Think of a trial attorney building a case today compared to a few decades ago. In the past, proving a fact in court meant presenting physical paper documents, signed letters, or manual files. Today, a legal team is far more likely to rely on metadata, encrypted chat logs, server backups and digital forensics. The American Institute of Certified Public Accountants (AICPA) has applied this exact logic to the accounting profession with Statement on Auditing Standards No. 142 (SAS 142), Audit Evidence.
The audit evidence standard was primarily governed by AU-C Section 500. It relied on procedures used to obtain evidence such as inspection, observation and confirmation. As business operations became digital, auditors began using advanced data analytics, artificial intelligence and sets of external data which AU-C did not adequately address. This is where SAS 142 came to play. The AICPA released SAS No. 142, Audit Evidence, to officially supersede the previous framework established by SAS No. 122.
Key takeways:
Before we explore each how to hire a QuickBooks expert in depth, here’s a table summarizing everything with a bonus pro tip to nail each step without any challenges:
- SAS 142 mandates auditors evaluate accuracy, completeness, authenticity, and potential bias of data.
- Definition of audit evidence now includes automated tools, artificial intelligence and external data.
- Auditors must involve professional skepticism by seeking both corroborative and contradictory evidence.
- CPA firms must update standard methods to test system generated reports by adopting data analytics.
Changes Introduced by AICPA's SAS 142
SAS 142 shifted evidence gathering exercises into assessment of the methodologies itself. These are the major changes introduced:
- Bigger scope and definition of audit evidence
Under SAS 142 audit evidence is defined with wider attributes to address the all encompassing connectivity of the digital age. Information under SAS 142 is obtained from:
| Source / Category | Description and Examples |
|---|---|
| Internal Sources | The entity’s IT systems, general ledgers and management reports. |
| External Sources | Industry databases, third-party pricing services and macroeconomic data. |
| Automated Tools and Techniques | Outputs from Audit Data Analytics (ADA), artificial intelligence algorithms and remote observation tools like drones. |
💡 Is Outsourcing Right for Your Firm?
Take our quick self-evaluation to assess whether outsourcing or offshoring fits your firm’s goals.
Instantly discover how it can impact cost savings, capacity, and growth potential.
No commitment. Just tailored insights in less than 2 minutes.
2. Principle over procedure
The SAS 142 upgrade does not come with a checklist, rather provides guidance to set-up the desired framework when evaluating evidence. As it is principal based, professional judgement of auditors is heavily relied upon.
3. Assessment of the attributes of information
AICPA’s SAS 142 requires auditors to consider specific attributes of information to assess its impact and credibility. The factors firms need to document include:
Accuracy: Is the data error-free and mathematically correct?
Completeness: Is the data set free of any relevant omissions and complete on its own?
Authenticity: Has the data been altered?
Susceptibility to Bias: Is the data objective or impacted by the biases of management personnel?
As an auditor, one must not accept data at face value and test the parameters when dealing with large datasets for automated analytics.
4. Challenging confirmation bias
Skepticism related to the authenticity of data has always been present while auditing. SAS 142 formally introduces and integrates it into the evaluation of audit evidence. Previous audit models were designed to prove the management right. SAS 142 explicitly requires auditors to look for and evaluate contradictions through Professional skepticism. If the external data used as audit evidence clashes with the client’s internal projections, the auditor must aim to resolve such differences. Both corroborative and contradictory evidence build an objective set of data.
5. AI integration
The AICPA SAS 142 was specifically designed to accommodate changing technologies with audit practices. For example, auditors can actively avoid sampling and use data analytics to test entire populations of data entries. SAS 142 encourages auditors to perform risk assessment with substantive research which will increase data relevance and reliability.
By using automated tools and techniques, auditors can perform recalculation procedures across an entire population rather than relying on samples. For example, they can recalculate the gross margin for every product sold within an entity’s product line.
6. Emphasis on external information sources
External confirmations remain a critical source of reliable audit evidence, and these updates are designed to strengthen that foundation in today’s increasingly digital and intermediary-driven environment,” said Jen Burns, chief auditor with the AICPA. Since modern businesses are interconnected, reliance on external factors as audit evidence is needed.
When evaluating external information, auditors must consider the competence, capabilities and objectivity of the external source. If a CPA firm relies on an external pricing service to value complex financial instruments, the firm must assess whether that pricing service uses an appropriate methodology and whether its data is free from bias.
How does a CPA Firm Ensure Compliance with SAS 142?
CPA firms must focus on these 4 updates to ensure adherence to SAS142:
Update audit methodologies
Audit checklists should explicitly ask auditors to document clashing evidence. Checklists should evaluate attributes like accuracy, completeness, authenticity, and susceptibility to bias. Firms should update legacy training modules and audit programs to ensure prompt engagement.
Update training
Regular training sessions on learning skills like professional skepticism and evaluation of digital evidence will be beneficial for the staff. Audit personnel must learn to question the system generated report based on the desirable attributes.
