AU-C 540: Auditing Accounting Estimates and Disclosures

AU-C Section 540 is the AICPA auditing standard that governs how auditors evaluate accounting estimates and related disclosures, including fair value measurements, in a financial statement audit. Statement on Auditing Standards (SAS) No. 143 rewrote the section in July 2020, and the revised standard is effective for audits of periods ending on or after December 15, 2023.¹ The heart of the revision is a risk-based framework built around a “spectrum of inherent risk,” which replaces the older high-or-low approach and requires auditors to scale their work to where each individual estimate lands on that spectrum.

What Counts as an Accounting Estimate

An accounting estimate is any monetary amount in the financial statements where precise measurement isn’t possible. The category is broad. It includes the allowance for doubtful accounts, useful lives assigned to fixed assets, warranty obligations, legal contingencies, pension liabilities, and fair value measurements for financial instruments. What ties them together is that the recorded number depends on assumptions about future events or conditions that haven’t yet resolved.

Estimation uncertainty describes how imprecise a given estimate’s measurement inherently is. An inventory obsolescence reserve built from clear historical patterns carries relatively low uncertainty. A Level 3 fair value measurement for an illiquid asset using unobservable inputs carries much more. The degree of uncertainty directly drives how much audit attention the estimate deserves.

The standard also reaches estimates that rely on complex models, such as derivative valuations and actuarial calculations, where the methodology itself introduces risk. When management picks a discount rate for a long-term liability or selects an expected loss model for a loan portfolio, those choices carry real consequences for the financial statements, and the auditor has to decide whether they are reasonable and adequately supported.

The Spectrum of Inherent Risk

This is the conceptual core of the revised standard. Rather than treating inherent risk as a binary judgment, AU-C 540 requires the auditor to assess where each estimate falls along a continuous spectrum. Placement depends on the degree to which the inherent risk factors affect the likelihood or magnitude of misstatement.¹

The standard identifies four primary inherent risk factors:

Estimation uncertainty: the range of possible outcomes and the imprecision in measuring the final amount. Estimates tied to volatile commodity prices or illiquid markets sit higher on this factor.
Complexity: how intricate the model, data, and processes are. An estimate requiring specialized actuarial knowledge or multi-layered financial modeling carries more complexity risk than a straight-line depreciation calculation.
Subjectivity: the extent of management judgment involved in selecting methods, assumptions, and data. Estimates where reasonable professionals could arrive at meaningfully different numbers involve high subjectivity.
Susceptibility to management bias: whether the nature of the estimate creates an opportunity for management to steer the result toward a preferred outcome. An estimate that consistently lands at the optimistic end of a reasonable range is a classic indicator.

The standard also recognizes other inherent risk factors may be relevant, including whether changes in business circumstances or in the financial reporting framework have created a need to revise the method, assumptions, or data used for a particular estimate.¹

These factors don’t carry equal weight for every estimate. A simple estimate may be affected only to a minor degree, placing it at the lower end of the spectrum and calling for fewer identified risks and less extensive procedures. A complex estimate with high uncertainty, heavy management judgment, and real opportunity for bias lands at the upper end, likely triggering classification as a significant risk with correspondingly rigorous audit work.¹

Assess Inherent and Control Risk Separately

AU-C 540 requires inherent risk and control risk to be assessed separately for each accounting estimate. You can’t lean on strong controls to offset high inherent risk at the assessment stage; each gets its own evaluation, and the combined assessment drives the audit response.¹ That split is one of the clearest practical differences from the prior standard, and it means an auditor who groups estimates together or defaults to a single assessment across similar items is not complying with the revised framework.

Supporting the assessment requires an understanding of how management actually builds each estimate: the source data, the method or model, the assumptions, and the controls that review and approve the final figure. Weaknesses in any layer raise inherent risk, because even a sound model produces unreliable results from bad inputs, and an estimate approved by the same person who selected the assumptions receives no independent scrutiny inside the entity.

Substantive Procedures for Testing Estimates

Once the risk assessment is complete, the auditor has three substantive approaches available. They can be used individually or combined, and the choice is driven by where the estimate sits on the inherent risk spectrum and how effective the relevant controls are.

Testing Management’s Process

The most common approach is to test the methods, data, and assumptions management used. The auditor verifies that the source data is complete, accurate, and relevant; confirms the model’s mathematical integrity and its alignment with the applicable reporting framework; and evaluates whether the assumptions are reasonable given available evidence.

Assumption testing is where most of the judgment lives. If management projects a 5% revenue growth rate in a cash flow projection, the auditor compares that number against industry data, the company’s own recent trends, and broader economic conditions. Sensitivity analysis on key assumptions tells the auditor how much the estimate would change if those assumptions shifted within a reasonable range. A highly sensitive estimate signals greater estimation uncertainty and often calls for additional procedures.

