The audit evidence problem every Cyprus firm knows

Ask any audit partner in Cyprus where their engagements actually get stuck, and almost none of them will say “the technical accounting.” They’ll say some version of the same thing: we’re waiting on the client.

The bank confirmations aren’t back. The signed representation letter is “coming Friday.” Three versions of the fixed-asset register are floating around three inboxes, and nobody is sure which one is final. The work is ready to happen — the evidence isn’t there yet.

Collection is the bottleneck, not the analysis

An audit is, at its core, a structured argument backed by evidence. The analysis is what firms are trained for and good at. But the collection of that evidence — the dozens of small asks, chased across email and WhatsApp, tracked in a spreadsheet that’s already out of date — is where the days disappear.

It’s also where the risk lives. When your record of “what we asked for and what we received” is an email thread, you’re one forwarded message away from a gap you can’t reconstruct six months later. If a file gets superseded, do you still have the version you actually relied on? If a junior accepted a document, is there a record of who, and when?

What “good” looks like

A better evidence process has a few non-negotiable properties:

• Every ask is explicit and tracked. Not “please send the usual” — a specific item, with instructions and a sample format, that has its own status: requested, submitted, accepted, or needs revision.
• Nothing is derived from guesswork. “What’s still outstanding” should read from a stored, audited status — not from whether a file happens to exist in a folder.
• Superseded files are kept, never deleted. The version you relied on is part of the permanent record, even after the client sends a “corrected” one.
• Acceptance is a decision, with a name and a timestamp. When a document becomes evidence, the record shows who accepted it and when.

None of this is exotic. It’s just hard to do in email and spreadsheets — which is exactly why it doesn’t get done consistently.

The payoff isn’t just speed

Firms usually adopt a structured collection process to go faster, and it does help: automatic reminders chase the routine items so partners don’t have to, and a reusable procedure means a new engagement starts with the right requests already in place.

But the bigger win is defensibility. When every item carries an immutable activity log — asked, chased, submitted, reviewed, accepted — the audit file tells its own story. You’re not reconstructing the trail after the fact. It’s already there.

The judgement is still yours. The paper trail shouldn’t be a second job.