Glossary/Engagements and reports

Attestation engagement

An attestation engagement is one in which a practitioner issues a report on subject matter, or on a responsible party's assertion about it, measured against suitable criteria, as an examination, review or agreed-upon procedures engagement.

CORAA TeamUpdated November 5, 2026

Definition

AT-C section 105 sets out concepts common to all attestation engagements. A practitioner evaluates or measures subject matter against criteria and reports the result, either on the subject matter itself or on an assertion made by the responsible party. The three engagement types are examination (reasonable assurance, opinion), review (limited assurance, conclusion) and agreed-upon procedures (findings only, no assurance). The standards are the AICPA's Statements on Standards for Attestation Engagements, codified in the AT-C sections.

Why it matters in an audit or review

Many requests that do not involve financial statements are attestation work: SOC reports, compliance attestations, sustainability data and key performance metrics. Identifying the right engagement type and criteria at the start controls the report, the assurance level and the independence requirements.

Example

Illustrative: a franchisor wants confirmation of reported unit counts. The practitioner could examine the count against defined criteria for an opinion or perform agreed-upon procedures that report findings. The franchisor picks the examination because the report goes to lenders.

Common mistakes

  • Using an audit or review of financial statements standard for subject matter that is not financial statements.
  • Accepting an engagement without suitable criteria.

Sources

  • AICPA, AT-C Section 105, Concepts Common to All Attestation Engagements
  • AICPA, AT-C Sections 205, 210 and 215

Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error

Standards

AT-C 105

Related terms

  • Examination (attestation) engagement
    An examination is an attestation engagement in which the practitioner gathers enough evidence to give an opinion, with reasonable assurance, on subject matter or an assertion measured against suitable criteria.
  • Agreed-upon procedures (AUP)
    An agreed-upon procedures engagement has the practitioner perform procedures agreed with the engaging party and report the findings. The report gives no opinion, no conclusion and no assurance on the subject matter.
  • Responsible party
    The responsible party is the person or persons responsible for the subject matter of an attestation engagement, usually management, who must accept responsibility for it and provide written representations to the practitioner.
  • Suitable criteria
    Suitable criteria are benchmarks used to measure or evaluate subject matter in an attestation engagement, with characteristics of relevance, objectivity, measurability and completeness, and available to intended users.
  • AU-C, AR-C and AT-C (SAS, SSARS, SSAE)
    AU-C sections come from Statements on Auditing Standards, AR-C from SSARS, and AT-C from SSAE; each codifies the AICPA standards for audits, review and compilation work, and attestation engagements of nonissuers.

Go deeper

All glossary terms →

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required