Audit Inquiries and Deception Detection: Standards, Research, and Guidance

This comprehensive review examines auditors' deception detection abilities in the context of audit inquiry procedures mandated by professional standards. The authors synthesize research from psychology, communication sciences, and auditing to demonstrate that auditors, like the general population, achieve only 54-57% accuracy in detecting deception—barely better than chance—despite heavy reliance on verbal inquiries throughout the audit process.

Comprehensive literature review synthesizing AICPA auditing standards (SAS 99, 107-109), deception detection research from psychology and communication sciences, empirical studies of auditor performance, and training effectiveness research from forensic and law enforcement contexts.

Background & Context

This comprehensive review article addresses a critical vulnerability in the audit process: detecting deception is critical to the effectiveness of audit inquiries, yet auditors receive minimal training in this essential skill. The paper emerged during a period of heightened scrutiny following major corporate frauds like Enron and WorldCom, which led to the issuance of SAS 99 in 2002.

Verbal inquiries are pervasive in auditing, and during each stage of the audit members of the engagement team pose numerous questions, the answers to which may affect both the course and outcome of the audit. Despite this reliance on oral testimony, people are only slightly (4%) better than chance at detecting deception—a sobering statistic that fundamentally challenges audit effectiveness.

The authors bridge two distinct fields—auditing standards and deception detection science—to provide auditors with evidence-based guidance. This interdisciplinary approach fills a critical gap, as the low rate of success at deception detection may adversely impact the auditor's assessment of detection risk, and auditors' incorrect evaluation of the oral responses of auditee personnel may negatively impact audit effectiveness.

Research Design & Methodology

This is a comprehensive literature review and guidance document rather than an empirical study. The authors synthesized research from multiple domains to create practical recommendations for auditors.

The paper systematically reviews:

• AICPA auditing standards (particularly SAS 99, SAS 107-109) regarding fraud detection and inquiry procedures
• Deception detection research from psychology and communication sciences, including meta-analyses on detection accuracy
• Prior empirical studies examining auditors' specific deception detection abilities (Roberts 1995, Lee and Welker 2004-2007)
• Training effectiveness research from law enforcement and forensic interview contexts

The authors critically examined professional standards to identify where deception detection skills are implicitly required, then mapped scientific evidence onto these practice requirements. They paid particular attention to common misconceptions about deception cues (such as gaze aversion) that are prevalent among professionals but unsupported by research.

Results & Key Findings

The most striking finding: the average person is able to successfully detect deception only about 54% to 57% of the time—barely better than flipping a coin. This accuracy deficit applies to auditors as well as the general population.

Key empirical findings from reviewed studies:

• 60 experienced auditors from four international accounting firms participated in an experiment involving the audit of inventory and notes receivable accounts (Roberts 1995)
• Lee and Welker (2007) found that inquiry procedures can improve detection, but when participants observe an additional inquiry, their skepticism increases, which enhances fraud detection
• Canadian federal parole officers showed pre-test results of a below chance success rate of 40.7%, but subsequent training covering two days improved performance (Porter et al. 2000)
• Around 70 percent of auditors incorrectly believed interviewees regardless of deception risks, suggesting the prevalence of presumptive trust as opposed to presumptive doubt

The review reveals that people hold stereotypical but inaccurate beliefs about deception indicators. Most people hold stereotypical views about the indicators of deception, such as a lack of eye contact indicates deception, yet research shows these cues are unreliable.

Discussion & Significance

The paper's central contribution is demonstrating the disconnect between audit practice requirements and auditor capabilities. While SAS 99 mandates extensive inquiry procedures and professional skepticism, auditors lack the training to execute these requirements effectively. This has profound implications for detection risk assessment and audit quality.

The authors argue that even a 4% improvement in the auditor's ability to detect deceit may provide a beneficial decrease in detection risk, and deception detection training may lessen the likelihood that auditors will have unrealistic confidence in their ability to detect deceit. This is particularly important given the truth bias—auditors' tendency to believe client representations even when fraud risk factors are present.

The findings challenge the audit profession's reliance on unstructured inquiries as a primary evidence-gathering technique. Inquiries are one form of evidential matter, but while inquiries may in some cases provide the initial source of audit evidence, evidence gleaned from this procedure usually corroborates evidence obtained by other means, and evidence obtained indirectly through inquiry is usually considered less competent than evidence obtained directly by the auditor.

Limitations & Considerations

As a review paper rather than original empirical research, the limitations stem primarily from the underlying studies reviewed. Most deception detection experiments use laboratory settings with student participants or brief video clips, which may not fully capture the complexity of real audit interviews where relationships, context, and stakes differ substantially.

The paper acknowledges that improving auditor deception detection is challenging because:

• Deception cues are weak and inconsistent across individuals and situations
• Training effectiveness varies widely, with some studies showing improvements while others show no benefit or even decreased accuracy
• The base rate of deception in actual audit contexts is unknown, complicating skill development

The authors note that even with training, achieving high accuracy rates remains difficult, as professional groups including law enforcement officers, judges, and psychologists typically perform only marginally better than untrained individuals.

Practical Applications

The paper provides critical guidance for audit practitioners and educators. Auditors should recognize their limited natural ability to detect deception and avoid over-reliance on gut feelings or stereotypical cues. Instead, the authors recommend structured interview approaches, corroboration of responses through independent evidence, and awareness of cognitive biases like the truth bias.

For audit firms and training programs, the findings suggest that deception detection training should focus on evidence-based cues rather than myths, include feedback mechanisms, and emphasize the importance of skepticism even when dealing with long-standing clients. The paper supports integrating forensic interviewing techniques into audit methodology, particularly for high-risk engagements. Most importantly, auditors must understand that inquiry evidence has inherent limitations and should never substitute for substantive testing and independent verification.