Update technology
Premium Data Analytics software must be employed to kill all compliance gaps with SAS 142. Scanning populations of data quickly will produce a high quality audit.
Update support
Small to mid-size firms should entertain outsourcing IT General Control (ITGC) testing specialized data extraction. This will help the core audit team to focus on risk assessment while also not draining company resources. Professional Audit support services are ready to provide templates to test the authenticity of audit generated reports and can provide a multifaceted support including:
- Redesigning of audit processes
- Checking audit readiness
- Technological upgrades
- Training and education
- Data analytics and automation
Wrapping up
While SAS 142 aligns the profession with modern technology, its execution introduces practical hurdles for CPA firms. A major risk highlighted by the standard is “automation bias’’ where engagement teams blindly trust system outputs instead of critically questioning whether the data is reliable and fit for purpose. Verifying the authenticity of electronic records and vetting the objectivity of external information vendors demands highly skilled IT Professionals. Overcoming these technological resource gaps and training staff to aggressively hunt for contradictory evidence instead of just checking boxes to confirm management assertions remains a significant operational shift.
For many firms, building these capabilities entirely in-house can be challenging due to talent shortages and rising operational costs. Partnering with an experienced provider such as Datamatics Business Solutions CPA Services can help bridge this gap by providing access to trained accounting and audit support professionals who can assist with documentation, testing procedures, data validation, and other audit-related tasks. This allows firms to strengthen compliance efforts, manage resource constraints during busy periods, and free up senior staff to focus on higher-value audit judgments and client advisory work.
What you should never share
A proper outsourced bookkeeping QuickBooks integration or Xero arrangement never involves sharing the following:
- Your master account owner login
- Bank portal login credentials
- HMRC or IRS gateway access details
- Any password that controls financial accounts directly
The outsourced bookkeeper should access only the accounting platform, through their own named login, with permissions calibrated to the scope of their work.
Step 9. Look for process improvement skills
The best QuickBooks experts go beyond maintaining books. They also improve systems. Experts often identify opportunities to:
- Automate recurring transactions
- Reduce manual data entry
- Improve month-end close timelines
- Standardize client workflows
- Strengthen reporting processes
Ask candidates to describe a workflow they improved, a reporting process they automated, or a bookkeeping challenge they solved. The answers often give away if they think tactically or just follow instructions.
Step 10. Check communication skills
QuickBooks professionals often have to interact with different stakeholders of varying seniority and expertise. Go for candidates who can explain accounting issues in simple language. Ask them to explain different fundamental concepts. If they fumble explaining complex topics clearly, client interactions may become an issue.
Red flags to watch out for while hiring a QuickBooks expert
During the hiring process, be cautious of candidates who:
- Can’t explain accounting fundamentals
- Do only data entry work
- Lack reconciliation experience
- Have never handled month-end close processes
- Can’t discuss internal controls
- Have no experience with financial reporting
- Aren’t familiar with security best practices
- Can’t provide references
Wrapping Up
When you hire QuickBooks expert right, they improve efficiency, client service quality, and risk management. Of course, verify the required certification for technical knowledge, but also remember to evaluate practical problem-solving skills. The perfect hire with both technical and accounting expertise reduces cleanup work, improves client satisfaction, and frees CPAs to focus on the higher-value services that drive long-term growth.
For many firms, hiring isn’t the only option. Outsourcing accounting and bookkeeping functions can provide access to experienced professionals without the costs and delays associated with recruiting, onboarding, training, and retention. It also gives firms greater flexibility to scale support during busy periods such as month-end close and tax season.
For CPA firms that want to skip the hiring guesswork altogether, partnering with an experienced provider like Datamatics Business Solutions gives you access to vetted, accounting-trained QuickBooks professionals without the recruiting overhead. Get in touch to see how outsourced bookkeeping and cleanup support can free up your senior staff for higher-value client work.
What core information attributes must auditors now evaluate?
Auditors must assess the accuracy, completeness, authenticity, and susceptibility to management bias of the data.
If your C-corporation uses a fiscal year instead of a calendar year, your filing deadline is different. The original deadline is the 15th day of the fourth month after your fiscal year ends. If you file for an extension, you get six more months to file your tax return.
Does SAS 142 permit the use of advanced technology?
Yes, it explicitly recognizes automated tools like data analytics, artificial intelligence and remote observation drones.
How does the standard handle conflicting information?
Auditors are required to evaluate both corroborative and contradictory evidence rather than just seeking confirming data.
What is required if audit evidence from different sources is inconsistent?
The auditor must determine what additional procedures or modifications are necessary to resolve the inconsistency.
How does SAS 142 affect the audit of accounting estimates?
The updated standard ties directly into evaluation of estimates by requiring auditors to verify that the management’s assumptions are precise and validated for completeness and accuracy.
