Auditor interview questions, with worked answers

How to use these questions

Answer each question with the logic of the audit, then add a case of your own: the industry, the area you owned, what you found and how it ended. Keep client names out; interviewers expect you to protect them, and the industry and size tell the story.

What an auditor is expected to know

• Planning: materiality, the risk assessment and the audit plan that follows from them.
• Audit evidence: tests of controls, substantive tests, sampling and analytics, confirmations and inventory counts, and working papers a reviewer can follow.
• The accounts: financial reportingAsked in 5% of auditor ads (as of 5 Nov 2026).Read and test financial statements under IFRS or the local rules: revenue, estimates, provisions and the notes. under IFRS or the local rules, and bookkeepingAsked in 1% of auditor ads (as of 5 Nov 2026).Double entry, accruals, reconciliations and closing entries: the ground every audit test stands on. well enough to follow any entry.
• IT and data: IT general controls, the client's ledger such as SAPAsked in 3% of auditor ads (as of 5 Nov 2026).Find your way through the client's ledger: journals, master data, users and the reports an audit asks for., and data analyticsAsked in 3% of auditor ads (as of 5 Nov 2026).Test whole populations of journals or payments instead of samples, and explain what the exceptions mean. with ExcelAsked in 2% of auditor ads (as of 5 Nov 2026).Reconcile, sample and analyse large extracts quickly and leave a file a reviewer can follow step by step., IDEA or Power BIAsked in 2% of auditor ads (as of 5 Nov 2026).Show audit analyses as dashboards a manager can read, from data you can trace back to the ledger..
• Judgement and ethics: professional scepticism, independence, going concern and the opinion.

Planning: materiality, risk and controls

How do you set materiality for an audit, and what does it change?

What they check: that you know materiality is a judgement that drives the whole plan.

Short answer: "Materiality is the size of an error that would change the decisions of people reading the accounts. We set it from a benchmark that matters to them, such as profit before tax or revenue, then a lower figure for planning the tests, so small errors together do not add up to a material one. It decides how much evidence we need and which differences we report."

The full answer: The benchmark depends on the company: profit for a steady trading company, revenue or assets when profit swings, expenses for a charity. Some items matter whatever their size, such as directors' pay or related parties. Materiality is revised when the actual figures come in, and a lower figure for a risky area is normal.

A weak answer: "It is a fixed percentage of revenue from our template." Follow-up: "The company made a loss this year." Explain why profit stops being a sensible benchmark.

Walk us through a risk assessment for a new client.

What they check: that you understand the business before you test the numbers.

Short answer: "I learn the business: how it earns money, its industry, its systems, the people and the pressures on them. I look at the figures for changes that do not fit, ask management and others where things go wrong, and list what could be misstated in each area and why. The significant risks get the most work and the most experienced people."

The full answer: Two risks are presumed in every audit under the standards: fraud in revenue and management override of controls, the chance that managers bypass the controls they set. Others come from the business, such as complex contracts, estimates or a new system. Write each risk with the assertion it touches, such as existence or valuation, so the tests answer it.

A weak answer: "We use last year's file and roll it forward." Follow-up: "The client changed its ledger system in March." Say what that adds to the risk assessment and the IT work.

How do you test internal controls, and what do you do when a control fails?

What they check: walkthroughs, tests of operation, and the link to the rest of the audit.

Short answer: "First a walkthrough: I follow one transaction from start to ledger to see the control exists and is designed well. If we want to rely on it, I test that it worked all year with a sample. If it failed, we cannot rely on it, so we do more substantive testing, find out why it failed and report it to management."

The full answer: Controls can be manual, such as a manager approving invoices, or automated, such as the system blocking a payment without a purchase order. An automated control is tested once if the IT general controls around it are good. A failure is not only a finding: ask whether it hides an error or fraud, and whether it is a significant deficiency for the board.

A weak answer: "The procedure manual says it is approved, so it is." Follow-up: "The approver signed forty invoices in four minutes." Discuss whether the control really operates.

Evidence: samples, revenue, scepticism and estimates

How do you choose a sample, and when do you test the whole population with data instead?

What they check: that a sample is designed for a purpose and that you know the alternatives.

Short answer: "The sample size follows from the risk, materiality and how many errors we expect; the items are picked so each has a fair chance, with large items tested on their own. Where the data is complete and reliable, I prefer to test the whole population with a data tool and look closely at the exceptions."

The full answer: A sample lets you reach a conclusion about a population you cannot check item by item, and any error found is projected to the whole. Data analytics changes that: three way matching of orders, deliveries and invoices or a test of every journal can run on all records. The work then moves to checking the data is complete and to explaining the exceptions.

