Budget resources for an audit engagement
Budget an engagement from the work and expertise its objectives require. Include supervision, evidence handling, communication, and realistic availability. A shortage should trigger an explicit resource or scope decision; adding inexperienced hours does not necessarily replace missing specialist competence.
Test the budget against the work
| Decision | How to apply it | Mistake to avoid |
|---|---|---|
| Skills | Assign technical work to people with suitable knowledge or specialist support. | Substituting more junior hours for a missing technical skill. |
| Capacity | Use available productive time after other commitments. | Counting every paid hour as fieldwork capacity. |
| Review and delivery | Include supervision, issue resolution, and reporting. | Spending the whole budget on testing and leaving no time to evaluate results. |
Skills
Assign technical work to people with suitable knowledge or specialist support.
Avoid: Substituting more junior hours for a missing technical skill.
Capacity
Use available productive time after other commitments.
Avoid: Counting every paid hour as fieldwork capacity.
Review and delivery
Include supervision, issue resolution, and reporting.
Avoid: Spending the whole budget on testing and leaving no time to evaluate results.
A decision path you can use
- 1Estimate work by procedure
- 2Match skills and available hours
- 3Resolve the gap before promising coverage
Understand the method
Work through the reasoning
Estimate resources from the work required
Begin with the engagement objective, scope, procedures, and expected complexity. Identify the tasks needed to understand the process, obtain and validate evidence, perform testing, investigate exceptions, supervise work, and communicate results. A budget based only on the number of transactions can omit substantial work that determines engagement quality.
Consider dependencies and timing. A specialist may be needed before selection to interpret the population, not simply at the end to review a report. Access arrangements and management availability can affect elapsed time even when audit hours remain similar. Separate effort estimates from calendar scheduling.
Match competence to the task
Human resources are not interchangeable hours. A complex access configuration may require skills that a larger group of generalists does not possess. Identify the competence needed for each important procedure and plan appropriate support, supervision, or specialist involvement.
Consider financial and technological resources alongside staffing. Data tools can improve coverage when the information and method are reliable, but purchasing software does not create the expertise to interpret its outputs. Resource choices should support the objective and evidence requirements rather than merely filling a staffing spreadsheet.
Resolve shortfalls explicitly
If available resources are insufficient, discuss the problem with the chief audit executive. Options may include obtaining support, changing timing, or revising the scope through the appropriate approval process. Explain the consequences for coverage and the intended conclusion so the decision is informed.
Avoid silently dropping the most difficult procedure because it is expensive or slow. If that procedure addresses the main risk, the remaining work may no longer answer the objective. A smaller engagement can still be valuable when its narrower purpose and limits are explicit.
Monitor effort without rewarding superficial completion
Compare actual effort and progress with the plan during fieldwork. Investigate why a variance occurs: a poor estimate, access delays, unexpected exceptions, or newly identified risk imply different responses. A budget variance is information for management, not automatic proof that the team performed badly.
Track whether essential work and review remain achievable. Cutting investigation to meet an hour target can create an unsupported conclusion. Record material changes and use the experience to improve future estimates, while preserving the principle that resources serve a defensible engagement.
Original teaching example
Apply the method to a decision
The scenario
An illustrative engagement needs 80 fieldwork hours, 16 review hours, and 8 reporting hours. The assigned team has 90 available hours and lacks expertise for a key access-control test.
The decision
There is a 14-hour capacity shortfall plus a separate competence gap.
The total is 104 hours. Find suitable specialist support and resolve the remaining capacity issue through resourcing, schedule, or justified scope changes. Simply cutting review hours could undermine the quality of the conclusion.
Independent hypothetical case. It is not an official IIA question, an actual investigation, or a scoring prediction.
A second application
More generalist hours do not close a specialist gap
The situation
An audit requires assessment of database privileges. The budget contains ample generalist hours, but nobody can interpret the configuration and activity logs.
Reason through it
The constraint is competence, not just quantity. Identify suitable specialist support or revise the objective and timing through the proper process.
Take the decision
Budget for the capability needed to obtain and evaluate evidence. Do not equate available hours with adequate resources.
Original hypothetical teaching case.
Check your understanding
Choose the best answer, then check the reasoning for each alternative. These short learning checks are not a full exam simulation. Answers are not saved or sent.
Questions about this topic
Is there a standard percentage of hours to reserve for supervision?
No universal percentage fits every engagement. Complexity, team experience, risk, and methodology affect the amount needed. The hours in this case are illustrative planning assumptions.
Does finishing under budget prove an engagement was efficient?
No. Consider whether the objective was achieved with sufficient quality and coverage. An underspend caused by omitted essential work is different from a sound procedure that achieves the objective with less effort.
Sources and syllabus scope
Prepared by MiloPrep editorial team. Source links checked 2026-10-10. These notes and cases are independent teaching material; the IIA sources do not verify or endorse them.
- IIA expanded syllabus
Establishes the examined topics. Primary domain: Engagement Planning (50% of Part 2). This is a domain allocation, not a separate weight for this lesson.
- Global Internal Audit Standards reference
- Locator: Standard 13.5. Supports the professional requirements cited here; our scenarios and solution steps are original applications. Current IIA Standards resources.
Part 2: Internal Audit Engagement. Selected learning notes, not complete curriculum coverage. Browse all CIA topics.