What are Criteria (in Assurance)?
ISAE 3000.24(b)(iv) requires the practitioner to assess whether the criteria are suitable before accepting an assurance engagement. This is not a best-practice recommendation — it is a precondition. If the criteria are not suitable, the engagement cannot proceed.
Criteria fall into two categories. Established criteria — such as IFRS, local GAAP, or regulatory frameworks — carry a presumption of suitability because they are developed through a transparent process and are widely recognised. Entity-developed criteria do not carry that presumption and require the practitioner to evaluate each of the five characteristics directly before acceptance.
Completeness is the characteristic most often underestimated (ISAE 3000.A48). Criteria can appear well-defined on their face while omitting material factors that affect the subject matter. A set of sustainability reporting criteria that covers emissions but omits scope 3 where scope 3 is material to the engagement is incomplete — regardless of how precisely the included metrics are defined.
Key Points
- Suitability is a precondition, not a documentation step — the engagement cannot be accepted without it (ISAE 3000.24(b)(iv)).
- Five characteristics must all be met: relevance, completeness, reliability, neutrality, and understandability.
- Established criteria carry a presumption of suitability; entity-developed criteria do not.
- Completeness is the most commonly missed characteristic — criteria that look defined but omit material factors.
Why it matters in practice
Practitioners frequently accept entity-developed criteria without documenting their evaluation of each of the five characteristics. A single sentence stating "criteria are suitable" does not meet the requirement. The file needs to show which characteristics were assessed, what evidence supported the assessment, and what conclusion was reached on each.
Completeness gaps are the most common finding. Criteria that look defined but omit material factors create a scope problem that flows through to the conclusion. If the criteria are incomplete, the assurance conclusion is limited to what the criteria cover — and users may not understand the gap between what was assessed and what they assume was assessed.
ISAE 3000.A47 addresses reliability: criteria must allow reasonably consistent measurement by different practitioners. Where criteria rely heavily on subjective judgment without defined thresholds, reliability becomes difficult to demonstrate. This is particularly relevant for non-financial subject matters where measurement methodologies are still developing.
Key standard references
- ISAE 3000.24(b)(iv): Suitability of criteria as a precondition for acceptance.
- ISAE 3000.A45: The five characteristics of suitable criteria — relevance, completeness, reliability, neutrality, understandability.
- ISAE 3000.A48: Completeness — criteria must not omit relevant factors that could affect conclusions.
- ISAE 3000.A47: Reliability — criteria must allow reasonably consistent measurement.
Related terms
Frequently asked questions
What are the five characteristics of suitable criteria?
ISAE 3000.A45 requires criteria to be: (1) relevant to the subject matter, (2) complete — not omitting relevant factors, (3) reliable — allowing consistent measurement, (4) neutral — free from bias, and (5) understandable to the intended users.
Can entity-developed criteria be used?
Yes, but the practitioner must evaluate each of the five characteristics individually before accepting the engagement. Established criteria (like IFRS) carry a presumption of suitability; entity-developed criteria do not.