A weak answer: "We always take twenty-five items." Follow-up: "Two of your sample items are wrong." Explain projecting the error and what you would do next.

How would you audit revenue, and why is it treated as a fraud risk?

What they check: a plan for the most important line, with fraud in mind.

Short answer: "Revenue is where the pressure to hit targets meets judgement about timing, so the standards presume a fraud risk there. I understand the contracts and when control passes to the customer, test the controls, match a sample of sales to orders, deliveries and cash, and look hard at sales around the year end, credit notes after it and unusual manual entries."

The full answer: Under IFRS 15 and similar rules, revenue follows the delivery of what was promised, so long contracts, bundles and licences need reading. Cut-off tests catch sales booked in the wrong year. Confirmations from customers and the cash received after the year end give outside evidence. A sharp rise in the last week of the year is a question, not a success.

A weak answer: "Revenue agrees to the ledger, so it is fine." Follow-up: "Sales jumped in the last week of December and fell in January." Say what you would test and why.

What is professional scepticism, and how have you shown it?

What they check: a questioning mind in practice, without hostility.

Short answer: "Professional scepticism means I do not accept an answer because it is convenient or because I like the client. I look for evidence that could contradict the story, check explanations against documents and other people, and notice when something does not fit, such as a document that looks altered or an answer that keeps changing."

The full answer: Scepticism is hardest with long-standing clients and at the end of a busy season. Write down why you accepted an explanation, not only that you did. A good example answer has a moment where you asked one more question and it changed the result.

A weak answer: "I trust the client; they have been with us for years." Follow-up: "The finance director gets annoyed by your questions." Explain how you stay polite and firm, and when you involve your manager.

How do you audit an accounting estimate such as a provision or an impairment?

What they check: that you test the method, the data and the assumptions, and look for bias.

Short answer: "I understand how management made the estimate, test the data it used, and challenge each key assumption against outside evidence and past results. I may build my own range. I also compare last year's estimate with what really happened, to see whether management tends to be optimistic."

The full answer: Estimates such as expected credit losses, warranties, goodwill impairment or legal claims carry most of the judgement in the accounts and much of the risk of bias. Specialists may help with valuations, but the conclusion stays the audit team's. Check the disclosure too: readers must understand how uncertain the figure is.

A weak answer: "Management's expert prepared it, so we rely on it." Follow-up: "Every assumption is at the most favourable end of the range." Explain why that pattern is a finding in itself.

How do you get evidence for inventory and receivables, including counts and confirmations?

What they check: that you know the outside evidence for assets and its limits.

Short answer: "For inventory I attend the count, test counts both ways, from the sheets to the shelves and back, and look for damaged or slow-moving stock. For receivables I send confirmations to a sample of customers and, where they do not answer, check the cash received after the year end and the invoices behind the balance."

The full answer: Watch cut-off at the count: goods shipped or received around that day must be in the right period. Value inventory at the lower of cost and what it can be sold for. Confirmations are only good if you control them, sending and receiving them yourself. Related parties need extra care, because a balance with a sister company may not be what it seems.

A weak answer: "The client sends us the confirmations they received." Follow-up: "A large customer confirms a lower balance." Explain how you investigate the difference.

IT controls and data analytics

What are IT general controls, and why do they matter for a financial audit?

What they check: the link between systems and the reliability of the figures.

Short answer: "IT general controls are the controls over the systems themselves: who has access, how program changes are approved and tested, and how the systems are run and backed up. If they work, we can rely on automated controls and system reports; if they fail, every report from that system needs more testing."

The full answer: Typical findings are developers with access to production, shared admin accounts, or leavers whose accounts stayed open. IT audit specialists often test these, but the financial auditor must understand what a finding means for the audit. Security standards such as ISO 27001Asked in 7% of auditor ads (as of 5 Nov 2026).Security controls an IT audit relies on: access, changes, backups and logging, documented and tested. help, but they do not replace testing the controls that matter for the accounts.

A weak answer: "IT is the IT auditors' job, not mine." Follow-up: "Four people can post journals and approve them in the same system." Explain the risk and your response.

How have you used data analytics in an audit, for example on journal entries?

What they check: practical use of data, and a link to the risk of management override.

Short answer: "I take the full journal listing, check it is complete against the trial balance, then filter for entries that fit the risk: posted at weekends or after the year end, by unusual users, with round amounts or rare account combinations. I test the selected entries back to their support and ask who made them and why."

