SSAE vs. SSARS in CPA AUD: Match the Engagement to Assurance, Subject Matter, and Report

CPA AUD questions become much easier when you stop asking, "Do I remember this engagement?" and start asking, "What is the practitioner being asked to report on?" SSARS engagements usually live around unaudited financial statements: preparation, compilation, and review. SSAE engagements live in the attestation world: examinations, reviews, and agreed-upon procedures over subject matter or an assertion.

The exam loves to mix the vocabulary. A question may mention management assertions, responsible parties, limited assurance, independence, a report restriction, or procedures agreed to by specified parties. Those clues tell you the standard family, the assurance level, and the report language before you ever reach the answer choices.

Start With Subject Matter

The first decision is the cleanest one.

If the engagement is about preparing, compiling, or reviewing financial statements for a nonissuer, think SSARS. For example, Harbor Point Dental gives its CPA a trial balance and asks for monthly financial statements without asking for assurance. That points toward a preparation or compilation question, depending on whether the CPA is engaged to issue a compilation report.

If the engagement is about a subject matter other than a historical financial statement audit or SSARS service, think SSAE. Examples include compliance with a debt covenant, greenhouse-gas metrics, a service organization's controls, or procedures over a royalty schedule.

SSARS Engagements: Preparation, Compilation, Review

SSARS is not one engagement. It is a family. The exam often tests whether you can rank its common services by assurance and reporting.

Preparation

In a preparation engagement, the accountant prepares financial statements. The service does not provide assurance, and the accountant is not issuing a compilation or review report. Exam questions often focus on required legends or disclosures that make clear no assurance is provided.

Compilation

In a compilation, the accountant assists management in presenting financial statements and issues a compilation report. A compilation does not provide assurance. The accountant reads the financial statements for obvious issues, but does not perform inquiry and analytical procedures like a review.

Independence is a frequent trap. A compilation can be performed when the accountant is not independent, but the lack of independence must be disclosed in the compilation report. That is different from a review, where independence is required.

Review

A review provides limited assurance, usually expressed in negative assurance language. The accountant performs inquiry and analytical procedures, obtains a representation letter, and issues a review report. It is less work than an audit and does not provide reasonable assurance.

For AUD, do not describe a review as "no assurance" simply because it is not an audit. It provides limited assurance.

SSAE Engagements: Examination, Review, Agreed-Upon Procedures

SSAE engagements are attestation engagements. The practitioner reports on subject matter or an assertion. The responsible party owns the subject matter; the practitioner performs procedures and issues a report.

Examination

An examination is the high-assurance attestation engagement. It provides reasonable assurance, similar in level to an audit, but it may apply to non-financial-statement subject matter. For example, Merritt Manufacturing asks a CPA to examine management's assertion that its supplier-compliance program met specified criteria for the year. That points to an SSAE examination.

Review

An SSAE review provides limited assurance over subject matter or an assertion. It is not the same as a SSARS review of financial statements, even though both use the word review. The subject matter and standard family drive the answer.

Agreed-Upon Procedures

In an agreed-upon procedures engagement, the practitioner performs procedures that specified parties agree to and reports findings. The practitioner does not provide an opinion or conclusion. The report says what was done and what was found.

For example, Blue Harbor Systems asks a CPA to compare 60 royalty payments to contract rates and list mismatches. If the report only states procedures and findings, it is an agreed-upon procedures engagement, not an examination.

Representation Letters And Reports Are Clue Words

CPA AUD questions often hide the answer in required documentation.

Common SSARS Clues

• Financial statements prepared from client records.
• Compilation report with no assurance.
• Review report with limited assurance.
• Inquiry and analytical procedures for a review.
• Management representation letter for a review.
• Independence required for a review.
• Lack of independence disclosed for a compilation when applicable.

Common SSAE Clues

• Subject matter or assertion outside a standard financial statement audit.
• Criteria used to measure or evaluate the subject matter.
• Responsible party and specified users.
• Examination report with reasonable assurance.
• Review report with limited assurance.
• Agreed-upon procedures report with findings only.
• Restricted-use language when appropriate.

Worked Example: Sort Four Client Requests

Assume four fictional clients contact Rowan & Vale CPAs.

1. Harbor Point Dental wants monthly financial statements prepared from its bookkeeping records, with no report.
2. Ridgeway Bank wants reviewed annual financial statements for a loan covenant.
3. Merritt Manufacturing wants a report on whether its vendor-compliance metrics meet stated criteria.
4. Blue Harbor Systems wants the CPA to perform specific procedures over user-access exceptions and report factual findings.

The classification is:

• Harbor Point Dental: SSARS preparation, no assurance.
• Ridgeway Bank: SSARS review, limited assurance.
• Merritt Manufacturing: SSAE examination or review, depending on requested assurance level.
• Blue Harbor Systems: SSAE agreed-upon procedures, findings only.

The exam lesson is that the words "report," "review," and "procedures" are not enough by themselves. Always pair the word with subject matter, assurance level, and what the practitioner is asked to conclude.

Exam Framing

For CPA AUD, use this sequence:

1. Identify the subject matter.
2. Choose the standards family.
3. Choose the engagement type.
4. Match the assurance level.
5. Check independence and representation letter requirements.
6. Match the report language.

Wrong answers usually overstate assurance, treat compilation as a review, treat agreed-upon procedures as an opinion, or confuse a SSARS financial statement review with an SSAE attestation review. The best answer respects the engagement's purpose before applying memorized report details.