CA CAF-8 Audit and Assurance Study Guide (2026-27)

CAF-8 Audit and Assurance Essentials is ICAP's Group B auditing paper: 100 marks, 3 hours 15 minutes including reading time. It tests ISAs, audit risk, evidence, internal controls, ethics and audit reporting through scenario questions. Preparing by syllabus weightage and past papers works best. Explore the CAF-8 Audit and Assurance course.

Audit is the paper that separates students who memorise from students who think. If you are working through the CA pathway in Pakistan, CAF-8 is where you learn how a chartered accountant decides whether financial statements can be trusted.

At ICT Business School, we see the same pattern every session: students understand the definitions but lose marks when a scenario asks them to apply a standard. This guide fixes that gap. It follows the official ICAP syllabus, explains each section in plain English, and shows how to turn knowledge into exam marks.

If you are still mapping the whole route, start with our chartered accountancy in Pakistan guide. If you want to compare the pace of the later CAF papers, read our note on CAF Group B difficulty and career path. You can also browse all professional courses before you decide how to study.

CAF-8 is the auditing paper of the Certificate in Accounting and Finance (CAF) stage of ICAP's Chartered Accountancy qualification. ICAP describes its competency as applying the concepts, principles and techniques of auditing, together with selected International Standards on Auditing, assurance standards and ethics.

The Institute of Chartered Accountants of Pakistan (ICAP) arranges the CA route in stages: Pre-Requisite Competencies (PRC), CAF, and then the Certified Finance and Accounting Professional (CFAP) stage with the Strategic Case Study. CAF has eight papers. CAF-8 sits in Group B, alongside Management Accounting (CAF-5), Corporate Reporting (CAF-6) and Business Insights and Analysis (CAF-7).

Under the older 2021 scheme, the paper was simply called "Audit and Assurance." The 2025 scheme renamed it Audit and Assurance Essentials, refreshed the syllabus, and added topics such as data analytics, automated audit tools and a short introduction to sustainability assurance.

CAF-8 is also the foundation for the later CFAP paper on audit, assurance and data. If you plan to continue, see how the CFAP Audit, Assurance and Data course builds on it.

You can appear in CAF-8 once you are registered for CAF and have passed two papers of CAF Group A. Group B papers, including CAF-8, open after two Group A papers, and ICAP lets you attempt up to four CAF papers in one sitting.

According to ICAP's Education Scheme 2025 FAQs, the full-time student route depends on your base qualification:

Read the full process in our guides to CA eligibility in Pakistan and the ICAP registration process. If you are starting from the first stage, our explainer on the CA PRC level covers it.

ICAP's FAQs state that students who have passed all ACCA papers receive an exemption in CAF-8, with one condition: the Audit and Assurance exemption is granted where Advanced Audit and Assurance has been passed. Graduates with a recognised 16-year degree take the Graduate Conversion Course instead of CAF, and Audit and Assurance Essentials appears there as GCC-5.

ICAP gives CAF students five years from the first attempt to pass at least six papers, plus one additional year for any remaining papers. Plan your attempts around this window, because missing it can block progression.

Ready to plan your CAF attempts? Book a Seat and our team will map the papers to your registration status, or review the admission process.

The CAF-8 exam is a 100-mark written paper of 3 hours 15 minutes, including 15 minutes of reading time. ICAP offers CAF sittings twice a year, in Spring (March) and Autumn (September), and the questions are mostly scenario-based.

ICAP's FAQs explain that there is no prescribed wording for answers. Correct points are marked on merit. The exception is technical terminology: where a law, standard or recognised theory uses a specific term, you must use it. For example, "auditor's opinion" should not be replaced by "auditor's judgment."

In practice, most requirements award roughly one mark for each valid, well-explained point. A "describe four procedures" question for 4 marks is asking for four distinct, scenario-linked procedures, not one procedure written in four ways.

ICAP assigns each learning outcome a proficiency level (P1 or P2 in CAF-8) and a testing level (T1 or T2). Testing level 1 topics are capped at 8 marks per topic, with an aggregate cap of 35 marks across all T1 topics in an attempt. Testing level 2 topics are capped at 20 marks per topic.

Two lessons follow. First, CAF-8 cannot be passed by mastering a handful of chapters, because no topic carries more than 20 marks. Second, any new topic is tested at level 1 in its first attempt, which is how ICAP introduces items such as sustainability assurance.

The CAF-8 syllabus has four sections: Audit Framework, Regulations and Professional Ethics (A); Planning and Risk Assessment (B); Audit Evidence and Internal Controls (C); and Finalization and Reporting (D). ICAP allots 110-130 teaching hours across them.

Section A is the base for everything else. It covers:

Ethics is a P2/T2 topic, so it can carry real marks. If you want the company law background on auditor appointment, our Company Law course is a useful companion.

Section B shows how an audit starts. Expect questions on:

Risk identification, materiality and fraud are P2/T2, so they are examinable in depth.