The full answer: Journal entry testing answers the presumed risk that managers override controls. Tools range from ExcelAsked in 2% of auditor ads (as of 5 Nov 2026).Reconcile, sample and analyse large extracts quickly and leave a file a reviewer can follow step by step. for small ledgers to audit software such as IDEA, scripts or Power BIAsked in 2% of auditor ads (as of 5 Nov 2026).Show audit analyses as dashboards a manager can read, from data you can trace back to the ledger. for large ones; the method matters more than the tool. Keep the steps documented so another auditor can rerun them, and agree the data request with the client early.

A weak answer: "We pick the ten largest journals." Follow-up: "The listing does not agree to the trial balance." Explain why you stop and fix completeness first.

Going concern, independence and the opinion

When do you have a doubt about going concern, and what do you do about it?

What they check: that you recognise the signs and know the steps that follow.

Short answer: "Going concern means the company can keep operating for at least the next twelve months. Signs of doubt are losses, a loan that is due without a new one, broken bank covenants or a lost key customer. I review management's cash forecast, test its assumptions, and read the bank letters. If a material uncertainty remains, the accounts must say so and the opinion draws attention to it."

The full answer: Look at events after the balance sheet date too, the subsequent events, such as a new loan signed or a customer lost. Talk to those charged with governance early, because this is the conclusion with the largest effect on the company. If management will not disclose a real uncertainty, the opinion changes.

A weak answer: "The company has always survived." Follow-up: "The bank renewal is expected after you sign." Discuss what evidence you can get before signing.

What threatens an auditor's independence, and how do you deal with it?

What they check: that you know the rules exist and take them personally.

Short answer: "Independence is threatened by self-interest, such as owning the client's shares or depending on its fees, by reviewing our own work, by familiarity after many years, and by pressure from the client. I declare my interests, refuse gifts beyond small courtesies, do not prepare the client's accounts and then audit them, and raise any doubt with the engagement leader."

The full answer: The ethics codes set out the threats and the safeguards, and many countries add rules of their own, such as the rotation of partners or limits on other services for listed clients. A job offer from the client is a threat too: tell your manager at once. When no safeguard is enough, the answer is to decline the work.

A weak answer: "Independence is the partner's concern." Follow-up: "Your partner's brother is the client's finance director." Explain what must happen.

The client disagrees with an adjustment you proposed. What do you do?

What they check: firmness and tact, and knowing when to escalate.

Short answer: "I check my own work first, then explain the issue with the evidence and the rule behind it, and listen to their view; sometimes they have information I lacked. If we still disagree and the amount matters, I take it to my manager, and the partner may discuss it with the board. Uncorrected differences are listed and judged together at the end."

The full answer: Keep the discussion about the accounts, not about people. Small differences below the reporting level are collected and judged together, because many small ones can add up to a material one. A material difference that the client will not correct changes the opinion; explain that early, calmly, and in writing.

A weak answer: "I drop it; we need to keep the client happy." Follow-up: "The client threatens to change auditors." Discuss independence and why that cannot change the result.

How does the audit opinion work, and what are key audit matters?

What they check: the end product of the audit and the choices it allows.

Short answer: "The opinion says whether the accounts give a true and fair view. It can be unmodified, qualified for a specific material problem, adverse when problems are pervasive, or a disclaimer when we could not get enough evidence. Key audit matters are the areas that took most of our attention, explained in the report of listed companies."

The full answer: An emphasis of matter paragraph points readers to something already in the accounts, such as a going concern uncertainty, without changing the opinion. Besides the opinion, findings on controls go to management in a management letter, often with a rating and the client's answer. Each country adds its own reporting rules on top of the international ones.

A weak answer: "If we sign, the accounts are correct." Follow-up: "What does reasonable assurance mean?" Explain that it is high but not absolute, and why.

As an audit senior or manager, how do you plan and review an audit and lead the team?

What they check: that you can run an engagement, not only do the tests.

Short answer: "I plan with the client early: the timetable, the data and documents we need and who provides them. I give each team member areas that fit their level, with a briefing on the risks. I review as we go, not only at the end, and keep the manager and partner informed of issues while there is still time to solve them."

The full answer: At audit manager and senior audit manager level the work becomes several engagements at once, group audits with component teams in other countries, budgets and the relationship with the finance director and the audit committee. Partners add the final judgement and the risk of the practice. Expect a case: the client's data arrives two weeks late and the deadline cannot move.

A weak answer: "I do the hard areas myself; reviewing takes longer than doing." Follow-up: "A junior's file has the right conclusion and no evidence." Explain how you coach rather than redo.

Your CV for these questions

Each client on your CV invites the questions above: which area, what risk, what you found, what the client said. Give each of those stories a line of its own under the right job, written so an audit manager wants to hear more:

Check your CV against an audit job you want with the free score; any area it finds thin is the one to rehearse first, with a real case.