PCAOB AS 2810: The Audit Is Not Finished Until You Evaluate the Results

Evaluating Audit Results — October 1 and December 3, 2026

Auditors spend enormous amounts of time planning and performing an audit.

They assess risk. Test controls. Confirm balances. Inspect documents. Perform substantive procedures. Analyze transactions. Investigate exceptions. Document their work.

But eventually the engagement team must answer the question that matters most:

What do all of these audit results, taken together, tell us?

That is the purpose of PCAOB Auditing Standard AS 2810 — Evaluating Audit Results.

AS 2810 requires the auditor to evaluate whether the audit evidence obtained is sufficient and appropriate to support the opinion expressed in the auditor's report. Critically, the auditor must consider all relevant evidence—including evidence that contradicts the financial-statement assertions, not merely evidence that corroborates them.

Corporate Compliance Seminars' PCAOB AS 2810: Evaluating Audit Results is a focused 2-CPE Auditing webinar offered on:

• Thursday, October 1, 2026

• Thursday, December 3, 2026

The program runs from 10:00 a.m. to noon Central Time, costs $140 per attendee, and requires no prerequisites or advance preparation.

AS 2810 Is Where the Pieces of the Audit Come Together

During fieldwork, auditors naturally divide the engagement into pieces:

• Revenue.

• Inventory.

• Accounts receivable.

• Accounts payable.

• Estimates.

• Journal entries.

• IT controls.

• Disclosures.

• Internal control.

Each area may have its own workpapers, testing, exceptions and conclusions.

AS 2810 forces the engagement team to move in the opposite direction.

It asks the auditor to bring those individual pieces back together and determine whether the totality of the evidence supports the audit opinion.

The PCAOB identifies six major areas that must be considered when evaluating the results of the financial-statement audit: overall analytical procedures; accumulated misstatements, particularly uncorrected ones; qualitative aspects of accounting practices; conditions affecting fraud-risk assessment; financial-statement presentation and disclosures; and the sufficiency and appropriateness of audit evidence.

That makes AS 2810 one of the most important professional judgment standards in a PCAOB audit.

Don't Just Add Up the Misstatements

Auditors accumulate identified misstatements throughout the engagement.

Eventually management may correct some and leave others uncorrected.

A dangerous approach is to reduce the final evaluation to:

Total uncorrected misstatements < materiality = audit finished.

AS 2810 demands more.

Materiality isn't purely mathematical. The auditor also needs to evaluate qualitative considerations.

A relatively small misstatement can become more significant when it:

• Changes a loss into income

• Affects compliance with contractual requirements

• Changes an important financial trend

• Impacts management compensation

• Conceals an unlawful transaction

• Affects a particularly sensitive disclosure

  
  

The question isn't merely:

“How large is the error?”

It is:

“What does this error mean in the context of these financial statements?”

Contradictory Evidence Matters

This may be one of the most important concepts in AS 2810.

The PCAOB explicitly requires the auditor to consider all relevant audit evidence, whether it corroborates or contradicts the assertions in the financial statements.

Imagine the auditor obtains nine pieces of evidence supporting management's estimate.

Then the auditor obtains one credible piece of evidence pointing in the opposite direction.

The correct response isn't:

“Nine to one. Management wins.”

Audit evidence isn't an election.

The contradictory evidence must be evaluated.

Why does it conflict?

Is management's assumption wrong?

Is the contradictory information unreliable?

Does it indicate bias?

Does it create a new risk?

Are additional procedures required?

A strong audit trail becomes:

Contradictory Evidence

→ Investigation

→ Additional Procedures

→ Evaluation

→ Resolution

→ Documented Conclusion

That is professional skepticism in action.

The Overall Analytical Review Is More Than a Final Checklist

AS 2810 requires analytical procedures during the overall review of the financial statements.

The auditor should evaluate whether conclusions reached regarding significant accounts and disclosures remain appropriate and whether the financial statements as a whole appear free of material misstatement.

This is another opportunity to ask:

Does the financial story make sense?

Suppose revenue increased 18%.

Gross margin increased substantially.

Accounts receivable increased 35%.

Cash from operations declined.

Customer concentration increased.

Those facts might individually have been audited.

But viewed together, they may tell the auditor something different.

The overall review should challenge whether the engagement team has overlooked a relationship, transaction or risk.

Previously Unidentified Risks Should Change the Audit

AS 2810 specifically requires the auditor to consider whether unusual or unexpected transactions, events, amounts or relationships indicate previously unidentified risks of material misstatement—including fraud risks.

This is critical.

An audit plan is not carved in stone.

Suppose the engagement team discovers something unexpected on the final day of fieldwork.

The response cannot be:

“That's outside our audit program.”

The new information may require the auditor to reconsider risk and perform additional procedures.

The audit should follow the evidence.

Not the original checklist.

Management's Explanation Is Not Necessarily Audit Evidence

Suppose an analytical procedure identifies an unexpected 40% increase in an account.

The auditor asks management.

Management says:

“That's because of seasonality.”

Question answered?

Not necessarily.

AS 2810 specifically states that the auditor should obtain corroboration for management's explanations concerning significant unusual or unexpected transactions, events, amounts or relationships. If management's explanation is implausible, inconsistent, imprecise or insufficiently detailed, further procedures are required.

That gives auditors an extremely useful rule:

Ask management. Then verify management's explanation.

Inquiry can be the beginning of the audit procedure.

It should not automatically be the end.

Revisit Fraud Risk Before You Sign the Report

Fraud-risk assessment is not something auditors perform during planning and then forget.