Section C is the heaviest part of the paper. It covers:

For the supporting accounting knowledge, strengthen your base with our financial reporting course, because substantive testing is far easier when you know how balances are recognised and measured.

Section D is where the audit concludes. It covers:

CAF-8 examines 24 International Standards on Auditing, ISRE 2400, selected Companies Act, 2017 provisions and the ICAP Code of Ethics for Chartered Accountants (Revised 2024). The IAASB issues the ISAs; ICAP tests them in the form given in its study text.

Also examinable: Companies Act, 2017, sections 246 to 251, and the Code of Ethics sections 100-120 and 320.

Standards such as ISA 250, ISA 260, ISA 265, ISA 540 and ISA 600 are not named in ICAP's CAF-8 knowledge reference. They appear in later-stage study. Related-party procedures are examinable through the learning outcomes, even though ICAP's list does not name a separate related-party ISA. Study that topic from the ICAP study text.

ICAP also applies a six-month rule: amendments to ISAs and the Code of Ethics become examinable six months after ICAP publishes the revised study material, or from the date of application, whichever is later.

Audit risk is the risk that an auditor gives an inappropriate opinion when the financial statements are materially misstated. It is made up of the risk of material misstatement (inherent risk and control risk) and detection risk.

If inherent and control risk are high, the auditor must lower detection risk by doing more or better substantive work.

A walkthrough test confirms your understanding of a process by following one transaction. A test of controls checks operation across a sample.

Assertions are the claims management makes in the financial statements. Auditors design procedures to test each relevant claim:

Materiality is the size or nature of a misstatement that could influence users' decisions. Firms commonly set it using benchmarks such as profit before tax or revenue, and performance materiality is set lower to reduce the chance that uncorrected errors add up. These benchmark percentages are practice conventions, not figures fixed by ISA 320, so rely on your study text for the exam approach.

Neither an emphasis of matter nor an other matter paragraph changes the opinion. That is the usual exam trap.

If management uses the going concern basis and a material uncertainty exists but is adequately disclosed, the opinion stays unmodified and a separate section on material uncertainty is added. If disclosure is inadequate, the opinion is modified. Exam answers should name indicators first, then procedures, then the report impact.

The Code recognises five categories of threat: self-interest, self-review, advocacy, familiarity and intimidation. A strong answer names the threat, links it to the fact in the scenario, and proposes a specific safeguard, such as a separate team or a second-partner review.

This scenario is invented for teaching and does not describe a real client.

A manufacturer's inventory is its largest asset. It introduced a new warehouse system this year, and several slow-moving product lines have not sold for months.

Suggested response: attend the physical count and test count sheets (ISA 501), test cut-off, compare cost with net realisable value after year-end sales, review ageing reports, and test the new system's key controls if relying on them. Notice that every procedure ties to a fact in the story. That linking is what earns marks.

The most reliable CAF-8 plan is to study section by section in weightage order, then practise past papers under timed conditions. Learn the concept, link it to an ISA, apply it to a scenario, then write it under time pressure.

This is a suggested structure, not an ICAP rule. If you have less time, keep the order but compress Weeks 1-3.

For most procedure or risk questions, use this three-step line:

Use the official ICAP study text, ICAP's published past papers, suggested answers and examiners' comments on icap.org.pk, and your tutor's revision material. Publishers also sell exam kits aligned with the 2025 scheme. Check the edition date before buying.

Want a structured timetable and guided practice? Enroll Now or read about the CAF-8 course outline.

Recent ICAP papers show a clear pattern: scenario-based risk identification, audit procedures, ethics and audit reporting appear again and again. The examples below summarise topics from papers published on the ICAP website.

Solve each paper yourself first, then compare with ICAP's suggested answers and examiner comments.

The most common CAF-8 mistake is writing generic audit steps that do not mention the scenario. Examiners reward answers that link a procedure to a fact, risk or assertion.

Many learners also benefit from our note on why students fail CA and ACCA exams.

CAF-8 is considered manageable by many students when studied in a structured way, but it is demanding because it tests judgment, not just memory. The syllabus is wide, the standards must be applied to stories, and the audit report section needs careful reasoning.

Factors that make it harder:

Factors that help:

ICAP publishes its own results, and difficulty varies by sitting and by student. We therefore do not quote a pass percentage here; check the ICAP website for the most recent statistics. For a broader view of Group B, see our CAF Group B difficulty guide, and for CAF Group A subjects read ICAP CAF Group A subjects and exam structure.

Classes suit most students who need structure, feedback on written answers, and exam technique, while strong self-learners can succeed with disciplined self-study. The right choice depends on your discipline, schedule and how quickly you apply concepts.

ICAP publishes a list of Registered Accountancy Education Tutors (RAETs) on its website, so check any institute against it. For help comparing options in the twin cities, our guides to the best CA institute in Islamabad and the best CA institute in Rawalpindi are a good start, and the nationwide view is in best CA institute in Pakistan.

CAF-8 gives ICAP students their first formal audit stage, while ACCA, CIA and CFAP-6 cover similar ground at different levels. Choosing between them depends on your destination country, career goal and budget.

