CORAA
AI Lab · Tools

SA-by-SA Audit Procedure Library.

27 Standards on Auditing, structured for the desk auditor — objective, key requirements, typical procedures, common pitfalls, related standards. Search by SA number, by topic, or filter by audit phase.

Source — ICAI AASB · Updated 28 May 2026
Objective

To obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement, whether due to fraud or error, and to issue an auditor's report with the auditor's opinion.

Key requirements
  • Compliance with relevant ethical requirements, including independence (ICAI Code of Ethics)
  • Professional skepticism throughout the engagement
  • Application of professional judgement
  • Sufficient appropriate audit evidence to reduce audit risk to an acceptably low level
  • Conduct in accordance with the SAs
Typical procedures
  • Document the firm's independence assessment at acceptance
  • Apply skepticism flags — where management's explanations are inconsistent with evidence
  • Form a basis for opinion via evidence accumulation per SAs 300-700
Common pitfalls
  • Over-reliance on management representations as the sole source of evidence
  • Treating "no exception found" as adequate when sample sizes are too small
  • Skipping documentation of professional-judgement calls
SA 220SA 230SA 230
Note on scope
CORAA AI Lab is a free practice environment built by CORAA. It is not a certification, not a substitute for any qualification issued by the Institute of Chartered Accountants of India (ICAI), and does not award structured CPE hours. ICAI’s official AI programmes — including AICA Level 1 and AURA — remain the authoritative credentials for AI competency in audit. We recommend using the Lab alongside or in preparation for ICAI’s programmes.
For real client data — built differently
CORAA is the AI engine built for Indian audit — India-hosted, DPDPA 2023 compliant, no training reuse.
Seven hubs covering the whole engagement: Setup → Scrutiny → Reconciliation → Procedures → Working Papers → Findings → Reporting. 164 scrutiny rules across 13 modules. SA 230, 240, 320, 450, 510, 530, 570, 700 baked into the workflow.
India-hosted
Every byte on Indian soil. Azure India regions for all production workloads.
DPDPA 2023 compliant
Data-fiduciary obligations built in by default. Not bolted on after the fact.
ISO 27001:2022 · SOC 2 Type II
Certified and attested. The security baselines enterprise audit committees actually ask for.
No training reuse
Client data never enters any foundation model. Contractual, not aspirational.
See CORAA in 20 minutesExplore the AI ModulesVisit the Trust Centre