
CPA Exam

Your cookie choices

Necessary cookies keep Prepito working. Optional cookies help us improve your experience, measure our ads, and personalise advertising. Change your choices anytime. Privacy policy