You can explore the ACCA Audit and Assurance course, the CIA Part 1 internal audit fundamentals, CIA Part 2 internal audit engagement and CIA Part 3 internal audit functions on our website.

Not sure whether CA is your best path? Compare it in CA vs ACCA, or see whether CA is worth it in Pakistan. If you work in internal audit, read what CIA is and how CIA compares with ACCA.

Students who finished A-Levels or Intermediate and are still comparing routes can start with best career courses after Intermediate in Pakistan or best career after FSc Commerce.

CAF-8 builds the audit foundation for careers in external audit, internal audit, risk, compliance and finance. Passing CAF is a stage, not the end; most roles value the full CA qualification, which includes CFAP, training and the Strategic Case Study.

Typical areas where audit knowledge is used:

CA students in Pakistan complete practical training with a training organisation. ICAP's FAQs list training periods of 2.5, 3 or 3.5 years, depending on the route and when you sit CFAP. Our guide on CA articleship in Pakistan explains the process.

Salaries depend on your employer, city, experience and exam progress, and no outcome is guaranteed. We therefore avoid quoting fixed figures. For ranges and context, read CA salary in Pakistan, salary after CA in Pakistan and abroad, top CA jobs in Pakistan and CA scope in Pakistan.

For ICAP's own registration and exam fees, use the ICAP fee schedule. For a breakdown of expected costs, see CA fees in Pakistan.

The biggest recent change is ICAP's Education and Training Scheme 2025, effective from 16 January 2026. It reorganised the CAF papers, renamed CAF-8 as Audit and Assurance Essentials, and brought a stronger focus on data, systems and sustainability.

Our guide to CFAP in the final stage of Chartered Accountancy shows how CAF-8 connects to what comes next.

ICT Business School offers CAF-8 Audit and Assurance as a dedicated course, alongside other CA, ACCA, CMA, CIA and BTEC/HND programmes, so students can compare routes before committing. Our campuses serve students in Islamabad, Lahore and Karachi, and the Islamabad campus is easily reached from both Islamabad and Rawalpindi. You can check who teaches by visiting our Faculty page, learn about the institute on the About page, and read free guides on the blog. We recommend verifying any institute, including ours, against ICAP's published lists, and we are happy to answer questions about timetables and study options before you decide. Explore the CAF-8 course or Book a Seat to speak with our team.

CAF-8 is Audit and Assurance Essentials, the auditing paper in the Certificate in Accounting and Finance stage of ICAP's CA qualification. It tests auditing concepts, selected ISAs, ethics and audit reporting. It sits in CAF Group B under the Education and Training Scheme 2025.

CAF-8 carries 100 marks. The Spring 2026 paper allowed 3 hours and 15 minutes, including 15 minutes of reading time. Always confirm timing on your admit card and the ICAP exam programme for your sitting.

The syllabus has four sections: audit framework and ethics, planning and risk assessment, audit evidence and internal controls, and finalization and reporting. Section C on evidence and controls carries the highest weightage at 30-40 percent.

CAF-8 covers ISA 200, 210, 220, 230, 240, 300, 315, 320, 330, 450, 500, 501, 505, 520, 530, 560, 570, 580, 610, 620, 700, 701, 705 and 706, plus ISRE 2400. The Code of Ethics and selected Companies Act, 2017 sections are also examinable.

Study section by section using the ICAP syllabus, link each topic to an ISA, and apply it to scenarios. Practise ICAP past papers under timed conditions and review examiner comments. Complete at least two full mock papers before the exam.

CAF-8 is demanding because it tests application of standards to scenarios, but a structured plan makes it manageable. Many students find Sections C and D the most challenging. Past papers and feedback on written answers help most.

Yes, in some cases. ICAP's FAQs say students who pass all ACCA papers can claim exemptions including Audit and Assurance, provided Advanced Audit and Assurance has been passed. Always confirm your eligibility with ICAP before applying.

ICAP's pass mark for a CAF paper is 50 percent. Confirm the current rule in the Education and Training Scheme 2025 directives, as ICAP can revise its policies.

CAF-8 Audit and Assurance Essentials rewards students who understand why an audit is done, not just what the standards say. The paper is 100 marks, it follows four syllabus sections, and it leans on scenarios where you must link risks, evidence and reporting. Section C on evidence and controls and Section D on finalization and reporting carry the most weight, while ethics and planning keep your foundation strong.

Our key recommendation is simple: follow the official ICAP syllabus, learn each ISA through a scenario, practise past papers under time pressure, and use examiner comments to fix weak areas. If you want guided preparation, Book a Seat with ICT Business School, review the admission steps, or Explore the Course to see how classes are organised. For the next logical step after CAF, explore the CFAP stage.

Last Updated: October 2026. Updated for the Education and Training Scheme 2025 syllabus and recent CAF-8 papers. Because syllabus, fees and exam dates change, we recommend reviewing this guide every six months.