Glossary/Fraud and ethics

Professional skepticism

Professional skepticism is an attitude that includes a questioning mind, alertness to conditions that may indicate misstatement, and a critical assessment of audit evidence, kept up throughout the whole engagement.

CORAA TeamUpdated November 5, 2026

Definition

AU-C 200 defines professional skepticism as an attitude that includes a questioning mind, being alert to conditions that may indicate possible misstatement due to error or fraud, and a critical assessment of audit evidence. The auditor must maintain it throughout the audit, including when past experience suggests management is honest.

Why it matters in an audit or review

Skepticism guards against bias. It means corroborating management's explanations, noticing inconsistent evidence, and not accepting weaker evidence because the client has been reliable. Peer review and regulator inspection findings can trace to missing skepticism: accepting estimates without challenge, or accepting an unusual transaction's stated purpose without checking it. The auditor also stays alert to the reliability of documents and to responses that look evasive or inconsistent.

Example

Management tells the auditor that a $600,000 customer payment received in January relates to December shipments, so no cutoff adjustment is needed (illustrative). Instead of accepting that, the auditor inspects the shipping documents and finds the goods left the dock on January 3. Skepticism produced evidence that contradicted the explanation, and the entry is proposed.

Common mistakes

Treating skepticism as distrust of management. It is a neutral habit of testing explanations against evidence.

Sources

  • AICPA, AU-C Section 200, Overall Objectives of the Independent Auditor and the Conduct of an Audit in Accordance With Generally Accepted Auditing Standards
  • AICPA, AU-C Section 240, Consideration of Fraud in a Financial Statement Audit

Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error

Standards

AU-C 200AU-C 240

Related terms

  • Due professional care
    Due professional care means planning and performing work with competence, diligence and a questioning mind. It is a general standard in the AICPA Code and a requirement in the auditing standards.
  • Fraud risk factors
    Fraud risk factors are events or conditions that indicate an incentive or pressure to commit fraud, an opportunity to do it, or an attitude that justifies it. They are red flags, not proof of fraud.
  • Management override of controls
    Management override of controls is the risk that management bypasses controls that otherwise work, by posting false entries or biasing estimates, and AU-C 240 treats it as present in every audit.
  • Audit risk
    Audit risk is the risk that the auditor expresses an inappropriate opinion when the financial statements are materially misstated. It combines the risk of material misstatement with detection risk.

Go deeper

All glossary terms →

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required