In brief
The AICPA released a nonauthoritative practice aid on AI in financial statement audits.
It addresses both clients' use of AI and audit firms' use of AI tools.
The auditor remains responsible for supervision, review and the audit opinion.
Two different AI problems
An audit team can encounter AI on both sides of an engagement. The client may use it in financial reporting or controls. The firm may use it to perform audit procedures. The AICPA's new practice aid separates those situations instead of treating AI as a single software question.
Artificial Intelligence (AI) Considerations for Financial Statement Auditors is nonauthoritative guidance. It helps practitioners apply professional responsibilities to changing technology; it is not a replacement for the standards governing an engagement.
Start with what affects the numbers
On the client side, the practical starting point is an inventory of where AI influences financial reporting. A chatbot used to draft routine marketing copy presents a different audit question from a model that supplies information used in an accounting estimate.
The AICPA identifies data reliability, model risks, hallucinations, explainability and bias among the issues auditors need to consider. It also highlights the audit team's capabilities. Familiarity with an interface is not the same thing as having the knowledge required to evaluate the evidence it produces.
Approval is not the end of tool governance
For a firm's own use of AI, the guidance emphasizes quality management, engagement planning and the responsibilities of partners overseeing the work. The tool should be approved by the firm and used correctly by staff. Human supervision and review remain part of the job.
A useful implementation exercise is to take one proposed AI-assisted procedure and document its purpose, permitted inputs, expected output and reviewer. Then ask how the team would recognize an unreliable result. If those answers are vague, the workflow is not ready simply because the vendor demonstration was persuasive.
Make the review visible
The firm's workpapers should let a reviewer understand what the team did and how it reached its conclusion. An AI-generated summary can be a starting point for work; it should not become an unexplained substitute for the underlying evidence.
The AICPA plans additional material on risk assessment, audit evidence and practical questions. Firms can use the current release to review their policies now while keeping an owner responsible for subsequent updates. The technology may change quickly. Responsibility for the audit does not move to the software provider.