AS 2810 requires the auditor's final evaluation to consider conditions identified during the engagement that relate to the risk of material misstatement due to fraud.

Imagine the audit began with fraud risk assessed at one level.

During the engagement the team discovers:

• Unusual journal entries

• Management override

• Conflicting explanations

• Transactions with undisclosed related parties

• Missing documentation

• Unexpected year-end transactions

• Repeated control exceptions

Those observations may change the original fraud-risk assessment.

The auditor should ask:

Knowing everything we know now, would we assess fraud risk the same way we did when we planned this audit?

If the answer is no, the audit response may also need to change.

Evaluate Management's Accounting Practices

AS 2810 also requires consideration of the qualitative aspects of the company's accounting practices.

That means looking beyond whether individual accounting treatments technically fall within acceptable boundaries.

Consider the pattern.

Does management consistently select assumptions at the aggressive end of an acceptable range?

Do estimates repeatedly favor earnings?

Are accounting policies becoming increasingly complex?

Do transactions appear structured to achieve accounting outcomes?

Is there evidence of management bias?

One accounting judgment may be reasonable.

A pattern of judgments consistently favoring management's desired financial result deserves additional attention.

Financial Statement Disclosures Matter

Auditors sometimes concentrate heavily on the numbers.

But the audit opinion covers the financial statements—including the disclosures.

AS 2810 expressly includes evaluation of financial-statement presentation and disclosures in the auditor's evaluation of results.

Auditors should therefore consider:

Are required disclosures present?

Are they understandable?

Are significant risks adequately described?

Are estimates and uncertainties properly communicated?

Are disclosures consistent with the evidence obtained elsewhere during the audit?

A disclosure can contain technically correct words while still failing to communicate the economic substance adequately.

The Final Question: Do We Have Enough Evidence?

Eventually AS 2810 brings the auditor back to the fundamental audit-evidence question:

Have we obtained sufficient appropriate audit evidence to support our opinion?

Sufficiency concerns the quantity of evidence.

Appropriateness concerns its quality—its relevance and reliability.

More evidence does not necessarily solve a quality problem.

Twenty weak pieces of evidence do not automatically outweigh one highly reliable contradictory piece of evidence.

The CCS program specifically addresses sufficient appropriate evidence, professional judgment and skepticism, materiality, audit risk, consistency and documentation as central concepts in applying AS 2810.

AS 2810 Also Connects to ICFR

AS 2810 does not stop with the financial-statement audit. The standard contains requirements for evaluating the results of an audit of Internal Control over Financial

Reporting.

That connection is important.

Control deficiencies discovered throughout the audit cannot simply be viewed independently.

The auditor must consider what those deficiencies collectively indicate about ICFR.

That means looking for:

• Recurring deficiencies

• Multiple deficiencies affecting the same assertion

• Entity-level weaknesses

• Management override

• ITGC problems affecting multiple controls

• Deficiencies indicating ineffective monitoring

A series of individually modest problems can collectively indicate something much more significant.

Professional Skepticism Is the Thread Running Through AS 2810

AS 2810 is fundamentally about judgment.

And judgment without professional skepticism is dangerous.

The auditor should continually ask:

What evidence supports this conclusion?

What evidence contradicts it?

What assumptions am I making?

Am I accepting management's explanation too readily?

Did the audit reveal a risk we didn't anticipate?

Are individually small problems collectively significant?

Would another experienced auditor reach the same conclusion from this evidence?

CCS specifically includes strengthening professional judgment and skepticism among the objectives of its AS 2810 training.

Think of AS 2810 as the Audit Team's Final Challenge Session

A useful engagement practice is to treat AS 2810 as a structured final challenge.

Before the report is released, ask:

• What did we expect to find?

• What did we actually find?

• What surprised us?

• What contradicted management's assertions?

• Which risks changed during the audit?

• What misstatements remain uncorrected?

• What qualitative issues concern us?

• What did we learn about fraud risk?

• Are the disclosures adequate?

• Do we have sufficient appropriate evidence?

Then ask the ultimate question:

If we had known everything we know today when we planned the audit, would we have designed the same audit?

If the answer is no, the engagement team should understand why before issuing the report.

Two Opportunities to Attend in 2026

CCS's PCAOB AS 2810: Evaluating Audit Results provides 2 CPE credits in Auditing and is presented live from 10:00 a.m. to noon Central Time. The program is Basic level with no prerequisites or advance preparation.

The two upcoming dates are Thursday, October 1, 2026 and Thursday, December 3, 2026.

The program covers materiality, audit risk, sufficient appropriate evidence, professional judgment and skepticism, analytical procedures, accumulated misstatements, accounting practices, fraud risk, financial statements and disclosures, ICFR, audit documentation, and PCAOB inspection observations concerning AS 2810.

The Bottom Line: Don't Just Complete the Audit—Evaluate It

Completing every procedure in the audit program does not automatically mean the auditor has sufficient evidence to issue an opinion.

AS 2810 requires something more important: Stand back and evaluate the results.

The progression is:

Audit Risk

→ Audit Procedures

→ Evidence

→ Misstatements and Exceptions

→ Contradictory Evidence

→ Fraud Considerations

→ Qualitative Evaluation

→ Financial Statements and Disclosures

→ Sufficiency and Appropriateness of Evidence

→ Audit Opinion

That final evaluation is where individual workpapers become an audit conclusion.

Corporate Compliance Seminars' PCAOB AS 2810 program on October 1 and December 3, 2026 gives PCAOB auditors two opportunities to strengthen this essential part of audit tradecraft.