Developing an Independent Estimate

The second approach is for the auditor to develop their own point estimate or range of reasonable amounts for comparison against management’s figure. This is often the most persuasive response to a significant risk because it produces independent evidence rather than relying on management’s own work product. The auditor may use their own data, alternative assumptions, or an entirely different model, and this frequently involves engaging a specialist. When management’s estimate falls outside the auditor’s independently developed range, the auditor investigates the drivers of the difference and determines whether management’s position is still defensible.

Reviewing Subsequent Events

The third approach uses events occurring between the balance sheet date and the date of the auditor’s report as evidence about the estimate’s reasonableness. A litigation settlement reached before the report date provides direct evidence about a recorded contingent liability. Inventory sold after year-end at a price below carrying value confirms whether the net realizable value estimate was appropriate. The limitation is that only events relating to conditions that existed at the balance sheet date qualify as corroborating evidence. A genuinely unforeseen event arising after year-end doesn’t speak to the original estimate.

Using the Work of a Specialist

Complex estimates frequently require expertise the audit team doesn’t have, whether it’s actuarial science, property appraisal, or structured finance modeling. AU-C 540 works together with AU-C 620 (Using the Work of an Auditor’s Specialist) in these situations. The auditor evaluates the specialist’s competence, capabilities, and objectivity before relying on their work.

Competence and capabilities can be assessed through professional credentials, relevant experience, and the quality control systems the specialist’s organization maintains. Objectivity matters just as much; the auditor considers whether the specialist has any relationship with the entity that could compromise independence. Prior experience with a particular firm is relevant, but familiarity with the organization does not extend automatically to a specific individual the auditor hasn’t worked with before.

Even when a specialist performs the underlying work, the auditor retains full responsibility for the conclusions about the estimate. The specialist’s report is audit evidence, not a substitute for the auditor’s judgment, and the auditor evaluates the specialist’s methods, assumptions, and data with the same rigor applied to management’s own process.

Evaluating Results and Management Bias

After completing the substantive procedures, the auditor evaluates whether the estimate, individually or combined with other misstatements, causes the financial statements to be materially misstated. If the auditor develops a range and management’s estimate falls within it, that is generally acceptable. If the estimate falls outside the range, the difference is treated as a misstatement and evaluated against materiality. Even when the estimate technically falls within range, the auditor considers whether it lands at the boundary most favorable to management’s financial reporting objectives.

The standard calls for a deliberate assessment of management bias indicators across the population of estimates rather than one at a time. Are assumptions consistently pushed in a direction that benefits reported earnings? Have methods or data inputs changed in ways that conveniently produce better numbers without a clear business reason? Have prior-period estimates consistently required adjustment in the same direction when actual results came in? These patterns matter more than any single estimate.

Evaluating the Related Disclosures

AU-C 540 treats disclosure evaluation as a substantive requirement. The financial statement disclosures must adequately describe the estimation uncertainty associated with each significant estimate, including what the estimate is, what key assumptions drive it, and how sensitive it is to changes in those assumptions. When estimation uncertainty is high, the disclosures should make clear that the recorded amount could differ materially from what actually happens. A generic statement that estimates involve judgment is not enough. If the disclosures fail to communicate the degree of uncertainty around a significant estimate, the financial statements may be materially misleading even when the point estimate itself is reasonable.

Documentation

The audit documentation for estimates must tell the complete story: the risk assessment, the reasons for that assessment, the nature and extent of the procedures performed, the results obtained, and the auditor’s conclusions about the estimate’s reasonableness. For significant risks the documentation standard is higher, because peer reviewers and regulators will test whether the audit response matched the assessed risk level.

The file should also capture the auditor’s evaluation of management bias indicators and the basis for concluding that the disclosures are adequate. Where a specialist was used, the documentation needs to include the evaluation of the specialist’s competence, capabilities, and objectivity, together with the auditor’s assessment of the specialist’s work. Strong work that is poorly documented tends to generate inspection findings; the standard expects the documentation to stand on its own.

Scaling the Work to Simpler Estimates

Not every estimate demands the full apparatus. The standard explicitly recognizes that the inherent risk factors may affect simpler estimates only to a minor degree, allowing the auditor to identify fewer risks and assess inherent risk at the lower end of the spectrum.¹ A depreciation estimate using the straight-line method on a standard asset with a well-established useful life does not need sensitivity analysis, specialist involvement, or an independently developed point estimate. The spectrum approach is designed to prevent both under-auditing complex estimates and over-auditing routine ones. The practical challenge is making that calibration honestly rather than defaulting to a minimum effort level for estimates that deserve more attention.

1
AICPA. Statement on Auditing Standards 143 Auditing Accounting Estimates and Related Disclosures